Skip to content

fix: update time crate to 0.3.47 (RUSTSEC-2026-0009)#42

Merged
nerdCopter merged 1 commit into
masterfrom
fix/security-audit-time-crate
Jun 9, 2026
Merged

fix: update time crate to 0.3.47 (RUSTSEC-2026-0009)#42
nerdCopter merged 1 commit into
masterfrom
fix/security-audit-time-crate

Conversation

@nerdCopter

Copy link
Copy Markdown
Owner

AI Generated pull-request

Summary

  • Updates time from 0.3.44 → 0.3.47 in Cargo.lock (transitive via vergen build-dependency)
  • Resolves RUSTSEC-2026-0009: Denial of Service via Stack Exhaustion (CVSS 6.8 medium)
  • Cargo.toml unchanged — lock-only update

Test plan

  • All 75 tests pass (cargo test)
  • Security Audit CI passes with time >= 0.3.47

Resolves cargo audit failure caused by time v0.3.44 (pulled in via
vergen build-dependency). Upgrades to 0.3.47 which patches the
denial-of-service via stack exhaustion vulnerability.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Jun 9, 2026

Copy link
Copy Markdown

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 7cc08a7d-be00-4a6d-bf4b-6d4436ce14e4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/security-audit-time-crate

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@nerdCopter nerdCopter merged commit 7b537e8 into master Jun 9, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant