boinkor-net / governor

A rate-limiting library for Rust (f.k.a. ratelimit_meter)
https://github.com/boinkor-net/governor
MIT License
550 stars 43 forks source link

[SECURITY] New release needed to fix audit warnings #195

Closed Elizafox closed 1 year ago

Elizafox commented 1 year ago

In the current version of governor on crates.io (0.5.1), the quanta dependency version (0.9.3) depends on mach, which is abandoned.

quanta's version was bumped in 3c2dc9967ab32a233226a9d21b5c3fb61526a13c but no corresponding release has been made.

A new release should be made as this abandoned dependency is causing cargo audit warnings in any crate that uses governor.

antifuchs commented 1 year ago

Thanks for the reminder! v0.6.0 is out now (there were a few breaking changes in the meantime, hence the bump).