From 6067223fcc40e33f64408e1e151d004e357bfb67 Mon Sep 17 00:00:00 2001
From: Spencer Bartholomew <38776747+spencerbart@users.noreply.github.com>
Date: Mon, 27 Feb 2023 10:40:03 -0700
Subject: [PATCH] update tokio dep to fix potential security vulnerability
 (#1787)

---
 axum-core/Cargo.toml   | 4 ++--
 axum-macros/Cargo.toml | 2 +-
 axum/Cargo.toml        | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/axum-core/Cargo.toml b/axum-core/Cargo.toml
index 8c5dd950..0d892876 100644
--- a/axum-core/Cargo.toml
+++ b/axum-core/Cargo.toml
@@ -27,8 +27,8 @@ rustversion = "1.0.9"
 [dev-dependencies]
 axum = { path = "../axum", version = "0.6.0", features = ["headers"] }
 futures-util = "0.3"
-hyper = "0.14"
-tokio = { version = "1.0", features = ["macros"] }
+hyper = "0.14.24"
+tokio = { version = "1.25.0", features = ["macros"] }
 tower-http = { version = "0.4", features = ["limit"] }
 
 [package.metadata.cargo-public-api-crates]
diff --git a/axum-macros/Cargo.toml b/axum-macros/Cargo.toml
index be6c3f3c..94707655 100644
--- a/axum-macros/Cargo.toml
+++ b/axum-macros/Cargo.toml
@@ -35,7 +35,7 @@ rustversion = "1.0"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 syn = { version = "1.0", features = ["full", "extra-traits"] }
-tokio = { version = "1.0", features = ["full"] }
+tokio = { version = "1.25.0", features = ["full"] }
 trybuild = "1.0.63"
 
 [package.metadata.cargo-public-api-crates]
diff --git a/axum/Cargo.toml b/axum/Cargo.toml
index c9441a69..9ae7230f 100644
--- a/axum/Cargo.toml
+++ b/axum/Cargo.toml
@@ -91,7 +91,7 @@ serde_json = { version = "1.0", features = ["raw_value"], optional = true }
 serde_path_to_error = { version = "0.1.8", optional = true }
 serde_urlencoded = { version = "0.7", optional = true }
 sha1 = { version = "0.10", optional = true }
-tokio = { package = "tokio", version = "1.21", features = ["time"], optional = true }
+tokio = { package = "tokio", version = "1.25.0", features = ["time"], optional = true }
 tokio-tungstenite = { version = "0.18.0", optional = true }
 
 [build-dependencies]
@@ -107,7 +107,7 @@ reqwest = { version = "0.11.14", default-features = false, features = ["json", "
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 time = { version = "0.3", features = ["serde-human-readable"] }
-tokio = { package = "tokio", version = "1.21", features = ["macros", "rt", "rt-multi-thread", "net", "test-util"] }
+tokio = { package = "tokio", version = "1.25.0", features = ["macros", "rt", "rt-multi-thread", "net", "test-util"] }
 tokio-stream = "0.1"
 tracing = "0.1"
 uuid = { version = "1.0", features = ["serde", "v4"] }