Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Feature Request] Update rustls and mio in Rust dependencies #520

Closed
cretz opened this issue May 8, 2024 · 1 comment · Fixed by #541
Closed

[Feature Request] Update rustls and mio in Rust dependencies #520

cretz opened this issue May 8, 2024 · 1 comment · Fixed by #541
Labels
enhancement New feature or request

Comments

@cretz
Copy link
Member

cretz commented May 8, 2024

Describe the solution you'd like

Even though we are unaffected by the vulnerabilities, security scans show our current rustls and mio versions as of this writing have vulnerabilities. Update them (and any other things as needed).
@cretz cretz added the enhancement New feature or request label May 8, 2024
@bbemis017
Copy link

Can we also add H2 to this list of dependencies that need to be upgraded since GHSA-q6cp-qfwq-4gcv is flagging the h2 version the sdk currently uses

cretz added a commit to cretz/temporal-sdk-python that referenced this issue Jun 4, 2024
@cretz
Update core/dependencies and call worker.validate
7a5e658 
Fixes temporalio#520
Fixes temporalio#532
@cretz cretz mentioned this issue Jun 4, 2024
Merged
cretz added a commit to cretz/temporal-sdk-python that referenced this issue Jun 4, 2024
@cretz
Update core/dependencies and call worker.validate
deb56df 
Fixes temporalio#520
Fixes temporalio#532
cretz added a commit to cretz/temporal-sdk-python that referenced this issue Jun 4, 2024
@cretz
Update core/dependencies and call worker.validate
e2d9c24 
Fixes temporalio#520
Fixes temporalio#532
cretz added a commit that referenced this issue Jun 4, 2024
@cretz
Update core/dependencies and call worker.validate (#541)
2061835 
Fixes #520
Fixes #532
@cretz cretz closed this as completed in #541 Jun 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update core/dependencies and call worker.validate cretz/temporal-sdk-python
2 participants
@cretz @bbemis017