Skip to content

chore: address paste advisory (RUSTSEC-2024-0436)#31

Merged
rubenhensen merged 1 commit into
mainfrom
chore/paste-advisory
May 17, 2026
Merged

chore: address paste advisory (RUSTSEC-2024-0436)#31
rubenhensen merged 1 commit into
mainfrom
chore/paste-advisory

Conversation

@dobby-coder
Copy link
Copy Markdown
Contributor

@dobby-coder dobby-coder Bot commented May 16, 2026

Closes #30.

Swap unmaintained paste dev-dep for its drop-in successor pastey (addresses RUSTSEC-2024-0436). Used only by benches/main.rs. Tests pass, fmt clean.

Reviewer quickstart

git fetch origin && git checkout chore/paste-advisory && cargo test --all-features

Addresses RUSTSEC-2024-0436. paste 1.0.x is unmaintained; pastey 0.2 is
its drop-in maintained successor. Used only by benches/main.rs.

Closes #30
@dobby-coder dobby-coder Bot requested a review from rubenhensen May 16, 2026 22:21
@dobby-coder dobby-coder Bot marked this pull request as ready for review May 16, 2026 22:23
@dobby-coder dobby-coder Bot mentioned this pull request May 16, 2026
@dobby-coder
Copy link
Copy Markdown
Contributor Author

dobby-coder Bot commented May 16, 2026

Rule-compliance pass: trimmed the PR body to comply with no-justification-paragraphs-for-simple-changes — the original Summary / Changes / Verification sections narrated a 2-line dev-dep swap. Kept the closing keyword, a one-line summary, and the reviewer quickstart one-liner. No code changes.

Copy link
Copy Markdown
Contributor Author

@dobby-coder dobby-coder Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM (cannot self-approve since the bot opened this PR).

Clean dev-dep swap: pastepastey (drop-in fork). Only call site is the paste! macro in benches/main.rs:2, which pastey re-exports with identical syntax. Verified benches compile (cargo bench --no-run --all-features) and all CI is green (tests on linux/mac/windows, clippy, no-std wasm32). Addresses RUSTSEC-2024-0436 with zero production-code impact.

Ready for human approval and merge.

@rubenhensen rubenhensen merged commit 7b5bc59 into main May 17, 2026
7 checks passed
@rubenhensen rubenhensen deleted the chore/paste-advisory branch May 17, 2026 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore: update dependencies

1 participant