Merge pull request #723 from samgj18/patch-chrono-vulnerability

Fixes chrono vulnerability caused by time dependency

Author: piodul

examples/Cargo.toml

@@ -14,7 +14,7 @@ scylla = {path = "../scylla", features = ["ssl", "cloud"]}
 tokio = {version = "1.1.0", features = ["full"]}
 tracing = "0.1.25"
 tracing-subscriber = { version = "0.3.14", features = ["env-filter"] }
-chrono = "0.4"
+chrono = { version = "0.4", default-features = false }
 uuid = "1.0"
 tower = "0.4"
 stats_alloc = "0.1"

scylla-cql/Cargo.toml

@@ -21,7 +21,7 @@ uuid = "1.0"
 thiserror = "1.0"
 bigdecimal = "0.2.0"
 num-bigint = "0.3"
-chrono = "0.4"
+chrono = { version = "0.4", default-features = false }
 lz4_flex = { version = "0.9.2" }
 async-trait = "0.1.57"
 serde = { version = "1.0", optional = true }
@@ -34,4 +34,4 @@ name = "benchmark"
 harness = false
 
 [features]
-secret = ["secrecy"]
+secret = ["secrecy"]

scylla-proxy/Cargo.toml

@@ -24,7 +24,7 @@ thiserror = "1.0.32"
 bigdecimal = "0.2.0"
 num-bigint = "0.3"
 tracing = "0.1.25"
-chrono = "0.4"
+chrono = { version = "0.4", default-features = false }
 rand = "0.8.5"
 
 [dev-dependencies]

scylla/Cargo.toml

@@ -43,7 +43,7 @@ itertools = "0.10.0"
 bigdecimal = "0.2.0"
 num-bigint = "0.3"
 tracing = "0.1.25"
-chrono = "0.4.20"
+chrono = { version = "0.4.20", default-features = false, features = ["clock"] }
 openssl = { version = "0.10.32", optional = true }
 tokio-openssl = { version = "0.6.1", optional = true }
 arc-swap = "1.3.0"