security: unpin serde version.

As the consensus was concluded across the rust community, this PR serde-rs/serde#2590 phases out precompiled blobs from serde_derive. Signed-off-by: Soc Virnyl Estela <[email protected]>
uncomfyhalomacro · Aug 22, 2023 · 597ad97 · 597ad97
1 parent a57bf73
commit 597ad97
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rypper-reader/Cargo.toml b/rypper-reader/Cargo.toml
@@ -25,5 +25,5 @@ md-5 = "0.10"
 regex = "1.9.1"
 # Pin to the most recent version before 1.0.172
 # https://github.com/serde-rs/serde/issues/2538 is a security risk.
-serde = { version = "1.0.171, <1.0.172", features = ["derive", "alloc"] }
+serde = { version = "1", features = ["derive", "alloc"] }