Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2024-0384: instant is unmaintained #5670

Closed
github-actions bot opened this issue Nov 11, 2024 · 4 comments
Closed

RUSTSEC-2024-0384: instant is unmaintained #5670

github-actions bot opened this issue Nov 11, 2024 · 4 comments

Comments

@github-actions
Copy link

instant is unmaintained

Details
Status unmaintained
Package instant
Version 0.1.13
URL
Date 2024-09-01

This crate is no longer maintained, and the author recommends using the maintained web-time crate instead.

See advisory page for additional details.

@drHuangMHT
Copy link
Contributor

drHuangMHT commented Nov 11, 2024

ugh I thought instant was gone after #5347? ping @dariusc93

@dariusc93
Copy link
Member

dariusc93 commented Nov 11, 2024

This might go back to #5620 from what I can see. I did leave a comment on #5637 (comment) about probably just removing futures-ticker altogether.

EDIT: It looks like fastrand 1.9.0 also uses instant too. futures-lite, async-executor, and blocking depends on that version.

@hanabi1224
Copy link
Contributor

hanabi1224 commented Dec 10, 2024

With rust-netlink/netlink-sys#25 being merged and released, RUSTSEC-2024-0384 can be fixed by

  • upgrade opentelemetry* crates in examples/metrics (this is required because the current opentelemetry locks minor version of tokio)
  • run cargo update

@jxs
Copy link
Member

jxs commented Dec 13, 2024

addressed with #5737, thanks again for your help @hanabi1224!

@jxs jxs closed this as completed Dec 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants