-
-
Notifications
You must be signed in to change notification settings - Fork 3.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Merged by Bors] - Ignore RUSTSEC-2021-0139 #5816
Closed
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Weibye
added
the
A-Build-System
Related to build systems or continuous integration
label
Aug 27, 2022
alice-i-cecile
approved these changes
Aug 27, 2022
alice-i-cecile
added
the
P-Critical
This must be fixed immediately or contributors or users will be severely impacted
label
Aug 27, 2022
TimJentzsch
approved these changes
Aug 27, 2022
NathanSWard
added
the
S-Ready-For-Final-Review
This PR has been approved by the community. It's ready for a maintainer to consider merging it
label
Aug 27, 2022
alice-i-cecile
removed
the
P-Critical
This must be fixed immediately or contributors or users will be severely impacted
label
Aug 27, 2022
mockersf
approved these changes
Aug 27, 2022
bors r+ |
bors bot
pushed a commit
that referenced
this pull request
Aug 27, 2022
# Objective - `ansi_term` has become unmaintained: ogham/rust-ansi-term#72 - This is now blocking our CI so we need to find a way around that. ## Solution Temporary add `RUSTSEC-2021-0139` to ignore until tracing switches to a new crate: tokio-rs/tracing#2040 ## Dependency tree ``` ansi_term v0.12.1 └── tracing-subscriber v0.3.15 ├── bevy_log v0.9.0-dev │ ├── bevy_asset v0.9.0-dev │ │ ├── bevy_animation v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev │ │ │ │ └── bevy_internal v0.9.0-dev │ │ │ │ ├── bevy v0.9.0-dev │ │ │ │ └── bevy v0.9.0-dev (*) │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_audio v0.9.0-dev │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_core_pipeline v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ ├── bevy_text v0.9.0-dev │ │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ │ └── bevy_ui v0.9.0-dev │ │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ ├── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ ├── bevy_render v0.9.0-dev │ │ │ ├── bevy_core_pipeline v0.9.0-dev (*) │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ │ ├── bevy_scene v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ │ ├── bevy_text v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_scene v0.9.0-dev (*) │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ ├── bevy_text v0.9.0-dev (*) │ │ └── bevy_ui v0.9.0-dev (*) │ ├── bevy_diagnostic v0.9.0-dev │ │ ├── bevy_asset v0.9.0-dev (*) │ │ └── bevy_internal v0.9.0-dev (*) │ ├── bevy_gltf v0.9.0-dev (*) │ ├── bevy_internal v0.9.0-dev (*) │ ├── bevy_render v0.9.0-dev (*) │ ├── bevy_sprite v0.9.0-dev (*) │ └── bevy_ui v0.9.0-dev (*) └── tracing-wasm v0.2.1 └── bevy_log v0.9.0-dev (*) ```
Pull request successfully merged into main. Build succeeded: |
bors
bot
changed the title
Ignore RUSTSEC-2021-0139
[Merged by Bors] - Ignore RUSTSEC-2021-0139
Aug 27, 2022
Suficio
pushed a commit
to Suficio/bevy
that referenced
this pull request
Aug 29, 2022
# Objective - `ansi_term` has become unmaintained: ogham/rust-ansi-term#72 - This is now blocking our CI so we need to find a way around that. ## Solution Temporary add `RUSTSEC-2021-0139` to ignore until tracing switches to a new crate: tokio-rs/tracing#2040 ## Dependency tree ``` ansi_term v0.12.1 └── tracing-subscriber v0.3.15 ├── bevy_log v0.9.0-dev │ ├── bevy_asset v0.9.0-dev │ │ ├── bevy_animation v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev │ │ │ │ └── bevy_internal v0.9.0-dev │ │ │ │ ├── bevy v0.9.0-dev │ │ │ │ └── bevy v0.9.0-dev (*) │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_audio v0.9.0-dev │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_core_pipeline v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ ├── bevy_text v0.9.0-dev │ │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ │ └── bevy_ui v0.9.0-dev │ │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ ├── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ ├── bevy_render v0.9.0-dev │ │ │ ├── bevy_core_pipeline v0.9.0-dev (*) │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ │ ├── bevy_scene v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ │ ├── bevy_text v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_scene v0.9.0-dev (*) │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ ├── bevy_text v0.9.0-dev (*) │ │ └── bevy_ui v0.9.0-dev (*) │ ├── bevy_diagnostic v0.9.0-dev │ │ ├── bevy_asset v0.9.0-dev (*) │ │ └── bevy_internal v0.9.0-dev (*) │ ├── bevy_gltf v0.9.0-dev (*) │ ├── bevy_internal v0.9.0-dev (*) │ ├── bevy_render v0.9.0-dev (*) │ ├── bevy_sprite v0.9.0-dev (*) │ └── bevy_ui v0.9.0-dev (*) └── tracing-wasm v0.2.1 └── bevy_log v0.9.0-dev (*) ```
wdhwg001
added a commit
to wdhwg001/heron
that referenced
this pull request
Aug 31, 2022
It blocked our CI. We have to wait until https://github.com/tokio-rs/tracing switched to another dependency, just like in bevy: bevyengine/bevy#5816
wdhwg001
added a commit
to wdhwg001/heron
that referenced
this pull request
Aug 31, 2022
…tained) It blocked our CI. We have to wait until https://github.com/tokio-rs/tracing switched to another dependency, just like in bevy: bevyengine/bevy#5816
maccesch
pushed a commit
to Synphonyte/bevy
that referenced
this pull request
Sep 28, 2022
# Objective - `ansi_term` has become unmaintained: ogham/rust-ansi-term#72 - This is now blocking our CI so we need to find a way around that. ## Solution Temporary add `RUSTSEC-2021-0139` to ignore until tracing switches to a new crate: tokio-rs/tracing#2040 ## Dependency tree ``` ansi_term v0.12.1 └── tracing-subscriber v0.3.15 ├── bevy_log v0.9.0-dev │ ├── bevy_asset v0.9.0-dev │ │ ├── bevy_animation v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev │ │ │ │ └── bevy_internal v0.9.0-dev │ │ │ │ ├── bevy v0.9.0-dev │ │ │ │ └── bevy v0.9.0-dev (*) │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_audio v0.9.0-dev │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_core_pipeline v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ ├── bevy_text v0.9.0-dev │ │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ │ └── bevy_ui v0.9.0-dev │ │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ ├── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ ├── bevy_render v0.9.0-dev │ │ │ ├── bevy_core_pipeline v0.9.0-dev (*) │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ │ ├── bevy_scene v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ │ ├── bevy_text v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_scene v0.9.0-dev (*) │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ ├── bevy_text v0.9.0-dev (*) │ │ └── bevy_ui v0.9.0-dev (*) │ ├── bevy_diagnostic v0.9.0-dev │ │ ├── bevy_asset v0.9.0-dev (*) │ │ └── bevy_internal v0.9.0-dev (*) │ ├── bevy_gltf v0.9.0-dev (*) │ ├── bevy_internal v0.9.0-dev (*) │ ├── bevy_render v0.9.0-dev (*) │ ├── bevy_sprite v0.9.0-dev (*) │ └── bevy_ui v0.9.0-dev (*) └── tracing-wasm v0.2.1 └── bevy_log v0.9.0-dev (*) ```
james7132
pushed a commit
to james7132/bevy
that referenced
this pull request
Oct 28, 2022
# Objective - `ansi_term` has become unmaintained: ogham/rust-ansi-term#72 - This is now blocking our CI so we need to find a way around that. ## Solution Temporary add `RUSTSEC-2021-0139` to ignore until tracing switches to a new crate: tokio-rs/tracing#2040 ## Dependency tree ``` ansi_term v0.12.1 └── tracing-subscriber v0.3.15 ├── bevy_log v0.9.0-dev │ ├── bevy_asset v0.9.0-dev │ │ ├── bevy_animation v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev │ │ │ │ └── bevy_internal v0.9.0-dev │ │ │ │ ├── bevy v0.9.0-dev │ │ │ │ └── bevy v0.9.0-dev (*) │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_audio v0.9.0-dev │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_core_pipeline v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ ├── bevy_text v0.9.0-dev │ │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ │ └── bevy_ui v0.9.0-dev │ │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ ├── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ ├── bevy_render v0.9.0-dev │ │ │ ├── bevy_core_pipeline v0.9.0-dev (*) │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ │ ├── bevy_scene v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ │ ├── bevy_text v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_scene v0.9.0-dev (*) │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ ├── bevy_text v0.9.0-dev (*) │ │ └── bevy_ui v0.9.0-dev (*) │ ├── bevy_diagnostic v0.9.0-dev │ │ ├── bevy_asset v0.9.0-dev (*) │ │ └── bevy_internal v0.9.0-dev (*) │ ├── bevy_gltf v0.9.0-dev (*) │ ├── bevy_internal v0.9.0-dev (*) │ ├── bevy_render v0.9.0-dev (*) │ ├── bevy_sprite v0.9.0-dev (*) │ └── bevy_ui v0.9.0-dev (*) └── tracing-wasm v0.2.1 └── bevy_log v0.9.0-dev (*) ```
ItsDoot
pushed a commit
to ItsDoot/bevy
that referenced
this pull request
Feb 1, 2023
# Objective - `ansi_term` has become unmaintained: ogham/rust-ansi-term#72 - This is now blocking our CI so we need to find a way around that. ## Solution Temporary add `RUSTSEC-2021-0139` to ignore until tracing switches to a new crate: tokio-rs/tracing#2040 ## Dependency tree ``` ansi_term v0.12.1 └── tracing-subscriber v0.3.15 ├── bevy_log v0.9.0-dev │ ├── bevy_asset v0.9.0-dev │ │ ├── bevy_animation v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev │ │ │ │ └── bevy_internal v0.9.0-dev │ │ │ │ ├── bevy v0.9.0-dev │ │ │ │ └── bevy v0.9.0-dev (*) │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_audio v0.9.0-dev │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_core_pipeline v0.9.0-dev │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ ├── bevy_text v0.9.0-dev │ │ │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ │ │ └── bevy_ui v0.9.0-dev │ │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ ├── bevy_internal v0.9.0-dev (*) │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ ├── bevy_render v0.9.0-dev │ │ │ ├── bevy_core_pipeline v0.9.0-dev (*) │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ ├── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_pbr v0.9.0-dev (*) │ │ │ ├── bevy_scene v0.9.0-dev │ │ │ │ ├── bevy_gltf v0.9.0-dev (*) │ │ │ │ └── bevy_internal v0.9.0-dev (*) │ │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ │ ├── bevy_text v0.9.0-dev (*) │ │ │ └── bevy_ui v0.9.0-dev (*) │ │ ├── bevy_scene v0.9.0-dev (*) │ │ ├── bevy_sprite v0.9.0-dev (*) │ │ ├── bevy_text v0.9.0-dev (*) │ │ └── bevy_ui v0.9.0-dev (*) │ ├── bevy_diagnostic v0.9.0-dev │ │ ├── bevy_asset v0.9.0-dev (*) │ │ └── bevy_internal v0.9.0-dev (*) │ ├── bevy_gltf v0.9.0-dev (*) │ ├── bevy_internal v0.9.0-dev (*) │ ├── bevy_render v0.9.0-dev (*) │ ├── bevy_sprite v0.9.0-dev (*) │ └── bevy_ui v0.9.0-dev (*) └── tracing-wasm v0.2.1 └── bevy_log v0.9.0-dev (*) ```
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
A-Build-System
Related to build systems or continuous integration
S-Ready-For-Final-Review
This PR has been approved by the community. It's ready for a maintainer to consider merging it
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Objective
ansi_term
has become unmaintained: Maintenance status ogham/rust-ansi-term#72Solution
Temporary add
RUSTSEC-2021-0139
to ignore until tracing switches to a new crate: tokio-rs/tracing#2040Dependency tree