atm0s-media-server icon indicating copy to clipboard operation
atm0s-media-server copied to clipboard

chore(deps): update rust crate tokio to v1.43.1 [security]

Open renovate[bot] opened this issue 7 months ago • 2 comments
trafficstars

This PR contains the following updates:

Package Type Update Change
tokio (source) dev-dependencies patch 1.43.0 -> 1.43.1
tokio (source) workspace.dependencies patch 1.43.0 -> 1.43.1

GitHub Vulnerability Alerts

GHSA-rr8g-9fpq-6wmg

The broadcast channel internally calls clone on the stored value when receiving it, and only requires T:Send. This means that using the broadcast channel with values that are Send but not Sync can trigger unsoundness if the clone implementation makes use of the value being !Sync.

Thank you to Austin Bonander for finding and reporting this issue.


Release Notes

tokio-rs/tokio (tokio)

v1.43.1

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • [ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] avatar Apr 07 '25 22:04 renovate[bot]