Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
110 changes: 108 additions & 2 deletions Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 8 additions & 0 deletions lib/runtime/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -77,5 +77,13 @@ socket2 = { version = "0.5.8" }
[dev-dependencies]
assert_matches = { version = "1.5.0" }
env_logger = { version = "0.11" }
reqwest = { version = "0.12.22", features = ["json"] }
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm trying to avoid us having a dependency on OpenSSL. Fix is here: #1945

rstest = { version = "0.23.0" }
temp-env = { version = "0.3.6" }

# These patches are to address issues in reqwest, which is used in the HTTP server test (but not on servers).
# These are transitive dependencies to use secure versions and mitigate known vulnerabilities.
[patch.crates-io]
tokio = { version = "1.18.4" } # addresses RUSTSEC-2023-0001
h2 = { version = "0.4.4" } # addresses RUSTSEC-2024-0332
rustls = { version = "0.23.18" } # addresses RUSTSEC-2024-0399
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

warning: patch for the non root package will be ignored, specify patch at the workspace root

Loading
Loading