Skip to content

[codex] Fix Dependabot Rust alerts#229

Merged
Bathtor merged 1 commit into
kompics:masterfrom
Bathtor:codex/dependabot-vulnerability-fixes
May 14, 2026
Merged

[codex] Fix Dependabot Rust alerts#229
Bathtor merged 1 commit into
kompics:masterfrom
Bathtor:codex/dependabot-vulnerability-fixes

Conversation

@Bathtor
Copy link
Copy Markdown
Contributor

@Bathtor Bathtor commented May 14, 2026

Summary

  • remove stale nested Cargo.lock files so Dependabot only reports against the workspace lockfile
  • replace the unpatched owning_ref dependency with safer_owning_ref and adjust the dynamic component guard alias for its API
  • refresh dependency resolution so the workspace uses patched rand 0.8.6

Validation

The repository clippy check matrix passed, covering the core workspace packages, network package, macro-test, local and network examples, dynamic benches, and the type_erasure feature path touched by the owning reference change.

@Bathtor Bathtor marked this pull request as ready for review May 14, 2026 14:52
@Bathtor Bathtor merged commit a76e64b into kompics:master May 14, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant