From b3115bf89fd8daf5b6173c5f512aa9e019ae8804 Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 27 Oct 2026 04:38:32 +0000 Subject: [PATCH] fix(gsbot): bump three locked deps past blocking RUSTSEC advisories The gsbot job's `cargo deny check advisories` failed on main and on every PR. Lockfile-only, semver-compatible updates: - webpki-roots 1.0.7 -> 1.0.11 (RUSTSEC-2026-0381, needs >= 1.0.10) - rustls-webpki 0.103.15 -> 0.103.16 (RUSTSEC-2026-0382, distrusted intermediates accepted) - tokio 1.52.3 -> 1.54.1 (RUSTSEC-2026-0386, AsyncFd I/O safety; 1.52.x has no fixed release) Reproduced with cargo-deny 0.20.2 (the CI pin): FAILED on main's lock, "advisories ok" after (derivative stays a --warn unmaintained warning, as deny.toml intends). `cargo test --locked --all-targets` passes. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01PpQVLrCbURpoXtrdvy8V3B --- bots/gsbot/Cargo.lock | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/bots/gsbot/Cargo.lock b/bots/gsbot/Cargo.lock index 3df9dcc1..f3215e8f 100644 --- a/bots/gsbot/Cargo.lock +++ b/bots/gsbot/Cargo.lock @@ -1673,9 +1673,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.15" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "ring", "rustls-pki-types", @@ -2389,9 +2389,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20" [[package]] name = "tokio" -version = "1.52.3" +version = "1.54.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe" +checksum = "b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3" dependencies = [ "bytes", "libc", @@ -2916,14 +2916,14 @@ version = "0.26.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9" dependencies = [ - "webpki-roots 1.0.7", + "webpki-roots 1.0.11", ] [[package]] name = "webpki-roots" -version = "1.0.7" +version = "1.0.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "52f5ee44c96cf55f1b349600768e3ece3a8f26010c05265ab73f945bb1a2eb9d" +checksum = "f5f280bbb2b287bc8e7de7e3852945a0ff50d1bbcb5ed42b6c7a568c546df171" dependencies = [ "rustls-pki-types", ]