Commit Cargo.lock and update the crates cargo-deny flagged
The lockfile was gitignored, so CI and every checkout resolved dependencies afresh and a build could change underneath us - and the advisories below were sitting in whatever happened to resolve. Tracked now, as is usual for a binary; the proxy ships as an executable. `cargo update` alone cleared all four findings (no workaround needed): rustls-webpki 0.103.15 -> .16 (RUSTSEC-2026-0382, certificate verification could accept distrusted intermediates), ctutils 0.4.3 -> .7 (RUSTSEC-2026-0385), tokio 1.53.1 -> 1.54.1 (RUSTSEC-2026-0386), and the yanked serialport 4.10.0 -> 4.10.1. cargo deny check: advisories, bans, licenses and sources all ok. Tests pass; clippy unchanged (the two pre-existing large_enum_variant warnings). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
@@ -1,5 +1,4 @@
|
|||||||
/target
|
/target
|
||||||
Cargo.lock
|
|
||||||
*.db
|
*.db
|
||||||
*.db-journal
|
*.db-journal
|
||||||
*.sqlite
|
*.sqlite
|
||||||
|
|||||||
Generated
+2562
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user