fix: Remove vulnerable time-0.1.x chrono dependency (#4750)

The dependency is optional for chrono and enabled by default for
backward compatibility only.

See: https://rustsec.org/advisories/RUSTSEC-2020-0071
See: https://github.com/chronotope/chrono/blob/v0.4.23/CHANGELOG.md#0416
This commit is contained in:
Alexey Zapparov
2022-12-23 10:35:24 +01:00
committed by GitHub
parent d32f1150f1
commit 255f91c3ce
3 changed files with 5 additions and 30 deletions
+1 -1
View File
@@ -42,7 +42,7 @@ git-repository-max-perf = ["git-features/zlib-ng", "git-repository/fast-sha1"]
git-repository-faster = ["git-features/zlib-stock", "git-repository/fast-sha1"]
[dependencies]
chrono = { version = "0.4.23", features = ["clock", "std"] }
chrono = { version = "0.4.23", default-features = false, features = ["clock", "std", "wasmbind"] }
clap = { version = "4.0.32", features = ["derive", "cargo", "unicode"] }
clap_complete = "4.0.7"
dirs-next = "2.0.0"