Compare commits

...
2 Commits
Author SHA1 Message Date
Grant Limberg 899352e384 Merge pull request #2607 from zerotier/dependabot-fixes
Fix Dependabot alerts: remove unused testcontainers, bump serde_with
2026-07-22 12:25:34 -07:00
Grant Limberg ae0a91068c Fix Dependabot alerts: remove unused testcontainers, bump serde_with
- Remove testcontainers/testcontainers-modules dev-dependencies, orphaned
  since the rust-based pubsub removal (0f6378359). This drops tokio-tar
  0.3.1 (CVE-2025-62518, PAX header desynchronization) and the rest of
  the bollard/docker graph from the lockfile. Resolves alert #67.
- Update serde_with 3.20.0 -> 3.21.0 (KeyValueMap serialization panic
  on empty sequence/map entries). Resolves alert #68.
2026-07-20 13:02:38 +02:00
2 changed files with 19 additions and 624 deletions

No files matched your search

+19 -618
View File
File diff suppressed because it is too large. Load diff
-6
View File
@@ -24,12 +24,6 @@ time = { version = "~0.3", features = ["formatting"] }
bytes = "1.3"
thiserror = "1"
[dev-dependencies]
testcontainers = { version = "0.24", features = ["blocking"] }
testcontainers-modules = { version = "0.12.1", features = [
"google_cloud_sdk_emulators",
] }
[build-dependencies]
cbindgen = "0.29"