From 8dc8a572faa044b507e31dfd2ead3d1f7e3abf91 Mon Sep 17 00:00:00 2001 From: Nic-dorman Date: Thu, 20 Aug 2026 13:15:56 +0100 Subject: [PATCH] chore(deps): bump h2 0.4.14 -> 0.4.17 (RUSTSEC-2026-0258, V2-1041) Lock-only, hand-edited to the version+checksum pair so the advisory bump does not carry the windows-sys 0.52/0.60/0.61 reshuffle that a plain 'cargo update -p h2' drags along (same approach as ant-node#209 / V2-1023). The 0.4.14 and 0.4.17 lock entries have byte-identical dependency lists; 'cargo metadata --locked' accepts the result and 'cargo update -p h2 --dry-run' finds nothing to change. Co-Authored-By: Claude Fable 5 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 390719e..1509eeb 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1091,9 +1091,9 @@ dependencies = [ [[package]] name = "h2" -version = "0.4.14" +version = "0.4.17" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "171fefbc92fe4a4de27e0698d6a5b392d6a0e333506bc49133760b3bcf948733" +checksum = "9f877e75f39e9827ec50a572dd592684ac28c029578726c85f1b2aa6ab807449" dependencies = [ "atomic-waker", "bytes",