Sienna Meridian Satterwhite
7c64de9795
Addresses CVE regarding IterMut violating Stacked Borrows in lru crate. Changes: - Update lru v0.16.2 -> v0.16.3 (patched version) - Remove vulnerable lru v0.12.5 and v0.13.0 - Update ratatui v0.29 -> v0.30 in marathonctl - Remove unnecessary ratatui/crossterm from app crate - Update pkarr v5.0.0 -> v5.0.2 - Bump libmarathon v0.1.1 -> v0.1.2 - Bump marathonctl dependency on libmarathon to 0.1.2 All lru versions now use the patched 0.16.3 release. Fixes: https://github.com/r3t-studios/marathon/security/dependabot/1 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
58 lines
1.4 KiB
TOML
58 lines
1.4 KiB
TOML
[package]
|
|
name = "app"
|
|
version = "0.1.0"
|
|
edition.workspace = true
|
|
|
|
[features]
|
|
default = ["desktop"]
|
|
desktop = [] # macOS only
|
|
ios = []
|
|
headless = []
|
|
|
|
[dependencies]
|
|
libmarathon = { path = "../libmarathon" }
|
|
libmarathon-macros = { path = "../macros" }
|
|
inventory.workspace = true
|
|
rkyv.workspace = true
|
|
bevy = { version = "0.17.2", default-features = false, features = [
|
|
# bevy_render, bevy_core_pipeline, bevy_pbr are now vendored in libmarathon
|
|
"bevy_ui",
|
|
"bevy_text",
|
|
"png",
|
|
] }
|
|
egui.workspace = true
|
|
glam.workspace = true
|
|
winit.workspace = true
|
|
raw-window-handle = "0.6"
|
|
uuid.workspace = true
|
|
anyhow.workspace = true
|
|
tokio.workspace = true
|
|
tracing.workspace = true
|
|
tracing-subscriber.workspace = true
|
|
tracing-appender.workspace = true
|
|
serde.workspace = true
|
|
rand.workspace = true
|
|
iroh = { workspace = true, features = ["discovery-local-network"] }
|
|
iroh-gossip.workspace = true
|
|
futures-lite.workspace = true
|
|
bytes.workspace = true
|
|
crossbeam-channel.workspace = true
|
|
clap.workspace = true
|
|
|
|
[target.'cfg(target_os = "ios")'.dependencies]
|
|
objc = "0.2"
|
|
raw-window-handle = "0.6"
|
|
tracing-oslog.workspace = true
|
|
|
|
[dev-dependencies]
|
|
iroh = { workspace = true, features = ["discovery-local-network"] }
|
|
iroh-gossip.workspace = true
|
|
tempfile.workspace = true
|
|
futures-lite.workspace = true
|
|
rkyv.workspace = true
|
|
bytes.workspace = true
|
|
|
|
[lib]
|
|
name = "app"
|
|
crate-type = ["staticlib", "cdylib", "lib"]
|