From ed5235003bef345384b00e2506fcb3d8386192c4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?F=C3=A1bio=20Henrique=20Ara=C3=BAjo?= Date: Thu, 29 Oct 2026 17:14:07 -0300 Subject: [PATCH] fix(deps): bump pulldown-cmark to 0.13.5 for RUSTSEC-2026-0414 pulldown-cmark 0.13.4 can emit an exponential number of events with ENABLE_WIKILINKS, which references.rs enables on note content that may come from paired peers. Only this crate moves in Cargo.lock. Closes #110 --- src-tauri/Cargo.lock | 4 ++-- src-tauri/Cargo.toml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock index 665765c..fe1cfbc 100644 --- a/src-tauri/Cargo.lock +++ b/src-tauri/Cargo.lock @@ -4402,9 +4402,9 @@ dependencies = [ [[package]] name = "pulldown-cmark" -version = "0.13.4" +version = "0.13.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e9f068eba8e7071c5f9511831b44f32c740d5adf574e990f946ddb53db2f314e" +checksum = "278e9268c93b9e498a2da46c34d90ba93a3255eb99009646398f34bc73ab36eb" dependencies = [ "bitflags 2.13.2", "memchr", diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml index 2abe9e8..87a602c 100644 --- a/src-tauri/Cargo.toml +++ b/src-tauri/Cargo.toml @@ -52,7 +52,7 @@ tauri-plugin-process = "2.4.0" # Exact pin: the credential store backends must not change without a deliberate # upgrade and a run of the ignored native_store_round_trip test on every OS. keyring = { version = "=3.6.3", features = ["apple-native", "windows-native", "sync-secret-service"] } -pulldown-cmark = { version = "0.13.4", default-features = false } +pulldown-cmark = { version = "0.13.5", default-features = false } # Read the optimization guideline for more details: https://tauri.app/concept/size/#cargo-configuration [profile.release]