Merge pull request #620 from near/phuong/feat/fix-dep-cves

fix: upgrade dependencies to fix some CVEs
near · May 30, 2024 · 7a4b85b · 7a4b85b
2 parents 3901486 + 4879239
commit 7a4b85b
Show file tree

Hide file tree

Showing 13 changed files with 278 additions and 1,229 deletions.
diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml
@@ -77,6 +77,8 @@ jobs:
         run: |
           cargo audit --ignore RUSTSEC-2020-0071 --ignore RUSTSEC-2023-0052 --ignore RUSTSEC-2022-0093 --ignore RUSTSEC-2023-0071 --ignore RUSTSEC-2024-0019
       - name: Run Audit (Chain Signatures)
+        # even if previous audit step fails, run this audit step to ensure all crates are audited
+        if: always()
         working-directory: integration-tests/chain-signatures
         run: |
           cargo audit --ignore RUSTSEC-2020-0071 --ignore RUSTSEC-2023-0052 --ignore RUSTSEC-2022-0093 --ignore RUSTSEC-2023-0071 --ignore RUSTSEC-2024-0019