From ebfeb9def6dc13ca6c4b7bbd0a07f23254e9ea46 Mon Sep 17 00:00:00 2001 From: Mike Heffner Date: Sun, 25 Oct 2026 22:45:52 -0400 Subject: [PATCH] Bump tokio for RUSTSEC-2026-0386 (unsound AsyncFd I/O safety) Fixes RUSTSEC-2026-0386 (patched >= 1.51.6, < 1.52 or >= 1.53.3). Cargo.lock-only changes. Root Cargo.lock (1.50.0 -> first patched 1.51.x); co-bumps are the minimum versions tokio 1.51.6 requires: - tokio 1.50.0 -> 1.51.6 - tokio-macros 2.6.1 -> 2.7.0 (tokio requires ~2.7.0) - mio 1.0.4 -> 1.2.0 (tokio requires ^1.2.0) - socket2 0.6.0 -> 0.6.3 (tokio requires ^0.6.3) - libc 0.2.174 -> 0.2.183 (mio 1.2 requires ^0.2.183) examples/rust_processors/async_enrichment_processor, examples/ rust_processors/trivial_processor, rotel_python_processor_sdk, rotel_rust_processor_sdk and utilities Cargo.lock: - tokio 1.53.1 -> 1.53.3 Co-Authored-By: Claude Opus 5.5 --- Cargo.lock | 34 +++++++++---------- .../async_enrichment_processor/Cargo.lock | 4 +-- .../trivial_processor/Cargo.lock | 4 +-- rotel_python_processor_sdk/Cargo.lock | 4 +-- rotel_rust_processor_sdk/Cargo.lock | 4 +-- utilities/Cargo.lock | 4 +-- 6 files changed, 27 insertions(+), 27 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index fe161a31..365baeb4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1806,7 +1806,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "778e2ac28f6c47af28e4907f13ffd1e1ddbd400980a9abd7c8df189bf578a5ad" dependencies = [ "libc", - "windows-sys 0.60.2", + "windows-sys 0.52.0", ] [[package]] @@ -2868,9 +2868,9 @@ dependencies = [ [[package]] name = "libc" -version = "0.2.174" +version = "0.2.183" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776" +checksum = "b5b646652bf6661599e1da8901b3b9522896f01e736bad5f723fe7a3a27f899d" [[package]] name = "libloading" @@ -2889,7 +2889,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "07033963ba89ebaf1584d767badaa2e8fcec21aedea6b8c0346d487d49c28667" dependencies = [ "cfg-if", - "windows-targets 0.53.3", + "windows-targets 0.52.6", ] [[package]] @@ -3060,14 +3060,14 @@ dependencies = [ [[package]] name = "mio" -version = "1.0.4" +version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "78bed444cc8a2160f01cbcf811ef18cac863ad68ae8ca62092e8db51d51c761c" +checksum = "50b7e5b27aa02a74bac8c3f23f448f8d87ff11f92d3aac1a6ed369ee08cc56c1" dependencies = [ "libc", "log", "wasi 0.11.1+wasi-snapshot-preview1", - "windows-sys 0.59.0", + "windows-sys 0.61.2", ] [[package]] @@ -4422,7 +4422,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys 0.9.4", - "windows-sys 0.60.2", + "windows-sys 0.52.0", ] [[package]] @@ -4765,12 +4765,12 @@ dependencies = [ [[package]] name = "socket2" -version = "0.6.0" +version = "0.6.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "233504af464074f9d066d7b5416c5f9b894a5862a6506e306f7b816cdd6f1807" +checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e" dependencies = [ "libc", - "windows-sys 0.59.0", + "windows-sys 0.61.2", ] [[package]] @@ -5079,9 +5079,9 @@ dependencies = [ [[package]] name = "tokio" -version = "1.50.0" +version = "1.51.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "27ad5e34374e03cfffefc301becb44e9dc3c17584f414349ebe29ed26661822d" +checksum = "a13e32eacd0222f9658be2ccbd83b718bfd9bfb0d54b5921913c184cb86124a5" dependencies = [ "bytes", "libc", @@ -5089,16 +5089,16 @@ dependencies = [ "parking_lot", "pin-project-lite", "signal-hook-registry", - "socket2 0.6.0", + "socket2 0.6.3", "tokio-macros", "windows-sys 0.61.2", ] [[package]] name = "tokio-macros" -version = "2.6.1" +version = "2.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5c55a2eff8b69ce66c84f85e1da1c233edc36ceb85a2058d11b0d6a3c7e7569c" +checksum = "385a6cb71ab9ab790c5fe8d67f1645e6c450a7ce006a33de03daa956cf70a496" dependencies = [ "proc-macro2", "quote", @@ -5228,7 +5228,7 @@ dependencies = [ "hyper-util", "percent-encoding", "pin-project", - "socket2 0.6.0", + "socket2 0.6.3", "sync_wrapper", "tokio", "tokio-rustls", diff --git a/examples/rust_processors/async_enrichment_processor/Cargo.lock b/examples/rust_processors/async_enrichment_processor/Cargo.lock index 9e7d2bd5..37ef2f48 100644 --- a/examples/rust_processors/async_enrichment_processor/Cargo.lock +++ b/examples/rust_processors/async_enrichment_processor/Cargo.lock @@ -911,9 +911,9 @@ dependencies = [ [[package]] name = "tokio" -version = "1.53.1" +version = "1.53.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed" +checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e" dependencies = [ "bytes", "libc", diff --git a/examples/rust_processors/trivial_processor/Cargo.lock b/examples/rust_processors/trivial_processor/Cargo.lock index 0f4fc115..dfc5ca1e 100644 --- a/examples/rust_processors/trivial_processor/Cargo.lock +++ b/examples/rust_processors/trivial_processor/Cargo.lock @@ -902,9 +902,9 @@ dependencies = [ [[package]] name = "tokio" -version = "1.53.1" +version = "1.53.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed" +checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e" dependencies = [ "bytes", "libc", diff --git a/rotel_python_processor_sdk/Cargo.lock b/rotel_python_processor_sdk/Cargo.lock index 79ab8684..08a5d10f 100644 --- a/rotel_python_processor_sdk/Cargo.lock +++ b/rotel_python_processor_sdk/Cargo.lock @@ -1256,9 +1256,9 @@ dependencies = [ [[package]] name = "tokio" -version = "1.53.1" +version = "1.53.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed" +checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e" dependencies = [ "bytes", "libc", diff --git a/rotel_rust_processor_sdk/Cargo.lock b/rotel_rust_processor_sdk/Cargo.lock index 91d7cc81..c37bbea5 100644 --- a/rotel_rust_processor_sdk/Cargo.lock +++ b/rotel_rust_processor_sdk/Cargo.lock @@ -902,9 +902,9 @@ dependencies = [ [[package]] name = "tokio" -version = "1.53.1" +version = "1.53.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed" +checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e" dependencies = [ "bytes", "libc", diff --git a/utilities/Cargo.lock b/utilities/Cargo.lock index ad8f3ec7..de5ceddd 100644 --- a/utilities/Cargo.lock +++ b/utilities/Cargo.lock @@ -748,9 +748,9 @@ dependencies = [ [[package]] name = "tokio" -version = "1.53.1" +version = "1.53.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed" +checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e" dependencies = [ "bytes", "libc",