Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2024-0370: proc-macro-error is unmaintained #258

Closed
github-actions bot opened this issue Sep 6, 2024 · 0 comments · Fixed by #284
Closed

RUSTSEC-2024-0370: proc-macro-error is unmaintained #258

github-actions bot opened this issue Sep 6, 2024 · 0 comments · Fixed by #284

Comments

@github-actions
Copy link
Contributor

github-actions bot commented Sep 6, 2024

proc-macro-error is unmaintained

Details
Status unmaintained
Package proc-macro-error
Version 1.0.4
URL https://gitlab.com/CreepySkeleton/proc-macro-error/-/issues/20
Date 2024-09-01

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email.

proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees.

Possible Alternative(s)

See advisory page for additional details.

github-merge-queue bot pushed a commit that referenced this issue Oct 1, 2024
conflate (essentially merge 0.1.0-dev) lacks the blanket `impl<T> Merge
for Option<T>`, which was removed from version 0.1.0

```rust
impl<T> Merge for Option<T> {
    fn merge(&mut self, mut other: Self) {
        if !self.is_some() {
            *self = other.take();
        }
    }
}
```

Hence, I added the `overwrite_none` strategies where needed.

We could also add it back, for a future version, though I think there
was some decision involved, that strategies should be more explicit,
because it could be confusing for strategies being applied without
having an annotation. So I felt, I don't want to add that back to
`conflate` for now.

Fixes #258

---------

Signed-off-by: simonsan <[email protected]>
Co-authored-by: Alexander Weiss <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

0 participants