Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

chore(networking): Upgrade trust-dns #2512

Closed
wants to merge 13 commits into from
Closed

Conversation

LucioFranco
Copy link
Contributor

@LucioFranco LucioFranco commented Apr 30, 2020

This upgrades trust-dns and allows us to fix the RUSTSEC issue that came up earlier this week.

Currently, blocked by https://github.com/bluejekyll/trust-dns/pull/1087 and #2511 is open to upgrade to the crates version.

Closes #2464

Signed-off-by: Lucio Franco luciofranco14@gmail.com

Signed-off-by: Lucio Franco <luciofranco14@gmail.com>
@github-actions
Copy link

Great PR! Please pay attention to the following items before merging:

Files matching Cargo.lock:

  • Has at least one other team member approved the dependency changes?

This is an automatically generated QA checklist based on modified files

@LucioFranco LucioFranco marked this pull request as ready for review May 1, 2020 15:29
@LucioFranco LucioFranco requested a review from Hoverbear May 1, 2020 15:29
Signed-off-by: Lucio Franco <luciofranco14@gmail.com>
Signed-off-by: Lucio Franco <luciofranco14@gmail.com>
@Hoverbear
Copy link
Contributor

@LucioFranco The CI is unhappy with this PR.

Otherwise it looks good :)

Signed-off-by: Lucio Franco <luciofranco14@gmail.com>
@LucioFranco
Copy link
Contributor Author

I can't seem to reproduce any of these failures locally but they seem to be very consistent on CI :/

Signed-off-by: Lucio Franco <luciofranco14@gmail.com>
Signed-off-by: Lucio Franco <luciofranco14@gmail.com>
@@ -1,7 +1,5 @@
[advisories]
ignore = [
"RUSTSEC-2020-0014", # Advisory for dev dependency of `trust-dns` for testing
# dns servers.
"RUSTSEC-2020-0002", # tracked in #1639
"RUSTSEC-2020-0001", # dev dependency only
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

RUSTSEC-2020-0001 not required with this changes too?
https://rustsec.org/advisories/RUSTSEC-2020-0001.html

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yup, good catch we can remove that one as well!

@LucioFranco
Copy link
Contributor Author

#2635 (comment)

@binarylogic binarylogic deleted the lucio/upgrade-trust-dns branch July 23, 2020 17:33
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Upgrade trust-dns to fix RUSTSEC-2020-0014
3 participants