Skip to content

update to xml-rpc 0.2.0 #217

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

rursprung
Copy link

@rursprung rursprung commented May 15, 2025

this updates to the latest xml-rpc version. note that at the moment this does not yet build since it hasn't been released yet. this requires adnanademovic/xml-rpc-rs#13 to be merged & released first.

for the time being you can use this by using [patch.crates-io] in your Cargo.toml and overwrite both rosrust and xml-rpc.

this update is needed to resolve various security vulnerabilities coming from outdated versions of hyper which are being pulled in via xml-rpc. with this, cargo-audit is happy again.

@rursprung
Copy link
Author

this will fail to build at the moment. i've intentionally pushed it already with the new version in Cargo.toml so that you can just re-trigger CI once you've released xml-rpc and then it'll work. there won't be any need for re-pushing anything here.

@adnanademovic: it'd be great if you could create a release also of rosrust after merging this so that we can use a non-vulnerable version from crates.io. thanks!

this updates to the latest `xml-rpc` version. note that at the moment
this does not yet build since it hasn't been released yet.
this requires adnanademovic/xml-rpc-rs#13 to be merged & released first.

for the time being you can use this by using `[patch.crates-io]` in your
`Cargo.toml` and overwrite both `rosrust` and `xml-rpc`.

this update is needed to resolve various security vulnerabilities coming
from outdated versions of `hyper` which are being pulled in via
`xml-rpc`. with this, `cargo-audit` is happy again.
@rursprung rursprung force-pushed the update-to-xml-rpc-0.2.0 branch from b216fe0 to def7708 Compare May 29, 2025 15:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant