1b-agent/solidcraft-upstream
1
0 Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

deps: zip 3.0.0 → 9.0.4 (RUSTSEC-2026-0367, -0368, -0369) (#1971)

Browse Source 
Thanks @jyviko.
This commit is contained in:
Irakli Kourtis authored and GitHub committed 2026-10-17 08:49:02 -04:00
1 parent 30ca43de7d
commit c4d2ae87ee
6 files changed
+78 -136
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

deny.toml
+8
View File
@@ -3,6 +3,14 @@
# The nightly command downgrades only this diagnostic with --warn unmaintained.
unmaintained = "all"
yanked = "warn"
# zip 8.6 comes only through cadmpeg-codec-freecad 0.6.1 (`zip = "^8"`); all three advisories
# are in ZipArchive::extract / ZipStreamReader::extract, which neither it nor solidcraft-io
# calls. Remove these when cadmpeg moves to zip 9.
ignore = [
{ id = "RUSTSEC-2026-0367", reason = "zip 8 via cadmpeg-codec-freecad; extract() is never called" },
{ id = "RUSTSEC-2026-0368", reason = "zip 8 via cadmpeg-codec-freecad; extract() is never called" },
{ id = "RUSTSEC-2026-0369", reason = "zip 8 via cadmpeg-codec-freecad; extract() is never called" },
]
[bans]
multiple-versions = "warn"