Commit fbb4589
authored
Update various dependencies (#5659)
* Bump `async-graphql` from 7.0.6 to 7.0.11
This additionally bumps the `async-graphql-axum` crate, missed by
Dependabot.
Patches [`CVE-2024-47614`](https://nvd.nist.gov/vuln/detail/CVE-2024-47614):
async-graphql before 7.0.10 does not limit the number of directives for
a field. This can lead to Service Disruption, Resource Exhaustion, and
User Experience Degradation. This vulnerability is fixed in 7.0.10.
* Bump `diesel` from 2.2.1 to 2.2.4
Fixes [`RUSTSEC-2024-0365`](https://rustsec.org/advisories/RUSTSEC-2024-0365):
Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts
* Bump `object_store` from 0.10.1 to 0.11.0
Fixes [`RUSTSEC-2024-0358`](https://rustsec.org/advisories/RUSTSEC-2024-0358):
Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log
files
* Bump `openssl` from 0.10.64 to 0.10.66
Fixes [`RUSTSEC-2024-0357`](https://rustsec.org/advisories/RUSTSEC-2024-0357):
`MemBio::get_buf` has undefined behavior with empty buffers
* Bump `quinn-proto` from 0.11.3 to 0.11.8
Fixes [`RUSTSEC-2024-0373`](https://rustsec.org/advisories/RUSTSEC-2024-0373):
`Endpoint::retry()` calls can lead to panicking1 parent 90e949d commit fbb4589
3 files changed
+53
-81
lines changedSome generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
30 | | - | |
31 | | - | |
| 30 | + | |
| 31 | + | |
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
35 | 35 | | |
36 | | - | |
| 36 | + | |
37 | 37 | | |
38 | 38 | | |
39 | 39 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
95 | 95 | | |
96 | 96 | | |
97 | 97 | | |
98 | | - | |
| 98 | + | |
99 | 99 | | |
100 | 100 | | |
101 | 101 | | |
| |||
0 commit comments