RUSTSEC-2020-0053: dirs is unmaintained, use dirs-next instead

[github-actions]

dirs is unmaintained, use dirs-next instead

Details
Status	unmaintained
Package	dirs
Version	2.0.2
URL	https://github.com/dirs-dev/dirs-rs
Date	2020-10-16

The dirs crate is not maintained any more;
use dirs-next instead.

See advisory page for additional details.

[jyn514]

$ cargo tree -p dirs -i
dirs v2.0.2
└── rusoto_credential v0.45.0
    ├── docs-rs v0.6.0 (/home/joshua/src/rust/docs.rs)
    ├── rusoto_core v0.45.0
    │   ├── docs-rs v0.6.0 (/home/joshua/src/rust/docs.rs)
    │   └── rusoto_s3 v0.45.0
    │       └── docs-rs v0.6.0 (/home/joshua/src/rust/docs.rs)
    └── rusoto_signature v0.45.0
        └── rusoto_core v0.45.0 (*)

There's no later release of rusoto, so this is blocked until then.

[coolreader18]

Looks like rusoto has updated since then

[jyn514]

Great! @coolreader18 are you interested in making a PR to update rusoto? :)

[coolreader18]

Sure!

[jyn514]

This was reverted in #1278.

[coolreader18]

Oh, yikes, that's not good. I didn't really make any changes to docs.rs' code in that PR, so is it an upstream issue in tokio? Or if it's related to building crates; rustwide?

[coolreader18]

Oh, or maybe it's tokio-rs/tokio#3477? Maybe something with process stdio not being dropped? nevermind, that was fixed in the version pinned in Cargo.lock

[Nemo157]

I'm attempting to bisect the dependency update locally, see if I can track down which update caused it.