From ec791789f5999fce5b2ca3623fd466ea47dacc9b Mon Sep 17 00:00:00 2001 From: M3gA-Mind Date: Tue, 27 Oct 2026 18:48:28 +0530 Subject: [PATCH 1/3] chore(deps): move zstd to 0.14.3 for RUSTSEC-2026-0391/0398/0403 --- Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Cargo.toml b/Cargo.toml index 87ce469..517b2f6 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -89,7 +89,7 @@ ulid = "1" # Only the codec is needed, so the dictionary builder and legacy-format # decoders are left out. It links a C library but no database client or # transport, which is what the core's dependency check forbids. -zstd = { version = "0.13", default-features = false } +zstd = { version = "0.14.3", default-features = false } # Documents and stream records are JSON values; `CollectionSpec` and the query # types serialize so a host can log or persist them. serde = { version = "1", features = ["derive"] } From 57a2705543d0faf316f2defa88a5755e9be8c04e Mon Sep 17 00:00:00 2001 From: M3gA-Mind Date: Tue, 27 Oct 2026 18:51:52 +0530 Subject: [PATCH 2/3] chore(deps): regenerate locks for zstd 0.14.3 zstd 0.13.3 -> 0.14.3, zstd-safe 7.3.0 -> 8.2.0 in the root and both proof-workspace locks; zstd-sys 2.1.1 -> 2.1.2 in the root lock. --- Cargo.lock | 12 ++++++------ proof-workspaces/document-callback/Cargo.lock | 8 ++++---- proof-workspaces/storage-callback/Cargo.lock | 8 ++++---- 3 files changed, 14 insertions(+), 14 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 3043023..1c77399 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -5042,27 +5042,27 @@ checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" [[package]] name = "zstd" -version = "0.13.3" +version = "0.14.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a" +checksum = "db3ae9bf90af6e40197bef767eeefc46ad6397420fe873830bd85e5fbbfb3c70" dependencies = [ "zstd-safe", ] [[package]] name = "zstd-safe" -version = "7.3.0" +version = "8.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "64d80649ab6db9d9f6f9c80a40becd948eda4714a0a5ac8c4d157a32231c7882" +checksum = "ded520f16b29e1a9b771c722221b2b0a0398c2316d9bb3c42b458a5414d7434b" dependencies = [ "zstd-sys", ] [[package]] name = "zstd-sys" -version = "2.1.1+zstd.1.5.7" +version = "2.1.2+zstd.1.5.7" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "aeec9eaf2dffbbd09201e23bd0ffcbaa33bb8e9266a10734fd7ed90a85eca078" +checksum = "481ada9c543b2323cbb7bbdbb5249177fbf0188ed959ed2c15e4b22421c84ed3" dependencies = [ "cc", "pkg-config", diff --git a/proof-workspaces/document-callback/Cargo.lock b/proof-workspaces/document-callback/Cargo.lock index 30b5633..76b2cc6 100644 --- a/proof-workspaces/document-callback/Cargo.lock +++ b/proof-workspaces/document-callback/Cargo.lock @@ -1446,18 +1446,18 @@ checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" [[package]] name = "zstd" -version = "0.13.3" +version = "0.14.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a" +checksum = "db3ae9bf90af6e40197bef767eeefc46ad6397420fe873830bd85e5fbbfb3c70" dependencies = [ "zstd-safe", ] [[package]] name = "zstd-safe" -version = "7.3.0" +version = "8.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "64d80649ab6db9d9f6f9c80a40becd948eda4714a0a5ac8c4d157a32231c7882" +checksum = "ded520f16b29e1a9b771c722221b2b0a0398c2316d9bb3c42b458a5414d7434b" dependencies = [ "zstd-sys", ] diff --git a/proof-workspaces/storage-callback/Cargo.lock b/proof-workspaces/storage-callback/Cargo.lock index c324eea..8957021 100644 --- a/proof-workspaces/storage-callback/Cargo.lock +++ b/proof-workspaces/storage-callback/Cargo.lock @@ -2860,18 +2860,18 @@ checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" [[package]] name = "zstd" -version = "0.13.3" +version = "0.14.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a" +checksum = "db3ae9bf90af6e40197bef767eeefc46ad6397420fe873830bd85e5fbbfb3c70" dependencies = [ "zstd-safe", ] [[package]] name = "zstd-safe" -version = "7.3.0" +version = "8.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "64d80649ab6db9d9f6f9c80a40becd948eda4714a0a5ac8c4d157a32231c7882" +checksum = "ded520f16b29e1a9b771c722221b2b0a0398c2316d9bb3c42b458a5414d7434b" dependencies = [ "zstd-sys", ] From e513fc1154e815e9dec008102a03fc80f042487f Mon Sep 17 00:00:00 2001 From: M3gA-Mind Date: Tue, 27 Oct 2026 18:52:28 +0530 Subject: [PATCH 3/3] chore(deps): keep cargo's windows-sys 0.61.2 edges from the zstd regen --- Cargo.lock | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 1c77399..4f29db4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1083,7 +1083,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -2693,7 +2693,7 @@ dependencies = [ "once_cell", "socket2", "tracing", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -3005,7 +3005,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys 0.12.1", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -3079,7 +3079,7 @@ dependencies = [ "security-framework 3.7.0", "security-framework-sys", "webpki-root-certs", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -3426,7 +3426,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4" dependencies = [ "libc", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -3627,7 +3627,7 @@ dependencies = [ "getrandom 0.4.3", "once_cell", "rustix 1.1.5", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -4189,7 +4189,7 @@ checksum = "f2f6fb2847f6742cd76af783a2a2c49e9375d0a111c7bef6f71cd9e738c72d6e" dependencies = [ "memoffset", "tempfile", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -4503,7 +4503,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]]