From 50961b2cb837b51525651b42f62d269fd6f05f18 Mon Sep 17 00:00:00 2001 From: Vinnie Falco Date: Fri, 13 Nov 2026 11:55:08 -0800 Subject: [PATCH] Bump `quinn-udp` to 0.5.16 in `Cargo.lock` `cargo audit` fails on `quinn-udp` 0.5.15 since RUSTSEC-2026-0538 reached the advisory database, and the advisory names 0.5.16 as the fix. The lock entry of `quinn-udp` now has that version and its checksum. - Only the `version` and `checksum` lines of the entry change, and they were edited by hand, so no other entry of the lock file moves. - `cargo metadata --locked` accepts the file. - `cargo tree --locked --workspace --all-features --target all -i quinn-udp` prints nothing, so no crate of this workspace builds `quinn-udp` and the build output is the same. --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 85f733b..de54211 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1141,9 +1141,9 @@ dependencies = [ [[package]] name = "quinn-udp" -version = "0.5.15" +version = "0.5.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "35a133f956daabe89a61a685c2649f13d82d5aa4bd5d12d1277e1072a21c0694" +checksum = "af66907df18639dcf4db56ca65490cabc4b27a97dbadd96f2926cca73298f016" dependencies = [ "cfg_aliases", "libc",