From 7598cc0b0034dbc59b4ab1f9b259348fb8e06e43 Mon Sep 17 00:00:00 2001 From: stevenhorsman Date: Fri, 10 Jul 2026 09:47:22 -0700 Subject: [PATCH] =?UTF-8?q?deps:=20bump=20crossbeam-epoch=200.9.18=20?= =?UTF-8?q?=E2=86=92=200.9.20?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixes RUSTSEC-2026-0204 — unsoundness in crossbeam-epoch < 0.9.20. crossbeam-epoch is a transitive dependency pulled in via: crossbeam 0.8.4 → ttrpc 0.8.6 No direct dependency changes are needed; pinning the resolved version in Cargo.lock is sufficient to ensure the fixed crate is used. Ref: https://osv.dev/RUSTSEC-2026-0204 Generated-by: IBM Bob Signed-off-by: stevenhorsman --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 8b4f3b881b..1a811df9bb 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1345,9 +1345,9 @@ dependencies = [ [[package]] name = "crossbeam-epoch" -version = "0.9.18" +version = "0.9.20" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e" +checksum = "2d6914041f254d6e9176c01941b21115dcfb7089e55135a35411081bd106ef3f" dependencies = [ "crossbeam-utils", ]