Skip to content

deps: bump dependencies with security advisories - #663

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
deps/advisories
Open

github-actions[bot] wants to merge 1 commit into
mainfrom
deps/advisories

Conversation

@github-actions

@github-actions github-actions Bot commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps vulnerable packages in Cargo.lock to patched releases (cargo update -p NAME@VERSION --precise MIN_PATCHED: the lowest patched release, semver-compatible only).

  • fixed RUSTSEC-2026-0433: pulldown-cmark 0.13.5
  • fixed RUSTSEC-2026-0457: rmcp 3.2.0
  • fixed RUSTSEC-2026-0461: rmcp 3.2.0
  • fixed RUSTSEC-2026-0462: rmcp 3.2.0
  • fixed RUSTSEC-2026-0538: quinn-udp 0.5.14

Run: https://github.com/beyondoss/ai/actions/runs/43579345332

@github-actions
github-actions Bot enabled auto-merge November 3, 2026 09:13
@github-actions
github-actions Bot force-pushed the deps/advisories branch 5 times, most recently from 42ba151 to 8ee8ce4 Compare November 13, 2026 09:13
Generated by the advisories workflow (advisory-bump.py).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants