Skip to content

Drop default features for zip#130

Merged
tcharding merged 1 commit intorust-bitcoin:masterfrom
tnull:2025-04-drop-zip-default-features
Apr 18, 2025
Merged

Drop default features for zip#130
tcharding merged 1 commit intorust-bitcoin:masterfrom
tnull:2025-04-drop-zip-default-features

Conversation

@tnull
Copy link
Collaborator

@tnull tnull commented Apr 17, 2025

.. and in particular the ancient time dependency, which suffers from RUSTSEC-2020-0071.

(we recently started getting cargo audit reports related to this: lightningdevkit/ldk-node#523)

.. and in particular the ancient `time` dependency, which suffers from
`RUSTSEC-2020-0071`.
Copy link
Member

@tcharding tcharding left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK 4f228e8

@tcharding
Copy link
Member

We can backport and do a point release if you want one.

@tcharding tcharding merged commit f0586c0 into rust-bitcoin:master Apr 18, 2025
27 checks passed
@tcharding
Copy link
Member

I'll likely have the next major release out in the next week or so though.

@tnull
Copy link
Collaborator Author

tnull commented Apr 18, 2025

We can backport and do a point release if you want one.

Thanks, this one is not super urgent for us, I think we can just ignore the audit reports until we can bump to the fixed version everywhere (i.e., electrsd and on our side).

blaze-smith470pm added a commit to blaze-smith470pm/corepc that referenced this pull request Sep 26, 2025
4f228e89c11e4c9795434040871b74361d4c451c Drop default features for `zip` (Elias Rohrer)

Pull request description:

  .. and in particular the ancient `time` dependency, which suffers from `RUSTSEC-2020-0071`.

  (we recently started getting `cargo audit` reports related to this: lightningdevkit/ldk-node#523)

ACKs for top commit:
  tcharding:
    ACK 4f228e89c11e4c9795434040871b74361d4c451c

Tree-SHA512: 25b834ddd8545a95dc72eaef37d89d24ff82f6e9d3a9af8bac84b775503912ef6996ccf55276fa720d7718a99d460c8a85a5cb0a99e196a0041beed4c4464705
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants