Skip to content

chore(deps): update locked dependencies for security advisories - #70

Merged
noahjoeris merged 1 commit into
bitcoindevkit:masterfrom
noahjoeris:chore/security-dependency-updates
Nov 2, 2026
Merged

noahjoeris merged 1 commit into
bitcoindevkit:masterfrom
noahjoeris:chore/security-dependency-updates

Conversation

@noahjoeris

Copy link
Copy Markdown
Contributor

Description

Updates Cargo.lock to patched versions within existing Cargo.toml ranges.

Closes #38, closes #45, closes #46, closes #53, closes #54, closes #55, closes #57.

Notes to the reviewers

Generated with:

cargo update bytes tar anyhow event-listener@5.4.0 rand@0.8.5
cargo update tokio --precise 1.53.3

Update bytes, tar, anyhow, event-listener 5, rand 0.8 and tokio to
patched versions within existing ranges, resolving RUSTSEC-2026-0007,
RUSTSEC-2026-0067, RUSTSEC-2026-0068, RUSTSEC-2026-0190,
RUSTSEC-2026-0221, RUSTSEC-2026-0097 and RUSTSEC-2026-0386.

Pin tokio to 1.53.3, the newest patched release compatible with the
1.75 MSRV; 1.54 requires Rust 1.85.
@codecov

codecov Bot commented Oct 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 48.33%. Comparing base (09407ef) to head (5497fbc).

Additional details and impacted files
@@           Coverage Diff           @@
##           master      #70   +/-   ##
=======================================
  Coverage   48.33%   48.33%           
=======================================
  Files          11       11           
  Lines         902      902           
  Branches       18       18           
=======================================
  Hits          436      436           
  Misses        461      461           
  Partials        5        5           
Flag Coverage Δ
rust 48.33% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@noahjoeris noahjoeris added this to the 0.5.0 milestone Oct 28, 2026
@noahjoeris noahjoeris added the chore Non-coding related work label Oct 28, 2026

@oleonardolima oleonardolima left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

utACK 5497fbc

@noahjoeris
noahjoeris merged commit e3271f6 into bitcoindevkit:master Nov 2, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment