diff --git a/runtime/Cargo.lock b/runtime/Cargo.lock index e2cb34fcf..ba453a848 100644 --- a/runtime/Cargo.lock +++ b/runtime/Cargo.lock @@ -1998,8 +1998,9 @@ dependencies = [ [[package]] name = "docx-to-md" -version = "0.1.0" -source = "git+https://github.com/SommerEngineering/docx-parser.git?rev=3434bd405fc95a6a4f5de1d09c74dfd27a409996#3434bd405fc95a6a4f5de1d09c74dfd27a409996" +version = "0.2.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "9775b3bbffa71f4c07054e8b0a1df4835c3e13f39f9586f347173038e40f2ac3" dependencies = [ "base64 0.22.1", "image", @@ -5467,8 +5468,9 @@ checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391" [[package]] name = "pptx-to-md" -version = "1.0.0" -source = "git+https://github.com/SommerEngineering/pptx-parser.git?rev=540af00586d122c192093f6c42991ce015a67223#540af00586d122c192093f6c42991ce015a67223" +version = "2.0.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f62d052ef911339e6de17c24300cba547919391d73f34301b22c4224aae33925" dependencies = [ "base64 0.22.1", "image", diff --git a/runtime/Cargo.toml b/runtime/Cargo.toml index 0e85bc95b..aba894a1b 100644 --- a/runtime/Cargo.toml +++ b/runtime/Cargo.toml @@ -63,8 +63,8 @@ pdfium-render = "0.9.1" sys-locale = "0.3.2" whoami = "2.1.2" cfg-if = "1.0.4" -pptx-to-md = "1.0.0" -docx-to-md = "0.1.0" +pptx-to-md = "2.0.0" +docx-to-md = "0.2.0" tempfile = "3.27.0" strum_macros = "0.28.0" sysinfo = "0.39.6" @@ -90,13 +90,6 @@ tower = { version = "0.5.2", features = ["util"] } # on this crate in version 0.1.2, so the patch stays relevant: https://github.com/asimihsan/permutation-iterator-rs/pull/14 permutation_iterator = { git = "https://github.com/SommerEngineering/permutation-iterator-rs.git", rev = "76836ed316d18dfef530ba908f58481c343e80d7" } -# Issue: docx-to-md 0.1.0 and pptx-to-md 1.0.0 require zip 8, which is affected by several security advisories, among them -# GHSA-m665-v7pm-7grj. Our forks upgrade both crates to zip 9 and limit pptx-to-md to the deflate compression. -# State: We opened PRs for both crates: https://github.com/nilskruthoff/docx-parser/pull/6 and -# https://github.com/nilskruthoff/pptx-parser/pull/49. Remove these patches once both crates are released with zip 9. -docx-to-md = { git = "https://github.com/SommerEngineering/docx-parser.git", rev = "3434bd405fc95a6a4f5de1d09c74dfd27a409996" } -pptx-to-md = { git = "https://github.com/SommerEngineering/pptx-parser.git", rev = "540af00586d122c192093f6c42991ce015a67223" } - [target.'cfg(target_os = "windows")'.dependencies] windows-registry = "0.6.1" windows-native-keyring-store = "1.1.0"