From b25553074e959692b827de4b82dbd540a1f47784 Mon Sep 17 00:00:00 2001 From: wan9chi Date: Tue, 3 Nov 2026 21:56:15 +0800 Subject: [PATCH] fix(deps): update zstd to 0.13.4 for RustSec advisories zstd 0.13.4 and zstd-safe 7.4.0 fix RUSTSEC-2026-0391, RUSTSEC-2026-0398, RUSTSEC-2026-0403, and the zstd-safe soundness advisories published on 2026-10-16. vt still requires zstd ^0.13, so only the lockfile changes and the vite-task pin stays at 40cb9cac. Co-Authored-By: Claude Opus 5.5 --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 856c6cccd5..dedfb76e3a 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -9688,18 +9688,18 @@ checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" [[package]] name = "zstd" -version = "0.13.3" +version = "0.13.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a" +checksum = "cdb02c3132d251ab1606e9fc913a7da6c6ed08cc263df15edf082e1dc497d157" dependencies = [ "zstd-safe", ] [[package]] name = "zstd-safe" -version = "7.3.0" +version = "7.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "64d80649ab6db9d9f6f9c80a40becd948eda4714a0a5ac8c4d157a32231c7882" +checksum = "1c8ea04668f5de8d8d51051714ba560c9536519cadcdb8829bba4fe2ad159b03" dependencies = [ "zstd-sys", ]