databendlabs / databend

๐——๐—ฎ๐˜๐—ฎ, ๐—”๐—ป๐—ฎ๐—น๐˜†๐˜๐—ถ๐—ฐ๐˜€ & ๐—”๐—œ. Modern alternative to Snowflake. Cost-effective and simple for massive-scale analytics. https://databend.com
https://docs.databend.com
Other
7.71k stars 732 forks source link

chore: bump quinn-proto to 0.11.8 for cargo audit pass #16419

Closed dqhl76 closed 2 weeks ago

dqhl76 commented 2 weeks ago

I hereby agree to the terms of the CLA available at: https://docs.databend.com/dev/policies/cla/

Summary

cargo audit block CI, try solve it

==> build-tool using image runner/build-tool:dev-nightly-2024-07-02
    Fetching advisory database from `[https://github.com/RustSec/advisory-db.git`](https://github.com/RustSec/advisory-db.git%60)
      Loaded 658 security advisories (from ./target/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1413 crate dependencies)
Crate:     quinn-proto
Version:   0.11.6
Title:     `Endpoint::retry()` calls can lead to panicking
Date:      2024-09-02
ID:        RUSTSEC-2024-0373
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0373
Severity:  7.5 (high)
Solution:  Upgrade to >=0.11.7

Tests

Type of change


This change isโ€‚Reviewable

Xuanwo commented 2 weeks ago

cc @BohuTANG, please merge this PR manually. Our merge queue consistently fails due to a check on the main branch.