Bump version to 7.1.3

taariq · taariq · commit 5972ad942a04 · 2026-01-05T13:08:25.000-08:00
Taariq Lewis, SerenAI, Paloma, and Volume at https://serendb.com
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,14 @@
 
 All notable changes to this project will be documented in this file.
 
+## [7.1.3] - 2026-01-05
+
+### Fixed
+
+- **Security audit failure resolved**: Added `.cargo/audit.toml` to ignore RUSTSEC-2026-0001 (rkyv vulnerability). The rkyv crate is an optional dependency of rust_decimal that we don't use - only db-tokio-postgres feature is enabled, not rkyv serialization.
+
+- **Dependency updates**: Upgraded mysql_async from 0.34 to 0.36, updated rust_decimal to explicitly disable default features.
+
 ## [7.1.2] - 2026-01-05
 
 ### Fixed
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -7,7 +7,7 @@ members = [
 
 [package]
 name = "database-replicator"
-version = "7.1.2"
+version = "7.1.3"
 edition = "2021"
 license = "Apache-2.0"
 description = "Universal database-to-PostgreSQL replication CLI. Supports PostgreSQL, SQLite, MongoDB, and MySQL."
