Byron / google-apis-rs

A binding and CLI generator for all Google APIs
http://byron.github.io/google-apis-rs
Other
1.01k stars 131 forks source link

Remove old time dependency from API. #397

Closed fiadliel closed 1 year ago

fiadliel commented 1 year ago

Chrono currently depends on an old version of time with a reported vulnerability: https://rustsec.org/advisories/RUSTSEC-2020-0159

While it does not use any vulnerable code, the dependency may show up in code vulnerability scans, etc.

This removes the "oldtime" feature from chrono, to remove that. Also removes the "std" feature because it doesn't seem to be in use in this code.

Byron commented 1 year ago

Thanks a lot for the contribution, much appreciated!

I hope the release as v5.02 which includes a bump of yup-oauth2 to v8 won't break anything.