update direct dependency `chrono` to avoid potential segfault in indirect dependency `time`

Neptune-Crypto / neptune-core

anonymous peer-to-peer cash

Apache License 2.0

24 stars 7 forks source link

update direct dependency `chrono` to avoid potential segfault in indirect dependency `time` #29

Closed jan-ferdinand closed 11 months ago

jan-ferdinand commented 1 year ago

Running cargo audit reveals that currently, the indirect dependency time (version v0.1.45) can segfault. The direct dependency is chrono (version v0.4.26). The latest, hopefully soon-to-be-had version of chrono is v0.5.0 and does not depend on time anymore – see chrono's Cargo.toml.

Update dependency chrono to version ^v0.5 once available.

dan-da commented 11 months ago

I think this can be closed now.