From 8da8336af5f17e826a30b5583d2cbd667f197214 Mon Sep 17 00:00:00 2001 From: Techassi Date: Fri, 6 Nov 2026 11:00:35 +0100 Subject: [PATCH 1/8] chore: Bump Rust toolchain to 1.99.0 --- rust-toolchain.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rust-toolchain.toml b/rust-toolchain.toml index 30a41bc1f..8f624742d 100644 --- a/rust-toolchain.toml +++ b/rust-toolchain.toml @@ -1,3 +1,3 @@ [toolchain] -channel = "1.97.1" +channel = "1.99.0" profile = "default" From c43935f3d4b7a0d4e19e7d1cf922f3259e522f0c Mon Sep 17 00:00:00 2001 From: Techassi Date: Fri, 6 Nov 2026 11:03:18 +0100 Subject: [PATCH 2/8] chore: Bump nightly Rust toolchain to nightly-2026-11-02 --- .pre-commit-config.yaml | 2 +- .vscode/settings.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 80e826e30..8edeb0a54 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -80,7 +80,7 @@ repos: - id: cargo-rustfmt name: cargo-rustfmt language: system - entry: cargo +nightly-2026-08-23 fmt --all -- --check + entry: cargo +nightly-2026-11-02 fmt --all -- --check stages: [pre-commit, pre-merge-commit] pass_filenames: false files: \.rs$ diff --git a/.vscode/settings.json b/.vscode/settings.json index a69f37257..e1d1ec5d7 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -2,7 +2,7 @@ "rust-analyzer.rustfmt.overrideCommand": [ "rustfmt", // Keep in sync with across other repos like operator-rs and operator-templating - "+nightly-2026-07-01", + "+nightly-2026-11-02", "--edition", "2024", "--" From aa65f432f1145c2883dee5a469e3d6e5da3627fe Mon Sep 17 00:00:00 2001 From: Techassi Date: Fri, 6 Nov 2026 11:03:53 +0100 Subject: [PATCH 3/8] ci: Bump Rust toolchain to 1.99.0 --- .github/workflows/boil_pr.yaml | 2 +- .github/workflows/boil_release.yaml | 2 +- .github/workflows/patchable_pr.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/boil_pr.yaml b/.github/workflows/boil_pr.yaml index e041178a7..5a1656987 100644 --- a/.github/workflows/boil_pr.yaml +++ b/.github/workflows/boil_pr.yaml @@ -13,7 +13,7 @@ permissions: contents: read env: - RUST_TOOLCHAIN_VERSION: 1.97.1 + RUST_TOOLCHAIN_VERSION: 1.99.0 jobs: # This job is always run to ensure we don't miss any new upstream advisories diff --git a/.github/workflows/boil_release.yaml b/.github/workflows/boil_release.yaml index ead789841..bdae94475 100644 --- a/.github/workflows/boil_release.yaml +++ b/.github/workflows/boil_release.yaml @@ -9,7 +9,7 @@ on: permissions: {} env: - RUST_TOOLCHAIN_VERSION: 1.97.1 + RUST_TOOLCHAIN_VERSION: 1.99.0 RELEASE_TAG: ${{ github.ref_name }} jobs: diff --git a/.github/workflows/patchable_pr.yaml b/.github/workflows/patchable_pr.yaml index f1eecc71e..2be2fb56b 100644 --- a/.github/workflows/patchable_pr.yaml +++ b/.github/workflows/patchable_pr.yaml @@ -13,7 +13,7 @@ permissions: contents: read env: - RUST_TOOLCHAIN_VERSION: 1.97.1 + RUST_TOOLCHAIN_VERSION: 1.99.0 jobs: # This job is always run to ensure we don't miss any new upstream advisories From 8614ff11c241c9589210b8a8b208857536668b15 Mon Sep 17 00:00:00 2001 From: Techassi Date: Fri, 6 Nov 2026 11:04:12 +0100 Subject: [PATCH 4/8] ci: Bump nightly Rust toolchain to nightly-2026-11-02 --- .github/workflows/pr_prek.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr_prek.yaml b/.github/workflows/pr_prek.yaml index ea48bf8f9..b85513bb4 100644 --- a/.github/workflows/pr_prek.yaml +++ b/.github/workflows/pr_prek.yaml @@ -9,7 +9,7 @@ permissions: env: # Keep in sync with across other repos like operator-rs and operator-templating - RUST_TOOLCHAIN_VERSION: "nightly-2026-08-23" + RUST_TOOLCHAIN_VERSION: "nightly-2026-11-02" HADOLINT_VERSION: "v2.14.0" jobs: From b188ac3a6e7fcbf8be91e348b4ad2f4bc972b89c Mon Sep 17 00:00:00 2001 From: Techassi Date: Fri, 6 Nov 2026 11:11:18 +0100 Subject: [PATCH 5/8] fix: Bump libz-sys to 1.1.31 to negate RUSTSEC-2026-0418 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 27156100b..f08dad91d 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1099,9 +1099,9 @@ dependencies = [ [[package]] name = "libz-sys" -version = "1.1.29" +version = "1.1.31" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "85bc9657773828b90eeb625adff10eeac83cc21bbfd8e23a03eaa8a33c9e28d9" +checksum = "ff20308ecabd635a2dc1dd5834a86c462cca20efba1d5d3ddab1f8aea3455cb2" dependencies = [ "cc", "libc", From 98d3f9d760838449d8ddc5aab0226d2116110173 Mon Sep 17 00:00:00 2001 From: Techassi Date: Fri, 6 Nov 2026 11:15:24 +0100 Subject: [PATCH 6/8] fix: Bump pulldown-cmark to 0.13.6 to negate RUSTSEC-2026-0414 and RUSTSEC-2026-0433 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index f08dad91d..11ded8d1c 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1320,9 +1320,9 @@ dependencies = [ [[package]] name = "pulldown-cmark" -version = "0.13.4" +version = "0.13.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e9f068eba8e7071c5f9511831b44f32c740d5adf574e990f946ddb53db2f314e" +checksum = "3db2be46835f013dd3f4fa7f5f7402c537787b54ebb6fe2b94bbdd7e2669bb7b" dependencies = [ "bitflags", "memchr", From 93a920317f8df618d091ccdb3d540f8d48556d45 Mon Sep 17 00:00:00 2001 From: Techassi Date: Fri, 6 Nov 2026 11:16:55 +0100 Subject: [PATCH 7/8] fix: Bump rustls-webpki 0.103.16 to negate RUSTSEC-2026-0382 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 11ded8d1c..df0ccab11 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1648,9 +1648,9 @@ checksum = "eec689c0bc40ff2458a5977b6619cb718087084a18e02a131c599b62d05e1a5f" [[package]] name = "rustls-webpki" -version = "0.103.15" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "aws-lc-rs", "ring", From a18ffdb236ec9626ebced3f67868fc7fa10bdf29 Mon Sep 17 00:00:00 2001 From: Techassi Date: Fri, 6 Nov 2026 11:18:05 +0100 Subject: [PATCH 8/8] fix: Bump tokio to 1.54.1 to negate RUSTSEC-2026-0386 --- Cargo.lock | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index df0ccab11..7ea70b45c 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -53,7 +53,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -64,7 +64,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -167,7 +167,7 @@ dependencies = [ "maybe-owned", "rustix", "rustix-linux-procfs", - "windows-sys 0.61.2", + "windows-sys 0.60.2", "winx", ] @@ -500,7 +500,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -1183,7 +1183,7 @@ version = "0.50.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.59.0", ] [[package]] @@ -1383,7 +1383,7 @@ dependencies = [ "once_cell", "socket2", "tracing", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -1570,7 +1570,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -1637,7 +1637,7 @@ dependencies = [ "security-framework", "security-framework-sys", "webpki-root-certs", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -1859,7 +1859,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -1992,7 +1992,7 @@ dependencies = [ "getrandom 0.4.3", "once_cell", "rustix", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -2072,9 +2072,9 @@ checksum = "fd3ca314f692efd6c868f8408f53fe444634a845f96c028b97d35f6a1f79f0ee" [[package]] name = "tokio" -version = "1.53.2" +version = "1.54.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e95f91fcc7a621e8b030f6aa23c71fe9838ae2fb4d8118b75602a328f5144044" +checksum = "b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3" dependencies = [ "bytes", "libc", @@ -2506,7 +2506,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]]