Skip to content

Conversation

rursprung
Copy link

@rursprung rursprung commented May 15, 2025

this updates to the latest xml-rpc version. note that at the moment this does not yet build since it hasn't been released yet. this requires adnanademovic/xml-rpc-rs#13 to be merged & released first.

for the time being you can use this by using [patch.crates-io] in your Cargo.toml and overwrite both rosrust and xml-rpc.

this update is needed to resolve various security vulnerabilities coming from outdated versions of hyper which are being pulled in via xml-rpc. with this, cargo-audit is happy again.

@rursprung
Copy link
Author

this will fail to build at the moment. i've intentionally pushed it already with the new version in Cargo.toml so that you can just re-trigger CI once you've released xml-rpc and then it'll work. there won't be any need for re-pushing anything here.

@adnanademovic: it'd be great if you could create a release also of rosrust after merging this so that we can use a non-vulnerable version from crates.io. thanks!

this updates to the latest `xml-rpc` version. note that at the moment
this does not yet build since it hasn't been released yet.
this requires adnanademovic/xml-rpc-rs#13 to be merged & released first.

for the time being you can use this by using `[patch.crates-io]` in your
`Cargo.toml` and overwrite both `rosrust` and `xml-rpc`.

this update is needed to resolve various security vulnerabilities coming
from outdated versions of `hyper` which are being pulled in via
`xml-rpc`. with this, `cargo-audit` is happy again.
@rursprung rursprung force-pushed the update-to-xml-rpc-0.2.0 branch from b216fe0 to def7708 Compare May 29, 2025 15:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant