Skip to content

Commit cc3c8a2

Browse files
committed
ci: Update audit workflow and bytes dependency
- Add `tool-version` parameter in audit workflow that forces the `actions-rust-lang/audit` to download and use a version that supports CVSS 4.0. - update a transitive dependency `bytes` to v1.11. 1 that fixes `RUSTSEC-2026-0007` security vulnerability Fixes #239
1 parent e39e59c commit cc3c8a2

File tree

2 files changed

+4
-3
lines changed

2 files changed

+4
-3
lines changed

.github/workflows/audit.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,8 @@ jobs:
1313
security_audit:
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: actions/checkout@v4
16+
- uses: actions/checkout@v6
1717
- uses: actions-rust-lang/audit@v1
1818
with:
1919
token: ${{ secrets.GITHUB_TOKEN }}
20+
tool-version: 0.22.1

Cargo.lock

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)