From a8362be1aa58bfa9555ce4ed59e4bca973ccdafc Mon Sep 17 00:00:00 2001 From: egor Date: Sun, 15 Nov 2026 13:52:06 +0500 Subject: [PATCH 1/2] fix(deps): use patched native transport dependencies Resolve the russh and rustix advisories blocking release validation. Keep the dependency update limited to patched versions and verified upstream notices. --- Cargo.lock | 73 ++++++++++++++++++++--------------------- Cargo.toml | 2 +- THIRD_PARTY_NOTICES.txt | 30 ++++++++--------- licensing/sources.json | 4 +-- 4 files changed, 54 insertions(+), 55 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index d25a7e48..24703988 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -160,7 +160,7 @@ dependencies = [ "futures", "futures-concurrency", "rustc-hash 2.1.3", - "rustix 1.1.5", + "rustix 1.1.6", "schemars 1.2.2", "serde", "serde_json", @@ -232,7 +232,7 @@ dependencies = [ "piper", "polling", "regex-automata", - "rustix 1.1.5", + "rustix 1.1.6", "rustix-openpty", "serde", "signal-hook", @@ -482,7 +482,7 @@ dependencies = [ "futures-lite", "parking", "polling", - "rustix 1.1.5", + "rustix 1.1.6", "slab", "windows-sys 0.61.2", ] @@ -524,7 +524,7 @@ dependencies = [ "cfg-if", "event-listener", "futures-lite", - "rustix 1.1.5", + "rustix 1.1.6", ] [[package]] @@ -550,7 +550,7 @@ dependencies = [ "cfg-if", "futures-core", "futures-io", - "rustix 1.1.5", + "rustix 1.1.6", "signal-hook-registry", "slab", "windows-sys 0.61.2", @@ -1007,7 +1007,7 @@ checksum = "43b32313e937c8721c9d17ee9bf60699a6402b4b7c2cb6ac1bee0ffcaa4b4e5e" dependencies = [ "bitflags 2.13.2", "polling", - "rustix 1.1.5", + "rustix 1.1.6", "tracing", ] @@ -1018,7 +1018,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "138efcf0940a02ebf0cc8d1eff41a1682a46b431630f4c52450d6265876021fa" dependencies = [ "calloop", - "rustix 1.1.5", + "rustix 1.1.6", "wayland-backend", "wayland-client", ] @@ -1035,7 +1035,7 @@ dependencies = [ "io-lifetimes 3.0.1", "ipnet", "maybe-owned", - "rustix 1.1.5", + "rustix 1.1.6", "rustix-linux-procfs", "windows-sys 0.61.2", "winx", @@ -1954,7 +1954,7 @@ dependencies = [ "libc", "option-ext", "redox_users 0.5.3", - "windows-sys 0.61.2", + "windows-sys 0.59.0", ] [[package]] @@ -2266,7 +2266,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -2561,7 +2561,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "94e7099f6313ecacbe1256e8ff9d617b75d1bcb16a6fddef94866d225a01a14a" dependencies = [ "io-lifetimes 2.0.4", - "rustix 1.1.5", + "rustix 1.1.6", "windows-sys 0.59.0", ] @@ -2738,7 +2738,6 @@ version = "1.4.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e" dependencies = [ - "generic-array 0.14.7", "rustversion", "typenum", ] @@ -2749,7 +2748,7 @@ version = "1.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1bd49230192a3797a9a4d6abe9b3eed6f7fa4c8a8a4947977c6f80025f92cbd8" dependencies = [ - "rustix 1.1.5", + "rustix 1.1.6", "windows-link 0.2.1", ] @@ -5237,7 +5236,7 @@ dependencies = [ "nocterm-ai", "nocterm-core", "nocterm-settings", - "rustix 1.1.5", + "rustix 1.1.6", "serde_json", "subtle", "tempfile", @@ -5842,7 +5841,7 @@ dependencies = [ "nocterm-session", "portable-pty", "process-wrap", - "rustix 1.1.5", + "rustix 1.1.6", "tempfile", "thiserror 2.0.21", "tracing", @@ -5862,7 +5861,7 @@ dependencies = [ "nocterm-session", "ouroboros", "prikk-ffi", - "rustix 1.1.5", + "rustix 1.1.6", "tempfile", "tracing", "windows-sys 0.61.2", @@ -6141,7 +6140,7 @@ dependencies = [ "getrandom 0.4.3", "nocterm-core", "nocterm-project-model", - "rustix 1.1.5", + "rustix 1.1.6", "serde_json", "tempfile", ] @@ -6264,7 +6263,7 @@ dependencies = [ "nocterm-ssh-keys", "russh", "russh-sftp", - "rustix 1.1.5", + "rustix 1.1.6", "sha1", "tempfile", "thiserror 2.0.21", @@ -6647,7 +6646,7 @@ version = "0.50.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.59.0", ] [[package]] @@ -7671,7 +7670,7 @@ dependencies = [ "concurrent-queue", "hermit-abi", "pin-project-lite", - "rustix 1.1.5", + "rustix 1.1.6", "windows-sys 0.61.2", ] @@ -8183,7 +8182,7 @@ dependencies = [ "once_cell", "socket2", "tracing", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -8635,9 +8634,9 @@ dependencies = [ [[package]] name = "russh" -version = "0.63.3" +version = "0.65.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "036204edbd199552a5b3832f63c60dcdf395dc44c7f06b4af1c0e8139cc11bce" +checksum = "94be3d86c71b9ed220a675c405e35c7a02565a009bf8da2e9cc13a700320a5c5" dependencies = [ "aes 0.9.3", "bitflags 2.13.2", @@ -8875,15 +8874,15 @@ dependencies = [ [[package]] name = "rustix" -version = "1.1.5" +version = "1.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" +checksum = "e5e76742e5294153d4dde1207dbec5bdd81eef6fabdc0d2118babadabfd858aa" dependencies = [ "bitflags 2.13.2", "errno", "libc", "linux-raw-sys 0.12.1", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -8893,7 +8892,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2fc84bf7e9aa16c4f2c758f27412dc9841341e16aa682d9c7ac308fe3ee12056" dependencies = [ "once_cell", - "rustix 1.1.5", + "rustix 1.1.6", ] [[package]] @@ -8904,7 +8903,7 @@ checksum = "1de16c7c59892b870a6336f185dc10943517f1327447096bbb7bb32cd85e2393" dependencies = [ "errno", "libc", - "rustix 1.1.5", + "rustix 1.1.6", ] [[package]] @@ -10106,8 +10105,8 @@ dependencies = [ "fastrand", "getrandom 0.4.3", "once_cell", - "rustix 1.1.5", - "windows-sys 0.61.2", + "rustix 1.1.6", + "windows-sys 0.52.0", ] [[package]] @@ -11365,7 +11364,7 @@ dependencies = [ "cc", "downcast-rs", "log", - "rustix 1.1.5", + "rustix 1.1.6", "scoped-tls", "smallvec", "wayland-sys", @@ -11378,7 +11377,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e3c36a0f861ad76d0901f2800b46321410d9f73f2ea88aac0650d86c32688073" dependencies = [ "bitflags 2.13.2", - "rustix 1.1.5", + "rustix 1.1.6", "wayland-backend", "wayland-scanner", ] @@ -11389,7 +11388,7 @@ version = "0.31.14" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4a52d18780be9b1314328a3de5f930b73d2200112e3849ca6cb11822793fb34d" dependencies = [ - "rustix 1.1.5", + "rustix 1.1.6", "wayland-client", "xcursor", ] @@ -11708,7 +11707,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.48.0", ] [[package]] @@ -12427,7 +12426,7 @@ dependencies = [ "as-raw-xcb-connection", "gethostname", "libc", - "rustix 1.1.5", + "rustix 1.1.6", "x11rb-protocol", "xcursor", ] @@ -12445,7 +12444,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156" dependencies = [ "libc", - "rustix 1.1.5", + "rustix 1.1.6", ] [[package]] @@ -12628,7 +12627,7 @@ dependencies = [ "hex", "libc", "ordered-stream", - "rustix 1.1.5", + "rustix 1.1.6", "serde", "serde_repr", "tokio", diff --git a/Cargo.toml b/Cargo.toml index 1e7b167e..5fe46940 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -325,7 +325,7 @@ regex = "1" # Zed's reqwest fork, already in the tree through GPUI. reqwest = { package = "gpui-pre-reqwest", version = "0.12", default-features = false, features = ["blocking", "rustls-tls"] } regex-syntax = "0.8" -russh = { version = "0.63", default-features = false, features = ["ring", "flate2", "rsa"] } +russh = { version = "0.65.1", default-features = false, features = ["ring", "flate2", "rsa"] } russh-sftp = "3" # Pinned to the version `russh` resolves, so key text round-trips between the two (ADR 0102). ssh-key = { version = "=0.7.0-rc.11", default-features = false, features = ["ed25519", "p256", "p384", "p521", "rsa", "encryption"] } diff --git a/THIRD_PARTY_NOTICES.txt b/THIRD_PARTY_NOTICES.txt index 562e0c7f..c91aa9a2 100644 --- a/THIRD_PARTY_NOTICES.txt +++ b/THIRD_PARTY_NOTICES.txt @@ -2,9 +2,9 @@ Nocterm third-party licenses and notices ======================================== Generated by scripts/generate-license-notices.py using cargo-about 0.9.2. -Content SHA-256: 4536e416d08a476065d40732bd53803885df66157f1241e698c4a44f95a08940 -Input fingerprint: d41268d9912392fcbb1660baaf43a364f1134c4c9ea22d56895995475b4a400e -Cargo.lock SHA-256 (release version masked): efe961a6a4b84e2fbff7e2afb64c5f4dd94c9cf43cb33860cf52881a5469d189 +Content SHA-256: a021d9c3553f038b172c57e9b33f501a0bd6ee99ea177a8733ecd8c42614c1aa +Input fingerprint: d6c54148db04c3209ce0039bb38cacab9781693f9566ba031b21efe15b0999f9 +Cargo.lock SHA-256 (release version masked): 020ade7221d55c80e7162816cbdad5e70db3fbdaed80b6f8c968dc8b84b8a586 Scope: runtime and build dependencies of Nocterm and its optional vault broker for Linux x86_64, Windows x86_64, macOS x86_64 and macOS arm64. @@ -2777,9 +2777,9 @@ Authors: RustCrypto Developers; dignifiedquire Source: https://crates.io/api/v1/crates/rsa/0.10.0-rc.18/download Repository: https://github.com/RustCrypto/RSA -russh 0.63.3: Apache-2.0 +russh 0.65.1: Apache-2.0 Authors: Pierre-Étienne Meunier -Source: https://crates.io/api/v1/crates/russh/0.63.3/download +Source: https://crates.io/api/v1/crates/russh/0.65.1/download Repository: https://github.com/warp-tech/russh russh-cryptovec 0.62.0: Apache-2.0 @@ -2847,9 +2847,9 @@ Authors: Dan Gohman ; Jakub Konka ; Jakub Konka -Source: https://crates.io/api/v1/crates/rustix/1.1.5/download +Source: https://crates.io/api/v1/crates/rustix/1.1.6/download Repository: https://github.com/bytecodealliance/rustix rustix-linux-procfs 0.1.1: Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT @@ -10071,8 +10071,8 @@ Source: https://raw.githubusercontent.com/warp-tech/russh/907c732562c5732aad6c14 Original notice: russh-sftp 3.0.1 / LICENSE Original notice: russh-util@0.52.0 / upstream/russh-apache-cfc7749b96f6.txt Source: https://raw.githubusercontent.com/warp-tech/russh/3d09c20c52a542ffa327723d3a44cb1edd9b0ca4/LICENSE-2.0.txt -Original notice: russh@0.63.3 / upstream/brendanzab-gl-rs-license-cfc7749b96f6.txt -Source: https://raw.githubusercontent.com/warp-tech/russh/f33baf439be8c59c49cb6cb2ae5976c579495bdf/LICENSE.txt +Original notice: russh@0.65.1 / upstream/brendanzab-gl-rs-license-cfc7749b96f6.txt +Source: https://raw.githubusercontent.com/warp-tech/russh/b33092aad1e51c66258a12e8b83fc473a68d9d34/LICENSE.txt Original notice: secrecy 0.10.3 / LICENSE-APACHE Original notice: self_cell 1.3.0 / LICENSE-APACHE Original notice: siphasher 1.0.4 / LICENSE-APACHE @@ -10304,7 +10304,7 @@ Original notice: io-lifetimes 3.0.1 / LICENSE-Apache-2.0_WITH_LLVM-exception Original notice: linux-raw-sys 0.12.1 / LICENSE-Apache-2.0_WITH_LLVM-exception Original notice: linux-raw-sys 0.4.15 / LICENSE-Apache-2.0_WITH_LLVM-exception Original notice: rustix 0.38.44 / LICENSE-Apache-2.0_WITH_LLVM-exception -Original notice: rustix 1.1.5 / LICENSE-Apache-2.0_WITH_LLVM-exception +Original notice: rustix 1.1.6 / LICENSE-Apache-2.0_WITH_LLVM-exception Original notice: rustix-linux-procfs 0.1.1 / LICENSE-Apache-2.0_WITH_LLVM-exception Original notice: rustix-openpty 0.2.0 / LICENSE-Apache-2.0_WITH_LLVM-exception Original notice: wasmparser@0.228.0 / upstream/bytecodealliance-wasm-tools-license-apache-llvm-exception-268872b9816f.txt @@ -16739,7 +16739,7 @@ Original notice: rustc-demangle 0.1.28 / LICENSE-APACHE Original notice: rustc-hash 1.1.0 / LICENSE-APACHE Original notice: rustc_version 0.4.1 / LICENSE-APACHE Original notice: rustix 0.38.44 / LICENSE-APACHE -Original notice: rustix 1.1.5 / LICENSE-APACHE +Original notice: rustix 1.1.6 / LICENSE-APACHE Original notice: rustix-linux-procfs 0.1.1 / LICENSE-APACHE Original notice: rustix-openpty 0.2.0 / LICENSE-APACHE Original notice: rustls 0.23.46 / LICENSE-APACHE @@ -18964,7 +18964,7 @@ limitations under the License. ======================================================================== Original notice: document-features 0.2.12 / LICENSE-APACHE SPDX reference license terms: Apache-2.0 -Used by: agent-client-protocol 2.2.0, agent-client-protocol-derive 2.2.0, agent-client-protocol-schema 1.9.1, dunce 1.0.5, fs_at 0.2.1, gl_generator 0.14.0, gpui-kit 0.7.0, gpui-kit-assets 0.7.0, khronos_api 3.1.0, pageant 0.2.3, prikk-ffi 0.56.0, russh 0.63.3, russh-cryptovec 0.62.0, russh-util 0.52.0, ryu 1.0.23, serial2 0.2.38, spirv 0.4.0+sdk-1.4.341.0, sync_wrapper 1.0.2 +Used by: agent-client-protocol 2.2.0, agent-client-protocol-derive 2.2.0, agent-client-protocol-schema 1.9.1, dunce 1.0.5, fs_at 0.2.1, gl_generator 0.14.0, gpui-kit 0.7.0, gpui-kit-assets 0.7.0, khronos_api 3.1.0, pageant 0.2.3, prikk-ffi 0.56.0, russh 0.65.1, russh-cryptovec 0.62.0, russh-util 0.52.0, ryu 1.0.23, serial2 0.2.38, spirv 0.4.0+sdk-1.4.341.0, sync_wrapper 1.0.2 Apache License Version 2.0, January 2004 @@ -32968,7 +32968,7 @@ DEALINGS IN THE SOFTWARE. ======================================================================== License: MIT -Used by: adler2 2.0.1, ambient-authority 0.0.2, anyhow 1.0.104, async-channel 2.5.0, async-executor 1.14.1, async-fs 2.2.0, async-io 2.6.0, async-lock 3.4.2, async-net 2.0.0, async-process 2.5.0, async-recursion 1.1.1, async-signal 0.2.14, async-task 4.7.1, async-trait 0.1.92, atomic-waker 1.1.2, blocking 1.7.0, cap-primitives 4.0.3, concurrent-queue 2.5.0, curve25519-dalek-derive 0.1.1, displaydoc 0.2.7, dyn-clone 1.0.20, endi 1.1.1, enumn 0.1.14, erased-serde 0.4.10, event-listener 5.4.2, event-listener-strategy 0.5.4, fastrand 2.5.0, flume 0.12.0, fs-set-times 0.20.3, futures-lite 2.6.1, group 0.14.0, home 0.5.12, inventory 0.3.24, io-extras 0.19.0, io-lifetimes 2.0.4, io-lifetimes 3.0.1, itoa 1.0.18, khronos-egl 6.0.0, lazy_static 1.5.1, linux-raw-sys 0.12.1, linux-raw-sys 0.4.15, minimal-lexical 0.2.1, once_cell 1.21.4, ordered-stream 0.2.0, parking 2.2.1, paste 1.0.15, pin-project 1.1.13, pin-project-internal 1.1.13, pin-project-lite 0.2.17, piper 0.2.5, polling 3.11.0, prettyplease 0.2.37, proc-macro-crate 3.5.0, proc-macro2 1.0.107, process-wrap 9.1.1, prost-reflect 0.16.5, protox 0.10.0, protox-parse 0.10.0, quote 1.0.47, ref-cast 1.0.27, ref-cast-impl 1.0.27, rsa 0.10.0-rc.18, rustc-hash 1.1.0, rustc-hash 2.1.3, rustix 0.38.44, rustix 1.1.5, rustix-linux-procfs 0.1.1, rustix-openpty 0.2.0, rustversion 1.0.23, semver 1.0.28, serde 1.0.229, serde-saphyr 1.3.0, serde_bytes 0.11.19, serde_core 1.0.229, serde_derive 1.0.229, serde_derive_internals 0.30.0, serde_json 1.0.151, serde_json_lenient 0.2.4, serde_repr 0.1.21, smol 2.0.2, smol_str 0.3.6, syn 1.0.109, syn 2.0.119, syn 3.0.6, thiserror 1.0.69, thiserror 2.0.21, thiserror-impl 1.0.69, thiserror-impl 2.0.21, typeid 1.0.3, unicode-ident 1.0.26, utf-8 0.7.6, waker-fn 1.2.0, zbus-lockstep 0.5.2, zbus-lockstep-macros 0.5.2, zed-font-kit 0.14.1-zed, zmij 1.0.23, zvariant_utils 4.2.0 +Used by: adler2 2.0.1, ambient-authority 0.0.2, anyhow 1.0.104, async-channel 2.5.0, async-executor 1.14.1, async-fs 2.2.0, async-io 2.6.0, async-lock 3.4.2, async-net 2.0.0, async-process 2.5.0, async-recursion 1.1.1, async-signal 0.2.14, async-task 4.7.1, async-trait 0.1.92, atomic-waker 1.1.2, blocking 1.7.0, cap-primitives 4.0.3, concurrent-queue 2.5.0, curve25519-dalek-derive 0.1.1, displaydoc 0.2.7, dyn-clone 1.0.20, endi 1.1.1, enumn 0.1.14, erased-serde 0.4.10, event-listener 5.4.2, event-listener-strategy 0.5.4, fastrand 2.5.0, flume 0.12.0, fs-set-times 0.20.3, futures-lite 2.6.1, group 0.14.0, home 0.5.12, inventory 0.3.24, io-extras 0.19.0, io-lifetimes 2.0.4, io-lifetimes 3.0.1, itoa 1.0.18, khronos-egl 6.0.0, lazy_static 1.5.1, linux-raw-sys 0.12.1, linux-raw-sys 0.4.15, minimal-lexical 0.2.1, once_cell 1.21.4, ordered-stream 0.2.0, parking 2.2.1, paste 1.0.15, pin-project 1.1.13, pin-project-internal 1.1.13, pin-project-lite 0.2.17, piper 0.2.5, polling 3.11.0, prettyplease 0.2.37, proc-macro-crate 3.5.0, proc-macro2 1.0.107, process-wrap 9.1.1, prost-reflect 0.16.5, protox 0.10.0, protox-parse 0.10.0, quote 1.0.47, ref-cast 1.0.27, ref-cast-impl 1.0.27, rsa 0.10.0-rc.18, rustc-hash 1.1.0, rustc-hash 2.1.3, rustix 0.38.44, rustix 1.1.6, rustix-linux-procfs 0.1.1, rustix-openpty 0.2.0, rustversion 1.0.23, semver 1.0.28, serde 1.0.229, serde-saphyr 1.3.0, serde_bytes 0.11.19, serde_core 1.0.229, serde_derive 1.0.229, serde_derive_internals 0.30.0, serde_json 1.0.151, serde_json_lenient 0.2.4, serde_repr 0.1.21, smol 2.0.2, smol_str 0.3.6, syn 1.0.109, syn 2.0.119, syn 3.0.6, thiserror 1.0.69, thiserror 2.0.21, thiserror-impl 1.0.69, thiserror-impl 2.0.21, typeid 1.0.3, unicode-ident 1.0.26, utf-8 0.7.6, waker-fn 1.2.0, zbus-lockstep 0.5.2, zbus-lockstep-macros 0.5.2, zed-font-kit 0.14.1-zed, zmij 1.0.23, zvariant_utils 4.2.0 License: MIT Used by: allocator-api2 0.2.21, glow 0.17.0 Original notice: accesskit@0.24.1 / upstream/AccessKit-accesskit-license-mit-23f18e03dc49.txt @@ -33042,7 +33042,7 @@ Original notice: rsa 0.10.0-rc.18 / LICENSE-MIT Original notice: rustc-hash 1.1.0 / LICENSE-MIT Original notice: rustc-hash 2.1.3 / LICENSE-MIT Original notice: rustix 0.38.44 / LICENSE-MIT -Original notice: rustix 1.1.5 / LICENSE-MIT +Original notice: rustix 1.1.6 / LICENSE-MIT Original notice: rustix-linux-procfs 0.1.1 / LICENSE-MIT Original notice: rustix-openpty 0.2.0 / LICENSE-MIT Original notice: rustversion 1.0.23 / LICENSE-MIT @@ -62020,7 +62020,7 @@ at your option. ======================================================================== Original notice: rustix 0.38.44 / COPYRIGHT -Original notice: rustix 1.1.5 / COPYRIGHT +Original notice: rustix 1.1.6 / COPYRIGHT Short version for non-lawyers: diff --git a/licensing/sources.json b/licensing/sources.json index 4112f193..69e70593 100644 --- a/licensing/sources.json +++ b/licensing/sources.json @@ -472,10 +472,10 @@ }, { "packages": [ - "russh@0.63.3" + "russh@0.65.1" ], "path": "upstream/brendanzab-gl-rs-license-cfc7749b96f6.txt", - "url": "https://raw.githubusercontent.com/warp-tech/russh/f33baf439be8c59c49cb6cb2ae5976c579495bdf/LICENSE.txt", + "url": "https://raw.githubusercontent.com/warp-tech/russh/b33092aad1e51c66258a12e8b83fc473a68d9d34/LICENSE.txt", "sha256": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30" }, { From 37a96b342c0742dc2fb9f33814349697541177b4 Mon Sep 17 00:00:00 2001 From: egor Date: Sun, 15 Nov 2026 14:09:49 +0500 Subject: [PATCH 2/2] build(deps): preserve locked Windows target resolutions Keep the existing compatible Windows bindings while updating patched dependencies. Preserve the plugin isolation boundary without broadening its allowed dependency list. --- Cargo.lock | 14 +++++++------- THIRD_PARTY_NOTICES.txt | 6 +++--- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 24703988..8f59663f 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1954,7 +1954,7 @@ dependencies = [ "libc", "option-ext", "redox_users 0.5.3", - "windows-sys 0.59.0", + "windows-sys 0.61.2", ] [[package]] @@ -2266,7 +2266,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -6646,7 +6646,7 @@ version = "0.50.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5" dependencies = [ - "windows-sys 0.59.0", + "windows-sys 0.61.2", ] [[package]] @@ -8182,7 +8182,7 @@ dependencies = [ "once_cell", "socket2", "tracing", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -8882,7 +8882,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys 0.12.1", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -10106,7 +10106,7 @@ dependencies = [ "getrandom 0.4.3", "once_cell", "rustix 1.1.6", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -11707,7 +11707,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.48.0", + "windows-sys 0.61.2", ] [[package]] diff --git a/THIRD_PARTY_NOTICES.txt b/THIRD_PARTY_NOTICES.txt index c91aa9a2..2a22600d 100644 --- a/THIRD_PARTY_NOTICES.txt +++ b/THIRD_PARTY_NOTICES.txt @@ -2,9 +2,9 @@ Nocterm third-party licenses and notices ======================================== Generated by scripts/generate-license-notices.py using cargo-about 0.9.2. -Content SHA-256: a021d9c3553f038b172c57e9b33f501a0bd6ee99ea177a8733ecd8c42614c1aa -Input fingerprint: d6c54148db04c3209ce0039bb38cacab9781693f9566ba031b21efe15b0999f9 -Cargo.lock SHA-256 (release version masked): 020ade7221d55c80e7162816cbdad5e70db3fbdaed80b6f8c968dc8b84b8a586 +Content SHA-256: 5ef4aaa6c4bd1f63f720e93a01c17c68830bd9943e238372fc48c040ffdb786a +Input fingerprint: cbe6b3db67b4f551a6d27fa30bb5e07195c94e5a3c145d657d4e221ee2af5317 +Cargo.lock SHA-256 (release version masked): 43629d97e86dae759fb277b5c8a44805610d37be0adf774a066ecf3b7eded225 Scope: runtime and build dependencies of Nocterm and its optional vault broker for Linux x86_64, Windows x86_64, macOS x86_64 and macOS arm64.