Skip to content

Commit 1d2f414

Browse files
authored
chore(deps): fix make security-audit: update keccak to 0.1.6 (#5158)
### What problem does this PR solve? Problem Summary: `make security-audit` warned about yanked `keccak 0.1.5` and a stale ignored advisory. ```rust ❯ make security-audit cargo deny check --hide-inclusion-graph --show-stats advisories sources warning[yanked]: detected yanked crate (try `cargo update -p keccak`) ┌─ /home/exec/Projects/github.com/nervosnetwork/ckb.develop/Cargo.lock:304:1 │ 304 │ keccak 0.1.5 registry+https://github.com/rust-lang/crates.io-index │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ yanked version warning[advisory-not-detected]: advisory was not encountered ┌─ /home/exec/Projects/github.com/nervosnetwork/ckb.develop/deny.toml:79:4 │ 79 │ "RUSTSEC-2024-0370", │ ━━━━━━━━━━━━━━━━━ no crate matched advisory criteria advisories ok: 0 errors, 2 warnings, 12 notes sources ok: 0 errors, 0 warnings, 0 notes ``` ### What is changed and how it works? What's Changed: - update `keccak` to `0.1.6` in `Cargo.lock` - remove `RUSTSEC-2024-0370` from `deny.toml` ### Related changes ### Check List Tests - Manual test: `make security-audit` - No code
1 parent ec86ab4 commit 1d2f414

File tree

2 files changed

+2
-5
lines changed

2 files changed

+2
-5
lines changed

Cargo.lock

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

deny.toml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -74,9 +74,6 @@ ignore = [
7474
# so we need to wait for sled to update its version,
7575
# for now, temporarily ignore it first.
7676
"RUSTSEC-2025-0057",
77-
# Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0370
78-
# proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.
79-
"RUSTSEC-2024-0370",
8077
# instant's maintainer no longer maintained, use web-time instead
8178
"RUSTSEC-2024-0384",
8279
# paste's maintainer no longer maintained

0 commit comments

Comments
 (0)