Commit Cargo.lock and update the crates cargo-deny flagged
The lockfile was gitignored, so CI and every checkout resolved dependencies afresh and a build could change underneath us - and the advisories below were sitting in whatever happened to resolve. Tracked now, as is usual for a binary; the proxy ships as an executable. `cargo update` alone cleared all four findings (no workaround needed): rustls-webpki 0.103.15 -> .16 (RUSTSEC-2026-0382, certificate verification could accept distrusted intermediates), ctutils 0.4.3 -> .7 (RUSTSEC-2026-0385), tokio 1.53.1 -> 1.54.1 (RUSTSEC-2026-0386), and the yanked serialport 4.10.0 -> 4.10.1. cargo deny check: advisories, bans, licenses and sources all ok. Tests pass; clippy unchanged (the two pre-existing large_enum_variant warnings). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
@@ -1,5 +1,4 @@
|
||||
/target
|
||||
Cargo.lock
|
||||
*.db
|
||||
*.db-journal
|
||||
*.sqlite
|
||||
|
||||
Reference in New Issue
Block a user