chore: release v0.6.0 - #53
Merged
Merged
Conversation
RUSTSEC-2026-0190 and RUSTSEC-2026-0221, both fixed in semver-compatible patch releases.
cargo-audit looks for .cargo/audit.toml, so the root file never applied and its three justified entries were never honoured. Adds RUSTSEC-2026-0253, which needs a ratatui-core bump we do not control.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Cuts v0.6.0 over the reliability and performance sweep merged in #51.
Minor rather than patch: the sweep added an API capability (
?limiton the raw endpoint, plus the/headersendpoint), changed observable message ordering from ULID text to arrival order, and added a runtime UI dependency.Also clears the two new unsound advisories that
cargo auditpicked up (RUSTSEC-2026-0190in anyhow,RUSTSEC-2026-0221in event-listener), both fixed by semver-compatible patch bumps.One incidental fix: the
audit.tomlignore list lived at the repo root, where cargo-audit never reads it, so its three justified entries had no effect. Moved to.cargo/audit.tomland extended withRUSTSEC-2026-0253(lru, needs a ratatui-core bump we do not control). The only remaining audit output is a yanked-version notice forspin, reached through flume via sqlx.