Skip to content

Commit d0c31e3

Browse files
authored
fix-ci: update to tokio 1.44.2 to fix RUSTSEC-2025-0023 (#9513)
### Related <!-- Include links to any related issues/PRs in a bulleted list, for example: * Closes #1234 * Part of #1337 --> ### What Fixes the cargo-deny workflow ``` error[unsound]: Broadcast channel calls clone in parallel, but does not require `Sync` ┌─ /home/runner/work/rerun/rerun/Cargo.lock:686:1 │ 686 │ tokio 1.44.1 registry+https://github.com/rust-lang/crates.io-index │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unsound advisory detected │ ├ ID: RUSTSEC-2025-0023 ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2025-0023 ├ The broadcast channel internally calls `clone` on the stored value when receiving it, and only requires `T:Send`. This means that using the broadcast channel with values that are `Send` but not `Sync` can trigger unsoundness if the `clone` implementation makes use of the value being `!Sync`. ``` Signed-off-by: Andrea Reale <[email protected]>
1 parent a9f9d10 commit d0c31e3

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

Cargo.lock

+2-2
Original file line numberDiff line numberDiff line change
@@ -10067,9 +10067,9 @@ dependencies = [
1006710067

1006810068
[[package]]
1006910069
name = "tokio"
10070-
version = "1.44.1"
10070+
version = "1.44.2"
1007110071
source = "registry+https://github.com/rust-lang/crates.io-index"
10072-
checksum = "f382da615b842244d4b8738c82ed1275e6c5dd90c459a30941cd07080b06c91a"
10072+
checksum = "e6b88822cbe49de4185e3a4cbf8321dd487cf5fe0c5c65695fef6346371e9c48"
1007310073
dependencies = [
1007410074
"backtrace",
1007510075
"bytes",

Cargo.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -311,7 +311,7 @@ time = { version = "0.3.36", default-features = false, features = [
311311
tiny_http = { version = "0.12", default-features = false }
312312
tinystl = { version = "0.0.3", default-features = false }
313313
tobj = "4.0"
314-
tokio = { version = "1.40.0", default-features = false }
314+
tokio = { version = "1.44.2", default-features = false }
315315
tokio-stream = "0.1.16"
316316
tokio-util = { version = "0.7.12", default-features = false }
317317
toml = { version = "0.8.10", default-features = false }

0 commit comments

Comments
 (0)