Skip to content

Update quick-xml version for RUSTSEC-2026-0195 - #17

Open
aisuzuki wants to merge 1 commit into
Sayan751:masterfrom
aisuzuki:fix/16-update-quick-xml-version
Open

Update quick-xml version for RUSTSEC-2026-0195#17
aisuzuki wants to merge 1 commit into
Sayan751:masterfrom
aisuzuki:fix/16-update-quick-xml-version

Conversation

@aisuzuki

@aisuzuki aisuzuki commented Jul 6, 2026

Copy link
Copy Markdown

Closes: #16

For further details, read #16.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the Rust build dependency quick-xml in rust-lib to address RustSec advisory RUSTSEC-2026-0195 (referenced in issue #16), ensuring the project pulls in a patched version.

Changes:

  • Bumped quick-xml build-dependency from ^0.39.2 to ^0.41.0 in rust-lib/Cargo.toml.
  • Updated rust-lib/Cargo.lock to lock quick-xml at 0.41.0 (including checksum).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
rust-lib/Cargo.toml Updates the quick-xml build-dependency requirement to a patched version.
rust-lib/Cargo.lock Refreshes the lockfile entry to reflect quick-xml 0.41.0 and its checksum.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[RUSTSEC-2026-0195] Bump quick-xml version

2 participants