The 0.6.4 release bumped the MSRV to 1.88 by pinning time to 0.3.47

[tillrohrmann]

The latest 0.6.4 release implicitly bumped the MSRV to 1.88 because it pinned the time dependency to 0.3.47. The change was introduced with b40a5dc. I am wondering whether this is strictly needed as our library is now failing to build with it's MSRV of 1.85. Alternatively, we could think about announcing the MSRV of this library. That way cargo can pick an older version of simple_asn1 that satisfies the MSRV requirements.

[acw]

Hey Til! Sorry about that. The update was due to a security advisory, and it doesn't look like there's a newer version to pin to. I think the best bet might be to have this library set its MSRV, then, unfortunately.

[arckoor]

I'm also encountering this issue. Judging from the advisory though, this is only relevant if you parse with the RFC 2822 format. I'm not intimately familiar with all the edge cases ASN.1 might have, but I at least failed to find any uses of time::format_description::well_known::Rfc2822 in the code, so I'm wondering if the bump was even necessary?