Skip to content

Conversation

@nodejs-github-bot
Copy link
Collaborator

This PR updates SWC to v1.15.8.
View the SWC changelog for more information.

@marco-ippolito
Copy link
Member

@kdy1 rust audit is complaining about ansi_term

installed toolchains
--------------------
1.85.0-x86_64-unknown-linux-musl (default)

active toolchain
----------------
info: syncing channel updates for 'nightly-2025-05-06-x86_64-unknown-linux-musl'
info: latest update on 2025-05-06, rust version 1.88.0-nightly (2e6882ac5 2025-05-05)
info: downloading component 'cargo'
info: downloading component 'rust-std'
info: downloading component 'rustc'
info: installing component 'cargo'
info: installing component 'rust-std'
info: installing component 'rustc'
info: the active toolchain `nightly-2025-05-06-x86_64-unknown-linux-musl` has been installed
info: it's active because: overridden by '/github/workspace/deps/swc/rust-toolchain'
error[unmaintained]: ansi_term is Unmaintained
  ┌─ /github/workspace/deps/swc/Cargo.lock:5:1
  │
5 │ ansi_term 0.12.1 registry+https://github.com/rust-lang/crates.io-index
  │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
  │
  ├ ID: RUSTSEC-2021-0139
  ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2021-0139
  ├ The maintainer has advised that this crate is deprecated and will not receive any maintenance.
    
    The crate does not seem to have much dependencies and may or may not be ok to use as-is.
    
    Last release seems to have been three years ago.
    
    ## Possible Alternative(s)
    
     The below list has not been vetted in any way and may or may not contain alternatives;
    
     - [ansiterm](https://crates.io/crates/ansiterm)
     - [anstyle](https://github.com/epage/anstyle)
     - [console](https://crates.io/crates/console)
     - [nu-ansi-term](https://crates.io/crates/nu-ansi-term)
     - [owo-colors](https://crates.io/crates/owo-colors)
     - [stylish](https://crates.io/crates/stylish)
     - [yansi](https://crates.io/crates/yansi)
    
    ## Dependency Specific Migration(s)

@kdy1
Copy link
Member

kdy1 commented Jan 14, 2026

A new version will fix it. It also happend on the main SWC repositroy but it's already fixed on the main branch.

@marco-ippolito
Copy link
Member

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants