Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace yanked dependency #2514

Closed
JaderDias opened this issue Apr 7, 2023 · 1 comment
Closed

Replace yanked dependency #2514

JaderDias opened this issue Apr 7, 2023 · 1 comment
Labels
triage A bug report being investigated

Comments

@JaderDias
Copy link

Description

When running cargo deny check advisories

warning[unsound]: Initialisation failure in Once::try_call_once can lead to undefined behaviour for other initialisers
┌─ /home/j/aws-activity-pub/Cargo.lock:170:1

170 │ spin 0.9.7 registry+https://github.com/rust-lang/crates.io-index
│ ---------------------------------------------------------------- unsound advisory detected

= ID: RUSTSEC-2023-0031
= Advisory: https://rustsec.org/advisories/RUSTSEC-2023-0031
= Once::try_call_once is unsound if invoked more than once concurrently and any call fails to initialise successfully.
= Announcement: mvdnes/spin-rs#148
= Solution: Upgrade to >=0.9.8
= spin v0.9.7
└── multer v2.0.4
└── rocket v0.5.0-rc.3
└── library v0.1.0
└── (dev) aws-activitypub v0.1.0

error[yanked]: detected yanked crate
┌─ /home/j/aws-activity-pub/Cargo.lock:170:1

170 │ spin 0.9.7 registry+https://github.com/rust-lang/crates.io-index
│ ---------------------------------------------------------------- yanked version

= spin v0.9.7
└── multer v2.0.4
└── rocket v0.5.0-rc.3
└── library v0.1.0
└── (dev) aws-activitypub v0.1.0

@JaderDias JaderDias added the triage A bug report being investigated label Apr 7, 2023
@JaderDias
Copy link
Author

All I had to do was to regenerate my cargo.lock

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
triage A bug report being investigated
Projects
None yet
Development

No branches or pull requests

1 participant