search

paupino / rust-decimal

Decimal number implementation written in pure Rust suitable for financial and fixed-precision calculations.
https://docs.rs/rust_decimal/
MIT License
972 stars 177 forks source link

Upgrade Borsh to resolve vulnerability #621

Closed paupino closed 9 months ago

paupino commented 9 months ago

This replaces / closes #616 - Borsh now requires feature flags to be provided to enable the derive macros that this feature was utilizing.

Ultimately it resolves https://rustsec.org/advisories/RUSTSEC-2023-0033.html.

westy92 commented 9 months ago

Thank you so much! When can we expect a release?

paupino commented 9 months ago

@westy92 Thanks for helping push this through - I'll prepare a release now and have something out shortly.

westy92 commented 9 months ago

@paupino you're welcome - and thank you!