-
Notifications
You must be signed in to change notification settings - Fork 12.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump expat to 2.4.1 #86573
Bump expat to 2.4.1 #86573
Conversation
r=me Given upstream's habit of breaking links I'd be tempted to mirror this on our bucket to prevent breakages from happening in the future. In the diff I see a |
I am wary of just doing that -- in both cases where this has happened, it is a security-related fix. I'm not clear on whether that even could affect us (I imagine no, but not sure). Given our story there is not wonderful, I think mirroring is a little premature just now without some more work. @bors r=pietroalbini |
📌 Commit 9fc77e2 has been approved by |
☀️ Test successful - checks-actions |
Use https for sourceforge during CI I saw that we use http during CI opening up the CI process to on the wire tampering. based on rust-lang#86573 r? `@pietroalbini`
Use https for sourceforge during CI I saw that we use http during CI opening up the CI process to on the wire tampering. based on rust-lang#86573 r? `@pietroalbini`
Temporary fix as expat 2.3.0 is now renamed, presumably due to https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes#L19.
r? @pietroalbini