Upgrade pyo3 to latest
Opened this issue · 0 comments
legoktm commented
Description
We probably got a bit lucky in that https://rustsec.org/advisories/RUSTSEC-2024-0378 only affects newer versions of pyo3 and not older ones. In terms of our major Rust dependencies, pyo3 is probably the most outdated one since it's a big review burden (and not used by any other audits we import IIRC).
We should proactively get close to latest so we can review it at our leisure (including splitting the load) instead of reacting to an issue in a hurry.