Merge branch 'main' into fix-CVE-2025-62518

Author: jhheider

Cargo.lock

@@ -9,7 +9,7 @@ repository = "https://github.com/pkgxdev/pkgx"
 
 [dependencies]
 tokio = { version = "1.43", features = ["full", "rt-multi-thread"] }
-rusqlite = "0.37.0"
+rusqlite = "0.38.0"
 regex = "1.11.1"
 indicatif = "0.18.3"
 nix = { version = "0.31.1", features = ["process"] }
@@ -21,7 +21,7 @@ console = { version = "0.16", default-features = false, features = [
 ] }
 
 [target.'cfg(not(target_os = "macos"))'.dependencies]
-rusqlite = { version = "0.37.0", features = ["bundled"] }
+rusqlite = { version = "0.38.0", features = ["bundled"] }
 native-tls = { version = "0.2", features = ["vendored"] }
 # ^^ this is a transitive dependency
 # ^^ we vendor OpenSSL ∵ we want to be standalone and just work inside minimal docker images

crates/cli/Cargo.toml

@@ -20,7 +20,7 @@ tokio = { version = "1.43", features = ["full", "rt-multi-thread"] }
 tokio-stream = "0.1"
 strum = "0.27"
 strum_macros = "0.27"
-rusqlite = "0.37.0"
+rusqlite = "0.38.0"
 regex = "1.11.1"
 reqwest = { version = "0.13", features = ["stream", "blocking"] }
 async-compression = { version = "0.4", features = ["tokio", "gzip", "xz"] }
@@ -33,4 +33,4 @@ fs2 = "0.4.3"
 tempfile = "3.16.0"
 
 [target.'cfg(not(target_os = "macos"))'.dependencies]
-rusqlite = { version = "0.37.0", features = ["bundled"] }
+rusqlite = { version = "0.38.0", features = ["bundled"] }