Skip to content

Dependencies: refresh the workspace packages flagged by advisories - #5

Open
isaacsa2 wants to merge 1 commit into
openomsi/v29from
fix/dependency-advisories-20261027
Open

isaacsa2 wants to merge 1 commit into
openomsi/v29from
fix/dependency-advisories-20261027

Conversation

@isaacsa2

Copy link
Copy Markdown

Update anyhow, crossbeam-epoch, Tokio and spin to patched/non-yanked compatible versions. Updating wayland-scanner also moves its XML reader to quick-xml 0.41.0. Cargo regenerated the lockfile, including the required transitive resolution changes. No dependency declaration, feature requirement or advisory ignore is changed.

Validation: cargo +1.93.0 check --locked --workspace --all-features passes on Linux. The two Vulkan pipeline tests also pass with --all-features when this lockfile is applied together with the GL fix and CI maintenance. Windows/macOS CI and the advisory check still need to run on this candidate.

The unmaintained ttf-parser warning remains and has not been suppressed. Miri, Vulkan test semantics and rustfmt debt are separate PRs (#2, #3 and #4). The GL lock fix stays in #1, and client pin updates still wait for its merge.

Signed-off-by: Isaac S. <107325320+isaacsa2@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant