Skip to content

Update dependencies to fix RUSTSEC advisories - #102

Merged
mheffner merged 1 commit into
rotel-dev:mainfrom
mheffner:security-updates
Oct 30, 2026
Merged

mheffner merged 1 commit into
rotel-dev:mainfrom
mheffner:security-updates

Conversation

@mheffner

Copy link
Copy Markdown
Member

Lockfile-only updates to resolve all cargo audit findings, mirroring the security bumps made in rotel (#365-#370):

  • h2 0.4.12 -> 0.4.16 (RUSTSEC-2026-0258)
  • rustls 0.23.45 -> 0.23.46 (RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349)
  • rustls-webpki 0.103.15 -> 0.103.16 (RUSTSEC-2026-0382)
  • tokio 1.47.1 -> 1.51.6 (RUSTSEC-2026-0386, unsound)
  • anyhow 1.0.97 -> 1.0.104 (RUSTSEC-2026-0190, unsound)
  • spin 0.9.8 -> 0.9.9 (yanked)

Lockfile-only updates to resolve all cargo audit findings, mirroring
the security bumps made in rotel (#365-#370):

- h2 0.4.12 -> 0.4.16 (RUSTSEC-2026-0258)
- rustls 0.23.45 -> 0.23.46 (RUSTSEC-2026-0346, RUSTSEC-2026-0347,
  RUSTSEC-2026-0348, RUSTSEC-2026-0349)
- rustls-webpki 0.103.15 -> 0.103.16 (RUSTSEC-2026-0382)
- tokio 1.47.1 -> 1.51.6 (RUSTSEC-2026-0386, unsound)
- anyhow 1.0.97 -> 1.0.104 (RUSTSEC-2026-0190, unsound)
- spin 0.9.8 -> 0.9.9 (yanked)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@mheffner
mheffner merged commit b4fda09 into rotel-dev:main Oct 30, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant