Skip to content

chore(deps): Bump sha2 from 0.10.9 to 0.11.0#12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/sha2-0.11.0
Open

chore(deps): Bump sha2 from 0.10.9 to 0.11.0#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/sha2-0.11.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Copy link
Copy Markdown

Bumps sha2 from 0.10.9 to 0.11.0.

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/sha2-0.11.0 branch 3 times, most recently from 8ef7ab1 to 9f161b7 Compare May 18, 2026 06:01
Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0.
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

---
updated-dependencies:
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/sha2-0.11.0 branch from 9f161b7 to 6525b9f Compare May 24, 2026 14:16
yinnho pushed a commit that referenced this pull request Jun 17, 2026
…ication

Security:
- #1 Path traversal: validate file_path in upload_media (reject .. and absolute)
- #2 JSON injection: replace hand-rolled format! errors with error_response()
- #12 fetch_bytes: add 10MB size limit to prevent OOM

Correctness:
- #6 Cron tick loop: use FuturesUnordered for concurrent job execution
- #7 Error messages: distinguish panic vs cancelled in cron record_failure
- #8 System AgentId: use uuid::nil() constant instead of random IDs
- #9 cron_create: coerce one_shot ("true"/"1"/"yes"), delivery (string unwrap),
  improve error message for non-string name
- #10 Past-At schedule: add warning when At time is already past
- #11 Remove misleading RUST_MIN_STACK env var (root cause was fixed)

Code quality:
- #3 Remove duplicate json_to_string (use mcp_common import)
- #4 Datacube handler macro: 17 identical functions → 17 one-liners (-300 lines)
- #5 URL encoding: apply url_encode in get_user_info query string

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
yinnho pushed a commit that referenced this pull request Jul 1, 2026
- #7: HKDF-derived session secret from api_key (trust boundary separation)
- #8: sanitize X-Filename header in upload endpoint
- #9: wrap each DB migration in its own transaction
- #11: SenderRouter atomic writes (tmp+rename) + rollback on failure
- #12: only trust x-forwarded-for when trusted_proxy configured
- #13: change_credentials requires valid session cookie
- #14: add Max-Age to session cookie matching TTL
- #15: kv_history cleanup on startup (entries older than 30 days)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants