Skip to content

cargo audit issues, warnings and stale dependencies #2597

@Sachin-Bhat

Description

@Sachin-Bhat

Ran cargo audit and got the following:

Vulnerabilities (3)

  • rustls-webpki 0.102.8 — RUSTSEC-2026-0099, RUSTSEC-2026-0098, RUSTSEC-2026-0049
    • Fix: upgrade to >=0.103.12

Unmaintained crates (4)

  • rustls-pemfile 2.2.0 — RUSTSEC-2025-0134 (migrate to rustls-pki-types PEM API)
  • backoff 0.4.0 — RUSTSEC-2025-0012 (migrate to backon)
  • paste 1.0.15 — RUSTSEC-2024-0436 (migrate to pastey)
  • instant 0.1.13 — RUSTSEC-2024-0384 (transitive via backoff, resolve by migrating it)

Other

  • Build failures in grpc-protobuf-build due to abseil LTS namespace mismatch and stale dependency versions
  • Various clippy and API compatibility fixes needed after version bumps

I shall create a PR that fixes all of this.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions