Skip to content

Update serde_with, tokio and rand to patched releases - #9

Merged
unchidev merged 1 commit into
mainfrom
bump-vulnerable-deps
Oct 13, 2026
Merged

unchidev merged 1 commit into
mainfrom
bump-vulnerable-deps

Conversation

@unchidev

Copy link
Copy Markdown
Member

Updates Cargo.lock only:

Not fixed here: rand 0.7.3 (build-time only, via tauri-utils > kuchikiki > selectors > phf_generator; no patched 0.7 release) and glib 0.15.12 (GHSA-wrw7-89jp-8q8g; the fix is in glib 0.20, which needs gtk 0.20 and therefore Tauri 2, while this app is on Tauri 1).

@unchidev
unchidev merged commit 21af279 into main Oct 13, 2026
2 checks passed
@unchidev
unchidev deleted the bump-vulnerable-deps branch October 13, 2026 18:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant