chore(deps): bump crossbeam-epoch to 0.9.20 for RUSTSEC-2026-0204

[bhekanik]

cargo deny check advisories (the Rust Dependency Audit CI job) started failing on RUSTSEC-2026-0204 — crossbeam-epoch 0.9.18, invalid pointer dereference in the fmt::Pointer impl for Atomic/Shared. Transitive via crossbeam-deque → rayon (tantivy + ratatui-image), so it hit every PR and main itself.

Bumps to the semver-compatible 0.9.20 (lockfile-only). Verified locally: cargo deny check advisories → advisories ok.

---

Summary by cubic

Update lockfile to bump crossbeam-epoch to 0.9.20. Fixes RUSTSEC-2026-0204 and unblocks cargo deny advisory checks.

• Dependencies
  • crossbeam-epoch: 0.9.18 → 0.9.20 (patch). Resolves invalid pointer deref in fmt::Pointer for Atomic/Shared; transitive via crossbeam-deque → rayon (used by tantivy and ratatui-image).

^{Written for commit 1c0b2b1. Summary will update on new commits.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
spotuify	Ready	Preview, Comment	Jul 11, 2026 2:40am

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: bbdf5470-99bc-4140-ab9d-18ee508b9464

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/deps-crossbeam-advisory

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cubic-dev-ai]

No issues found across 1 file

_{Re-trigger cubic}