RUSTSEC-2026-0367: zip 2.4.2 in aprender-train fails guard-cargo on main #5459

New issue

Copy link

New issue

Copy link

Open

Open

RUSTSEC-2026-0367: zip 2.4.2 in aprender-train fails guard-cargo on main#5459

Copy link

Milestone

0.73.0

Description

noahgift

opened on Oct 16, 2026

Issue body actions

Bump zip to >=9.0.0 (aprender-train only), refresh Cargo.lock for zip, fix API drift. No deny.toml exemption. Dispatched by cop via a3; aprender-sweep.

Reactions are currently unavailable

Activity

1. noahgift

   added a parent issue on Oct 16, 2026

   • EPIC S3 standing: Debt Ratchet #3997
2. noahgift

   added this to the 0.73.0 milestone on Oct 17, 2026
3. noahgift

   added 2 commits that reference this issue on Oct 17, 2026

   fix(deps): duckdb 1.10506 drops the zip 6.0.0 chain (RUSTSEC-2026-036…

   ...

   55f1e1c

   fix(deps): zip 2.4.2 -> 9.0.4 for RUSTSEC-2026-0367, deflate only (Refs

   ...

   49c65bd

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

• 0.73.0

Relationships

None yet

Development

No branches or pull requests

Issue actions

• Open in GitHub Copilot app