J3vbandClaude Fable 5 35f225dca4 fix(client): resolve cargo audit findings ...

Bump crossbeam-epoch 0.9.20, quinn-proto 0.11.16, rustls-webpki
0.103.13 in Cargo.lock (semver-compatible; RUSTSEC-2026-0204, -0185,
-0098, -0099, -0104 and the second quick-xml instance resolved).

quick-xml 0.37 remains pinned by tauri-winrt-notification 0.7 (via
tauri-plugin-notification) with no compatible route to the fixed 0.41;
it only parses toast XML the library itself builds, never
attacker-controlled input, so RUSTSEC-2026-0194/-0195 are ignored in
.cargo/audit.toml with removal criteria documented inline.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-18 13:50:38 +02:00

..

tauri-client

fix(client): resolve cargo audit findings

2026-07-18 13:50:38 +02:00