From 3b30dce327102fd45941e8beaacfeb4aba1cfe35 Mon Sep 17 00:00:00 2001 From: Tim Van Wassenhove Date: Mon, 3 Nov 2025 11:40:20 +0100 Subject: [PATCH] fix: drop instant by upgrading wasmtimer --- reqwest-retry/CHANGELOG.md | 6 ++++++ reqwest-retry/Cargo.toml | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/reqwest-retry/CHANGELOG.md b/reqwest-retry/CHANGELOG.md index 77b228c..4a9ba0c 100644 --- a/reqwest-retry/CHANGELOG.md +++ b/reqwest-retry/CHANGELOG.md @@ -14,6 +14,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Changed +## [0.7.1] - 2025-11-03 + +### Security +- Eliminated the `instant` dependency on `wasm32` by upgrading the retry timer stack to `wasmtimer` 0.4.3, addressing [RUSTSEC-2024-0384](https://rustsec.org/advisories/RUSTSEC-2024-0384.html). + +### Changed - Updated `thiserror` to `2.0` ## [0.7.0] - 2024-11-08 diff --git a/reqwest-retry/Cargo.toml b/reqwest-retry/Cargo.toml index 36ff770..9036922 100644 --- a/reqwest-retry/Cargo.toml +++ b/reqwest-retry/Cargo.toml @@ -30,7 +30,7 @@ hyper = "1.0" tokio = { version = "1.6.0", default-features = false, features = ["time"] } [target.'cfg(target_arch = "wasm32")'.dependencies] -wasmtimer = "0.4.1" +wasmtimer = "0.4.3" getrandom = { version = "0.2.0", features = ["js"] } [dev-dependencies]