Commit 4e774f5
fix(deps): remove deprecated tokio-process to resolve crossbeam/lock_api advisories
tokio-process 0.2 was pulling in old crossbeam-queue (<0.2.3),
crossbeam-utils (<0.8.7), and lock_api (<0.4.2) transitively. The code
already uses tokio::process::Command from the tokio crate directly, so
the tokio-process dependency was unused. Removing it eliminates all three
vulnerable transitive dependencies from svalinn, selur, vordr, and
cerro-torre services.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>1 parent a4f39fa commit 4e774f5
8 files changed
Lines changed: 180 additions & 1828 deletions
File tree
- services
- cerro-torre
- selur
- svalinn
- vordr
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
21 | | - | |
22 | | - | |
23 | | - | |
24 | 21 | | |
25 | 22 | | |
26 | 23 | | |
| |||
0 commit comments