Skip to content

Commit 4e774f5

Browse files
hyperpolymathclaude
andcommitted
fix(deps): remove deprecated tokio-process to resolve crossbeam/lock_api advisories
tokio-process 0.2 was pulling in old crossbeam-queue (<0.2.3), crossbeam-utils (<0.8.7), and lock_api (<0.4.2) transitively. The code already uses tokio::process::Command from the tokio crate directly, so the tokio-process dependency was unused. Removing it eliminates all three vulnerable transitive dependencies from svalinn, selur, vordr, and cerro-torre services. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent a4f39fa commit 4e774f5

8 files changed

Lines changed: 180 additions & 1828 deletions

File tree

services/cerro-torre/Cargo.lock

Lines changed: 44 additions & 453 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

services/cerro-torre/Cargo.toml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,6 @@ tower-http = { version = "0.5", features = ["trace", "cors"] }
1818
serde = { version = "1.0", features = ["derive"] }
1919
serde_json = "1.0"
2020

21-
# Process execution
22-
tokio-process = "0.2"
23-
2421
# Logging
2522
tracing = "0.1"
2623
tracing-subscriber = { version = "0.3", features = ["env-filter"] }

0 commit comments

Comments
 (0)