microsandbox-rb 0.17.3 → 0.17.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 6d3b616f0ff13a9961eab2e0cdd3812f859754efd7489d5857db0e49588f2b73
4
- data.tar.gz: a172d9b8b62bb19f8b4cc2accfadec90f56b83b0e99112109a42032b7ca9a6f4
3
+ metadata.gz: 3c597286c232618bfceb4eeaa3fb283944fc51a4ff0d453394f7ce413a25301d
4
+ data.tar.gz: aa6f046fb175fd5a987c35ce190f73676fc83e9de1171b7f64ff45b6e9ec59a9
5
5
  SHA512:
6
- metadata.gz: 9357333f88d8061e822da080bdc014438b7ca8bda1b94584a01e89fa1278c9d661b5a5eb2a7e5e36e5879076c2e9f6e82cb067dd6a4aa86023f16360953369ed
7
- data.tar.gz: e7b24e0067df67c76a57f5b204f743d9420c4cd9d43f717bd3576e0324023493b68821d65e1c910168ad87a3e76261dcbb825b1476184b6c9318891cb4a99c1a
6
+ metadata.gz: fd0ac5efec2d2e2afe113eb0ad21187ac0cf6a2a353ec6ff21ce6ad19399bf266d06764815edb61012620e49095d860b09aefc101b91bfe65b2f36693d980edc
7
+ data.tar.gz: b2dcd15f8fee68bceeaa0818d3f1b889a31ffff11e4031f618f753495c2b04291be64f6384c9ea47ed5b296dfccd96905e5e67d731c41ea33466ab283f6b3778
data/CHANGELOG.md CHANGED
@@ -8,6 +8,123 @@ wraps, and the README's Versioning section keeps the full gem→runtime map.
8
8
 
9
9
  ## [Unreleased]
10
10
 
11
+ ## [0.17.5] - 2026-10-27
12
+
13
+ Gem-only security release; the embedded runtime stays at **`v0.6.18`**.
14
+ Dependency updates clear ten new RustSec advisories, RUSTSEC-2026-0381 to
15
+ -0410. They include the zstd copy that decompresses pulled image layers.
16
+ Three zstd advisories remain on a second copy that sits only on an
17
+ external-kernel path the runtime never takes (see Security). `SECURITY.md`
18
+ now maps four more upstream advisories to gem versions.
19
+
20
+ ### Security
21
+
22
+ - **zstd 0.13.3 → 0.14.3, zstd-safe 7.2.4 → 8.2.0 and zstd-sys 2.0.16 →
23
+ 2.1.2 for image-layer decompression** (transitive, through
24
+ async-compression 0.4.51 / compression-codecs 0.4.46). The SDK decompresses
25
+ pulled OCI image layers through these, so this fixes RUSTSEC-2026-0391
26
+ (data from an abandoned stream leaked into the next stream on a reused
27
+ context), RUSTSEC-2026-0398 (`Seekable::decompress` set a `Vec` length past
28
+ its capacity) and RUSTSEC-2026-0403 (uninitialized memory exposed when
29
+ streaming decompression of a legacy frame failed) on that path. The
30
+ zstd-sys bump also fixes RUSTSEC-2026-0410 (its WebAssembly allocator shim
31
+ corrupted memory on allocation failure) for every zstd user in the build.
32
+ - **rustls-webpki 0.103.15 → 0.103.16, webpki-roots and webpki-root-certs
33
+ 1.0.7 → 1.0.11** (transitive, through the TLS stack: the HTTP clients and
34
+ the network stack's DNS client). Fixes RUSTSEC-2026-0382 (certificate
35
+ verification could accept distrusted intermediates) and RUSTSEC-2026-0381 /
36
+ RUSTSEC-2026-0383 (the bundled root certificates trusted distrusted emSign
37
+ intermediates).
38
+ - **tokio 1.53.2 → 1.54.1.** Fixes RUSTSEC-2026-0386 (`AsyncFd::new` and
39
+ related constructors violated I/O safety).
40
+ - **crypto-bigint 0.7.5 → 0.7.10 and ctutils 0.4.2 → 0.4.6** (transitive,
41
+ through the SSH client, russh). Fixes RUSTSEC-2026-0387 and
42
+ RUSTSEC-2026-0385 (timing variability in operations meant to be constant
43
+ time). crypto-bigint 0.7.5 had also been yanked.
44
+ - **Not fixed: a second copy of zstd 0.13.3 / zstd-safe 7.2.4 stays in the
45
+ build** for RUSTSEC-2026-0391, -0398 and -0403. It comes only from the VM
46
+ monitor crate pinned by the embedded runtime `v0.6.18` (msb_krun_vmm
47
+ 0.1.32; no release of it moves to zstd 0.14), which uses it on x86_64
48
+ solely to decompress an external zstd-compressed kernel image. The runtime
49
+ never configures one — it boots from libkrunfw — and VMs run in the `msb`
50
+ process, not in the gem. It will be re-checked on the next runtime
51
+ adoption.
52
+
53
+ ### Docs
54
+
55
+ - **`SECURITY.md` maps four more upstream advisories to gem versions.** It
56
+ now lists GHSA-rh2c-vm8j-5gg6 (`Volume.fs` paths escaping the volume root:
57
+ affected `0.7.0`–`0.17.0`, mitigated in `0.17.1`; its upstream range is
58
+ incomplete), GHSA-v693-3rfr-6q3q (fixed from `0.9.2`) and
59
+ GHSA-89j4-256r-3pcq (fixed from `0.5.10`), and records that
60
+ GHSA-xgg5-hjwq-2gw8 affects no release of this gem.
61
+
62
+ ## [0.17.4] - 2026-10-14
63
+
64
+ Gem-only fix release; the embedded runtime stays at **`v0.6.18`**. Fork safety
65
+ now also survives pid reuse (a process is identified by its pid and fork
66
+ generation together), `install`/`setup` in a forked child no longer touch the
67
+ backend, a `Sandbox` subclass's `initialize` no longer runs with interrupts
68
+ masked, and the macOS limit that a forked child must not build network clients
69
+ is documented. It also picks up dependency updates: magnus 0.9, tokio 1.53,
70
+ rb-sys 0.9.130, and rustls 0.23.46 for four TLS advisories (see Security).
71
+
72
+ ### Fixed
73
+
74
+ - **A `Sandbox` subclass's `initialize` no longer runs with interrupts
75
+ masked.** `Sandbox.create`, `.connect_or_create` and `.start` (and
76
+ `PullSession#sandbox`) hold a queued `Thread#raise`/`Timeout`/`Thread#kill`
77
+ back only while the native call runs; the wrapper is now built after that,
78
+ so a subclass whose constructor blocks or runs long no longer delays a
79
+ `Timeout.timeout` or `Thread#kill` until the constructor returns. The
80
+ best-effort interrupt cleanup moved to the native handle with it: an
81
+ interrupt that lands before or during `initialize`, or an exception
82
+ `initialize` raises, still stops the sandbox when the call owns it and
83
+ leaves one it merely connected to running.
84
+ Behaviour of `Sandbox` itself is unchanged.
85
+
86
+ - **`Microsandbox.install` and `Microsandbox.setup` no longer take over the
87
+ backend in a forked child.** They went through the same entry as every
88
+ other native call, so in a child they first rebuilt the backend inherited
89
+ from the parent — which they never use — and failed with the configuration
90
+ error when the parent's selection no longer resolved in the child (say its
91
+ environment selected the cloud backend without an API key). They now leave
92
+ the backend alone; the child's first call that uses it takes it over, as
93
+ before.
94
+
95
+ - **Fork safety no longer identifies a process by its pid alone.** A forked
96
+ process that the kernel had given the pid of an ancestor whose SDK state it
97
+ inherited (the pid counter wrapped onto exactly that value, with no SDK call
98
+ in between) was taken for that ancestor: it would have used the inherited
99
+ runtime, backend and handles instead of rebuilding them or raising
100
+ `ForkedHandleError`. The extension now counts forks with a `pthread_atfork`
101
+ child handler and identifies a process by its pid and that count together.
102
+ `ForkedHandleError`'s message no longer names one pid as two processes when
103
+ the pids are equal.
104
+
105
+ ### Security
106
+
107
+ - **rustls 0.23.45 → 0.23.46** (a transitive dependency, through the network
108
+ stack's DNS client and the HTTP client). Fixes RUSTSEC-2026-0346 (`Debug`
109
+ output of client session values exposed TLS secrets), RUSTSEC-2026-0347
110
+ (buffered application data sent to the outer server after ECH rejection),
111
+ RUSTSEC-2026-0348 (Brotli certificate decompression could allocate up to
112
+ 1 GiB before authentication) and RUSTSEC-2026-0349 (an unauthenticated
113
+ ServerHello could downgrade later connections to classical key exchange).
114
+
115
+ ### Docs
116
+
117
+ - **Known limitation: on macOS a forked child must not build network
118
+ clients.** A child forked (without `exec`) from a Ruby process on macOS
119
+ crashes — `SIGSEGV` or `SIGABRT`, which cannot be rescued — when the SDK
120
+ builds an HTTP client or reads the Keychain there: any cloud backend use,
121
+ `Sandbox.create` with an image not yet cached (or `pull_policy: :always`),
122
+ `Image.load`, and runtime install/setup. The macOS system frameworks behind
123
+ the proxy lookup and the Keychain are not usable after `fork`. Do that work
124
+ in the parent before forking, or in a process started with `Process.spawn`.
125
+ On Linux the cloud backend works in a forked child; new fork specs cover it
126
+ there (they are skipped on macOS). See [runtime.md](docs/runtime.md#macos-no-network-clients-in-a-forked-child).
127
+
11
128
  ## [0.17.3] - 2026-10-13
12
129
 
13
130
  Gem-only fix release; the embedded runtime stays at **`v0.6.18`**. A process
@@ -1513,7 +1630,9 @@ microsandbox runtime, aligned with the official Python/Node/Go SDKs.
1513
1630
  core crate has Apple-native deps). Until precompiled gems are published,
1514
1631
  installing from source requires a Rust toolchain (stable >= 1.91).
1515
1632
 
1516
- [Unreleased]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.3...HEAD
1633
+ [Unreleased]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.5...HEAD
1634
+ [0.17.5]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.4...v0.17.5
1635
+ [0.17.4]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.3...v0.17.4
1517
1636
  [0.17.3]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.2...v0.17.3
1518
1637
  [0.17.2]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.1...v0.17.2
1519
1638
  [0.17.1]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.0...v0.17.1
data/Cargo.lock CHANGED
@@ -431,9 +431,9 @@ dependencies = [
431
431
 
432
432
  [[package]]
433
433
  name = "async-compression"
434
- version = "0.4.42"
434
+ version = "0.4.51"
435
435
  source = "registry+https://github.com/rust-lang/crates.io-index"
436
- checksum = "e79b3f8a79cccc2898f31920fc69f304859b3bd567490f75ebf51ae1c792a9ac"
436
+ checksum = "9d5755640120b24961f8231e05892e4a4f7e0d04e8aeca161508c9c397946970"
437
437
  dependencies = [
438
438
  "compression-codecs",
439
439
  "compression-core",
@@ -971,9 +971,9 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
971
971
 
972
972
  [[package]]
973
973
  name = "chacha20"
974
- version = "0.10.0"
974
+ version = "0.10.2"
975
975
  source = "registry+https://github.com/rust-lang/crates.io-index"
976
- checksum = "6f8d983286843e49675a4b7a2d174efe136dc93a18d69130dd18198a6c167601"
976
+ checksum = "65c35e4b699c7e15ccbe7ee35c005e4fc0a278d22238a2857e6ce2dadeda1b06"
977
977
  dependencies = [
978
978
  "cfg-if",
979
979
  "cipher 0.5.2",
@@ -1129,22 +1129,22 @@ dependencies = [
1129
1129
 
1130
1130
  [[package]]
1131
1131
  name = "compression-codecs"
1132
- version = "0.4.38"
1132
+ version = "0.4.46"
1133
1133
  source = "registry+https://github.com/rust-lang/crates.io-index"
1134
- checksum = "ce2548391e9c1929c21bf6aa2680af86fe4c1b33e6cea9ac1cfeec0bd11218cf"
1134
+ checksum = "cae36683101b2899f48bd31f8db9839437356188e3b1ff23096e73dab09ba8fe"
1135
1135
  dependencies = [
1136
1136
  "compression-core",
1137
1137
  "flate2",
1138
1138
  "memchr",
1139
- "zstd",
1140
- "zstd-safe",
1139
+ "zstd 0.14.3",
1140
+ "zstd-safe 8.2.0",
1141
1141
  ]
1142
1142
 
1143
1143
  [[package]]
1144
1144
  name = "compression-core"
1145
- version = "0.4.32"
1145
+ version = "0.4.34"
1146
1146
  source = "registry+https://github.com/rust-lang/crates.io-index"
1147
- checksum = "cc14f565cf027a105f7a44ccf9e5b424348421a1d8952a8fc9d499d313107789"
1147
+ checksum = "2ebdda89edc534bf8d5dd2857562633b6495557e5846552ade994b99ed13c36a"
1148
1148
 
1149
1149
  [[package]]
1150
1150
  name = "concurrent-queue"
@@ -1375,9 +1375,9 @@ checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
1375
1375
 
1376
1376
  [[package]]
1377
1377
  name = "crypto-bigint"
1378
- version = "0.7.5"
1378
+ version = "0.7.10"
1379
1379
  source = "registry+https://github.com/rust-lang/crates.io-index"
1380
- checksum = "1a52aa3fcda4e6302a9f48734f234d35d4721b96f8fe07d073f07ce9df4f0271"
1380
+ checksum = "9c035cb64cba03dad2fb921f3e218785e8cf9a41790da5eb3a1400f62fa2be11"
1381
1381
  dependencies = [
1382
1382
  "cpubits",
1383
1383
  "ctutils",
@@ -1432,9 +1432,9 @@ dependencies = [
1432
1432
 
1433
1433
  [[package]]
1434
1434
  name = "ctutils"
1435
- version = "0.4.2"
1435
+ version = "0.4.6"
1436
1436
  source = "registry+https://github.com/rust-lang/crates.io-index"
1437
- checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e"
1437
+ checksum = "fe3e9d21d39e6f39ff46e03d5b621424f88ee23d8a1672c6bfc9ccc7f2da4f6a"
1438
1438
  dependencies = [
1439
1439
  "cmov",
1440
1440
  "subtle",
@@ -1597,9 +1597,9 @@ dependencies = [
1597
1597
 
1598
1598
  [[package]]
1599
1599
  name = "der"
1600
- version = "0.8.0"
1600
+ version = "0.8.2"
1601
1601
  source = "registry+https://github.com/rust-lang/crates.io-index"
1602
- checksum = "71fd89660b2dc699704064e59e9dba0147b903e85319429e131620d022be411b"
1602
+ checksum = "a878c850e9e421b20262e9b41f9c860e4785fa07541c266b62ff9d1ef998a80a"
1603
1603
  dependencies = [
1604
1604
  "const-oid",
1605
1605
  "pem-rfc7468",
@@ -1923,7 +1923,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
1923
1923
  checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
1924
1924
  dependencies = [
1925
1925
  "libc",
1926
- "windows-sys 0.52.0",
1926
+ "windows-sys 0.61.2",
1927
1927
  ]
1928
1928
 
1929
1929
  [[package]]
@@ -2051,7 +2051,7 @@ checksum = "94e7099f6313ecacbe1256e8ff9d617b75d1bcb16a6fddef94866d225a01a14a"
2051
2051
  dependencies = [
2052
2052
  "io-lifetimes 2.0.4",
2053
2053
  "rustix",
2054
- "windows-sys 0.52.0",
2054
+ "windows-sys 0.59.0",
2055
2055
  ]
2056
2056
 
2057
2057
  [[package]]
@@ -2858,7 +2858,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
2858
2858
  checksum = "20fd6de4ccfcc187e38bc21cfa543cb5a302cb86a8b114eb7f0bf0dc9f8ac00f"
2859
2859
  dependencies = [
2860
2860
  "io-lifetimes 3.0.1",
2861
- "windows-sys 0.52.0",
2861
+ "windows-sys 0.60.2",
2862
2862
  ]
2863
2863
 
2864
2864
  [[package]]
@@ -3168,9 +3168,9 @@ dependencies = [
3168
3168
 
3169
3169
  [[package]]
3170
3170
  name = "libc"
3171
- version = "0.2.186"
3171
+ version = "0.2.190"
3172
3172
  source = "registry+https://github.com/rust-lang/crates.io-index"
3173
- checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
3173
+ checksum = "ce5d3ddc6d3fa000eb1536d85e147bfe31aacaba692ed6a876f95cb7c855be78"
3174
3174
 
3175
3175
  [[package]]
3176
3176
  name = "libdbus-sys"
@@ -3289,9 +3289,9 @@ dependencies = [
3289
3289
 
3290
3290
  [[package]]
3291
3291
  name = "magnus"
3292
- version = "0.8.2"
3292
+ version = "0.9.3"
3293
3293
  source = "registry+https://github.com/rust-lang/crates.io-index"
3294
- checksum = "3b36a5b126bbe97eb0d02d07acfeb327036c6319fd816139a49824a83b7f9012"
3294
+ checksum = "40ef424404d166cbb71c8b8d19c9c589c748c4547c1afa1928c5504299f6c713"
3295
3295
  dependencies = [
3296
3296
  "magnus-macros",
3297
3297
  "rb-sys",
@@ -3301,9 +3301,9 @@ dependencies = [
3301
3301
 
3302
3302
  [[package]]
3303
3303
  name = "magnus-macros"
3304
- version = "0.8.0"
3304
+ version = "0.9.1"
3305
3305
  source = "registry+https://github.com/rust-lang/crates.io-index"
3306
- checksum = "47607461fd8e1513cb4f2076c197d8092d921a1ea75bd08af97398f593751892"
3306
+ checksum = "9dafde2eeb66f090e0f326112323eb8324b12cb32b5d1210e541d3df6b0ce77e"
3307
3307
  dependencies = [
3308
3308
  "proc-macro2",
3309
3309
  "quote",
@@ -3660,11 +3660,12 @@ dependencies = [
3660
3660
 
3661
3661
  [[package]]
3662
3662
  name = "microsandbox_rb"
3663
- version = "0.17.3"
3663
+ version = "0.17.5"
3664
3664
  dependencies = [
3665
3665
  "chrono",
3666
3666
  "futures",
3667
3667
  "ipnetwork",
3668
+ "libc",
3668
3669
  "magnus",
3669
3670
  "microsandbox",
3670
3671
  "microsandbox-network",
@@ -3936,7 +3937,7 @@ dependencies = [
3936
3937
  "msb_krun_utils",
3937
3938
  "nix 0.30.1",
3938
3939
  "windows-sys 0.61.2",
3939
- "zstd",
3940
+ "zstd 0.13.3",
3940
3941
  ]
3941
3942
 
3942
3943
  [[package]]
@@ -4312,9 +4313,9 @@ dependencies = [
4312
4313
 
4313
4314
  [[package]]
4314
4315
  name = "pageant"
4315
- version = "0.2.1"
4316
+ version = "0.2.4"
4316
4317
  source = "registry+https://github.com/rust-lang/crates.io-index"
4317
- checksum = "4f3a5ae18f65a85c67a77d18d42d3606c07948e3c17c1e5f74852b26589e88a5"
4318
+ checksum = "f0786409b5aaa884655c9b4065681db0835db0cc185a6fb19fb17a5d38656866"
4318
4319
  dependencies = [
4319
4320
  "base16ct",
4320
4321
  "byteorder",
@@ -4733,7 +4734,7 @@ dependencies = [
4733
4734
  "once_cell",
4734
4735
  "socket2",
4735
4736
  "tracing",
4736
- "windows-sys 0.52.0",
4737
+ "windows-sys 0.60.2",
4737
4738
  ]
4738
4739
 
4739
4740
  [[package]]
@@ -4870,18 +4871,18 @@ dependencies = [
4870
4871
 
4871
4872
  [[package]]
4872
4873
  name = "rb-sys"
4873
- version = "0.9.128"
4874
+ version = "0.9.130"
4874
4875
  source = "registry+https://github.com/rust-lang/crates.io-index"
4875
- checksum = "45ca28513560e56cfb79a62b1fce363c73af170a182024ce880c77ee9429920a"
4876
+ checksum = "02faf625bb10ba893e3ae620f19c9fb1b5f8fcae0fe4eb86bb3f2230fad75edb"
4876
4877
  dependencies = [
4877
4878
  "rb-sys-build",
4878
4879
  ]
4879
4880
 
4880
4881
  [[package]]
4881
4882
  name = "rb-sys-build"
4882
- version = "0.9.128"
4883
+ version = "0.9.130"
4883
4884
  source = "registry+https://github.com/rust-lang/crates.io-index"
4884
- checksum = "ce04b2c55eff3a21aaa623fcc655d94373238e72cac6b3e1a3641ff31649f99a"
4885
+ checksum = "05be6f9c86fe5482808162826f6c047d093b3670582296c770de1d94f8066694"
4885
4886
  dependencies = [
4886
4887
  "bindgen",
4887
4888
  "lazy_static",
@@ -5270,7 +5271,7 @@ dependencies = [
5270
5271
  "errno",
5271
5272
  "libc",
5272
5273
  "linux-raw-sys",
5273
- "windows-sys 0.52.0",
5274
+ "windows-sys 0.61.2",
5274
5275
  ]
5275
5276
 
5276
5277
  [[package]]
@@ -5285,9 +5286,9 @@ dependencies = [
5285
5286
 
5286
5287
  [[package]]
5287
5288
  name = "rustls"
5288
- version = "0.23.45"
5289
+ version = "0.23.46"
5289
5290
  source = "registry+https://github.com/rust-lang/crates.io-index"
5290
- checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
5291
+ checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf"
5291
5292
  dependencies = [
5292
5293
  "aws-lc-rs",
5293
5294
  "log",
@@ -5339,7 +5340,7 @@ dependencies = [
5339
5340
  "security-framework 3.7.0",
5340
5341
  "security-framework-sys",
5341
5342
  "webpki-root-certs",
5342
- "windows-sys 0.52.0",
5343
+ "windows-sys 0.61.2",
5343
5344
  ]
5344
5345
 
5345
5346
  [[package]]
@@ -5350,9 +5351,9 @@ checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
5350
5351
 
5351
5352
  [[package]]
5352
5353
  name = "rustls-webpki"
5353
- version = "0.103.15"
5354
+ version = "0.103.16"
5354
5355
  source = "registry+https://github.com/rust-lang/crates.io-index"
5355
- checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2"
5356
+ checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281"
5356
5357
  dependencies = [
5357
5358
  "aws-lc-rs",
5358
5359
  "ring",
@@ -5720,9 +5721,9 @@ dependencies = [
5720
5721
 
5721
5722
  [[package]]
5722
5723
  name = "serde_json"
5723
- version = "1.0.150"
5724
+ version = "1.0.154"
5724
5725
  source = "registry+https://github.com/rust-lang/crates.io-index"
5725
- checksum = "e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9"
5726
+ checksum = "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6"
5726
5727
  dependencies = [
5727
5728
  "itoa",
5728
5729
  "memchr",
@@ -5969,9 +5970,9 @@ dependencies = [
5969
5970
 
5970
5971
  [[package]]
5971
5972
  name = "spin"
5972
- version = "0.9.8"
5973
+ version = "0.9.9"
5973
5974
  source = "registry+https://github.com/rust-lang/crates.io-index"
5974
- checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
5975
+ checksum = "3763264f6b73151db08c50ff20d7d8a0b8796e021cdea7ceedad07b80155fa0e"
5975
5976
  dependencies = [
5976
5977
  "lock_api",
5977
5978
  ]
@@ -6042,7 +6043,7 @@ dependencies = [
6042
6043
  "tracing",
6043
6044
  "url",
6044
6045
  "uuid",
6045
- "webpki-roots 1.0.7",
6046
+ "webpki-roots 1.0.11",
6046
6047
  ]
6047
6048
 
6048
6049
  [[package]]
@@ -6413,7 +6414,7 @@ dependencies = [
6413
6414
  "getrandom 0.4.2",
6414
6415
  "once_cell",
6415
6416
  "rustix",
6416
- "windows-sys 0.52.0",
6417
+ "windows-sys 0.61.2",
6417
6418
  ]
6418
6419
 
6419
6420
  [[package]]
@@ -6531,9 +6532,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
6531
6532
 
6532
6533
  [[package]]
6533
6534
  name = "tokio"
6534
- version = "1.52.3"
6535
+ version = "1.54.1"
6535
6536
  source = "registry+https://github.com/rust-lang/crates.io-index"
6536
- checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
6537
+ checksum = "b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3"
6537
6538
  dependencies = [
6538
6539
  "bytes",
6539
6540
  "libc",
@@ -6890,7 +6891,7 @@ dependencies = [
6890
6891
  "rustls-platform-verifier",
6891
6892
  "ureq-proto",
6892
6893
  "utf8-zero",
6893
- "webpki-roots 1.0.7",
6894
+ "webpki-roots 1.0.11",
6894
6895
  ]
6895
6896
 
6896
6897
  [[package]]
@@ -7148,9 +7149,9 @@ dependencies = [
7148
7149
 
7149
7150
  [[package]]
7150
7151
  name = "webpki-root-certs"
7151
- version = "1.0.7"
7152
+ version = "1.0.11"
7152
7153
  source = "registry+https://github.com/rust-lang/crates.io-index"
7153
- checksum = "f31141ce3fc3e300ae89b78c0dd67f9708061d1d2eda54b8209346fd6be9a92c"
7154
+ checksum = "e49d0e65abc00c142e8f9428da991da9f1a250c39be97459901eb12b9b49f62a"
7154
7155
  dependencies = [
7155
7156
  "rustls-pki-types",
7156
7157
  ]
@@ -7161,14 +7162,14 @@ version = "0.26.11"
7161
7162
  source = "registry+https://github.com/rust-lang/crates.io-index"
7162
7163
  checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9"
7163
7164
  dependencies = [
7164
- "webpki-roots 1.0.7",
7165
+ "webpki-roots 1.0.11",
7165
7166
  ]
7166
7167
 
7167
7168
  [[package]]
7168
7169
  name = "webpki-roots"
7169
- version = "1.0.7"
7170
+ version = "1.0.11"
7170
7171
  source = "registry+https://github.com/rust-lang/crates.io-index"
7171
- checksum = "52f5ee44c96cf55f1b349600768e3ece3a8f26010c05265ab73f945bb1a2eb9d"
7172
+ checksum = "f5f280bbb2b287bc8e7de7e3852945a0ff50d1bbcb5ed42b6c7a568c546df171"
7172
7173
  dependencies = [
7173
7174
  "rustls-pki-types",
7174
7175
  ]
@@ -7210,7 +7211,7 @@ version = "0.1.11"
7210
7211
  source = "registry+https://github.com/rust-lang/crates.io-index"
7211
7212
  checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
7212
7213
  dependencies = [
7213
- "windows-sys 0.52.0",
7214
+ "windows-sys 0.61.2",
7214
7215
  ]
7215
7216
 
7216
7217
  [[package]]
@@ -7521,7 +7522,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
7521
7522
  checksum = "3f3fd376f71958b862e7afb20cfe5a22830e1963462f3a17f49d82a6c1d1f42d"
7522
7523
  dependencies = [
7523
7524
  "bitflags 2.13.0",
7524
- "windows-sys 0.52.0",
7525
+ "windows-sys 0.59.0",
7525
7526
  ]
7526
7527
 
7527
7528
  [[package]]
@@ -7620,13 +7621,14 @@ dependencies = [
7620
7621
 
7621
7622
  [[package]]
7622
7623
  name = "wnaf"
7623
- version = "0.14.0"
7624
+ version = "0.14.1"
7624
7625
  source = "registry+https://github.com/rust-lang/crates.io-index"
7625
- checksum = "ab12e7090f27e2ffd9322651492942d50c2926094af30601e1964337db39daf1"
7626
+ checksum = "795ca18b3fdb5e62bf982199278341ddcf7ebf7d32e25e212ad05d496e95f6fa"
7626
7627
  dependencies = [
7627
7628
  "ff",
7628
7629
  "group",
7629
7630
  "hybrid-array",
7631
+ "primefield",
7630
7632
  ]
7631
7633
 
7632
7634
  [[package]]
@@ -7890,7 +7892,16 @@ version = "0.13.3"
7890
7892
  source = "registry+https://github.com/rust-lang/crates.io-index"
7891
7893
  checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a"
7892
7894
  dependencies = [
7893
- "zstd-safe",
7895
+ "zstd-safe 7.2.4",
7896
+ ]
7897
+
7898
+ [[package]]
7899
+ name = "zstd"
7900
+ version = "0.14.3"
7901
+ source = "registry+https://github.com/rust-lang/crates.io-index"
7902
+ checksum = "db3ae9bf90af6e40197bef767eeefc46ad6397420fe873830bd85e5fbbfb3c70"
7903
+ dependencies = [
7904
+ "zstd-safe 8.2.0",
7894
7905
  ]
7895
7906
 
7896
7907
  [[package]]
@@ -7902,11 +7913,20 @@ dependencies = [
7902
7913
  "zstd-sys",
7903
7914
  ]
7904
7915
 
7916
+ [[package]]
7917
+ name = "zstd-safe"
7918
+ version = "8.2.0"
7919
+ source = "registry+https://github.com/rust-lang/crates.io-index"
7920
+ checksum = "ded520f16b29e1a9b771c722221b2b0a0398c2316d9bb3c42b458a5414d7434b"
7921
+ dependencies = [
7922
+ "zstd-sys",
7923
+ ]
7924
+
7905
7925
  [[package]]
7906
7926
  name = "zstd-sys"
7907
- version = "2.0.16+zstd.1.5.7"
7927
+ version = "2.1.2+zstd.1.5.7"
7908
7928
  source = "registry+https://github.com/rust-lang/crates.io-index"
7909
- checksum = "91e19ebc2adc8f83e43039e79776e3fda8ca919132d68a1fed6a5faca2683748"
7929
+ checksum = "481ada9c543b2323cbb7bbdbb5249177fbf0188ed959ed2c15e4b22421c84ed3"
7910
7930
  dependencies = [
7911
7931
  "cc",
7912
7932
  "pkg-config",