Skip to content

fix(ci): clear RustSec advisories (rustls, quinn-proto, serde_yaml) - #6

Merged
jjohare merged 1 commit into
mainfrom
fix/ci-advisories-2026-10-17
Oct 17, 2026
Merged

jjohare merged 1 commit into
mainfrom
fix/ci-advisories-2026-10-17

Conversation

@jjohare

@jjohare jjohare commented Oct 17, 2026

Copy link
Copy Markdown
Member

Bumps quinn-proto and rustls past their advisories; swaps unmaintained serde_yaml for serde_norway (drop-in, one use site). No advisory ignored.

🤖 Generated by Claude Code

… serde_yaml

Bump quinn-proto 0.11.19 and rustls 0.23.46+ via cargo update. Replace the
unmaintained serde_yaml (unsafe-libyaml, RUSTSEC-2024-0449/0320) with the
API-compatible serde_norway, which uses unsafe-libyaml-norway. No ignores added.

Co-Authored-By: jjohare <github@thedreamlab.uk>
@jjohare
jjohare merged commit 08fa77c into main Oct 17, 2026
20 checks passed
@jjohare
jjohare deleted the fix/ci-advisories-2026-10-17 branch October 17, 2026 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant