Skip to content

busbar pin: 08d4d7c501 (clears RUSTSEC-2026-0381/0382) - #25

Merged
MattJackson merged 3 commits into
devfrom
lane-fleet-advisory-repin
Oct 21, 2026
Merged

MattJackson merged 3 commits into
devfrom
lane-fleet-advisory-repin

Conversation

@MattJackson

@MattJackson MattJackson commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Repins busbar to 08d4d7c501ccb9f734a8d088c242addb2e5fb444 (busbar dev, 1.6.0; includes 347a8c6457, which fixed RUSTSEC-2026-0382 rustls-webpki 0.103.15 and RUSTSEC-2026-0381 webpki-roots 1.0.7), following .github/workflows/repin.yml (busbar scripts/fleet/repin.sh at the pin): .busbar-ref, the manifests' busbar rev, the reusable-workflow refs and Cargo.lock move together; pin-check passes against busbar's lock at the pin. The first commit pinned 317744d1a0; the second moves to 08d4d7c501.

…-ref, manifests, Cargo.lock, workflow refs

The pin moves past busbar 347a8c6457 (RUSTSEC-2026-0381/0382 fixed in busbar's lock); this lock
resolves neither rustls-webpki nor webpki-roots.
@MattJackson MattJackson changed the title busbar pin: 317744d1a0 (clears RUSTSEC-2026-0381/0382) busbar pin: 08d4d7c501 (clears RUSTSEC-2026-0381/0382) Oct 21, 2026
…res at 08d4d7c501)

busbar's declares gate at the pin refuses a stated contract_abi range: a plugin declares its
kind's ABI version, never a range (as auth-sigv4's e3ba472 did).
@MattJackson
MattJackson merged commit e0925d4 into dev Oct 21, 2026
6 checks passed
@MattJackson
MattJackson deleted the lane-fleet-advisory-repin branch October 21, 2026 16:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant