Skip to content

chore(deps): bump deps#476

Merged
seqre merged 1 commit intomasterfrom
bump-deps-12312
Feb 8, 2026
Merged

chore(deps): bump deps#476
seqre merged 1 commit intomasterfrom
bump-deps-12312

Conversation

@m4tx
Copy link
Member

@m4tx m4tx commented Feb 8, 2026

Fixes #473
Fixes #475

@github-actions github-actions bot added the C-cli Crate: cot-cli (issues and Pull Requests related to Cot CLI) label Feb 8, 2026
@github-actions
Copy link

github-actions bot commented Feb 8, 2026

🐰 Bencher Report

Branchbump-deps-12312
Testbedgithub-ubuntu-latest
Click to view all benchmark results
BenchmarkLatencyBenchmark Result
microseconds (µs)
(Result Δ%)
Upper Boundary
microseconds (µs)
(Limit %)
empty_router/empty_router📈 view plot
🚷 view threshold
5,415.30 µs
(-8.36%)Baseline: 5,909.58 µs
7,074.27 µs
(76.55%)
json_api/json_api📈 view plot
🚷 view threshold
959.35 µs
(-5.44%)Baseline: 1,014.57 µs
1,159.66 µs
(82.73%)
nested_routers/nested_routers📈 view plot
🚷 view threshold
925.49 µs
(-1.12%)Baseline: 935.96 µs
1,062.82 µs
(87.08%)
single_root_route/single_root_route📈 view plot
🚷 view threshold
867.97 µs
(-3.18%)Baseline: 896.49 µs
1,020.68 µs
(85.04%)
single_root_route_burst/single_root_route_burst📈 view plot
🚷 view threshold
15,534.00 µs
(-11.16%)Baseline: 17,486.00 µs
20,792.47 µs
(74.71%)
🐰 View full continuous benchmarking report in Bencher

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates resolved dependency versions (both for the workspace and the cot-cli generated project template) to address the reported RustSec advisories, primarily by bumping bytes and time to patched releases.

Changes:

  • Bump bytes to 1.11.1 (RUSTSEC-2026-0007 fix) and time to 0.3.47 (RUSTSEC-2026-0009 fix) in the workspace lockfile.
  • Refresh additional transitive dependency versions in Cargo.lock.
  • Update cot-cli’s Cargo.lock.template so newly generated projects start from the updated dependency set.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
cot-cli/src/project_template/Cargo.lock.template Updates the project template’s pinned dependency graph, including patched bytes/time.
Cargo.lock Updates the workspace’s resolved dependency graph, including patched bytes/time.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@codecov
Copy link

codecov bot commented Feb 8, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
rust 89.65% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@seqre seqre merged commit 454129d into master Feb 8, 2026
48 checks passed
@seqre seqre deleted the bump-deps-12312 branch February 8, 2026 17:23
@cotbot cotbot bot mentioned this pull request Feb 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

C-cli Crate: cot-cli (issues and Pull Requests related to Cot CLI)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2026-0009: Denial of Service via Stack Exhaustion RUSTSEC-2026-0007: Integer overflow in BytesMut::reserve

2 participants