ci: fix audit (#32932)

* ci: bump rustls-webpki to 0.101.4

* ci: ignore RUSTSEC-2023-0052
This commit is contained in:
Yihau Chen 2023-08-23 01:23:18 +08:00 committed by GitHub
parent 9d7e5fc139
commit e4a2d14c4e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 8 additions and 4 deletions

4
Cargo.lock generated
View File

@ -4649,9 +4649,9 @@ dependencies = [
[[package]]
name = "rustls-webpki"
version = "0.101.2"
version = "0.101.4"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "513722fd73ad80a71f72b61009ea1b584bcfa1483ca93949c8f290298837fa59"
checksum = "7d93931baf2d282fff8d3a532bbfd7653f734643161b87e3e01e59a04439bf0d"
dependencies = [
"ring",
"untrusted",

View File

@ -30,6 +30,10 @@ cargo_audit_ignores=(
--ignore RUSTSEC-2023-0001
--ignore RUSTSEC-2022-0093
# webpki: CPU denial of service in certificate path building
# No fixed upgrade is available!
--ignore RUSTSEC-2023-0052
)
scripts/cargo-for-all-lock-files.sh audit "${cargo_audit_ignores[@]}" | $dep_tree_filter
# we want the `cargo audit` exit code, not `$dep_tree_filter`'s

View File

@ -4102,9 +4102,9 @@ dependencies = [
[[package]]
name = "rustls-webpki"
version = "0.101.2"
version = "0.101.4"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "513722fd73ad80a71f72b61009ea1b584bcfa1483ca93949c8f290298837fa59"
checksum = "7d93931baf2d282fff8d3a532bbfd7653f734643161b87e3e01e59a04439bf0d"
dependencies = [
"ring",
"untrusted",