Skip to content

Commit 1477cba

Browse files
authored
fix(deps): update rust crate git2 to v0.20.4 [security] (#428)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [git2](https://redirect.github.com/rust-lang/git2-rs) | dependencies | patch | `0.20.3` → `0.20.4` | | [git2](https://redirect.github.com/rust-lang/git2-rs) | workspace.dependencies | patch | `0.20.3` → `0.20.4` | ### GitHub Vulnerability Alerts #### [GHSA-j39j-6gw9-jw6h](https://redirect.github.com/rust-lang/git2-rs/issues/1211) If the Buf struct is dereferenced immediately after calling new() or default() on the Buf struct, a null pointer is passed to the unsafe function slice::from_raw_parts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing a null pointer will lead to undefined behavior. --- ### Release Notes <details> <summary>rust-lang/git2-rs (git2)</summary> ### [`v0.20.4`](https://redirect.github.com/rust-lang/git2-rs/compare/git2-0.20.3...git2-0.20.4) [Compare Source](https://redirect.github.com/rust-lang/git2-rs/compare/git2-0.20.3...git2-0.20.4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/jerus-org/nextsv). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
2 parents a58cc42 + 4acce6e commit 1477cba

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Cargo.lock

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)