Repository: statrs-dev/statrs (language: rust)

Issue:
Update to nalgebra 0.27.1 to avoid RUSTSEC-2021-0070 
statrs's latest version is 0.14.0. (Even though the [website](https://github.com/statrs-dev/statrs) says it is 0.13.0, in the README.md and the link to the docs in the "About" section at the top right.)

statrs 0.14.0 depends on nalgebra 0.26. nalgebra has a [RUSTSEC-2021-0070 advisory](https://rustsec.org/advisories/RUSTSEC-2021-0070.html) against it. Among other things, this causes `cargo deny` to fail.

Version 0.27.1 of nalgebra fixes the advisory.

It would be very helpful if statrs could have its dependency on nalgebra updated to 0.27.1, and then a new version of statrs (0.14.1 or 0.15.0) be released. Thank you.


Discussion / hints:

Fix patch:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8d1293e7..3bf221dc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,6 @@
+v0.15.0
+- upgrade `nalgebra` to `0.27.1` to avoid RUSTSEC-2021-0070
+
 v0.14.0
 - upgrade `rand` dependency to `0.8`
 - fix inaccurate sampling of `Gamma`
diff --git a/Cargo.toml b/Cargo.toml
index 83699ea7..8a2950a4 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -21,8 +21,8 @@ nightly = []
 
 [dependencies]
 rand = "0.8"
-nalgebra = { version = "0.26", features = ["rand"] }
-approx = "0.4.0"
+nalgebra = { version = "0.27.1", features = ["rand"] }
+approx = "0.5.0"
 num-traits = "0.2.14"
 lazy_static = "1.4.0"
 


Test patch: