From 0b57006053c68f44e63b520ff09cf6e1cff23238 Mon Sep 17 00:00:00 2001 From: LGUG2Z Date: Fri, 30 Oct 2026 12:10:57 -0700 Subject: [PATCH] chore(deps): update libz-sys to 1.1.31 for RUSTSEC-2026-0418 libz-sys before 1.1.31 logs the compiler command of its zlib probe, which with cc 1.6.0 or later includes every environment variable of the build, and cargo stores that output under target/. It is a build dependency of shadow-rs via git2 and libgit2-sys; bump it in the lockfile. --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index d9d9a19c..96aa356c 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -3623,9 +3623,9 @@ dependencies = [ [[package]] name = "libz-sys" -version = "1.1.30" +version = "1.1.31" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f710a23e6dbf193214fd46ca56a9d6864e550abe86202184532ae7275e46de19" +checksum = "ff20308ecabd635a2dc1dd5834a86c462cca20efba1d5d3ddab1f8aea3455cb2" dependencies = [ "cc", "libc",