Skip to content

Bump package versions to resolve cargo audit warnings - #41

Merged
mrhheffernan merged 1 commit into
mainfrom
matt/cargo-audit-package-bump
Aug 28, 2026
Merged

mrhheffernan merged 1 commit into
mainfrom
matt/cargo-audit-package-bump

Conversation

@mrhheffernan

Copy link
Copy Markdown
Owner

Description:
cargo audit was returning warnings:

Crate:     crossbeam-epoch
Version:   0.9.18
Title:     Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Date:      2026-07-06
ID:        RUSTSEC-2026-0204
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0204
Solution:  Upgrade to >=0.9.20
Dependency tree:
crossbeam-epoch 0.9.18
└── crossbeam-deque 0.8.6
    └── rayon-core 1.13.0
        └── rayon 1.11.0
            └── maxpro 0.1.2

Crate:     rand
Version:   0.9.2
Warning:   unsound
Title:     Rand is unsound with a custom logger using `rand::rng()`
Date:      2026-04-09
ID:        RUSTSEC-2026-0097
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0097
Dependency tree:
rand 0.9.2
└── maxpro 0.1.2

Bumping package versions resolves them.

Testing:
Test suite runs, some nominal runs also work as expected

Impacts:

  • Rust
  • Python

@mrhheffernan
mrhheffernan marked this pull request as ready for review August 28, 2026 05:43
@mrhheffernan
mrhheffernan merged commit 8cf757f into main Aug 28, 2026
17 checks passed
@mrhheffernan
mrhheffernan deleted the matt/cargo-audit-package-bump branch August 28, 2026 05:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant