search

ebarnard / rust-plist

A rusty plist parser.
MIT License
71 stars 42 forks source link

fix: Switch to using time-rs #72

Closed PurpleBooth closed 3 years ago

PurpleBooth commented 3 years ago

Currently chrono has a vulnerability in it. This switches to the underlying time-rs library that chrono uses.

https://rustsec.org/advisories/RUSTSEC-2020-0159

ebarnard commented 3 years ago

The minimum Rust version in .github/workflows/build-and-test.yml needs to be bumped to 1.43.0

ebarnard commented 3 years ago

🤦 should have just looked at time.rs on GitHub. Their MSRV is 1.51.0 so ours will have to be as well.

ebarnard commented 3 years ago

Thanks

extrawurst commented 2 years ago

@ebarnard great that plist has merged a fix for this already! can we have a patch release containing it? that would be highly appreciated ❤️

ebarnard commented 2 years ago

I suppose we need to decide what the MSRV policy is. The time-rs change bumped it up by a year and a quarter to a release from March this year. My gut feeling is this should go in a minor release along with #70 once I've had a chance to get that working with Date and Uid.

ebarnard commented 2 years ago

Released in v1.3.0.