Skip to content

v0.6.1 - Security & CI Fixes

Choose a tag to compare

@slb350 slb350 released this 30 Mar 06:19
· 221 commits to main since this release

Fixed

  • Security: Resolved 2 dependency vulnerabilities via cargo update:
    • bytes 1.10.1 → 1.11.1 (RUSTSEC-2026-0007: integer overflow in BytesMut::reserve)
    • rustls-webpki 0.103.8 → 0.103.10 (RUSTSEC-2026-0049: faulty CRL matching logic)
  • CI: Fixed daily Security Audit workflow failure — create-issues parameter renamed to createIssues per actions-rust-lang/audit@v1 input schema

Changed

  • Dependencies: Updated all transitive dependencies to latest compatible versions
  • Dependencies: Tightened direct dependency version floors (tokio 1.50, reqwest 0.12.28, futures 0.3.32, log 0.4.29)
  • CI: Updated actions/checkout v4 → v6 (Node.js 20 deprecation)
  • CI: Updated codecov/codecov-action v4 → v6

Install

cargo add open-agent-sdk@0.6.1

crates.io: https://crates.io/crates/open-agent-sdk/0.6.1