chore(deps): refresh Rust dependencies - #179
Conversation
|
@github-bot Can you review it why its red? |
|
Heads up: Worth noting the advisory postdates this branch, so the next scheduled refresh will pick it up automatically; and any other PRs will hit the same audit failure on their next run until the lockfile on main is bumped. |
Muawiya-contact
left a comment
There was a problem hiding this comment.
The dependency refresh passes the build and test jobs, but its cargo-audit check still fails on RUSTSEC-2026-0285: rustls 0.23.44, patched in 0.23.45. This dependency was already present on the base branch; it is not a vulnerability introduced by this PR. Please include the patched version (for example, cargo update -p rustls --precise 0.23.45) and rerun the audit and CI before merging.
0d742c9 to
df455a0
Compare
e7f8fa2 to
bfab6dc
Compare
bfab6dc to
a017d72
Compare
Automated dependency refresh.
What ran
cargo audit fix— raises version requirements that an advisory needs (experimental).cargo update— refreshesCargo.lockwithin the existing semver ranges.cargo fmt --check,cargo clippy -D warnings,cargo test— all green before this PR opened.Changes
Advisories after the update
Opened by the Dependency auto-fix workflow. Both blocks are truncated at
the size GitHub will render; run the commands locally for the full output.