47e0dc2 · bat · git.iko.soy

git.iko.soy/bat

Lock regex crate at min 1.5.5 for CVE-2022-24713

Cargo.lock already specifies 1.5.5, but we should also do it in Cargo.toml.

commit47e0dc22d20b10ade93fb15b2116d4f928a8dd54 authorMartin Nordholts <enselic@gmail.com> dateSat 2 Apr 2022, 20:03 (5 years ago) parent33a9849

2 files changed+3−1

compare with master

unifiedsplit

CHANGELOG.md+2 Cargo.toml+1−1

CHANGELOG.md+2

@@ -6,6 +6,8 @@

77## Bugfixes

9+- Bump `regex` dependency from 1.5.4 to 1.5.5 to fix [CVE-2022-24713](https://blog.rust-lang.org/2022/03/08/cve-2022-24713.html), see #2145, #2139 (@Enselic)

10+

911## Other

1012

1113- Include contents of custom assets `metadata.yaml` in `--diagnostics`. See #2107 (@Enselic)

Cargo.toml+1−1

@@ -63,7 +63,7 @@ clircle = "0.3"

6363bugreport = { version = "0.4", optional = true }

6464dirs-next = { version = "2.0.0", optional = true }

6565grep-cli = { version = "0.1.6", optional = true }

66−regex = { version = "1.5", optional = true }

66+regex = { version = "1.5.5", optional = true }

6767walkdir = { version = "2.0", optional = true }

6868bytesize = { version = "1.1.0" }

6969