deps(deps): bump serde_with from 3.14.1 to 3.21.0 - #2661
Conversation
There was a problem hiding this comment.
Summary
Dependency bump looks consistent and low-risk in this diff: Cargo.toml pins serde_with to 3.21.0, and Cargo.lock reflects the expected transitive updates (serde_with_macros to 3.21.0, darling chain to 0.23.0, plus new bs58).
This also pulls in the upstream serde_with security fix mentioned in the PR notes (panic/allocation guard in KeyValueMap handling), with no application code changes or API-surface edits in this PR.
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself.
|
Bumps [serde_with](https://github.com/jonasbb/serde_with) from 3.14.1 to 3.21.0. - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.14.1...v3.21.0) --- updated-dependencies: - dependency-name: serde_with dependency-version: 3.21.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
866a888 to
56db16b
Compare
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself.
|
Bumps serde_with from 3.14.1 to 3.21.0.
Release notes
Sourced from serde_with's releases.
... (truncated)
Commits
0f4ca67Update changelog for 3.21.0 (#967)7654841Update changelog for 3.21.0c8a1d82Protect all collection creations against capacity overflow by using `size_hin...6ad5fa5Properly feature gate thevec_with_capacity_cautiousfunctionef7d141Protect all collection creations against capacity overflow by using `size_hin...a348da3Add serde_as deserialize_as explain (#958)2e5bc20Bump the github-actions group with 3 updates (#965)927a3d6Bump the github-actions group with 3 updates62d14ecEnable link-to-definition on docs.rs again, after the upstream issue was reso...4584d94Enable link-to-definition on docs.rs again, after the upstream issue was reso...