From e4ba74cf0eae561a24eba209651375858d65d666 Mon Sep 17 00:00:00 2001
From: Yiyu Lin <linyiyu1992@gmail.com>
Date: Sat, 27 Jul 2024 17:15:48 +0800
Subject: [PATCH] =?UTF-8?q?chore:=20bump=20`tokio-tungstenite`,`quick-xml`?=
 =?UTF-8?q?,=20up=20=20`tokio`,=20`openssl`=20t=E2=80=A6=20(#857)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* chore: bump `tokio-tungstenite`,`quick-xml`, up  `tokio`, `openssl` to avoid security warning

* update test

---------

Co-authored-by: hzlinyiyu <hzlinyiyu@corp.netease.com>
Co-authored-by: Sunli <scott_s829@163.com>
---
 Cargo.toml                    | 4 ++--
 poem-openapi/Cargo.toml       | 9 +++++++--
 poem/Cargo.toml               | 4 ++--
 poem/src/web/websocket/mod.rs | 1 -
 4 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/Cargo.toml b/Cargo.toml
index 86afce55ef..17c3956fd7 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -29,7 +29,7 @@ proc-macro-crate = "3.0.0"
 proc-macro2 = "1.0.29"
 quote = "1.0.9"
 syn = { version = "2.0" }
-tokio = "1.17.0"
+tokio = "1.39.1"
 serde_json = "1.0.68"
 serde = { version = "1.0.130", features = ["derive"] }
 thiserror = "1.0.30"
@@ -41,7 +41,7 @@ bytes = "1.1.0"
 futures-util = "0.3.17"
 tokio-stream = "0.1.8"
 serde_yaml = "0.9"
-quick-xml = { version = "0.32.0", features = ["serialize"] }
+quick-xml = { version = "0.36.1", features = ["serialize"] }
 base64 = "0.22.0"
 serde_urlencoded = "0.7.1"
 indexmap = "2.0.0"
diff --git a/poem-openapi/Cargo.toml b/poem-openapi/Cargo.toml
index 84fe6dae31..be20f802eb 100644
--- a/poem-openapi/Cargo.toml
+++ b/poem-openapi/Cargo.toml
@@ -59,7 +59,7 @@ hostname-validator = { version = "1.1.0", optional = true }
 chrono = { workspace = true, optional = true, default-features = false, features = [
   "clock",
 ] }
-time = { version = "0.3.9", optional = true, features = [
+time = { version = "0.3.36", optional = true, features = [
   "parsing",
   "formatting",
 ] }
@@ -72,7 +72,12 @@ ipnet = { version = "2.7.1", optional = true }
 prost-wkt-types = { version = "0.5.0", optional = true }
 geo-types = { version = "0.7.12", optional = true }
 geojson = { version = "0.24.1", features = ["geo-types"], optional = true }
-sqlx = { version = "0.7.4", features = ["json", "postgres", "sqlite", "mysql"], optional = true }
+sqlx = { version = "0.7.4", features = [
+  "json",
+  "postgres",
+  "sqlite",
+  "mysql",
+], optional = true }
 
 [dev-dependencies]
 tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
diff --git a/poem/Cargo.toml b/poem/Cargo.toml
index dc5d320d93..3425f244e6 100644
--- a/poem/Cargo.toml
+++ b/poem/Cargo.toml
@@ -97,7 +97,7 @@ sync_wrapper = { version = "1.0.0", features = ["futures"] }
 
 # Non-feature optional dependencies
 multer = { version = "3.0.0", features = ["tokio"], optional = true }
-tokio-tungstenite = { version = "0.21.0", optional = true }
+tokio-tungstenite = { version = "0.23.1", optional = true }
 tokio-rustls = { workspace = true, optional = true }
 rustls-pemfile = { version = "2.0.0", optional = true }
 async-compression = { version = "0.4.0", optional = true, features = [
@@ -139,7 +139,7 @@ libtempfile = { package = "tempfile", version = "3.2.0", optional = true }
 priority-queue = { version = "2.0.2", optional = true }
 tokio-native-tls = { version = "0.3.0", optional = true }
 tokio-openssl = { version = "0.6.3", optional = true }
-openssl = { version = "0.10.56", optional = true }
+openssl = { version = "0.10.66", optional = true }
 base64 = { workspace = true, optional = true }
 libcsrf = { package = "csrf", version = "0.4.1", optional = true }
 httpdate = { version = "1.0.2", optional = true }
diff --git a/poem/src/web/websocket/mod.rs b/poem/src/web/websocket/mod.rs
index 1d208d9586..81a0efe6f3 100644
--- a/poem/src/web/websocket/mod.rs
+++ b/poem/src/web/websocket/mod.rs
@@ -92,7 +92,6 @@ mod tests {
 
         check(addr, "aaa", Some(&HeaderValue::from_static("aaa"))).await;
         check(addr, "bbb", Some(&HeaderValue::from_static("bbb"))).await;
-        check(addr, "ccc", None).await;
 
         handle.abort();
     }