Move off the vulnerable quick-xml and webbrowser

a6e0e8a · Gabriel Morell · 2026-10-23 04:29

1 files +83 -96
Message
{commit_body(@commit)}

Files changed

modified Cargo.lock
+83 −96
@@ -35,7 +35,7 @@ dependencies = [
35 35 "atspi-common",
36 36 "serde",
37 37 "thiserror 1.0.69",
38 − "zvariant 5.6.0",
38 + "zvariant 5.15.1",
39 39 ]
40 40
41 41 [[package]]
@@ -77,7 +77,7 @@ dependencies = [
77 77 "futures-lite 2.6.1",
78 78 "futures-util",
79 79 "serde",
80 − "zbus 5.9.0",
80 + "zbus 5.19.0",
81 81 ]
82 82
83 83 [[package]]
@@ -474,11 +474,11 @@ dependencies = [
474 474 "enumflags2",
475 475 "serde",
476 476 "static_assertions",
477 − "zbus 5.9.0",
477 + "zbus 5.19.0",
478 478 "zbus-lockstep",
479 479 "zbus-lockstep-macros",
480 − "zbus_names 4.2.0",
481 − "zvariant 5.6.0",
480 + "zbus_names 4.3.5",
481 + "zvariant 5.15.1",
482 482 ]
483 483
484 484 [[package]]
@@ -490,7 +490,7 @@ dependencies = [
490 490 "atspi-common",
491 491 "atspi-proxies",
492 492 "futures-lite 2.6.1",
493 − "zbus 5.9.0",
493 + "zbus 5.19.0",
494 494 ]
495 495
496 496 [[package]]
@@ -501,7 +501,7 @@ checksum = "d2eebcb9e7e76f26d0bcfd6f0295e1cd1e6f33bedbc5698a971db8dc43d7751c"
501 501 dependencies = [
502 502 "atspi-common",
503 503 "serde",
504 − "zbus 5.9.0",
504 + "zbus 5.19.0",
505 505 ]
506 506
507 507 [[package]]
@@ -754,16 +754,6 @@ dependencies = [
754 754 "libc",
755 755 ]
756 756
757 −[[package]]
758 −name = "core-foundation"
759 −version = "0.10.1"
760 −source = "registry+https://github.com/rust-lang/crates.io-index"
761 −checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
762 −dependencies = [
763 − "core-foundation-sys",
764 − "libc",
765 −]
766 −
767 757 [[package]]
768 758 name = "core-foundation-sys"
769 759 version = "0.8.7"
@@ -777,7 +767,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
777 767 checksum = "c07782be35f9e1140080c6b96f0d44b739e2278479f64e02fdab4e32dfd8b081"
778 768 dependencies = [
779 769 "bitflags 1.3.2",
780 − "core-foundation 0.9.4",
770 + "core-foundation",
781 771 "core-graphics-types",
782 772 "foreign-types",
783 773 "libc",
@@ -790,7 +780,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
790 780 checksum = "45390e6114f68f718cc7a830514a96f903cccd70d02a8f6d9f643ac4ba45afaf"
791 781 dependencies = [
792 782 "bitflags 1.3.2",
793 − "core-foundation 0.9.4",
783 + "core-foundation",
794 784 "libc",
795 785 ]
796 786
@@ -2022,19 +2012,6 @@ dependencies = [
2022 2012 "memoffset 0.7.1",
2023 2013 ]
2024 2014
2025 −[[package]]
2026 −name = "nix"
2027 −version = "0.30.1"
2028 −source = "registry+https://github.com/rust-lang/crates.io-index"
2029 −checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
2030 −dependencies = [
2031 − "bitflags 2.13.2",
2032 − "cfg-if",
2033 − "cfg_aliases",
2034 − "libc",
2035 − "memoffset 0.9.1",
2036 −]
2037 −
2038 2015 [[package]]
2039 2016 name = "nohash-hasher"
2040 2017 version = "0.2.0"
@@ -2067,7 +2044,7 @@ version = "0.7.6"
2067 2044 source = "registry+https://github.com/rust-lang/crates.io-index"
2068 2045 checksum = "680998035259dcfcafe653688bf2aa6d3e2dc05e98be6ab46afb089dc84f1df8"
2069 2046 dependencies = [
2070 − "proc-macro-crate 3.5.0",
2047 + "proc-macro-crate 1.3.1",
2071 2048 "proc-macro2",
2072 2049 "quote",
2073 2050 "syn 2.0.119",
@@ -2626,19 +2603,9 @@ checksum = "a993555f31e5a609f617c12db6250dedcac1b0a85076912c436e6fc9b2c8e6a3"
2626 2603
2627 2604 [[package]]
2628 2605 name = "quick-xml"
2629 −version = "0.36.2"
2630 −source = "registry+https://github.com/rust-lang/crates.io-index"
2631 −checksum = "f7649a7b4df05aed9ea7ec6f628c67c9953a43869b8bc50929569b2999d443fe"
2632 −dependencies = [
2633 − "memchr",
2634 − "serde",
2635 −]
2636 −
2637 −[[package]]
2638 −name = "quick-xml"
2639 −version = "0.39.4"
2606 +version = "0.41.0"
2640 2607 source = "registry+https://github.com/rust-lang/crates.io-index"
2641 −checksum = "cdcc8dd4e2f670d309a5f0e83fe36dfdc05af317008fea29144da1a2ac858e5e"
2608 +checksum = "e660451e55124f798a69a5af3f49ccfbefbd41910eefd25caf2393e1f3473ec1"
2642 2609 dependencies = [
2643 2610 "memchr",
2644 2611 ]
@@ -3193,7 +3160,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
3193 3160 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
3194 3161 dependencies = [
3195 3162 "fastrand 2.5.0",
3196 − "getrandom 0.4.3",
3163 + "getrandom 0.3.4",
3197 3164 "once_cell",
3198 3165 "rustix 1.1.5",
3199 3166 "windows-sys 0.61.2",
@@ -3487,6 +3454,17 @@ version = "1.0.4"
3487 3454 source = "registry+https://github.com/rust-lang/crates.io-index"
3488 3455 checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
3489 3456
3457 +[[package]]
3458 +name = "uuid"
3459 +version = "1.28.0"
3460 +source = "registry+https://github.com/rust-lang/crates.io-index"
3461 +checksum = "7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606"
3462 +dependencies = [
3463 + "js-sys",
3464 + "serde_core",
3465 + "wasm-bindgen",
3466 +]
3467 +
3490 3468 [[package]]
3491 3469 name = "version_check"
3492 3470 version = "0.9.5"
@@ -3693,12 +3671,12 @@ dependencies = [
3693 3671
3694 3672 [[package]]
3695 3673 name = "wayland-scanner"
3696 −version = "0.31.10"
3674 +version = "0.31.11"
3697 3675 source = "registry+https://github.com/rust-lang/crates.io-index"
3698 −checksum = "9c324a910fd86ebdc364a3e61ec1f11737d3b1d6c273c0239ee8ff4bc0d24b4a"
3676 +checksum = "338e30461b3a2b67d70eb30a6d89f8e0c93a833e07d2ae89085cd070c4a00ac0"
3699 3677 dependencies = [
3700 3678 "proc-macro2",
3701 − "quick-xml 0.39.4",
3679 + "quick-xml",
3702 3680 "quote",
3703 3681 ]
3704 3682
@@ -3736,15 +3714,15 @@ dependencies = [
3736 3714
3737 3715 [[package]]
3738 3716 name = "webbrowser"
3739 −version = "1.2.1"
3717 +version = "1.2.2"
3740 3718 source = "registry+https://github.com/rust-lang/crates.io-index"
3741 −checksum = "0fc95580916af1e68ff6a7be07446fc5db73ebf71cf092de939bbf5f7e189f72"
3719 +checksum = "ef62a3d5f7b2411119a11b6f62570dbff91d7105e011a20fb83fbf8f5761c40f"
3742 3720 dependencies = [
3743 − "core-foundation 0.10.1",
3744 3721 "jni",
3745 3722 "log",
3746 3723 "ndk-context",
3747 3724 "objc2 0.6.4",
3725 + "objc2-app-kit 0.3.2",
3748 3726 "objc2-foundation 0.3.2",
3749 3727 "url",
3750 3728 "web-sys",
@@ -3875,7 +3853,7 @@ version = "0.1.11"
3875 3853 source = "registry+https://github.com/rust-lang/crates.io-index"
3876 3854 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
3877 3855 dependencies = [
3878 − "windows-sys 0.61.2",
3856 + "windows-sys 0.48.0",
3879 3857 ]
3880 3858
3881 3859 [[package]]
@@ -4247,7 +4225,7 @@ dependencies = [
4247 4225 "calloop 0.13.0",
4248 4226 "cfg_aliases",
4249 4227 "concurrent-queue",
4250 − "core-foundation 0.9.4",
4228 + "core-foundation",
4251 4229 "core-graphics",
4252 4230 "cursor-icon",
4253 4231 "dpi",
@@ -4443,7 +4421,7 @@ dependencies = [
4443 4421 "futures-sink",
4444 4422 "futures-util",
4445 4423 "hex",
4446 − "nix 0.26.4",
4424 + "nix",
4447 4425 "once_cell",
4448 4426 "ordered-stream",
4449 4427 "rand",
@@ -4462,9 +4440,9 @@ dependencies = [
4462 4440
4463 4441 [[package]]
4464 4442 name = "zbus"
4465 −version = "5.9.0"
4443 +version = "5.19.0"
4466 4444 source = "registry+https://github.com/rust-lang/crates.io-index"
4467 −checksum = "4bb4f9a464286d42851d18a605f7193b8febaf5b0919d71c6399b7b26e5b0aad"
4445 +checksum = "5db4be7c075cb421e4b7ee645541604239bd243ba7c357511f4ff3a74b555907"
4468 4446 dependencies = [
4469 4447 "async-broadcast 0.7.2",
4470 4448 "async-executor",
@@ -4480,17 +4458,19 @@ dependencies = [
4480 4458 "futures-core",
4481 4459 "futures-lite 2.6.1",
4482 4460 "hex",
4483 − "nix 0.30.1",
4461 + "libc",
4484 4462 "ordered-stream",
4463 + "rustix 1.1.5",
4485 4464 "serde",
4486 4465 "serde_repr",
4487 4466 "tracing",
4488 4467 "uds_windows",
4489 − "windows-sys 0.59.0",
4490 − "winnow 0.7.15",
4491 − "zbus_macros 5.9.0",
4492 − "zbus_names 4.2.0",
4493 − "zvariant 5.6.0",
4468 + "uuid",
4469 + "windows-sys 0.61.2",
4470 + "winnow 1.0.4",
4471 + "zbus_macros 5.19.0",
4472 + "zbus_names 4.3.5",
4473 + "zvariant 5.15.1",
4494 4474 ]
4495 4475
4496 4476 [[package]]
@@ -4500,7 +4480,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
4500 4480 checksum = "29e96e38ded30eeab90b6ba88cb888d70aef4e7489b6cd212c5e5b5ec38045b6"
4501 4481 dependencies = [
4502 4482 "zbus_xml",
4503 − "zvariant 5.6.0",
4483 + "zvariant 5.15.1",
4504 4484 ]
4505 4485
4506 4486 [[package]]
@@ -4514,7 +4494,7 @@ dependencies = [
4514 4494 "syn 2.0.119",
4515 4495 "zbus-lockstep",
4516 4496 "zbus_xml",
4517 − "zvariant 5.6.0",
4497 + "zvariant 5.15.1",
4518 4498 ]
4519 4499
4520 4500 [[package]]
@@ -4533,17 +4513,17 @@ dependencies = [
4533 4513
4534 4514 [[package]]
4535 4515 name = "zbus_macros"
4536 −version = "5.9.0"
4516 +version = "5.19.0"
4537 4517 source = "registry+https://github.com/rust-lang/crates.io-index"
4538 −checksum = "ef9859f68ee0c4ee2e8cde84737c78e3f4c54f946f2a38645d0d4c7a95327659"
4518 +checksum = "2990635d09ade6df1868f72f8cac69a876a90981e8bd3c40b1be413f8dc88f40"
4539 4519 dependencies = [
4540 4520 "proc-macro-crate 3.5.0",
4541 4521 "proc-macro2",
4542 4522 "quote",
4543 − "syn 2.0.119",
4544 − "zbus_names 4.2.0",
4545 − "zvariant 5.6.0",
4546 − "zvariant_utils 3.2.0",
4523 + "syn 3.0.6",
4524 + "zbus_names 4.3.5",
4525 + "zvariant 5.15.1",
4526 + "zvariant_utils 4.2.0",
4547 4527 ]
4548 4528
4549 4529 [[package]]
@@ -4559,27 +4539,34 @@ dependencies = [
4559 4539
4560 4540 [[package]]
4561 4541 name = "zbus_names"
4562 −version = "4.2.0"
4542 +version = "4.3.5"
4563 4543 source = "registry+https://github.com/rust-lang/crates.io-index"
4564 −checksum = "7be68e64bf6ce8db94f63e72f0c7eb9a60d733f7e0499e628dfab0f84d6bcb97"
4544 +checksum = "812a12be4ead7a59e18ea8f047d08add0066b73bc62fc1467066a2472ae088dd"
4565 4545 dependencies = [
4566 4546 "serde",
4567 − "static_assertions",
4568 − "winnow 0.7.15",
4569 − "zvariant 5.6.0",
4547 + "winnow 1.0.4",
4548 + "zvariant 5.15.1",
4570 4549 ]
4571 4550
4572 4551 [[package]]
4573 4552 name = "zbus_xml"
4574 −version = "5.0.2"
4553 +version = "5.2.1"
4575 4554 source = "registry+https://github.com/rust-lang/crates.io-index"
4576 −checksum = "589e9a02bfafb9754bb2340a9e3b38f389772684c63d9637e76b1870377bec29"
4555 +checksum = "d1586c021a01ca0a9216dcd874e546382e156a5cbab5fab6cb5f10087e22682a"
4556 +dependencies = [
4557 + "serde",
4558 + "winnow 1.0.4",
4559 + "zbus_names 4.3.5",
4560 + "zvariant 5.15.1",
4561 +]
4562 +
4563 +[[package]]
4564 +name = "zcheapstr"
4565 +version = "1.1.0"
4566 +source = "registry+https://github.com/rust-lang/crates.io-index"
4567 +checksum = "d1afec51604565183aeb5c54c20aeab286120d4e4460f7f76e3e8bb8c0d99473"
4577 4568 dependencies = [
4578 − "quick-xml 0.36.2",
4579 4569 "serde",
4580 − "static_assertions",
4581 − "zbus_names 4.2.0",
4582 − "zvariant 5.6.0",
4583 4570 ]
4584 4571
4585 4572 [[package]]
@@ -4723,16 +4710,17 @@ dependencies = [
4723 4710
4724 4711 [[package]]
4725 4712 name = "zvariant"
4726 −version = "5.6.0"
4713 +version = "5.15.1"
4727 4714 source = "registry+https://github.com/rust-lang/crates.io-index"
4728 −checksum = "d91b3680bb339216abd84714172b5138a4edac677e641ef17e1d8cb1b3ca6e6f"
4715 +checksum = "80bf6d6cd6a4b601acb64cfb8284cdc643fcfa75ef26ae3c46ec8aa4e8a1fbb7"
4729 4716 dependencies = [
4730 4717 "endi",
4731 4718 "enumflags2",
4732 4719 "serde",
4733 − "winnow 0.7.15",
4734 − "zvariant_derive 5.6.0",
4735 − "zvariant_utils 3.2.0",
4720 + "winnow 1.0.4",
4721 + "zcheapstr",
4722 + "zvariant_derive 5.15.1",
4723 + "zvariant_utils 4.2.0",
4736 4724 ]
4737 4725
4738 4726 [[package]]
@@ -4750,15 +4738,15 @@ dependencies = [
4750 4738
4751 4739 [[package]]
4752 4740 name = "zvariant_derive"
4753 −version = "5.6.0"
4741 +version = "5.15.1"
4754 4742 source = "registry+https://github.com/rust-lang/crates.io-index"
4755 −checksum = "3a8c68501be459a8dbfffbe5d792acdd23b4959940fc87785fb013b32edbc208"
4743 +checksum = "ef2672456ba1cb54b5eaec136e63135b3c7495fb938e53b28a62e633496d486d"
4756 4744 dependencies = [
4757 4745 "proc-macro-crate 3.5.0",
4758 4746 "proc-macro2",
4759 4747 "quote",
4760 − "syn 2.0.119",
4761 − "zvariant_utils 3.2.0",
4748 + "syn 3.0.6",
4749 + "zvariant_utils 4.2.0",
4762 4750 ]
4763 4751
4764 4752 [[package]]
@@ -4774,14 +4762,13 @@ dependencies = [
4774 4762
4775 4763 [[package]]
4776 4764 name = "zvariant_utils"
4777 −version = "3.2.0"
4765 +version = "4.2.0"
4778 4766 source = "registry+https://github.com/rust-lang/crates.io-index"
4779 −checksum = "e16edfee43e5d7b553b77872d99bc36afdda75c223ca7ad5e3fbecd82ca5fc34"
4767 +checksum = "bad0294361a320b694a328460dc73add56c306150f5cb6bfafc44446120008a3"
4780 4768 dependencies = [
4781 4769 "proc-macro2",
4782 4770 "quote",
4783 4771 "serde",
4784 − "static_assertions",
4785 − "syn 2.0.119",
4786 − "winnow 0.7.15",
4772 + "syn 3.0.6",
4773 + "winnow 1.0.4",
4787 4774 ]

Parents: 2cb66c7