Skip to content

Update rust dependencies#26

Merged
liljamo merged 2 commits intomainfrom
update-deps
Mar 3, 2026
Merged

Update rust dependencies#26
liljamo merged 2 commits intomainfrom
update-deps

Conversation

@jtt
Copy link
Copy Markdown
Collaborator

@jtt jtt commented Mar 3, 2026

Updates dependencies to latest versions and fixes CVE in bytes crate.

OSV URL CVSS Ecosystem Package Version Fixed Version Source
https://osv.dev/RUSTSEC-2026-0007
https://osv.dev/GHSA-434x-w66g-qw3r
5.5 crates.io bytes 1.10.1 1.11.1 Cargo.lock

jtt added 2 commits March 3, 2026 09:59
     Locking 72 packages to latest Rust 1.93.0 compatible versions
    Updating aho-corasick v1.1.3 -> v1.1.4
    Updating anstyle-query v1.1.4 -> v1.1.5
    Updating anstyle-wincon v3.0.10 -> v3.0.11
      Adding anyhow v1.0.102
    Updating bitflags v2.10.0 -> v2.11.0
    Updating bytes v1.10.1 -> v1.11.1
      Adding chacha20 v0.10.0
    Updating cidr v0.3.1 -> v0.3.2
    Updating clap v4.5.50 -> v4.5.60
    Updating clap_builder v4.5.50 -> v4.5.60
    Updating clap_lex v0.7.6 -> v1.0.0
      Adding cpufeatures v0.3.0
      Adding equivalent v1.0.2
      Adding errno v0.3.14
      Adding foldhash v0.1.5
    Updating futures v0.3.31 -> v0.3.32
    Updating futures-channel v0.3.31 -> v0.3.32
    Updating futures-core v0.3.31 -> v0.3.32
    Updating futures-executor v0.3.31 -> v0.3.32
    Updating futures-io v0.3.31 -> v0.3.32
    Updating futures-macro v0.3.31 -> v0.3.32
    Updating futures-sink v0.3.31 -> v0.3.32
    Updating futures-task v0.3.31 -> v0.3.32
    Updating futures-util v0.3.31 -> v0.3.32
    Updating getrandom v0.3.4 -> v0.4.1
      Adding hashbrown v0.15.5
      Adding hashbrown v0.16.1
      Adding heck v0.5.0
      Adding id-arena v2.3.0
      Adding indexmap v2.13.0
    Updating itoa v1.0.15 -> v1.0.17
      Adding leb128fmt v0.1.0
    Updating libc v0.2.177 -> v0.2.182
    Updating log v0.4.28 -> v0.4.29
    Updating memchr v2.7.6 -> v2.8.0
    Updating mio v1.1.0 -> v1.1.1
    Updating pin-project-lite v0.2.16 -> v0.2.17
    Removing pin-utils v0.1.0
    Removing ppv-lite86 v0.2.21
      Adding prettyplease v0.2.37
    Updating proc-macro2 v1.0.103 -> v1.0.106
    Updating quote v1.0.41 -> v1.0.44
    Updating rand v0.9.2 -> v0.10.0
    Removing rand_chacha v0.9.0
    Updating rand_core v0.9.3 -> v0.10.0
    Updating regex-automata v0.4.13 -> v0.4.14
    Updating regex-syntax v0.8.8 -> v0.8.10
    Removing ryu v1.0.20
      Adding semver v1.0.27
    Updating serde_json v1.0.145 -> v1.0.149
    Updating signal-hook v0.3.18 -> v0.4.3
    Updating signal-hook-registry v1.4.6 -> v1.4.8
    Updating signal-hook-tokio v0.3.1 -> v0.4.0
    Updating slab v0.4.11 -> v0.4.12
    Updating socket2 v0.6.1 -> v0.6.2
    Updating syn v2.0.108 -> v2.0.117
    Updating tokio v1.48.0 -> v1.49.0
    Updating tokio-macros v2.6.0 -> v2.6.1
    Updating tracing v0.1.41 -> v0.1.44
    Updating tracing-attributes v0.1.30 -> v0.1.31
    Updating tracing-core v0.1.34 -> v0.1.36
    Updating tracing-subscriber v0.3.20 -> v0.3.22
    Updating unicode-ident v1.0.20 -> v1.0.24
      Adding unicode-xid v0.2.6
    Updating wasip2 v1.0.1+wasi-0.2.4 -> v1.0.2+wasi-0.2.9
      Adding wasip3 v0.4.0+wasi-0.3.0-rc-2026-01-06
      Adding wasm-encoder v0.244.0
      Adding wasm-metadata v0.244.0
      Adding wasmparser v0.244.0
    Updating wit-bindgen v0.46.0 -> v0.51.0
      Adding wit-bindgen-core v0.51.0
      Adding wit-bindgen-rust v0.51.0
      Adding wit-bindgen-rust-macro v0.51.0
      Adding wit-component v0.244.0
      Adding wit-parser v0.244.0
    Removing zerocopy v0.8.27
    Removing zerocopy-derive v0.8.27
      Adding zmij v1.0.21
@jtt jtt requested a review from liljamo March 3, 2026 08:13
@liljamo liljamo merged commit 251fd01 into main Mar 3, 2026
1 check passed
@liljamo liljamo deleted the update-deps branch March 3, 2026 08:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants