fix(deps): update lru to 0.16.3 to address Dependabot alert #1

Addresses CVE regarding IterMut violating Stacked Borrows in lru crate.

Changes:
- Update lru v0.16.2 -> v0.16.3 (patched version)
- Remove vulnerable lru v0.12.5 and v0.13.0
- Update ratatui v0.29 -> v0.30 in marathonctl
- Remove unnecessary ratatui/crossterm from app crate
- Update pkarr v5.0.0 -> v5.0.2
- Bump libmarathon v0.1.1 -> v0.1.2
- Bump marathonctl dependency on libmarathon to 0.1.2

All lru versions now use the patched 0.16.3 release.

Fixes: https://github.com/r3t-studios/marathon/security/dependabot/1

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
2026-02-07 13:15:22 +00:00
parent 841d758316
commit 7c64de9795
5 changed files with 1156 additions and 707 deletions

1851
Cargo.lock generated

File diff suppressed because it is too large Load Diff

View File

@@ -38,8 +38,6 @@ futures-lite.workspace = true
bytes.workspace = true bytes.workspace = true
crossbeam-channel.workspace = true crossbeam-channel.workspace = true
clap.workspace = true clap.workspace = true
ratatui = "0.29"
crossterm = "0.28"
[target.'cfg(target_os = "ios")'.dependencies] [target.'cfg(target_os = "ios")'.dependencies]
objc = "0.2" objc = "0.2"

View File

@@ -1,6 +1,6 @@
[package] [package]
name = "libmarathon" name = "libmarathon"
version = "0.1.1" version = "0.1.2"
edition.workspace = true edition.workspace = true
description = "A peer-to-peer game engine development kit with CRDT-based state synchronization" description = "A peer-to-peer game engine development kit with CRDT-based state synchronization"
license = "MIT" license = "MIT"

View File

@@ -1,6 +1,6 @@
[package] [package]
name = "libmarathon-macros" name = "libmarathon-macros"
version = "0.1.1" version = "0.1.2"
edition.workspace = true edition.workspace = true
description = "Procedural macros for the Marathon game engine" description = "Procedural macros for the Marathon game engine"
license = "MIT" license = "MIT"

View File

@@ -1,6 +1,6 @@
[package] [package]
name = "marathonctl" name = "marathonctl"
version = "0.1.0" version = "0.1.2"
edition.workspace = true edition.workspace = true
description = "Command-line control interface for Marathon multiplayer game engine" description = "Command-line control interface for Marathon multiplayer game engine"
license = "MIT" license = "MIT"
@@ -13,8 +13,8 @@ name = "marathonctl"
path = "src/main.rs" path = "src/main.rs"
[dependencies] [dependencies]
libmarathon = { version = "0.1.1", path = "../libmarathon" } libmarathon = { version = "0.1.2", path = "../libmarathon" }
clap.workspace = true clap.workspace = true
uuid.workspace = true uuid.workspace = true
ratatui = "0.29" ratatui = "0.30"
crossterm = "0.28" crossterm = "0.28"