Skip to content

Fix RUSTSEC issues#4334

Merged
fafk merged 1 commit intomainfrom
security-bump
Apr 15, 2026
Merged

Fix RUSTSEC issues#4334
fafk merged 1 commit intomainfrom
security-bump

Conversation

@fafk
Copy link
Copy Markdown
Contributor

@fafk fafk commented Apr 15, 2026

Description

Fixed (vulnerabilities):

  • RUSTSEC-2026-0098 & RUSTSEC-2026-0099: rustls-webpki 0.103.10 → 0.103.12 (lockfile update only)

Fixed (unsound warning):

  • RUSTSEC-2026-0097: rand 0.9.2 → 0.9.4 (lockfile update only)
  • RUSTSEC-2026-0097: Workspace rand dependency bumped from 0.8.5 → 0.9.4 in Cargo.toml, with code updates to use the new API (thread_rng() → rng(), gen_range() → random_range())

@fafk fafk marked this pull request as ready for review April 15, 2026 12:19
@fafk fafk requested a review from a team as a code owner April 15, 2026 12:19
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the rand crate to version 0.9.4 and migrates the codebase to the new API, replacing thread_rng() with rng() and gen_range() with random_range(). It also includes dependency updates for syn, socket2, and windows-sys. No critical issues were found, and I have no feedback to provide.

@fafk fafk added this pull request to the merge queue Apr 15, 2026
@AryanGodara AryanGodara self-requested a review April 15, 2026 12:32
Merged via the queue into main with commit 54fd012 Apr 15, 2026
23 checks passed
@fafk fafk deleted the security-bump branch April 15, 2026 12:40
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 15, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants