maxjoehnk / desktop2mqtt Goto Github PK

mach is unmaintained

Details
Status	unmaintained
Package	mach
Version	0.3.2
URL	fitzgen/mach#63
Date	2020-07-14

Last release was almost 4 years ago.

Maintainer(s) seem to be completely unreachable.

Possible Alternative(s)

These may or may not be suitable alternatives and have not been vetted in any way;

• mach2 - direct fork

See advisory page for additional details.

webpki: CPU denial of service in certificate path building

Details
Package	webpki
Version	0.21.4
Date	2023-08-22
Patched versions	>=0.22.1

When this crate is given a pathological certificate chain to validate, it will
spend CPU time exponential with the number of candidate certificates at each
step of path building.

Both TLS clients and TLS servers that accept client certificate are affected.

This was previously reported in
<briansmith/webpki#69> and re-reported recently
by Luke Malinowski.

See advisory page for additional details.

net2 crate has been deprecated; use socket2 instead

Details
Status	unmaintained
Package	net2
Version	0.2.37
URL	deprecrated/net2-rs@3350e38
Date	2020-05-01

The net2 crate has been deprecated
and users are encouraged to considered socket2 instead.

See advisory page for additional details.

rustls::ConnectionCommon::complete_io could fall into an infinite loop based on network input

Details
Package	rustls
Version	0.19.1
URL	GHSA-6g7w-8wpp-frhj
Date	2024-04-19
Patched versions	>=0.23.5,>=0.22.4, <0.23.0,>=0.21.11, <0.22.0

If a close_notify alert is received during a handshake, complete_io
does not terminate.

Callers which do not call complete_io are not affected.

rustls-tokio and rustls-ffi do not call complete_io
and are not affected.

rustls::Stream and rustls::StreamOwned types use
complete_io and are affected.

See advisory page for additional details.

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• fix(deps): update rust crate systemstat to v0.2.3
• fix(deps): update rust crate humantime-serde to v1.1.1
• fix(deps): update rust crate notify-rust to v4.11.0
• fix(deps): update rust crate tokio to v1.37.0
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update rust crate anyhow to v1.0.83
• fix(deps): update rust crate futures-util to v0.3.30
• fix(deps): update rust crate log to v0.4.21
• fix(deps): update rust crate serde to v1.0.201
• fix(deps): update rust crate serde_json to v1.0.117
• fix(deps): update rust crate serde_yaml to v0.9.34
• fix(deps): update rust crate structopt to v0.3.26
• fix(deps): update rust crate env_logger to 0.11.0
• fix(deps): update rust crate user-idle to 0.6.0
• chore(deps): update actions/upload-artifact action to v4
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

cargo

Cargo.toml

• log 0.4
• env_logger 0.9.0
• tokio 1
• mqtt-async-client 0.3.1
• user-idle 0.5.2
• serde 1
• serde_json 1
• serde_yaml 0.9
• anyhow 1
• futures-util 0.3
• structopt 0.3
• directories-next 2
• notify-rust 4
• systemstat 0.2
• humantime-serde 1

github-actions

.github/workflows/audits.yml

• actions/checkout v4
• actions-rs/audit-check v1

.github/workflows/build.yml

• actions/checkout v4
• actions-rs/toolchain v1
• actions-rs/cargo v1
• actions/upload-artifact v3
• actions-rs/install v0.1
• actions-rs/cargo v1
• actions/upload-artifact v3
• actions-rs/clippy-check v1
• actions/checkout v4
• actions-rs/toolchain v1
• actions-rs/cargo v1
• actions/upload-artifact v3
• actions-rs/clippy-check v1
• actions/checkout v4
• actions-rs/toolchain v1
• actions-rs/cargo v1
• actions/upload-artifact v3
• actions-rs/clippy-check v1

.github/workflows/test.yml

• actions/checkout v4
• actions-rs/cargo v1

---

• Check this box to trigger a request for Renovate to run again on this repository

ansi_term is Unmaintained

Details
Status	unmaintained
Package	ansi_term
Version	0.12.1
URL	ogham/rust-ansi-term#72
Date	2021-08-18

The maintainer has advised that this crate is deprecated and will not receive any maintenance.

The crate does not seem to have much dependencies and may or may not be ok to use as-is.

Last release seems to have been three years ago.

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

• ansiterm
• anstyle
• console
• nu-ansi-term
• owo-colors
• stylish
• yansi

Dependency Specific Migration(s)

• structopt, clap2

See advisory page for additional details.

mach is unmaintained

Details
Status	unmaintained
Package	mach
Version	0.1.2
URL	fitzgen/mach#63
Date	2020-07-14

Last release was almost 4 years ago.

Maintainer(s) seem to be completely unreachable.

Possible Alternative(s)

These may or may not be suitable alternatives and have not been vetted in any way;

• mach2 - direct fork

See advisory page for additional details.