Dependencies are outdated

[piegamesde]

See https://deps.rs/repo/github/RustCrypto/PAKEs and magic-wormhole/magic-wormhole.rs#114

[tarcieri]

Unless there's an urgent need to update them, I'd suggest tackling this after the cipher v0.3 release

[piegamesde]

You decide whether RUSTSEC-2020-0146 is "urgent" enough or not.

[tarcieri]

You should be able to address that by upgrading to generic-array v0.12.4.

[piegamesde]

All my dependencies on generic-array are up to date, except the one introduced by spake2.

[tarcieri]

spake2 uses generic-array ^0.12.

generic-array v0.12.4 was released to address RUSTSEC-2020-0146.

If you have generic-array v0.12.4 in your Cargo.lock, then you should get a clean bill of health from cargo audit.

[piegamesde]

Oh I'm sorry, I didn't know version 0.12.4 also contained the patch. Nevermind then, it's not urgent.