From f0fa25e6cebb1dae0aa164d75a100b58982fdf11 Mon Sep 17 00:00:00 2001 From: Nic Date: Thu, 9 Jul 2026 13:28:57 +0100 Subject: [PATCH] chore: bump crossbeam-epoch 0.9.18 -> 0.9.20 (RUSTSEC-2026-0204) Fixes the one vulnerability flagged by `cargo audit` on main: an invalid pointer dereference in crossbeam-epoch's `fmt::Pointer` impl. The advisory was published after the 0.3.1 release, so main's audit now fails on it. Transitive patch bump, lockfile-only, no manifest change; audit clean. Co-Authored-By: Claude Opus 4.8 (1M context) --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index f7bfd33..31e7aa2 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2010,9 +2010,9 @@ dependencies = [ [[package]] name = "crossbeam-epoch" -version = "0.9.18" +version = "0.9.20" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e" +checksum = "2d6914041f254d6e9176c01941b21115dcfb7089e55135a35411081bd106ef3f" dependencies = [ "crossbeam-utils", ]