New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update rust crate zerocopy to v0.7.31 [security] #151

Merged

flihp merged 1 commit into main from renovate/crate-zerocopy-vulnerability

Dec 22, 2023

Contributor

renovate bot commented Dec 15, 2023 •

edited

Loading

This PR contains the following updates:

Package	Type	Update	Change
zerocopy	workspace.dependencies	patch	`0.7.3` -> `0.7.31`

GitHub Vulnerability Alerts

GHSA-3mv5-343c-w2qg

This advisory is also published as RUSTSEC-2023-0074.

The Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound and may allow safe code to exhibit undefined behavior when used with Ref<B, T> where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut.

See https://github.com/google/zerocopy/issues/716 for a more in-depth analysis.

The current plan is to yank the affected versions soon. See https://github.com/google/zerocopy/issues/679 for more detail.

GHSA-rjhf-4mh8-9xjq

The Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound and may allow safe code to exhibit undefined behavior when used with Ref<B, T> where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut.

See https://github.com/google/zerocopy/issues/716 for a more in-depth analysis.

The current plan is to yank the affected versions soon. See https://github.com/google/zerocopy/issues/679 for more detail.

Release Notes

google/zerocopy (zerocopy)

`v0.7.31`

This release fixes the soundness issue described in #716. The affected versions will soon be yanked.

This release is also described in security advisories RUSTSEC-2023-0074 and GHSA-3mv5-343c-w2qg.

What's Changed

Fix soundness hole in Ref::into_ref and into_mut by @joshlf in https://github.com/google/zerocopy/pull/721

Full Changelog: google/zerocopy@v0.7.30...v0.7.31

`v0.7.30`

Security advisories for this bug have been published as
RUSTSEC-2023-0074 and GHSA-3mv5-343c-w2qg.

In these versions, the Ref methods into_ref, into_mut, into_slice, and
into_mut_slice were permitted in combination with the standard library
cell::Ref and cell::RefMut types for Ref<B, T>'s B type parameter. These
combinations are unsound, and may permit safe code to exhibit undefined
behavior. Fixes have been published to each affected minor version which do not
permit this code to compile.

See #716 for more details.

`v0.7.29`

What's Changed

[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/664
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/668
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/669
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/670
Implement TryFromBytes for [T] by @jswrenn in https://github.com/google/zerocopy/pull/666
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/673
[derive] Fix AsBytes for #[repr(C, packed(N))] by @maurer in https://github.com/google/zerocopy/pull/672
Release 0.7.29 by @joshlf in https://github.com/google/zerocopy/pull/676

Full Changelog: google/zerocopy@v0.7.28...v0.7.29

`v0.7.28`

These versions were briefly yanked due to a non-soundness regression reported in
#672. After reconsidering our yanking policy in #679,
we un-yanked these versions.

`v0.7.27`

These versions were briefly yanked due to a non-soundness regression reported in
#672. After reconsidering our yanking policy in #679,
we un-yanked these versions.

`v0.7.26`

What's Changed

Add TODOs related to #429 and quotes to safety comments. by @samuelselleck in https://github.com/google/zerocopy/pull/433
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/598
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/601
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/602
use extern crate as zerocopy to support intenral derive use by @jswrenn in https://github.com/google/zerocopy/pull/604
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/605
[CI] Bump actions/dependency-review-action from 3.1.0 to 3.1.2 by @dependabot in https://github.com/google/zerocopy/pull/607
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/608
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/610
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/611
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/612
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/613
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/615
[CI] Bump actions/dependency-review-action from 3.1.2 to 3.1.3 by @dependabot in https://github.com/google/zerocopy/pull/617
[CI] Bump github/codeql-action from 2.22.5 to 2.22.6 by @dependabot in https://github.com/google/zerocopy/pull/616
Implement FromZeroes for Option<[extern "C"] fn()> by @joshlf in https://github.com/google/zerocopy/pull/600
[doc] Use doc(cfg(...)) in more places by @joshlf in https://github.com/google/zerocopy/pull/599

New Contributors

@samuelselleck made their first contribution in https://github.com/google/zerocopy/pull/433

Full Changelog: google/zerocopy@v0.7.25...v0.7.26

`v0.7.25`

What's Changed

[cargo.sh] Set CARGO_TARGET_DIR for cargo metadata by @joshlf in https://github.com/google/zerocopy/pull/580
[macro_util] Add comment to core_reexport by @joshlf in https://github.com/google/zerocopy/pull/586
FromZeroes for Option where T is subject to NPO by @joshlf in https://github.com/google/zerocopy/pull/595

Full Changelog: google/zerocopy@v0.7.24...v0.7.25

`v0.7.24`

What's Changed

[docs] Re-export derive macros separately by @joshlf in https://github.com/google/zerocopy/pull/589
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/592
Add slice-based methods to FromBytes by @newpavlov in https://github.com/google/zerocopy/pull/593

New Contributors

@newpavlov made their first contribution in https://github.com/google/zerocopy/pull/593

Full Changelog: google/zerocopy@v0.7.23...v0.7.24

`v0.7.23`

What's Changed

[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/585
Implement KnownLayout, FromZeroes for raw pointers by @joshlf in https://github.com/google/zerocopy/pull/584
[docs] Mark KnownLayout derive #[doc(hidden)] by @joshlf in https://github.com/google/zerocopy/pull/588
Release 0.7.23 by @joshlf in https://github.com/google/zerocopy/pull/587

Full Changelog: google/zerocopy@v0.7.22...v0.7.23

`v0.7.22`

What's Changed

[cargo.sh] Auto-install toolchains and components by @joshlf in https://github.com/google/zerocopy/pull/577
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/582
[ci][check_versions] Refactor bash script by @joshlf in https://github.com/google/zerocopy/pull/581
[doc] Use doc(cfg(...)) in docs.rs by @joshlf in https://github.com/google/zerocopy/pull/579

Full Changelog: google/zerocopy@v0.7.21...v0.7.22

`v0.7.21`

What's Changed

[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/573
Deny strict provenance lints during testing by @joshlf in https://github.com/google/zerocopy/pull/572
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/575
[macro_util] Add trailing_field_offset! macro by @joshlf in https://github.com/google/zerocopy/pull/540
add align_of! for computing alignment of DSTs by @jswrenn in https://github.com/google/zerocopy/pull/576
Enable all stable features on the Rust playground by @joshlf in https://github.com/google/zerocopy/pull/578

Full Changelog: google/zerocopy@v0.7.20...v0.7.21

`v0.7.20`

What's Changed

[simd] Add support for new x86[_64] types by @joshlf in https://github.com/google/zerocopy/pull/571

Full Changelog: google/zerocopy@v0.7.19...v0.7.20

`v0.7.19`

What's Changed

Improve docs for #526 by @kupiakos in https://github.com/google/zerocopy/pull/559
[ci] Don't deny warnings in UI tests by @joshlf in https://github.com/google/zerocopy/pull/567
[roll-pinned-toolchain-versions] Allow manual trigger by @joshlf in https://github.com/google/zerocopy/pull/568
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/565
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/570
Lower MSRV to 1.60 by @joshlf in https://github.com/google/zerocopy/pull/561

Full Changelog: google/zerocopy@v0.7.18...v0.7.19

`v0.7.18`

What's Changed

Add bytes to type reference helper methods to FromBytes by @kupiakos in https://github.com/google/zerocopy/pull/526
Release 0.7.18 by @joshlf in https://github.com/google/zerocopy/pull/558

Full Changelog: google/zerocopy@v0.7.17...v0.7.18

`v0.7.17`

What's Changed

Add transmute_mut! macro by @jswrenn in https://github.com/google/zerocopy/pull/550

Full Changelog: google/zerocopy@v0.7.16...v0.7.17

`v0.7.16`

What's Changed

[cargo.sh] forward RUSTFLAGS by @jswrenn in https://github.com/google/zerocopy/pull/548
[derive] Support KnownLayout for sized types by @joshlf in https://github.com/google/zerocopy/pull/514
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/549
[CI] Bump github/codeql-action from 2.22.4 to 2.22.5 by @dependabot in https://github.com/google/zerocopy/pull/552
[derive][tests] Fix KnownLayout test by @joshlf in https://github.com/google/zerocopy/pull/555
[derive] Emit #[allow(deprecated)] in derived code by @joshlf in https://github.com/google/zerocopy/pull/556

Full Changelog: google/zerocopy@v0.7.15...v0.7.16

`v0.7.15`

What's Changed

[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/545
[byteorder] Minor doc improvements by @joshlf in https://github.com/google/zerocopy/pull/546

Full Changelog: google/zerocopy@v0.7.14...v0.7.15

`v0.7.14`

What's Changed

[docs] Use backticks instead of quotes by @joshlf in https://github.com/google/zerocopy/pull/543
Release under MIT and Apache 2.0 by @joshlf in https://github.com/google/zerocopy/pull/542

Full Changelog: google/zerocopy@v0.7.13...v0.7.14

`v0.7.13`

What's Changed

Add include_bytes! macro by @joshlf in https://github.com/google/zerocopy/pull/35

Full Changelog: google/zerocopy@v0.7.12...v0.7.13

`v0.7.12`

What's Changed

[ci][kani] Pass correct RUSTFLAGS by @joshlf in https://github.com/google/zerocopy/pull/493
[ci][kani] Use kani-github-action by @Agnik7 in https://github.com/google/zerocopy/pull/472
[CI] Bump github/codeql-action from 2.22.1 to 2.22.2 by @dependabot in https://github.com/google/zerocopy/pull/496
[CI] Bump github/codeql-action from 2.22.2 to 2.22.3 by @dependabot in https://github.com/google/zerocopy/pull/504
[ci] Don't test on MIPS by @joshlf in https://github.com/google/zerocopy/pull/499
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/507
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/508
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/510
[ci] Roll pinned nightly toolchain by @joshlf in https://github.com/google/zerocopy/pull/513
Fix Ref::new_slice_from_suffix() by @dmitryash in https://github.com/google/zerocopy/pull/506
feat : Add positive and negative trait impl tests for SIMD types #130 by @Sh0g0-1758 in https://github.com/google/zerocopy/pull/487
[CI] Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in https://github.com/google/zerocopy/pull/518
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/517
Improve test_new_aligned_sized to catch more bugs by @joshlf in https://github.com/google/zerocopy/pull/511
[ci] Work around Miri bug on aarch64 targets by @joshlf in https://github.com/google/zerocopy/pull/519
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/521
Improve ManuallyDoc safety comments by @joshlf in https://github.com/google/zerocopy/pull/522
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/527
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/529
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/530
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/531
[CI] Bump github/codeql-action from 2.22.3 to 2.22.4 by @dependabot in https://github.com/google/zerocopy/pull/532
[CI] Bump Swatinem/rust-cache from 2.7.0 to 2.7.1 by @dependabot in https://github.com/google/zerocopy/pull/533
Initial commit of Ptr type by @joshlf in https://github.com/google/zerocopy/pull/406
[ci] Harden GitHub Actions by @step-security-bot in https://github.com/google/zerocopy/pull/535
[CI] Bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in https://github.com/google/zerocopy/pull/536
[ci] Roll pinned nightly toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/538
[clippy] Be more permissive with safety comments by @joshlf in https://github.com/google/zerocopy/pull/398
improve FromZeroes documentation by @jswrenn in https://github.com/google/zerocopy/pull/505

New Contributors

@Agnik7 made their first contribution in https://github.com/google/zerocopy/pull/472
@dmitryash made their first contribution in https://github.com/google/zerocopy/pull/506
@Sh0g0-1758 made their first contribution in https://github.com/google/zerocopy/pull/487

Full Changelog: google/zerocopy@v0.7.11...v0.7.12

`v0.7.11`

What's Changed

[third-party][rust] Add README.fuchsia file by @joshlf in https://github.com/google/zerocopy/pull/492

Full Changelog: google/zerocopy@v0.7.10...v0.7.11

`v0.7.10`

What's Changed

[derive] Include LICENSE file when publishing by @joshlf in https://github.com/google/zerocopy/pull/489

Full Changelog: google/zerocopy@v0.7.9...v0.7.10

`v0.7.9`

What's Changed

[ci] Roll pinned stable toolchain by @google-pr-creation-bot in https://github.com/google/zerocopy/pull/471
[roll] Install rust-src component when rolling by @joshlf in https://github.com/google/zerocopy/pull/469
[CI] Bump github/codeql-action from 2.21.9 to 2.22.0 by @dependabot in https://github.com/google/zerocopy/pull/474
[CI] Bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in https://github.com/google/zerocopy/pull/478
[CI] Bump github/codeql-action from 2.22.0 to 2.22.1 by @dependabot in https://github.com/google/zerocopy/pull/479
Document zerocopy's design ethos by @jswrenn in https://github.com/google/zerocopy/pull/405
document zerocopy's relationship to Project Safe Transmute by @jswrenn in https://github.com/google/zerocopy/pull/484
[POLICIES.md] Initial commit by @joshlf in https://github.com/google/zerocopy/pull/485
Release 0.7.9 by @joshlf in https://github.com/google/zerocopy/pull/486

Full Changelog: google/zerocopy@v0.7.8...v0.7.9

`v0.7.8`

What's Changed

[ci] Skip MIPS tests on the stable toolchain by @joshlf in https://github.com/google/zerocopy/pull/459
[ci] Fix all-jobs-succeeded job by @joshlf in https://github.com/google/zerocopy/pull/460
[byteorder] Simplify tests by @joshlf in https://github.com/google/zerocopy/pull/435
[tests] add transmute! UI tests by @jswrenn in https://github.com/google/zerocopy/pull/456
[trybuild] Update dep to 1.0.85 by @joshlf in https://github.com/google/zerocopy/pull/463
Add transmute_ref! macro by @joshlf in https://github.com/google/zerocopy/pull/183

Full Changelog: google/zerocopy@v0.7.7...v0.7.8

`v0.7.7`

What's Changed

Roll stable and nightly toolchains separately by @joshlf in https://github.com/google/zerocopy/pull/446
[CI] Bump step-security/harden-runner from 2.5.1 to 2.6.0 by @dependabot in https://github.com/google/zerocopy/pull/449
[macro_util] Rename from derive_util, include more by @joshlf in https://github.com/google/zerocopy/pull/455

Full Changelog: google/zerocopy@v0.7.6...v0.7.7

`v0.7.6`

What's Changed

fix: fix up broken link by @leongross in https://github.com/google/zerocopy/pull/389
[docs] Fix broken doc link by @joshlf in https://github.com/google/zerocopy/pull/387
Fix bug in validate_cast_and_convert_metadata by @joshlf in https://github.com/google/zerocopy/pull/376
[ci] Run byteorder tests under Kani by @joshlf in https://github.com/google/zerocopy/pull/394
[miri] Optimize tests by @joshlf in https://github.com/google/zerocopy/pull/395
[tests] Test more failure conditions by @joshlf in https://github.com/google/zerocopy/pull/396
[ci] Don't run ignored tests under Miri by @joshlf in https://github.com/google/zerocopy/pull/399
Add round_down_to_next_multiple_of_alignment by @joshlf in https://github.com/google/zerocopy/pull/393
[miri] Skip running UI tests by @joshlf in https://github.com/google/zerocopy/pull/400
[CI] Bump github/codeql-action from 2.21.7 to 2.21.8 by @dependabot in https://github.com/google/zerocopy/pull/401
[testutil] Initial commit by @joshlf in https://github.com/google/zerocopy/pull/412
Fixed TODO comment placement by @joshlf in https://github.com/google/zerocopy/pull/415
[CI] Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in https://github.com/google/zerocopy/pull/418
Prove correctness of layout len utilities with kani by @jswrenn in https://github.com/google/zerocopy/pull/402
[ci] Roll pinned nightly toolchain automatically by @joshlf in https://github.com/google/zerocopy/pull/408
[CI] Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in https://github.com/google/zerocopy/pull/426
[CI] Bump github/codeql-action from 2.21.8 to 2.21.9 by @dependabot in https://github.com/google/zerocopy/pull/425
[ci] configure CI to support merge queue by @jswrenn in https://github.com/google/zerocopy/pull/428
Refactor unsafe blocks; update TODO comments by @joshlf in https://github.com/google/zerocopy/pull/432
Add job to signal to branch protection that all other jobs have succeeded. by @jswrenn in https://github.com/google/zerocopy/pull/443
[byteorder] Implement core::ops traits by @joshlf in https://github.com/google/zerocopy/pull/434

New Contributors

@leongross made their first contribution in https://github.com/google/zerocopy/pull/389

Full Changelog: google/zerocopy@v0.7.5...v0.7.6

`v0.7.5`

What's Changed

[docs] Improve crate-level docs by @joshlf in https://github.com/google/zerocopy/pull/386

Full Changelog: google/zerocopy@v0.7.4...v0.7.5

`v0.7.4`

What's Changed

Reflow one comment by @joshlf in https://github.com/google/zerocopy/pull/313
Remove TODO by @joshlf in https://github.com/google/zerocopy/pull/314
Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in https://github.com/google/zerocopy/pull/322
[CI] Configure dependabot commit message prefix by @joshlf in https://github.com/google/zerocopy/pull/323
Cache the dependencies by @zoo868e in https://github.com/google/zerocopy/pull/302
[CI] Remove CARGO_NET_RETRY override by @joshlf in https://github.com/google/zerocopy/pull/324
Simplify AsAddress impls by @joshlf in https://github.com/google/zerocopy/pull/327
[CI] Only run Clippy on nightly by @joshlf in https://github.com/google/zerocopy/pull/332
[CI] Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in https://github.com/google/zerocopy/pull/333
Move location of Sealed impls by @joshlf in https://github.com/google/zerocopy/pull/334
Simplify unsafe_impl! macro by @joshlf in https://github.com/google/zerocopy/pull/335
[derive_util] Add tests by @joshlf in https://github.com/google/zerocopy/pull/336
Move wrappers to their own module by @joshlf in https://github.com/google/zerocopy/pull/337
Simplify unaligned Ref constructors by @joshlf in https://github.com/google/zerocopy/pull/329
[CI] Use generate_cache job in more places by @joshlf in https://github.com/google/zerocopy/pull/339
Deny clippy::missing_inline_in_public_items by @joshlf in https://github.com/google/zerocopy/pull/341
[CI] Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in https://github.com/google/zerocopy/pull/343
[macros] safety_comment! permits multiple comments by @joshlf in https://github.com/google/zerocopy/pull/342
Don't inline functions that are never called by @joshlf in https://github.com/google/zerocopy/pull/346
Add KnownLayout trait by @joshlf in https://github.com/google/zerocopy/pull/347
[byteorder] Optimize tests; large impact on Miri by @joshlf in https://github.com/google/zerocopy/pull/350
[CI] Use cargo-semver-checks to check backwards-compatibility by @joshlf in https://github.com/google/zerocopy/pull/351
[CI] Bump actions/dependency-review-action from 3.0.8 to 3.1.0 by @dependabot in https://github.com/google/zerocopy/pull/355
[UI tests] Add missing stderr file by @joshlf in https://github.com/google/zerocopy/pull/360
[cargo.sh] Initial commit by @joshlf in https://github.com/google/zerocopy/pull/363
[CI] Treat "derive" as a stable feature by @joshlf in https://github.com/google/zerocopy/pull/365
[docs] Docs and doctests succeed for all features by @joshlf in https://github.com/google/zerocopy/pull/369
KnownLayout::validate_cast by @joshlf in https://github.com/google/zerocopy/pull/349
[derive] Simplify code, remove obsolete features by @joshlf in https://github.com/google/zerocopy/pull/375
[CI] Bump Swatinem/rust-cache from 2.6.2 to 2.7.0 by @dependabot in https://github.com/google/zerocopy/pull/377
[CI] Bump github/codeql-action from 2.21.5 to 2.21.6 by @dependabot in https://github.com/google/zerocopy/pull/380
[CI] Bump github/codeql-action from 2.21.6 to 2.21.7 by @dependabot in https://github.com/google/zerocopy/pull/382
[docs] Link to user survey by @joshlf in https://github.com/google/zerocopy/pull/384

Full Changelog: google/zerocopy@v0.7.3...v0.7.4

Configuration

📅 Schedule: Branch creation - "" in timezone America/Los_Angeles, Automerge - "after 8pm,before 6am" in timezone America/Los_Angeles.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.


          chore(deps): update rust crate zerocopy to v0.7.31 [security]

e3935d6

renovate bot added the dependencies label

flihp merged commit d249d30 into main

7 checks passed

renovate bot deleted the renovate/crate-zerocopy-vulnerability branch

December 22, 2023 18:41

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels