search

ThouCheese / cloud-storage-rs

A crate for uploading files to Google cloud storage, and for generating download urls.
MIT License
123 stars 88 forks source link

Bump jsonwebtoken version #127

Open gahag-cw opened 1 year ago

gahag-cw commented 1 year ago

Up to version 7, jsonwebtoken transitively depends on a version of time that has a security vulnerability, which gets reported by dependabot on all Rust repos. As of version 8, this dependency is updated, removing the security warning. This PR solves that by bumping jsonwebtoken to version 8, without changing anything else.

gahag-cw commented 1 year ago

@ThouCheese can you please approve the workflow? So I can assure the tests are passing.

ThouCheese commented 1 year ago

@ThouCheese can you please approve the workflow? So I can assure the tests are passing.

Sure thing!

gahag-cw commented 1 year ago

Should work now! I'll edit the description with the reasoning for this PR.

gahag-cw commented 1 year ago

@ThouCheese can you please take a look at this? It's important so that depending on cloud-storage-rs does not trigger dependabot warnings.

gahag-cw commented 1 year ago

Tests are failing with:

SERVICE_ACCOUNT file not valid: Error("EOF while parsing a value", line: 2, column: 0)

I believe this is unrelated to my changes...