Updated smallvec version due to RUSTSEC-2021-0003 #81720
Conversation
|
Thanks for the pull request, and welcome! The Rust team is excited to review your changes, and you should hear from @Mark-Simulacrum (or someone else) soon. If any changes to this PR are deemed necessary, please add them as extra commits. This ensures that the reviewer can see what has changed since they last reviewed the code. Due to the way GitHub handles out-of-date commits, this should also make it reasonably obvious what issues have or haven't been addressed. Large or tricky changes may require several passes of review and changes. Please see the contribution instructions for more information. |
rust-highfive
added
the
S-waiting-on-review
|
I don't think that the Cargo.toml changes are harmful, and we do need at least one to make sure things don't accidentally drop during rebasing. r=me with commits squashed |
Mark-Simulacrum
added
S-waiting-on-author
|
☔ The latest upstream changes (presumably #81768) made this pull request unmergeable. Please resolve the merge conflicts. |
klensy
force-pushed
the
smallvec-update
branch
2 times, most recently
from
2f2ea6b to
b11c5a4
Compare
klensy
force-pushed
the
smallvec-update
branch
from
b11c5a4 to
4671ad7
Compare
klensy
force-pushed
the
smallvec-update
branch
from
4671ad7 to
93c8ebe
Compare
|
@bors r=Mark-Simulacrum |
|
📌 Commit 93c8ebe has been approved by |
bors
added
S-waiting-on-bors
Rollup of 11 pull requests Successful merges: - rust-lang#80523 (#[doc(inline)] sym_generated) - rust-lang#80920 (Visit more targets when validating attributes) - rust-lang#81720 (Updated smallvec version due to RUSTSEC-2021-0003) - rust-lang#81891 ([rustdoc-json] Make `header` a vec of modifiers, and FunctionPointer consistent) - rust-lang#81912 (Implement the precise analysis pass for lint `disjoint_capture_drop_reorder`) - rust-lang#81914 (Fixing bad suggestion for `_` in `const` type when a function rust-lang#81885) - rust-lang#81919 (BTreeMap: fix internal comments) - rust-lang#81927 (Add a regression test for rust-lang#32498) - rust-lang#81965 (Fix MIR pretty printer for non-local DefIds) - rust-lang#82029 (Use debug log level for developer oriented logs) - rust-lang#82056 (fix ice (rust-lang#82032)) Failed merges: r? `@ghost` `@rustbot` modify labels: rollup
Hi.
Updated Cargo.toml's for smallvec due to RUSTSEC-2021-0003 and Cargo.toml in separate commit.
Affected function
SmallVec::insert_manylooks like don't was used directly in rust, but can be somewhere in deps.There should be some mechanism to not to do this kind of things manually, like dependabot. Actually, dependabot supports rust and can check security articles (at least that noted in description).