chore: Update url to 2.5.4 due to CVE-2024-12224 (#74)

Update `url` to `2.5.4` bringing `idna` version up to `1.0.3`.
collabora · Jan 17, 2025 · 83dbeca · 83dbeca
2 parents 905d232 + 2c537c1
commit 83dbeca
Show file tree

Hide file tree

Showing 3 changed files with 256 additions and 33 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/gitlab-runner-mock/Cargo.toml b/gitlab-runner-mock/Cargo.toml
@@ -14,7 +14,7 @@ repository = "https://github.com/collabora/gitlab-runner-rs"
 wiremock = "0.6"
 serde = { version = "1.0.200", features = ["derive"] }
 serde_json = "1.0.64"
-url = "2.2.1"
+url = "2.5.4"
 thiserror = "2.0.11"
 http = "1.0.0"
 multer = "3.0.0"

diff --git a/gitlab-runner/Cargo.toml b/gitlab-runner/Cargo.toml
@@ -16,7 +16,7 @@ flate2 = "1.0.30"
 glob = "0.3"
 reqwest = { version = "0.12.0", features = [ "json", "multipart", "stream" ] }
 tokio = { version = "1.35.0", features = [ "full" ] }
-url = "2.2.1"
+url = "2.5.4"
 serde = { version = "1.0.200", features = [ "derive" ] }
 serde_json = "1.0.64"
 thiserror = "2.0.11"