mirror of
https://github.com/J3vb/OwnCord.git
synced 2026-09-03 03:50:00 +03:00
Bump crossbeam-epoch 0.9.20, quinn-proto 0.11.16, rustls-webpki 0.103.13 in Cargo.lock (semver-compatible; RUSTSEC-2026-0204, -0185, -0098, -0099, -0104 and the second quick-xml instance resolved). quick-xml 0.37 remains pinned by tauri-winrt-notification 0.7 (via tauri-plugin-notification) with no compatible route to the fixed 0.41; it only parses toast XML the library itself builds, never attacker-controlled input, so RUSTSEC-2026-0194/-0195 are ignored in .cargo/audit.toml with removal criteria documented inline. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>