From 701e60bf3a888e33480efc655dce2189f2fb9ff3 Mon Sep 17 00:00:00 2001 From: StreamKit Devin Date: Wed, 22 Apr 2026 11:53:38 +0000 Subject: [PATCH] fix: update Cargo.lock to resolve cargo-deny advisories - Update rustls-webpki 0.103.12 -> 0.103.13 (RUSTSEC-2026-0104 vulnerability fix) - Downgrade gimli 0.33.1 -> 0.33.0 (yanked crate) - Update bitstream-io 4.9.0 -> 4.10.0 (removes yanked core2 0.4.0 dep) Co-Authored-By: Claudio Costa --- Cargo.lock | 48 ++++++++++++++++++++++++------------------------ 1 file changed, 24 insertions(+), 24 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 1dbe26b8..9ce0b6db 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -17,7 +17,7 @@ version = "0.26.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "59317f77929f0e679d39364702289274de2f0f0b22cbf50b2b8cff2169a0b27a" dependencies = [ - "gimli 0.33.1", + "gimli 0.33.0", ] [[package]] @@ -657,11 +657,11 @@ checksum = "6099cdc01846bc367c4e7dd630dc5966dccf36b652fae7a74e17b640411a91b2" [[package]] name = "bitstream-io" -version = "4.9.0" +version = "4.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "60d4bd9d1db2c6bdf285e223a7fa369d5ce98ec767dec949c6ca62863ce61757" +checksum = "7eff00be299a18769011411c9def0d827e8f2d7bf0c3dbf53633147a8867fd1f" dependencies = [ - "core2", + "no_std_io2", ] [[package]] @@ -1173,15 +1173,6 @@ version = "0.8.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b" -[[package]] -name = "core2" -version = "0.4.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b49ba7ef1ad6107f8824dbe97de947cbaac53c44e7f9756a1fba0d37c1eec505" -dependencies = [ - "memchr", -] - [[package]] name = "cpp_demangle" version = "0.4.5" @@ -1272,7 +1263,7 @@ dependencies = [ "cranelift-control", "cranelift-entity", "cranelift-isle", - "gimli 0.33.1", + "gimli 0.33.0", "hashbrown 0.16.1", "libm", "log", @@ -2266,9 +2257,9 @@ checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7" [[package]] name = "gimli" -version = "0.33.1" +version = "0.33.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "19e16c5073773ccf057c282be832a59ee53ef5ff98db3aeff7f8314f52ffc196" +checksum = "0bf7f043f89559805f8c7cacc432749b2fa0d0a0a9ee46ce47164ed5ba7f126c" dependencies = [ "fnv", "hashbrown 0.16.1", @@ -3689,6 +3680,15 @@ dependencies = [ "libc", ] +[[package]] +name = "no_std_io2" +version = "0.9.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b51ed7824b6e07d354605f4abb3d9d300350701299da96642ee084f5ce631550" +dependencies = [ + "memchr", +] + [[package]] name = "nohash-hasher" version = "0.2.0" @@ -4879,7 +4879,7 @@ dependencies = [ "arrayvec", "av-scenechange", "av1-grain", - "bitstream-io 4.9.0", + "bitstream-io 4.10.0", "built", "cc", "cfg-if", @@ -5517,9 +5517,9 @@ checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f" [[package]] name = "rustls-webpki" -version = "0.103.12" +version = "0.103.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8279bb85272c9f10811ae6a6c547ff594d6a7f3c6c6b02ee9726d1d0dcfcdd06" +checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e" dependencies = [ "aws-lc-rs", "ring", @@ -7801,7 +7801,7 @@ dependencies = [ "encoding_rs", "futures", "fxprof-processed-profile", - "gimli 0.33.1", + "gimli 0.33.0", "ittapi", "libc", "log", @@ -7850,7 +7850,7 @@ dependencies = [ "cranelift-bforest", "cranelift-bitset", "cranelift-entity", - "gimli 0.33.1", + "gimli 0.33.0", "hashbrown 0.16.1", "indexmap 2.14.0", "log", @@ -7935,7 +7935,7 @@ dependencies = [ "cranelift-entity", "cranelift-frontend", "cranelift-native", - "gimli 0.33.1", + "gimli 0.33.0", "itertools 0.14.0", "log", "object 0.38.1", @@ -8020,7 +8020,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8007342bd12ff400293a817973f7ecd6f1d9a8549a53369a9c1af357166f1f1e" dependencies = [ "cranelift-codegen", - "gimli 0.33.1", + "gimli 0.33.0", "log", "object 0.38.1", "target-lexicon", @@ -8498,7 +8498,7 @@ checksum = "eb9f45f7172a2628c8317766e427babc0a400f9d10b1c0f0b0617c5ed5b79de6" dependencies = [ "cranelift-assembler-x64", "cranelift-codegen", - "gimli 0.33.1", + "gimli 0.33.0", "regalloc2", "smallvec", "target-lexicon",