v1.0.1: Fix ancient time dependency

This was technically a CVE for a race conditon. We're fixing this so dbcrossbar can fix it as well.
faradayio · Jul 14, 2023 · 6dfbd06 · 6dfbd06
1 parent c02f2a3
commit 6dfbd06
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 5 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,8 +4,16 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.1] - 2023-07-14
+
+### Fixed
+
+- Remove dependency on `time` 1.4, which had a long-standing race condition. This is most useful for anyone still using the `bigml` library, which is probably just `dbcrossbar` at this point.
+
 ## [1.0.0] - 2022-10-14
 
+### Fixed
+
 - Update to latest versions of dependencies and latest Rust compiler. Should be backwards compatible with 0.9.2.
 - Set official maintenance status to "as-is". Issues that affect Faraday or `dbcrossbar` will still be addressed. No guarantees about anything else.
 

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/bigml-parallel/Cargo.toml b/bigml-parallel/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "bigml-parallel"
-version = "1.0.0"
+version = "1.0.1"
 authors = ["Eric Kidd <git@randomhacks.net>"]
 edition = "2018"
 
@@ -16,7 +16,7 @@ cli_test_dir = "0.1.5"
 
 [dependencies]
 anyhow = { version = "1.0.51", features = ["backtrace"] }
-bigml = { version = "=1.0.0", path = "../bigml" }
+bigml = { version = "=1.0.1", path = "../bigml" }
 bytes = "1.0.1"
 # This makes the executable bigger, but it makes --help much nicer.
 clap = { version = "4", features = ["wrap_help", "derive"] }

diff --git a/bigml/Cargo.toml b/bigml/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "bigml"
-version = "1.0.0"
+version = "1.0.1"
 authors = ["Eric Kidd <git@randomhacks.net>"]
 
 description = "Unofficial BigML client bindings"