Skip to content

Bump memmap2, event-listener and yanked spin versions - #368

Merged
mheffner merged 1 commit into
rotel-dev:mainfrom
mheffner:fix-unsound-memmap2-event-listener
Oct 26, 2026
Merged

mheffner merged 1 commit into
rotel-dev:mainfrom
mheffner:fix-unsound-memmap2-event-listener

Conversation

@mheffner

Copy link
Copy Markdown
Member

Fixes unsound advisories RUSTSEC-2026-0186 (memmap2, via symbolic-common) and RUSTSEC-2026-0221 (event-listener), and moves off the yanked spin 0.9.8 / 0.10.0 releases (via flume / pprof). Cargo.lock-only change, no co-bumps.

Root Cargo.lock:

  • memmap2 0.9.7 -> 0.9.11
  • event-listener 5.4.1 -> 5.4.2 (no longer depends on concurrent-queue)
  • spin 0.9.8 -> 0.9.9
  • spin 0.10.0 -> 0.10.1

Fixes unsound advisories RUSTSEC-2026-0186 (memmap2, via
symbolic-common) and RUSTSEC-2026-0221 (event-listener), and moves
off the yanked spin 0.9.8 / 0.10.0 releases (via flume / pprof).
Cargo.lock-only change, no co-bumps.

Root Cargo.lock:
- memmap2 0.9.7 -> 0.9.11
- event-listener 5.4.1 -> 5.4.2 (no longer depends on concurrent-queue)
- spin 0.9.8 -> 0.9.9
- spin 0.10.0 -> 0.10.1

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@mheffner
mheffner merged commit 21453d1 into rotel-dev:main Oct 26, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant