fix(deps): update lru to 0.16.3 to address Dependabot alert #1
Addresses CVE regarding IterMut violating Stacked Borrows in lru crate. Changes: - Update lru v0.16.2 -> v0.16.3 (patched version) - Remove vulnerable lru v0.12.5 and v0.13.0 - Update ratatui v0.29 -> v0.30 in marathonctl - Remove unnecessary ratatui/crossterm from app crate - Update pkarr v5.0.0 -> v5.0.2 - Bump libmarathon v0.1.1 -> v0.1.2 - Bump marathonctl dependency on libmarathon to 0.1.2 All lru versions now use the patched 0.16.3 release. Fixes: https://github.com/r3t-studios/marathon/security/dependabot/1 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
1851
Cargo.lock
generated
1851
Cargo.lock
generated
File diff suppressed because it is too large
Load Diff
@@ -38,8 +38,6 @@ futures-lite.workspace = true
|
|||||||
bytes.workspace = true
|
bytes.workspace = true
|
||||||
crossbeam-channel.workspace = true
|
crossbeam-channel.workspace = true
|
||||||
clap.workspace = true
|
clap.workspace = true
|
||||||
ratatui = "0.29"
|
|
||||||
crossterm = "0.28"
|
|
||||||
|
|
||||||
[target.'cfg(target_os = "ios")'.dependencies]
|
[target.'cfg(target_os = "ios")'.dependencies]
|
||||||
objc = "0.2"
|
objc = "0.2"
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
[package]
|
[package]
|
||||||
name = "libmarathon"
|
name = "libmarathon"
|
||||||
version = "0.1.1"
|
version = "0.1.2"
|
||||||
edition.workspace = true
|
edition.workspace = true
|
||||||
description = "A peer-to-peer game engine development kit with CRDT-based state synchronization"
|
description = "A peer-to-peer game engine development kit with CRDT-based state synchronization"
|
||||||
license = "MIT"
|
license = "MIT"
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
[package]
|
[package]
|
||||||
name = "libmarathon-macros"
|
name = "libmarathon-macros"
|
||||||
version = "0.1.1"
|
version = "0.1.2"
|
||||||
edition.workspace = true
|
edition.workspace = true
|
||||||
description = "Procedural macros for the Marathon game engine"
|
description = "Procedural macros for the Marathon game engine"
|
||||||
license = "MIT"
|
license = "MIT"
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
[package]
|
[package]
|
||||||
name = "marathonctl"
|
name = "marathonctl"
|
||||||
version = "0.1.0"
|
version = "0.1.2"
|
||||||
edition.workspace = true
|
edition.workspace = true
|
||||||
description = "Command-line control interface for Marathon multiplayer game engine"
|
description = "Command-line control interface for Marathon multiplayer game engine"
|
||||||
license = "MIT"
|
license = "MIT"
|
||||||
@@ -13,8 +13,8 @@ name = "marathonctl"
|
|||||||
path = "src/main.rs"
|
path = "src/main.rs"
|
||||||
|
|
||||||
[dependencies]
|
[dependencies]
|
||||||
libmarathon = { version = "0.1.1", path = "../libmarathon" }
|
libmarathon = { version = "0.1.2", path = "../libmarathon" }
|
||||||
clap.workspace = true
|
clap.workspace = true
|
||||||
uuid.workspace = true
|
uuid.workspace = true
|
||||||
ratatui = "0.29"
|
ratatui = "0.30"
|
||||||
crossterm = "0.28"
|
crossterm = "0.28"
|
||||||
|
|||||||
Reference in New Issue
Block a user