bump version of yaml-rust and serde_yaml

databricks / click

The "Command Line Interactive Controller for Kubernetes"

Apache License 2.0

1.49k stars 84 forks source link

bump version of yaml-rust and serde_yaml #82

Closed lofim closed 5 years ago

lofim commented 6 years ago

While looking at #66 I found out there are now 3 crates marked as vulnerable by cargo-audit in click. These are untrusted, serde_yaml and yaml-rust (dependency of serde_yaml).

This PR updates serde_yaml to the latest version.

untrusted is going to be a bit harder to update as it's a dependency of hyper and hyper-rustls.

nicklan commented 5 years ago

Thanks!