From ec94da73c5314e90c13a8c6e68d6bcecf7409673 Mon Sep 17 00:00:00 2001 From: "MK (fengmk2)" Date: Fri, 23 Oct 2026 02:37:02 +0900 Subject: [PATCH] fix(deps): update tokio to 1.54.1 for RUSTSEC-2026-0384 tokio 1.54.0 has a race between `Interval::poll_tick` and the multi-threaded runtime's time driver that can cause a use-after-free. The release is yanked, and 1.54.1 fixes it. Co-Authored-By: Claude Opus 5.5 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 8e2f6cd7b4..c8ebb34e6f 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -7826,9 +7826,9 @@ dependencies = [ [[package]] name = "tokio" -version = "1.54.0" +version = "1.54.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a0c168a474b95bfecfe908a65d4bdffc523144b649a74c09c286afb35d53e0bc" +checksum = "b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3" dependencies = [ "bytes", "libc",