[yordis]

• Keep release and fuzz dependencies clear of known advisories without widening unrelated upgrades.

[cursor]

PR Summary

Low Risk
Changes are patch-level lockfile bumps for advisory remediation with no application logic modifications.

Overview
Bumps fuzz and release lockfiles so known security advisories are cleared without broad dependency churn.

Rust (Cargo.lock in fuzz crates): patches transitive smallvec (1.16.2 → 1.16.3) and tokio (1.53.2 → 1.53.3), and records serde and url as direct dependencies of trogon-atlas-core in the lock graph.

Node (pnpm-lock.yaml): upgrades body-parser (2.3.0 → 2.4.0) and its qs dependency (6.16.0 → 6.16.1), which flows through express.

^{Reviewed by Cursor Bugbot for commit 263ba06. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 3

• rsworkspace/crates/trogon-atlas-server/fuzz/Cargo.lock is excluded by !**/*.lock
• rsworkspace/crates/trogon-atlas-store/fuzz/Cargo.lock is excluded by !**/*.lock
• tsworkspace/pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 80ae86aa-4168-4a57-a6bd-11f89d2451a3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}