Bump changelog and MSRV to match dependencies

.github/workflows/main.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        rust: ["1.70.0", "stable", "beta"]
+        rust: ["1.71.0", "stable", "beta"]
         os: [ubuntu-latest]
         cargo_params: ["--features=version-sync", "--features=serde"]
     steps:

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Unreleased
 
+# 0.5.3
+
+* Minimum supported Rust version: 1.71
+* Fix default-src behavior with eval
+
 # 0.5.2
 
 * Minimum supported Rust version: 1.70

Cargo.toml

@@ -9,7 +9,7 @@ readme = "README.md"
 documentation = "https://docs.rs/content-security-policy/"
 repository = "https://github.com/rust-ammonia/rust-content-security-policy"
 edition = "2018"
-rust-version = "1.70"
+rust-version = "1.71"
 exclude = [
   "Cargo.nix",
   "default.nix",

README.md

@@ -1,7 +1,7 @@
 # Parse and validate Web [Content-Security-Policy level 3](https://www.w3.org/TR/CSP/)
 
 [![Crates.IO](https://img.shields.io/crates/v/content-security-policy.svg)](https://crates.rs/crates/content-security-policy)
-![Requires rustc 1.70.0](https://img.shields.io/badge/rustc-1.70.0+-green.svg)
+![Requires rustc 1.71.0](https://img.shields.io/badge/rustc-1.71.0+-green.svg)
 
 This function parses a CSP string into a data structure, and provides a bunch of functions you can call on it (basically all of the "hooks" defined in the CSP standard). It directly uses the `url` crate, but it's intentionally agnostic to your HTML parser and your networking stack, so there are a few things it doesn't do: