From 381eac651bb5ee0be0c7a97d38d60f40b13a6b99 Mon Sep 17 00:00:00 2001 From: Ray Ketcham Date: Mon, 29 Jun 2026 05:46:49 +0000 Subject: [PATCH] fix(deps): bump quinn-proto 0.11.14->0.11.15 (RUSTSEC-2026-0185) Daily Health Check cargo audit flagged RUSTSEC-2026-0185 (high severity) in quinn-proto 0.11.14. Bumped to 0.11.15 via `cargo update -p quinn-proto --precise 0.11.15` (Cargo.lock only; no Cargo.toml change required). Verified locally: `cargo audit --ignore RUSTSEC-2023-0071 \ --ignore RUSTSEC-2025-0134 --ignore RUSTSEC-2025-0144 \ --ignore RUSTSEC-2026-0097` exits 0 with 0 vulnerabilities. Reciprocal guard: ci.yml already contains an `audit` job (added previously) with the identical --ignore list, so every PR is already gated by cargo audit. RUSTSEC-2026-0185 is not added to any ignore list. Co-Authored-By: Claude --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 44cfb1a..42ca022 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2201,9 +2201,9 @@ dependencies = [ [[package]] name = "quinn-proto" -version = "0.11.14" +version = "0.11.15" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098" +checksum = "4fcb935c5bec503c2f0e306bdd3e58bb9029dcb14fa8d9ac76e3a5256ac0763e" dependencies = [ "bytes", "getrandom 0.3.4",