Skip to content

fix: cargo audit#7159

Open
brady-stacks wants to merge 1 commit intostacks-network:developfrom
brady-stacks:fix/cargo-audit-16-3-26
Open

fix: cargo audit#7159
brady-stacks wants to merge 1 commit intostacks-network:developfrom
brady-stacks:fix/cargo-audit-16-3-26

Conversation

@brady-stacks
Copy link
Copy Markdown
Contributor

Mainly a Cargo.lock update

Vulnerabilities alerted from cargo audit

Crate Before After Audit
ring 0.17.7 0.17.14 RUSTSEC-2025-0009
astral-tokio-tar 0.5.6 0.6.0 RUSTSEC-2026-0066
idna 0.5.0 1.1.0 RUSTSEC-2024-0421
protobuf 2.28.0 removed RUSTSEC-2024-0437
rustls-webpki 0.103.9 0.103.12 RUSTSEC-2026-0098/0099/0049
quinn-proto 0.11.9 0.11.14 RUSTSEC-2026-0037
tracing-subscriber 0.3.18 0.3.23 RUSTSEC-2025-0055
time 0.3.36 0.3.47
keccak 0.1.5 0.1.6
scc 2.3.0 2.4.0
sdd 3.0.5 3.0.10

Cargo changes made

  • stackslib: prometheus 0.9 -> 0.13 with default-features = false (drops protobuf dep)
  • stacks-signer: prometheus 0.9 -> 0.13 with default-features = false; reqwest 0.11.22 -> 0.12
  • stacks-node: reqwest 0.11 -> 0.12 (removed rustls feature, kept rustls-tls)

@brady-stacks brady-stacks force-pushed the fix/cargo-audit-16-3-26 branch from a0be8a5 to a4ffb9b Compare April 17, 2026 16:50
@coveralls
Copy link
Copy Markdown

coveralls commented Apr 20, 2026

Coverage Report for CI Build 24576564110

Warning

Build has drifted: This PR's base is out of sync with its target branch, so coverage data may include unrelated changes.
Quick fix: rebase this PR. Learn more →

Coverage decreased (-0.04%) to 85.668%

Details

  • Coverage decreased (-0.04%) from the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • 3046 coverage regressions across 83 files.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

3046 previously-covered lines in 83 files lost coverage.

Top 10 Files by Coverage Loss Lines Losing Coverage Coverage
stackslib/src/net/inv/epoch2x.rs 220 79.55%
stackslib/src/net/chat.rs 202 92.95%
stackslib/src/chainstate/stacks/miner.rs 190 83.5%
stacks-node/src/nakamoto_node/miner.rs 149 87.34%
stackslib/src/chainstate/stacks/db/mod.rs 134 86.26%
stackslib/src/net/api/postblock_proposal.rs 126 80.0%
clarity/src/vm/costs/mod.rs 125 83.57%
stacks-node/src/nakamoto_node/relayer.rs 115 86.1%
stackslib/src/config/mod.rs 101 68.84%
stackslib/src/clarity_vm/database/marf.rs 99 60.67%

Coverage Stats

Coverage Status
Relevant Lines: 218251
Covered Lines: 186971
Line Coverage: 85.67%
Coverage Strength: 17495801.33 hits per line

💛 - Coveralls

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants