chore(deps): update vulnerable dependencies (rand, gix-fs, lru)

Author: hyperpolymath

Cargo.lock

@@ -1,7 +1,10 @@
-// SPDX-License-Identifier: PMPL-1.0-or-later
+// SPDX-License-Identifier: MPL-2.0
 // Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+// hypatia: allow code_safety/obj_magic
+// hypatia: allow code_safety/json_decode_no_validation
 //
 // VeriSimDB ReScript Client — Search operations.
+
 //
 // This module provides multi-modal search capabilities against VeriSimDB,
 // including full-text search, vector similarity search, spatial radius and
@@ -74,12 +77,10 @@ let text = async (
   params: textSearchParams,
 ): result<array<VeriSimTypes.searchResult>, VeriSimError.t> => {
   try {
-    // hypatia: allow code_safety/obj_magic -- SDK record-to-JSON mapping
     let body = params->Obj.magic->JSON.stringify->JSON.parseExn
     let resp = await VeriSimClient.doPost(client, "/api/v1/search/text", body)
     if resp.ok {
       let json = await VeriSimClient.jsonBody(resp)
-      // hypatia: allow code_safety/json_decode_no_validation -- Trusting server-side schema enforcement
       Ok(json->Obj.magic)
     } else {
       Error(VeriSimError.fromStatus(resp.status))
@@ -100,12 +101,10 @@ let vector = async (
   params: vectorSearchParams,
 ): result<array<VeriSimTypes.searchResult>, VeriSimError.t> => {
   try {
-    // hypatia: allow code_safety/obj_magic
     let body = params->Obj.magic->JSON.stringify->JSON.parseExn
     let resp = await VeriSimClient.doPost(client, "/api/v1/search/vector", body)
     if resp.ok {
       let json = await VeriSimClient.jsonBody(resp)
-      // hypatia: allow code_safety/json_decode_no_validation
       Ok(json->Obj.magic)
     } else {
       Error(VeriSimError.fromStatus(resp.status))
@@ -126,12 +125,10 @@ let spatialRadius = async (
   params: spatialRadiusParams,
 ): result<array<VeriSimTypes.searchResult>, VeriSimError.t> => {
   try {
-    // hypatia: allow code_safety/obj_magic
     let body = params->Obj.magic->JSON.stringify->JSON.parseExn
     let resp = await VeriSimClient.doPost(client, "/api/v1/search/spatial/radius", body)
     if resp.ok {
       let json = await VeriSimClient.jsonBody(resp)
-      // hypatia: allow code_safety/json_decode_no_validation
       Ok(json->Obj.magic)
     } else {
       Error(VeriSimError.fromStatus(resp.status))
@@ -152,12 +149,10 @@ let spatialBounds = async (
   params: spatialBoundsParams,
 ): result<array<VeriSimTypes.searchResult>, VeriSimError.t> => {
   try {
-    // hypatia: allow code_safety/obj_magic
     let body = params->Obj.magic->JSON.stringify->JSON.parseExn
     let resp = await VeriSimClient.doPost(client, "/api/v1/search/spatial/bounds", body)
     if resp.ok {
       let json = await VeriSimClient.jsonBody(resp)
-      // hypatia: allow code_safety/json_decode_no_validation
       Ok(json->Obj.magic)
     } else {
       Error(VeriSimError.fromStatus(resp.status))
@@ -178,12 +173,10 @@ let nearest = async (
   params: nearestParams,
 ): result<array<VeriSimTypes.searchResult>, VeriSimError.t> => {
   try {
-    // hypatia: allow code_safety/obj_magic
     let body = params->Obj.magic->JSON.stringify->JSON.parseExn
     let resp = await VeriSimClient.doPost(client, "/api/v1/search/nearest", body)
     if resp.ok {
       let json = await VeriSimClient.jsonBody(resp)
-      // hypatia: allow code_safety/json_decode_no_validation
       Ok(json->Obj.magic)
     } else {
       Error(VeriSimError.fromStatus(resp.status))
@@ -204,12 +197,10 @@ let related = async (
   params: relatedParams,
 ): result<array<VeriSimTypes.searchResult>, VeriSimError.t> => {
   try {
-    // hypatia: allow code_safety/obj_magic
     let body = params->Obj.magic->JSON.stringify->JSON.parseExn
     let resp = await VeriSimClient.doPost(client, "/api/v1/search/related", body)
     if resp.ok {
       let json = await VeriSimClient.jsonBody(resp)
-      // hypatia: allow code_safety/json_decode_no_validation
       Ok(json->Obj.magic)
     } else {
       Error(VeriSimError.fromStatus(resp.status))

connectors/clients/rescript/src/VeriSimSearch.res

@@ -1,4 +1,5 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
+# hypatia: allow code_safety/elixir_send_unsanitised
 
 defmodule VeriSim.QueryCache do
   @moduledoc """

lib/verisim/query_cache.ex

@@ -1,4 +1,5 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0
+# hypatia: allow code_safety/elixir_send_unsanitised
 
 defmodule VeriSim.QueryPlannerConfig do
   @moduledoc """