From 35a28204b8b3f661566441f31dd7669950200079 Mon Sep 17 00:00:00 2001 From: Toby Hede Date: Tue, 17 Feb 2026 14:20:10 +1100 Subject: [PATCH 1/2] fix(deps): remediate medium vulnerabilities Update bytes and time for medium severity vulnerabilities. --- Cargo.lock | 44 +++++++++++++++++++++++++++----------------- 1 file changed, 27 insertions(+), 17 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 67ad0d30..7c5046a4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -834,9 +834,9 @@ checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b" [[package]] name = "bytes" -version = "1.8.0" +version = "1.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9ac0150caa2ae65ca5bd83f25c7de183dea78d4d366469f148435e2acfbad0da" +checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33" [[package]] name = "bytes-utils" @@ -1225,9 +1225,9 @@ dependencies = [ [[package]] name = "deranged" -version = "0.3.11" +version = "0.5.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b42b6fa04a440b495c8b04d0e71b707c585f83cb9cb28cf8cd0d976c315e31b4" +checksum = "cc3dc5ad92c2e2d1c193bbbbdf2ea477cb81331de4f3103f267ca18368b988c4" dependencies = [ "powerfmt", ] @@ -2297,9 +2297,9 @@ dependencies = [ [[package]] name = "num-conv" -version = "0.1.0" +version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "51d515d32fb182ee37cda2ccdcb92950d6a3c2893aa280e540671c2cd0f3b1d9" +checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050" [[package]] name = "num-integer" @@ -3283,10 +3283,11 @@ checksum = "61697e0a1c7e512e84a621326239844a24d8207b4669b41bc18b32ea5cbf988b" [[package]] name = "serde" -version = "1.0.214" +version = "1.0.228" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f55c3193aca71c12ad7890f1785d2b73e1b9f63a0bbc353c08ef26fe03fc56b5" +checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e" dependencies = [ + "serde_core", "serde_derive", ] @@ -3309,11 +3310,20 @@ dependencies = [ "serde", ] +[[package]] +name = "serde_core" +version = "1.0.228" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad" +dependencies = [ + "serde_derive", +] + [[package]] name = "serde_derive" -version = "1.0.214" +version = "1.0.228" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "de523f781f095e28fa605cdce0f8307e451cc0fd14e2eb4cd2e98a355b147766" +checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79" dependencies = [ "proc-macro2", "quote", @@ -3701,29 +3711,29 @@ dependencies = [ [[package]] name = "time" -version = "0.3.36" +version = "0.3.47" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5dfd88e563464686c916c7e46e623e520ddc6d79fa6641390f2e3fa86e83e885" +checksum = "743bd48c283afc0388f9b8827b976905fb217ad9e647fae3a379a9283c4def2c" dependencies = [ "deranged", "num-conv", "powerfmt", - "serde", + "serde_core", "time-core", "time-macros", ] [[package]] name = "time-core" -version = "0.1.2" +version = "0.1.8" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ef927ca75afb808a4d64dd374f00a2adf8d0fcff8e7b184af886c3c87ec4a3f3" +checksum = "7694e1cfe791f8d31026952abf09c69ca6f6fa4e1a1229e18988f06a04a12dca" [[package]] name = "time-macros" -version = "0.2.18" +version = "0.2.27" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3f252a68540fde3a3877aeea552b832b40ab9a69e318efd078774a01ddee1ccf" +checksum = "2e70e4c5a0e0a8a4823ad65dfe1a6930e4f4d756dcd9dd7939022b5e8c501215" dependencies = [ "num-conv", "time-core", From a2d29c38728a459fe12a4e3b08fa9a4059b68c1e Mon Sep 17 00:00:00 2001 From: Toby Hede Date: Tue, 17 Feb 2026 14:26:11 +1100 Subject: [PATCH 2/2] fix(test): update trybuild stderr snapshot for newer rustc The Rust compiler now includes source location in help messages for trait implementations, updating the expected output to match. --- tests/ui/using-pk-instead-of-pk-sk.stderr | 24 +++++++++++++++++------ 1 file changed, 18 insertions(+), 6 deletions(-) diff --git a/tests/ui/using-pk-instead-of-pk-sk.stderr b/tests/ui/using-pk-instead-of-pk-sk.stderr index 95599d7f..227943de 100644 --- a/tests/ui/using-pk-instead-of-pk-sk.stderr +++ b/tests/ui/using-pk-instead-of-pk-sk.stderr @@ -6,8 +6,12 @@ error[E0277]: the trait bound `PkSk: From<&str>` is not satisfied | | | required by a bound introduced by this call | - = help: the trait `From<&str>` is not implemented for `PkSk` - but trait `From<(_, _)>` is implemented for it +help: the trait `From<&str>` is not implemented for `PkSk` + but trait `From<(_, _)>` is implemented for it + --> src/traits/primary_key.rs + | + 58 | impl, Sk: Into> From<(Pk, Sk)> for PkSk { + | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ = help: for that trait implementation, expected `(_, _)`, found `&str` = note: required for `&str` to implement `Into` note: required by a bound in `EncryptedTable::get` @@ -22,8 +26,12 @@ error[E0277]: the trait bound `PkSk: From<&str>` is not satisfied 25 | let user: Option = table.get("user@example.com").await?; | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ the trait `From<&str>` is not implemented for `PkSk` | - = help: the trait `From<&str>` is not implemented for `PkSk` - but trait `From<(_, _)>` is implemented for it +help: the trait `From<&str>` is not implemented for `PkSk` + but trait `From<(_, _)>` is implemented for it + --> src/traits/primary_key.rs + | + 58 | impl, Sk: Into> From<(Pk, Sk)> for PkSk { + | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ = help: for that trait implementation, expected `(_, _)`, found `&str` = note: required for `&str` to implement `Into` note: required by a bound in `EncryptedTable::get` @@ -38,8 +46,12 @@ error[E0277]: the trait bound `PkSk: From<&str>` is not satisfied 25 | let user: Option = table.get("user@example.com").await?; | ^^^^^ the trait `From<&str>` is not implemented for `PkSk` | - = help: the trait `From<&str>` is not implemented for `PkSk` - but trait `From<(_, _)>` is implemented for it +help: the trait `From<&str>` is not implemented for `PkSk` + but trait `From<(_, _)>` is implemented for it + --> src/traits/primary_key.rs + | + 58 | impl, Sk: Into> From<(Pk, Sk)> for PkSk { + | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ = help: for that trait implementation, expected `(_, _)`, found `&str` = note: required for `&str` to implement `Into` note: required by a bound in `EncryptedTable::get`