Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: upgrade stable-structures #4284

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

max-dfinity
Copy link
Contributor

No description provided.

@github-actions github-actions bot added the chore label Mar 7, 2025
Copy link
Contributor

github-actions bot commented Mar 7, 2025

Vulnerable dependency information
The dependency-check job for the MR has new findings. Please update or remove these dependencies or obtain a commit exception from product security.

The findings are:
[Finding(repository='ic', scanner='BAZEL_RUST', vulnerable_dependency=Dependency(id='https://crates.io/crates/protobuf', name='protobuf', version='2.28.0', fix_version_for_vulnerability={}), vulnerabilities=[Vulnerability(id='https://rustsec.org/advisories/RUSTSEC-2024-0437', name='RUSTSEC-2024-0437', description='Crash due to uncontrolled recursion in protobuf crate', score=-1, risk_note=' ')], first_level_dependencies=[], projects=[], risk_assessor=[], risk=None, owning_teams=[], patch_responsible=[], due_date=None, score=-1, more_info=None)]

@max-dfinity max-dfinity force-pushed the msum/upgrade-stable-structures branch 3 times, most recently from a31966e to e381b3b Compare March 10, 2025 17:44
@max-dfinity max-dfinity force-pushed the msum/upgrade-stable-structures branch from e41721f to 6b26309 Compare March 11, 2025 22:32
@max-dfinity max-dfinity marked this pull request as ready for review March 11, 2025 22:44
@max-dfinity max-dfinity requested review from a team as code owners March 11, 2025 22:44
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If this pull request affects the behavior of any canister owned by
the Governance team, remember to update the corresponding
unreleased_changes.md file(s).

To acknowldge this reminder (and unblock the PR), dismiss this
code review by going to the bottom of the pull request page, and
supply one of the following reasons:

  1. Done.

  2. No canister behavior changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants