From bb64b18c2febb9cbf1881d817994b35215cc7b54 Mon Sep 17 00:00:00 2001 From: Jan Klass Date: Sat, 18 Apr 2026 14:57:29 +0200 Subject: [PATCH] fix: Update 'bytes' dependency for vulnerability fix MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 1.11.0 -> 1.11.1 * https://github.com/tokio-rs/bytes/releases/tag/v1.11.1 * https://github.com/advisories/GHSA-434x-w66g-qw3r `cargo audit` output: ``` cargo audit Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1049 security advisories (from C:\cache\cargo\advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (65 crate dependencies) Crate: bytes Version: 1.11.0 Title: Integer overflow in `BytesMut::reserve` Date: 2026-02-03 ID: RUSTSEC-2026-0007 URL: https://github.com/advisories/GHSA-434x-w66g-qw3r Solution: Upgrade to >=1.11.1 Dependency tree: bytes 1.11.0 └── tokio 1.48.0 └── interprocess 2.4.0 ``` --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 9f69f209..8632e991 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -34,9 +34,9 @@ dependencies = [ [[package]] name = "bytes" -version = "1.11.0" +version = "1.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3" +checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33" [[package]] name = "cc"