Fix RUSTSEC-2024-0336, let sqlx use `runtime-tokio-native-tls` instead of `runtime-tokio-rustls` to drop `rustls` dependency - Githubissues

nervosnetwork / ckb

The Nervos CKB is a public permissionless blockchain, and the layer 1 of Nervos network.

https://www.nervos.org

MIT License

1.15k stars 228 forks source link

Fix RUSTSEC-2024-0336, let sqlx use `runtime-tokio-native-tls` instead of `runtime-tokio-rustls` to drop `rustls` dependency #4427

Closed eval-exec closed 4 months ago

eval-exec commented 4 months ago

Fix RUSTSEC-2024-0336, Change sqlx feature runtime-tokio-rustls to runtime-tokio-native-tls
Remove ignored RUSTSEC-2021-0145, it does not affect current ckb

What problem does this PR solve?

Fix https://github.com/nervosnetwork/ckb/actions/runs/8777396874/job/24082289815,

Related changes

Let sqlx use runtime-tokio-native-tls instead of runtime-tokio-rustls to drop rustls dependency.
Need to cherry-pick to the release branch

Check List

Tests

Unit test
Integration test
Manual test (add detailed scripts or steps below)
No code ci-runs-only: [ quick_checks,linters ]

Side effects

None

Release note

Title Only: Include only the PR title in the release note.

eval-exec commented 4 months ago

https://github.com/nervosnetwork/ckb/actions/runs/8778181167/job/24084234565

native-tls cann't build on aarch64, reverting this PR...