From da54b4a44d8b00b31b5ecb196a809bffe2119dd4 Mon Sep 17 00:00:00 2001 From: M3gA-Mind Date: Fri, 23 Oct 2026 20:32:30 +0530 Subject: [PATCH 1/2] fix(deps): bump tokio 1.53.1 -> 1.53.3 for RUSTSEC-2026-0386 The safe AsyncFd constructors violate I/O safety. 1.53.3 is the patched release in the same minor and has the same dependencies and MSRV; only the tokio lock entry changes. --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 2dfc542..052fd56 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1375,9 +1375,9 @@ checksum = "fd3ca314f692efd6c868f8408f53fe444634a845f96c028b97d35f6a1f79f0ee" [[package]] name = "tokio" -version = "1.53.1" +version = "1.53.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed" +checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e" dependencies = [ "bytes", "libc", From 0d61a29b64e81289ac7f581ede9fed688a25850c Mon Sep 17 00:00:00 2001 From: M3gA-Mind Date: Fri, 23 Oct 2026 20:33:21 +0530 Subject: [PATCH 2/2] chore(release): tinysearch 0.5.3 --- Cargo.lock | 4 ++-- Cargo.toml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 052fd56..8dc5da6 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1334,7 +1334,7 @@ dependencies = [ [[package]] name = "tinysearch" -version = "0.5.1" +version = "0.5.3" dependencies = [ "reqwest", "serde", @@ -1350,7 +1350,7 @@ dependencies = [ [[package]] name = "tinysearch-bus" -version = "0.5.1" +version = "0.5.3" dependencies = [ "schemars", "serde", diff --git a/Cargo.toml b/Cargo.toml index a06d94b..6928f90 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -18,7 +18,7 @@ exclude = ["vendor", "worktrees"] # true`, so the version the release workflow bumps is written in exactly one # place and every crate moves together. [workspace.package] -version = "0.5.1" +version = "0.5.3" edition = "2024" rust-version = "1.88" license = "GPL-3.0-only"