Repository navigation
chore(deps): Monday dependabot schedule with actions group and ctutils fix - #100
Merged
Merged
Conversation
Every Guard-Core repo now checks for updates at the same time: weekly, Monday 02:00 UTC.
…ates ctutils 0.4.x before 0.4.4 computes mask generation and u128 comparisons in constant time incorrectly (RUSTSEC-2026-0385); the lockfile now tracks 0.4.5. Grouping github-actions in .github/dependabot.yml makes future action bumps arrive as one weekly PR instead of one PR per workflow step, which also keeps multi-step workflows such as CodeQL on a single action version.
rennf93
changed the title
tokio 1.53.x before 1.53.3 has AsyncFd constructors that violate I/O safety (RUSTSEC-2026-0386); the lockfile now tracks "1.54.1".
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Every Guard-Core repo now runs Dependabot at the same time: weekly, Monday 02:00 UTC. Before this, the config set only
interval: weekly, so each repo opened its PRs at a different time. Only.github/dependabot.ymlchanges.