Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New release? #207

Closed
baodrate opened this issue Sep 24, 2021 · 5 comments
Closed

New release? #207

baodrate opened this issue Sep 24, 2021 · 5 comments
Labels

Comments

@baodrate
Copy link

Any chance we could get a new release? zsh autocompletion is currently broken on the latest release (1.4.1) due to the [ page. This was fixed a while ago by #168

@dbrgn
Copy link
Collaborator

dbrgn commented Sep 24, 2021

Yes, I aim towards a release in the coming 1-2 months.

Note however that the zsh autocompletion can be fixed independently from a new tealdeer release, the fix is not part of tealdeer itself. What OS/Distro do you use? You could ask the packagers to update the zsh completion files. Or you could update it yourself in your system: https://github.com/dbrgn/tealdeer/blob/master/zsh_tealdeer

@dbrgn dbrgn added the question label Sep 24, 2021
@baodrate
Copy link
Author

Yup, I've done that myself. I just wanted to avoid having to remember to deploy this fix to all of my systems, especially since it's already being tracked by the package manager.

I'm using official package from the Arch community repo.

I have a feeling they'll tell me to ask for upstream to fix it, but I'll try to get in touch with the package maintainer, thanks

@dbrgn
Copy link
Collaborator

dbrgn commented Sep 24, 2021

I have a feeling they'll tell me to ask for upstream to fix it, but I'll try to get in touch with the package maintainer, thanks

I used to maintain the AUR package, but with it having moved to community, I can't fix it myself 🙂

You should be able to file a bugreport at https://bugs.archlinux.org/newtask?project=5&product_category=33&item_summary=%5Btealdeer%5D+PLEASE+ENTER+SUMMARY and ask to backport the fixed zsh completion file.

@newAM
Copy link

newAM commented Oct 13, 2021

Thanks for the crate! tealdeer is my favorite TLDR frontend.

I would like to echo the request for a release.
Another issue a release would fix is the 6 vulnerabilities reported by cargo audit for the latest version (1.4.1):

Click to expand...
$ wget https://crates.io/api/v1/crates/tealdeer/1.4.1/download
$ tar xzf download
$ cd tealdeer-1.4.1/
$ cargo audit       
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 367 security advisories (from /home/alex/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (180 crate dependencies)
Crate:         futures-task
Version:       0.3.5
Title:         futures_task::waker may cause a use-after-free if used on a type that isn't 'static
Date:          2020-09-04
ID:            RUSTSEC-2020-0060
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0060
Solution:      Upgrade to >=0.3.6
Dependency tree: 
futures-task 0.3.5
└── futures-util 0.3.5
    ├── reqwest 0.10.8
    │   └── tealdeer 1.4.1
    ├── hyper 0.13.7
    │   ├── reqwest 0.10.8
    │   └── hyper-tls 0.4.3
    │       └── reqwest 0.10.8
    └── h2 0.2.6
        └── hyper 0.13.7

Crate:         futures-util
Version:       0.3.5
Title:         MutexGuard::map can cause a data race in safe code
Date:          2020-10-22
ID:            RUSTSEC-2020-0059
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0059
Solution:      Upgrade to >=0.3.7
Dependency tree: 
futures-util 0.3.5
├── reqwest 0.10.8
│   └── tealdeer 1.4.1
├── hyper 0.13.7
│   ├── reqwest 0.10.8
│   └── hyper-tls 0.4.3
│       └── reqwest 0.10.8
└── h2 0.2.6
    └── hyper 0.13.7

Crate:         hyper
Version:       0.13.7
Title:         Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss
Date:          2021-07-07
ID:            RUSTSEC-2021-0079
URL:           https://rustsec.org/advisories/RUSTSEC-2021-0079
Solution:      Upgrade to >=0.14.10
Dependency tree: 
hyper 0.13.7
├── reqwest 0.10.8
│   └── tealdeer 1.4.1
└── hyper-tls 0.4.3
    └── reqwest 0.10.8

Crate:         hyper
Version:       0.13.7
Title:         Lenient `hyper` header parsing of `Content-Length` could allow request smuggling
Date:          2021-07-07
ID:            RUSTSEC-2021-0078
URL:           https://rustsec.org/advisories/RUSTSEC-2021-0078
Solution:      Upgrade to >=0.14.10

Crate:         hyper
Version:       0.13.7
Title:         Multiple Transfer-Encoding headers misinterprets request payload
Date:          2021-02-05
ID:            RUSTSEC-2021-0020
URL:           https://rustsec.org/advisories/RUSTSEC-2021-0020
Solution:      Upgrade to >=0.14.3 OR ^0.13.10 OR ^0.12.36

Crate:         tar
Version:       0.4.30
Title:         Links in archive can create arbitrary directories
Date:          2021-07-19
ID:            RUSTSEC-2021-0080
URL:           https://rustsec.org/advisories/RUSTSEC-2021-0080
Solution:      Upgrade to >=0.4.36
Dependency tree: 
tar 0.4.30
└── tealdeer 1.4.1

Crate:         difference
Version:       2.0.0
Warning:       unmaintained
Title:         difference is unmaintained
Date:          2020-12-20
ID:            RUSTSEC-2020-0095
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0095
Dependency tree: 
difference 2.0.0
└── predicates 1.0.5
    ├── tealdeer 1.4.1
    └── assert_cmd 1.0.1
        └── tealdeer 1.4.1

Crate:         net2
Version:       0.2.34
Warning:       unmaintained
Title:         `net2` crate has been deprecated; use `socket2` instead
Date:          2020-05-01
ID:            RUSTSEC-2020-0016
URL:           https://rustsec.org/advisories/RUSTSEC-2020-0016
Dependency tree: 
net2 0.2.34
├── miow 0.2.1
│   └── mio 0.6.22
│       └── tokio 0.2.22
│           ├── tokio-util 0.3.1
│           │   └── h2 0.2.6
│           │       └── hyper 0.13.7
│           │           ├── reqwest 0.10.8
│           │           │   └── tealdeer 1.4.1
│           │           └── hyper-tls 0.4.3
│           │               └── reqwest 0.10.8
│           ├── tokio-tls 0.3.1
│           │   ├── reqwest 0.10.8
│           │   └── hyper-tls 0.4.3
│           ├── reqwest 0.10.8
│           ├── hyper-tls 0.4.3
│           ├── hyper 0.13.7
│           └── h2 0.2.6
└── mio 0.6.22

Crate:         futures-util
Version:       0.3.5
Warning:       yanked

Crate:         miow
Version:       0.2.1
Warning:       yanked
Dependency tree: 
miow 0.2.1
└── mio 0.6.22
    └── tokio 0.2.22
        ├── tokio-util 0.3.1
        │   └── h2 0.2.6
        │       └── hyper 0.13.7
        │           ├── reqwest 0.10.8
        │           │   └── tealdeer 1.4.1
        │           └── hyper-tls 0.4.3
        │               └── reqwest 0.10.8
        ├── tokio-tls 0.3.1
        │   ├── reqwest 0.10.8
        │   └── hyper-tls 0.4.3
        ├── reqwest 0.10.8
        ├── hyper-tls 0.4.3
        ├── hyper 0.13.7
        └── h2 0.2.6

Crate:         net2
Version:       0.2.34
Warning:       yanked

Crate:         pin-project-lite
Version:       0.1.7
Warning:       yanked
Dependency tree: 
pin-project-lite 0.1.7
├── tokio-util 0.3.1
│   └── h2 0.2.6
│       └── hyper 0.13.7
│           ├── reqwest 0.10.8
│           │   └── tealdeer 1.4.1
│           └── hyper-tls 0.4.3
│               └── reqwest 0.10.8
├── tokio 0.2.22
│   ├── tokio-util 0.3.1
│   ├── tokio-tls 0.3.1
│   │   ├── reqwest 0.10.8
│   │   └── hyper-tls 0.4.3
│   ├── reqwest 0.10.8
│   ├── hyper-tls 0.4.3
│   ├── hyper 0.13.7
│   └── h2 0.2.6
└── reqwest 0.10.8

Crate:         socket2
Version:       0.3.12
Warning:       yanked
Dependency tree: 
socket2 0.3.12
└── hyper 0.13.7
    ├── reqwest 0.10.8
    │   └── tealdeer 1.4.1
    └── hyper-tls 0.4.3
        └── reqwest 0.10.8

error: 6 vulnerabilities found!
warning: 7 allowed warnings found

@dbrgn
Copy link
Collaborator

dbrgn commented Jan 1, 2022

1.5.0 is released: https://github.com/dbrgn/tealdeer/releases/tag/v1.5.0

@dbrgn dbrgn closed this as completed Jan 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

3 participants