Skip to content

v0.6.5 - Automated Dependency Security Maintenance

Choose a tag to compare

@slb350 slb350 released this 23 Jul 00:47
· 81 commits to main since this release

Fixed

  • Raised the anyhow minimum to 1.0.103 and refreshed the lockfile to 1.0.104, resolving RUSTSEC-2026-0190.
  • Updated crossbeam-epoch from 0.9.18 to 0.9.20, resolving RUSTSEC-2026-0204.

Changed

  • Refreshed all lockfile dependencies to their latest Rust 1.85-compatible releases.
  • Added grouped weekly Dependabot updates for Cargo and GitHub Actions.
  • Added weekly proactive Codex security remediation before the scheduled GitHub audit backstop.

Verification

  • cargo audit --deny warnings
  • cargo fmt, clippy, full test suite, docs, and Rust 1.85 MSRV checks
  • crates.io package verification and publication