Skip to content

fix(deps): remediate medium vulnerabilities (CIP-2743)#375

Merged
tobyhede merged 1 commit intomainfrom
fix/cip-2743-medium-vulns
Feb 17, 2026
Merged

fix(deps): remediate medium vulnerabilities (CIP-2743)#375
tobyhede merged 1 commit intomainfrom
fix/cip-2743-medium-vulns

Conversation

@tobyhede
Copy link
Contributor

Summary

Remediate medium severity vulnerabilities flagged by Vanta:

  • bytes: update to >= 1.11.1
  • time: update to >= 0.3.47

Replaces Dependabot PRs #363 and #368 which have failing CI.

Changes

  • Updated Cargo.lock

Test plan

  • CI passes

Update bytes and time for medium severity vulnerabilities.
@coderabbitai
Copy link

coderabbitai bot commented Feb 17, 2026

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch fix/cip-2743-medium-vulns

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@tobyhede tobyhede merged commit e1ff080 into main Feb 17, 2026
6 checks passed
@tobyhede tobyhede deleted the fix/cip-2743-medium-vulns branch February 17, 2026 04:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments