From f3a4b2f5b8abbaa66a6c630d478ee61a2250a469 Mon Sep 17 00:00:00 2001 From: Daniel Parks Date: Sun, 18 Feb 2024 22:48:15 -0800 Subject: [PATCH] Security: update indirect dependency rustix Upgrade indirect dependency [rustix] to fix a [security vulnerability][GHSA-c827-hfw6-qwvm] in directory iterators. This does not affect htmlize, since rustix is only used by development dependencies. [rustix]: https://crates.io/crates/rustix [GHSA-c827-hfw6-qwvm]: https://github.com/advisories/GHSA-c827-hfw6-qwvm --- CHANGELOG.md | 8 ++++++++ Cargo.lock | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9268bfa..6ba6d19 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,7 +7,15 @@ All notable changes to this project will be documented in this file. * Hide usage of [assert2] in doc examples to make them slightly clearer for users not familiar with it. +### Security fixes + +* Upgrade indirect dependency [rustix] to fix a [security + vulnerability][GHSA-c827-hfw6-qwvm] in directory iterators. This does not + affect htmlize, since rustix is only used by development dependencies. + [assert2]: https://crates.io/crates/assert2 +[rustix]: https://crates.io/crates/rustix +[GHSA-c827-hfw6-qwvm]: https://github.com/advisories/GHSA-c827-hfw6-qwvm ## Release 1.0.3 (2023-07-09) diff --git a/Cargo.lock b/Cargo.lock index 9add8f9..651f2bb 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -535,9 +535,9 @@ dependencies = [ [[package]] name = "rustix" -version = "0.37.20" +version = "0.37.27" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b96e891d04aa506a6d1f318d2771bcb1c7dfda84e126660ace067c9b474bb2c0" +checksum = "fea8ca367a3a01fe35e6943c400addf443c0f57670e6ec51196f71a4b8762dd2" dependencies = [ "bitflags", "errno",