https://bugzilla.redhat.com/show_bug.cgi?id=2196887 --- Comment #5 from Peter Robinson <pbrobinson@xxxxxxxxx> --- (In reply to Fabio Valentini from comment #4) > I only looked at the upstream PR, which bumped blake3 from 1.2 to 1.3.1, but > now I see that the downstream patch has more changes. > Sorry about the confusion, fine with me then. :) This was the original request: https://github.com/http-rs/async-session/issues/43 and the official release still requires 0.3.8 (and a vulnerable chrono): @@ -38,10 +38,10 @@ version = "1.3.3" [dependencies.blake3] -version = "0.3.8" +version = "1.3.1" [dependencies.chrono] -version = "0.4.19" +version = "0.4.22" -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2196887 _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue