Commit 3de455c
fix: bump crossbeam-epoch to 0.9.20 to clear RUSTSEC-2026-0204
The nightly Security Audit workflow has failed on main every run since
at least 2026-07-25. crossbeam-epoch 0.9.18 reaches us transitively via
rayon -> rayon-core -> crossbeam-deque and trips RUSTSEC-2026-0204, an
invalid pointer dereference in the fmt::Pointer impl for Atomic/Shared.
This failed both cargo audit and cargo deny check advisories.
Semver-compatible patch bump, so no manifest change is needed.
Co-Authored-By: Claude <noreply@anthropic.com>1 parent 2f164ec commit 3de455c
1 file changed
Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments