From 50a7f56171e2eddb778d6a9fa2bbce95aa82aae9 Mon Sep 17 00:00:00 2001
From: M3gA-Mind <elvin@tinyhumans.ai>
Date: Fri, 23 Oct 2026 20:32:29 +0530
Subject: [PATCH 1/2] fix(deps): bump tokio 1.53.1 -> 1.53.3 for
 RUSTSEC-2026-0386

The safe AsyncFd constructors violate I/O safety. 1.53.3 is the patched release in the same minor and has the same dependencies and MSRV; only the tokio lock entry changes.
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 742924d..a8b7786 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1506,9 +1506,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.53.1"
+version = "1.53.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed"
+checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e"
 dependencies = [
  "bytes",
  "libc",

From 1e98da382b7edc80e03e97c1c6f39856fa8be636 Mon Sep 17 00:00:00 2001
From: M3gA-Mind <elvin@tinyhumans.ai>
Date: Fri, 23 Oct 2026 20:33:14 +0530
Subject: [PATCH 2/2] chore(release): tinyhosts 0.4.3

---
 Cargo.lock                      | 4 ++--
 Cargo.toml                      | 4 ++--
 crates/tinyhosts-bus/Cargo.toml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index a8b7786..48617e8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1435,7 +1435,7 @@ dependencies = [
 
 [[package]]
 name = "tinyhosts"
-version = "0.4.1"
+version = "0.4.3"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -1461,7 +1461,7 @@ dependencies = [
 
 [[package]]
 name = "tinyhosts-bus"
-version = "0.4.1"
+version = "0.4.3"
 dependencies = [
  "serde",
  "serde_json",
diff --git a/Cargo.toml b/Cargo.toml
index d861195..6cbb507 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "tinyhosts"
-version = "0.4.1"
+version = "0.4.3"
 edition = "2024"
 rust-version = "1.88"
 license = "GPL-3.0-only"
@@ -33,7 +33,7 @@ exclude = ["vendor/tinybus"]
 
 [dependencies]
 # Pure vocabulary shared with dynamically loaded module consumers.
-tinyhosts-bus = { path = "crates/tinyhosts-bus", version = "0.4.1" }
+tinyhosts-bus = { path = "crates/tinyhosts-bus", version = "0.4.3" }
 # TinyBus defines the message types, interface macro, and frozen module ABI used
 # by the generated integration. Socket and CLI features are unnecessary here.
 tinybus = { version = ">=0.1.3, <0.2", default-features = false, features = ["macros", "modules"], optional = true }
diff --git a/crates/tinyhosts-bus/Cargo.toml b/crates/tinyhosts-bus/Cargo.toml
index c226a8a..8058e3a 100644
--- a/crates/tinyhosts-bus/Cargo.toml
+++ b/crates/tinyhosts-bus/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "tinyhosts-bus"
-version = "0.4.1"
+version = "0.4.3"
 edition = "2024"
 rust-version = "1.88"
 license = "GPL-3.0-only"