Skip to content

Security Advisory Alert #17

Description

@github-actions

Security Advisory Found

cargo deny check advisories found active advisories in dependencies.

Full output
unpacking 'github:hercules-ci/flake-parts/3107b77cd68437b9a76194f0f7f9c55f2329ca5b?narHash=sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA%3D' into the Git cache...
copying path '/nix/store/anvdcc2arw7kqrvwnidvhw6ypkkvws68-source' from 'http://127.0.0.1:37515'...
unpacking 'github:numtide/treefmt-nix/790751ff7fd3801feeaf96d7dc416a8d581265ba?narHash=sha256-pc20NRoMdiar8oPQceQT47UUZMBTiMdUuWrYu2obUP0%3D' into the Git cache...
unpacking 'github:nix-community/fenix/dfe3f197bf8f3e95d705b7323b46e3a087c88972?narHash=sha256-zZIrW6G6GiFkpfFrOVjxYAVcXoKBMHv06kaUTOiqOq0%3D' into the Git cache...
copying path '/nix/store/svapgmb9l5hwd5rmfynihdjqnhgpvv40-channel-rust-1.93.0.toml' from 'http://127.0.0.1:37515'...
unpacking 'github:ipetkov/crane/7cf72d978629469c4bd4206b95c402514c1f6000?narHash=sha256-SPm9ck7jh3Un9nwPuMGbRU04UroFmOHjLP56T10MOeM%3D' into the Git cache...
copying path '/nix/store/v5yp1d630d87wxlxd3agc9qhxvc0i6l1-cargoHelperFunctionsHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/08xffhw17d4vwf7gx8xfjv9i50462map-configureCargoCommonVarsHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/j322w2xkvv0q419n591zmyh24201r3b8-configureCargoVendoredDepsHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/ikx8300mbv3pjf4602dm1dv43wyafff1-gnu-config-2024-01-01' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1zvh0wd690j0bk43rbvip37nq9m5wsms-removeReferencesToRustToolchainHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/436f6x16baznfrm5qpvk25nldcw4vp3f-replaceCargoLockHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/7wqzl3njiars2sxyiqb4lh4qzkxxkgqv-installCargoArtifactsHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1s8dhbqgmc0hq6rkbl1sc2g7viwk77z0-removeReferencesToVendoredSourcesHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/vpxblivamvic1p5r5zny934jvg33m50r-xgcc-15.2.0-libgcc' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1cq7r0a6cdrvs2wy868bcqgz760hrjwl-rust-docs-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/8x8ykf0dyygb05smr9gc15i2rl5kd9gw-rust-std-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/hbnbbbx1n96v1waiiaid9fmg4li4i1kp-gcc-15.2.0-libgcc' from 'http://127.0.0.1:37515'...
copying path '/nix/store/h15ranlgwagilr6ajd7ich6d896kf9zd-tzdata-2026a' from 'http://127.0.0.1:37515'...
copying path '/nix/store/yshg9z9pkqqq1aidgrryn6hcmzgys2hs-update-autotools-gnu-config-scripts-hook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/a6kd5v5x97jnyyzbmiild0m1ikn5yfmg-mailcap-2.1.54' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1wbwmd3f4wdi5jb5h4n62j95p6n8pmhm-rust-analysis-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/prban8j4881f109m51jl4b5jd45lvmd7-inheritCargoArtifactsHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/2ly61i1c0ipwq73w2102lr6px5mlfsjb-iana-etc-20251215' from 'http://127.0.0.1:37515'...
copying path '/nix/store/pg99pd2gbwqs9y6z0q2hmx46m3hw9bns-linux-headers-6.18.7' from 'http://127.0.0.1:37515'...
copying path '/nix/store/p7jg95rzvfalb95k3mskk0jqxc9d724n-libunistring-1.4.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/7mc37jxbh3hlsz63s6pf4qlj05h597ii-busybox-1.37.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/d89jdm44kd24yn0yaz7aishw1cyzi396-publicsuffix-list-0-unstable-2026-03-02' from 'http://127.0.0.1:37515'...
copying path '/nix/store/mfw8qy1rr6dzny7jd60r7vr4af7ag9sn-zlib-1.3.2-static' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1ga782ml07vy0h503ac4cin0h8d7q6yh-libidn2-2.3.8' from 'http://127.0.0.1:37515'...
copying path '/nix/store/jms7zxzm7w1whczwny5m3gkgdjghmi2r-glibc-2.42-51' from 'http://127.0.0.1:37515'...
copying path '/nix/store/p2yk6q3bhcz1d0wlmk907ysj4l95ak7y-attr-2.5.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/v8sa6r6q037ihghxfbwzjj4p59v2x0pv-bash-5.3p9' from 'http://127.0.0.1:37515'...
copying path '/nix/store/41x6pd6mpai8qmyi87h4w03j26bxdp1y-aws-c-common-0.12.4' from 'http://127.0.0.1:37515'...
copying path '/nix/store/vi21p90v3kj509rx00r101xcqa6za76b-bzip2-1.0.8' from 'http://127.0.0.1:37515'...
copying path '/nix/store/91nr5z1cwr1qch2wl58dppl02zrnlza3-brotli-1.2.0-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/xfx4qhs2i71ibpy7grf1dd9k5w3b4yzg-c-ares-1.34.6' from 'http://127.0.0.1:37515'...
copying path '/nix/store/zwgva7jymljnqhgrxkd0ibi12xficb62-c-ares-1.34.6' from 'http://127.0.0.1:37515'...
copying path '/nix/store/adbdy51swcwc8gxifr90w7flh091xvfd-clippy-preview-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/nvllv8vnli7kqa9vsx5r9pzchrglnj7x-ed-1.22.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/68kslg4wrhdxz24saw62fzyqi1kjgcfs-expand-response-params' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1l9azvp6h39sc8c6d51qbcxw13nk37mk-cargo-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/amvbx81w5i1i6wr240l64ni22pbgphhr-expand-response-params' from 'http://127.0.0.1:37515'...
copying path '/nix/store/833c84q49wcrqd4x1s8k652cg5pibydi-editline-1.17.1-unstable-2025-05-24' from 'http://127.0.0.1:37515'...
copying path '/nix/store/cr8mzl7cj4s5mriwrqnf9cvadw1iai5m-expat-2.7.4' from 'http://127.0.0.1:37515'...
copying path '/nix/store/gg169kyil5vhsg5aqcpagyhs8fwl0r5r-gawk-5.3.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/wi6s912rwkb9afcw154i6ijzwpgw3p3f-pkg-config-0.29.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1fvcxyhg3i5fvw0j4l8wmyml10dnvm7q-gnumake-4.4.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/55q6r1kq38lxfi3l7k313ba01npcsinb-lz4-1.10.0-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/dvcg9a9nkddx3dc4qz856rqfa276gfqp-nghttp2-1.67.1-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/9hm3jdm6kk4m4ppwjcxz4s1dsdvd6fin-glibc-2.42-51-bin' from 'http://127.0.0.1:37515'...
copying path '/nix/store/by6npbc13ly5a1zgsqghv7wv5bklyiny-bzip2-1.0.8-bin' from 'http://127.0.0.1:37515'...
copying path '/nix/store/ca84rbhb0bhwdcci7q51dad20nkbn9xc-patch-2.8' from 'http://127.0.0.1:37515'...
copying path '/nix/store/rkmcrbwqcfhm4w17d2cb6gmbbnff38m2-xxHash-0.8.3' from 'http://127.0.0.1:37515'...
copying path '/nix/store/jpsqy47rdl0j0dvyyzb4kw8gqajw8nx0-gnused-4.9' from 'http://127.0.0.1:37515'...
copying path '/nix/store/zi23ybf8rr8nmc4753359lx7dcadamg0-popt-1.19' from 'http://127.0.0.1:37515'...
copying path '/nix/store/4sabfgpxkbv6w3mvk0wil50vdi37m9r8-acl-2.3.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/ab3753m6i7isgvzphlar0a8xb84gl96i-gcc-15.2.0-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/pnxiz967z73a45f4x7c1icldjaaqmlcp-gzip-1.14' from 'http://127.0.0.1:37515'...
copying path '/nix/store/xpxzrfpknknf64l1dvzb4ps5p4ppixgp-rust-src-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/2kdz3m7ic8w226pcvkz1dlg169v91p6a-zlib-1.3.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/ygdgqjzw03k8d05zq3pigzf67b62j7vs-pcre2-10.46' from 'http://127.0.0.1:37515'...
copying path '/nix/store/cynwj0s5x0c84hyi879isn8pdpf1iihm-gmp-6.3.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/z60np9r7vgajzk4jrbccqafk41vgg63h-treefmt-2.5.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/d0immrndpxnhx32vcfbxngmnf7hmqyc3-pkg-config-wrapper-0.29.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/kvmqv1jqv4792rsihf7yjc5kwk3d8z6x-gnutar-1.35' from 'http://127.0.0.1:37515'...
copying path '/nix/store/4zmr3iw5s719y5zz7h2dnym67x2i6n23-ncurses-6.6' from 'http://127.0.0.1:37515'...
copying path '/nix/store/8zgy79sw0zjwfcfp78p883hkkdw0pdzs-libffi-3.5.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/bga5xf95jaypy385hvxm4h3yxl3m1566-openssl-3.6.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/gac1a2359c62vgvy13d2i3asi6v00vfa-mpdecimal-4.0.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/gc52c68s6cfcrav5pypmrf3sq5k554ih-zlib-1.3.2-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/jg0wzzd657xyhhss3mfqqa1iv5s9r75i-binutils-2.44-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/kjg8z2k0zvsczaij78803g7imlfm1vfb-file-5.45' from 'http://127.0.0.1:37515'...
copying path '/nix/store/h0ip0h6qp7kc2wm7mwjaglkxxbzmjri4-glibc-2.42-51-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/cvd9nzh78ssvaizvgjk7xhcbzkq0w1nb-llvm-tools-preview-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/q9wz2k88ksbv9d90hw27hsr08b8jdc2d-gdbm-1.26-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/scabrfc47i7h73kfp4yn7vkw3qkxv8gk-isl-0.20' from 'http://127.0.0.1:37515'...
copying path '/nix/store/h6hdbgkfh59np7bi7h8qa76pq27ixz8r-gnugrep-3.12' from 'http://127.0.0.1:37515'...
copying path '/nix/store/sjlfsbd2lk4a1iva4vjjgvp4r1hga1xg-mpfr-4.2.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/safgshpdshpq8v8ww406szddpfws3vml-util-linux-minimal-2.41.3-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/x8x0bp6q9x80lr3lljkj7xr4lx2495si-xz-5.8.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/zfv59aslcf318vjkjs8zw855cdjcjdvq-libmpc-1.3.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/yvh4iy0ab95dq2p6cfm1xfvs6j9m0gxy-sqlite-3.51.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/m5sybb5r3yml6lfgvgdsw4rd3r6bq5h2-oniguruma-6.9.10-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/0gb785m6jsga0f4jxq1d8gk6yw87zfsi-libev-4.33' from 'http://127.0.0.1:37515'...
copying path '/nix/store/f368yzprc0hlv08bmgmazh2531w0isr2-sqlite-3.51.2-bin' from 'http://127.0.0.1:37515'...
copying path '/nix/store/bmjrwa35lpkc6b63ih8jfkdmyx6lpxy4-libpsl-0.21.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/jv35gdc4dfr0h8idwicn6h1h3r7pa13v-nghttp2-1.67.1-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/29mmnqpc1p3iv8wj0lpvicajy3jsbx87-zstd-1.5.7' from 'http://127.0.0.1:37515'...
copying path '/nix/store/02xrxrk0avdi9jajfdrkxf1nh7sy3lq3-cargo-nextest-0.9.132' from 'http://127.0.0.1:37515'...
copying path '/nix/store/7hf6md4vicvgh0v8f3yrhaiw8crg73w5-git-cliff-2.12.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/brf8zqy2spannqpv5bnfwlbmdyad5ik6-statix-0.5.8' from 'http://127.0.0.1:37515'...
copying path '/nix/store/cynd1a544hd6j4s44xawchgdki5b4xwb-alejandra-4.0.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/g6mlwdvpg92rchq352ll7jbi0pz7h43r-xz-5.8.2-bin' from 'http://127.0.0.1:37515'...
copying path '/nix/store/lvwga6ivl1d4lnw0zis9ajs0rqx9gp4i-gcc-15.2.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/q4c3dzc660sy6hp6i32dasham8895xif-deadnix-1.3.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/rfp8lhk4dl9syfn64rwb3h3c73426p08-binutils-2.44' from 'http://127.0.0.1:37515'...
copying path '/nix/store/s4w1j16dj8wyriv1ljfypr9s1r39yjwp-jq-1.8.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/sj3f6y3j8m1831l0gqm1bsk1f46jzkfd-patchelf-0.15.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/dlr3cc27i1mjkqcm9jlp5bjmb0n57q01-gmp-with-cxx-6.3.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/y07l22fq8wvg4wdf6anb0s6cljmsfs73-just-1.49.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/kp9xwf44gg1gff644xk5ajpq21f8fv8x-rustc-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/qq90p0xx02ydaqv2gv28mx4qx2vk98fq-readline-8.3p3' from 'http://127.0.0.1:37515'...
copying path '/nix/store/74sind1d6vf2bfwd7yklg8chsvzqxmmq-coreutils-9.10' from 'http://127.0.0.1:37515'...
copying path '/nix/store/barx2ixyd82zml7kiv0im2mvy9a7488r-nghttp2-1.67.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/fc13hvlj7541i1xmwdka7f61qicdzr5a-jq-1.8.1-bin' from 'http://127.0.0.1:37515'...
copying path '/nix/store/8cc8cdqa54bahfi5n5glkm8d252zkkjn-zstd-1.5.7-bin' from 'http://127.0.0.1:37515'...
copying path '/nix/store/rqxr17iaips1kfs65q2z6wczh2m4kwlm-rsync-3.4.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/xqnwl8qppzhr3dq5nzw2ly6yx4lz9xyr-cargo-deny-0.19.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/bpfqikwfzibylll4vf4ry4lqsfqzq50w-simdutf-8.0.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1ka84n9hvnxaq8rdwk9ksg82599j40yk-installFromCargoBuildLogHook' from 'http://127.0.0.1:37515'...
copying path '/nix/store/8q9wrmngl1mhvqgg0l018339zz86m184-openssl-3.6.1-bin' from 'http://127.0.0.1:37515'...
copying path '/nix/store/zc6fs28b9kabi2za6abxsy5bjns6zc17-boehm-gc-8.2.12' from 'http://127.0.0.1:37515'...
copying path '/nix/store/355mp4ns4042sb5p51rx3ys4mlliiwc5-diffutils-3.12' from 'http://127.0.0.1:37515'...
copying path '/nix/store/c89zz4vh8v9dbs8169wk8ahwxvrdxgm5-findutils-4.10.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/pzdalg368npikvpq4ncz2saxnz19v53k-python3-3.13.12' from 'http://127.0.0.1:37515'...
copying path '/nix/store/q4v09bffjy5i0f2kdwnbbwmhqv6i3pjs-zstd-1.5.7-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/sfvyavxai6qvzmv9p9x6mp4wwdz4v41m-bash-interactive-5.3p9' from 'http://127.0.0.1:37515'...
copying path '/nix/store/00p2pzg3i0bdlg9iab09jyr46lnvpi6n-numactl-2.0.18' from 'http://127.0.0.1:37515'...
copying path '/nix/store/9q9777l352qfg127kwbfilali7mcynr1-gmp-with-cxx-6.3.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/afhc4clmmfc8p62k9h7bh7kb7ayl72c4-ngtcp2-1.19.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/lq3xr8iiayj65lpwazxpqfywm98n9lsh-libssh2-1.11.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/wp4km4x6x2h98i412lr9mwgsr82r56j3-nghttp3-1.14.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/z8d1gxqy6zw03345cibic6yz4wqaz4rx-nghttp2-1.67.1-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/33j4arplml526zd708ykmy19gyv59yxr-brotli-1.2.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/rm4p5mh0hi7s4j4zmjz21m1c3qjkdiqs-ada-3.4.3' from 'http://127.0.0.1:37515'...
copying path '/nix/store/fgazg1ci420wj8sp0psjc4z9jlri293s-libseccomp-2.6.0-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/6am920vc1ahff5k6avazzs3vvylz66vl-libcpuid-0.8.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/g5y56dzvxlj4j4a98bmqlchvx0bhcv1v-libsodium-1.0.21-unstable-2026-02-11' from 'http://127.0.0.1:37515'...
copying path '/nix/store/qsx8i11dg8j1pq2blv1f76fhzg92x2mc-brotli-1.2.0-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/25kwp6nvgg1c6wylfbqx6scwaaqx543s-lowdown-3.0.1-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/8b15rqhpb4f16156ab8iibblaaipmj4r-icu4c-76.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/vy4nwn1qa5cm5nzfvn4zxqkrqwpm2by5-keyutils-1.6.3-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/4h67i9gwx8j548j4k752v0q250pv9l2l-aws-checksums-0.2.7' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1jib3n4b8k199ga8bg20zdpfvz0ajlrk-rustc-bootstrap-1.94.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/dl9jzvg8d2p719ix4k0vy9ar135gwnml-s2n-tls-1.6.4' from 'http://127.0.0.1:37515'...
copying path '/nix/store/j8ll5pv5jgdryd6yygr7mpnr0gw72vjv-aws-c-compression-0.3.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/scmiii1c3mirwn8p9ryc8wfjy9v8pxxq-aws-c-cal-0.9.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/sjjfrxdhbydnc6insbh5d1kmqw074gl3-aws-c-sdkutils-0.2.4' from 'http://127.0.0.1:37515'...
copying path '/nix/store/absz5q14q566515mxwb8csi9dph6nw8q-json-c-0.18' from 'http://127.0.0.1:37515'...
copying path '/nix/store/g2g1jvyldykkq49hhgvvkndbj731c676-krb5-1.22.1-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/957naa3406ar396crxffqa01rs34hkf3-hwloc-2.13.0-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/v5k7aj5qfr8spbak4xnjhb9g5g3dzsar-libxml2-2.15.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/pj67b3vnyhby5rgbg6a6c4pr08dc555s-llhttp-9.3.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1igykyhf5fkpizz1ks024n2j3rn7v7vz-nghttp3-1.14.0-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/x7ikkplbrv5dlihy1bqq32gp6lilkval-binutils-wrapper-2.44' from 'http://127.0.0.1:37515'...
copying path '/nix/store/4mfzppy31s84ck1iimpnfmpnldqbzfvl-simdutf-6.5.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/79xszwqidf98ag703b5c82q3pwg9lyzq-openssl-3.6.1-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/9ygn2i3mml8090wbwifrf1zlisb9m883-aws-c-io-0.22.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/885y044nrwcbzwlb3zi6ai4rk9qzm3cq-simdjson-4.3.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/9sch12zs629pw6m1az1l3gyy38dv2lzi-sqlite-3.51.2-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/pki1pw63hv31jf1iidhyvrz11p4ghl0b-llhttp-9.3.1-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/yiz1z8vp39jbpv6cq656rpy73mcc8rdf-libgit2-1.9.2-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/6nlxyi6byq00zk2xxlcn8bncqn9hn0qb-aws-c-http-0.10.4' from 'http://127.0.0.1:37515'...
copying path '/nix/store/5plcq2d4d2grwqq189y2nhw7m9hgycbf-onetbb-2022.3.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/iib74j1pbldp7vfad0c5xlz58776y2n7-aws-c-event-stream-0.5.7' from 'http://127.0.0.1:37515'...
copying path '/nix/store/bl3ryfm7yzf4p5ahc0vvfv69n0jb3k7q-libuv-1.52.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/kxalwqav6m5zpj5yvlfw4r4vg2qaf11s-libarchive-3.8.4-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/rndz9nk6da51qlxbgj9kb8dvx6zmdfnd-aws-c-auth-0.9.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/dhdysbgmgqp936mvkf5f9s8fh2mk68k5-curl-8.18.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/l49rn41gnsb8r27sa3jki8lj304zlwkx-aws-c-mqtt-0.13.3' from 'http://127.0.0.1:37515'...
copying path '/nix/store/aay8jyj44zii2l6k6y242s454d77nfrh-llvm-21.1.8-lib' from 'http://127.0.0.1:37515'...
copying path '/nix/store/cgdd4wv1m6cw687zn9qgl5w5hj8d2lrw-c-ares-1.34.6-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/qiahn1yk4fks2s0mbx89m824yyhvw6xh-libuv-1.52.0-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/cqwp1x8abb2nb42xnvnxypw527s9bz0c-ngtcp2-1.19.0-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/kwhw8r37bajrri6xqn18mkx0526hq68r-libblake3-1.8.4' from 'http://127.0.0.1:37515'...
copying path '/nix/store/g8881a16mwlxj1208vncxcjlv6bvxfli-uvwasi-0.0.23' from 'http://127.0.0.1:37515'...
copying path '/nix/store/6nrfjqgkbgwjrszrn9dfv5k7kj7vxxfk-elfutils-0.194' from 'http://127.0.0.1:37515'...
copying path '/nix/store/g2sigfhjh2r4242hq3vzhnw7vb2371sk-aws-c-s3-0.8.7' from 'http://127.0.0.1:37515'...
copying path '/nix/store/8klgi6wr3l1lxhpr51yc6zpqk3iq0zn5-aws-crt-cpp-0.34.3' from 'http://127.0.0.1:37515'...
copying path '/nix/store/pf2sv1bj475c7gfjk16cisqrgg0fn452-nix-output-monitor-2.1.8' from 'http://127.0.0.1:37515'...
copying path '/nix/store/kfxrq40xhnjbfrl9bdddry2n7bxh6kp0-boost-1.89.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/282y7wq025a5gzxwj1ihyynllx6wahs9-icu4c-76.1-dev' from 'http://127.0.0.1:37515'...
copying path '/nix/store/4pl6afcwfmv0xn65r7mqjy3avpb785j9-nodejs-slim-24.14.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/pcxnk22mys9vxaadx56nmqlp5l1fyys6-nix-util-2.34.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/1lyckcw1x4a9lqgnyhfgvyzmkpf1yprp-nix-store-2.34.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/10j4i7s4ss1ah109lgq16qz6srz9w96d-nix-fetchers-2.34.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/qc9x3m4qb6q704wrn0nai8j6s8rsw5m9-nix-main-2.34.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/lpcv7jx598wybw0g4jkqhhcb767i9yz3-nix-expr-2.34.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/vlvlz4yc0bxsnynrbjl6zp1r2gkdkcm7-nix-flake-2.34.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/xxz0i32mk8im13z8knj7vh43qqkra999-nodejs-slim-24.14.0-corepack' from 'http://127.0.0.1:37515'...
copying path '/nix/store/sma9mk6iadva3r3b52a5zx8dmnaai4bl-nodejs-slim-24.14.0-npm' from 'http://127.0.0.1:37515'...
copying path '/nix/store/yzkshf5q3yxzqw4cnm8287lw8ziai8p8-nix-cmd-2.34.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/6p5bnzqvy8sdv9rh4ffawln65hyh9xsd-nix-2.34.5' from 'http://127.0.0.1:37515'...
copying path '/nix/store/g99a149fn296hvby4s7qddivrg0j69bl-nix-eval-jobs-2.34.1' from 'http://127.0.0.1:37515'...
copying path '/nix/store/yrywywpvn8xjgs8bpnrmvsgrdsi9fqg0-nix-fast-build-1.3.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/v2210ar51jddnrcx46m53ivv9palc26m-nodejs-24.14.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/hb2bs5fg5wkm04x565737qd5nh2hy5nk-gcc-wrapper-15.2.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/afhc5ydqajy6c848ylslxgxfqqi4c7mf-prettier-3.6.2' from 'http://127.0.0.1:37515'...
copying path '/nix/store/gvq9hvvnmkvrk27mba0jjjppj068z55x-stdenv-linux' from 'http://127.0.0.1:37515'...
copying path '/nix/store/n8asgawvhvbzdrc3ja98i5zkvpic2aga-rust-analyzer-preview-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/dbwxcaxjfldpdmpy8zxgr229zfilwcb6-rustfmt-preview-1.93.0-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/cimgf7nxngslric5b3l57c38858prgax-rust-1.93.0-with-components-2026-01-22' from 'http://127.0.0.1:37515'...
copying path '/nix/store/yg8bg3shg4rrxc8yy2qbmbay1mjv48v5-rustc-1.94.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/4ccsp8cd78v5mq501hxnjkkdcjk3flwm-rustc-bootstrap-wrapper-1.94.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/q2mk8k3ck5i720j6n3pwxhkh09sb1lp0-cargo-bootstrap-1.94.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/0xjd3nsmh0ffrwl54bagfrx9kzx1cwic-rustc-wrapper-1.94.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/xlli1a8m35h5kwavjajnp6nl90xmjgcx-cargo-1.94.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/c96dfsfw69vss3qr9k5z70sg3zbmvp68-rustfmt-1.94.0' from 'http://127.0.0.1:37515'...
copying path '/nix/store/b8q7gcxpzwlgjk3z3nlp3jj3gn1q8x7w-treefmt.toml' from 'http://127.0.0.1:37515'...
copying path '/nix/store/zva45vg3j7n1z9w5nlar0fyqhab8brid-treefmt' from 'http://127.0.0.1:37515'...
copying path '/nix/store/d2ga07zhs4bcv1zgsbhv20k4z2n3svsz-headjack-env' from 'http://127.0.0.1:37515'...
this path will be fetched (0.0 KiB download, 107.4 KiB unpacked):
  /nix/store/lw0v8hggdjsqs9zpwwrxajcc4rbsmlfq-bash-interactive-5.3p9-man
copying path '/nix/store/lw0v8hggdjsqs9zpwwrxajcc4rbsmlfq-bash-interactive-5.3p9-man' from 'http://127.0.0.1:37515'...
---------------------
Available recipes:
    build mode='debug'                        # Build the project (debug or release) [alias: b]
    ci mode='local'                           # Run CI locally: local (default), nix
    dev                                       # Quick development feedback (build + test + lint)
    fix                                       # Run automatic fixes (clippy fix + nix fixes + format)
    fmt mode=''                               # Run formatters: (default), check
    lint +tools='clippy audit statix deadnix' # Run linter(s): clippy, audit, statix, deadnix, all
    nix action='check'                        # Nix commands: build, check, full
    test *args=''                             # Run tests: [filter] or bare [alias: t]
---------------------
error[unmaintained]: bitmaps is unmaintained
   ┌─ /home/runner/work/headjack/headjack/Cargo.lock:26:1
   │
26 │ bitmaps 3.2.1 registry+https://github.com/rust-lang/crates.io-index
   │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
   │
   ├ ID: RUSTSEC-2026-0247
   ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0247
   ├ The bitmaps crate is unmaintained; all versions are affected. The GitHub
     repository was archived by the owner on 2026-05-03.
     
     Recommended alternatives:
     
     * [fixedbitset](https://crates.io/crates/fixedbitset)
     * [bitvec](https://crates.io/crates/bitvec)
   ├ Announcement: https://github.com/bodil/bitmaps
   ├ Solution: No safe upgrade is available!
   ├ bitmaps v3.2.1
     ├── imbl v6.1.0
     │   ├── eyeball-im v0.8.0
     │   │   ├── matrix-sdk v0.16.0
     │   │   │   └── headjack v0.6.0
     │   │   ├── matrix-sdk-base v0.16.0
     │   │   │   └── matrix-sdk v0.16.0 (*)
     │   │   └── matrix-sdk-common v0.16.0
     │   │       ├── matrix-sdk v0.16.0 (*)
     │   │       └── matrix-sdk-base v0.16.0 (*)
     │   ├── matrix-sdk v0.16.0 (*)
     │   └── matrix-sdk-common v0.16.0 (*)
     └── imbl-sized-chunks v0.1.3
         └── imbl v6.1.0 (*)

error[vulnerability]: h2 unbounded empty DATA frames
   ┌─ /home/runner/work/headjack/headjack/Cargo.lock:88:1
   │
88 │ h2 0.4.13 registry+https://github.com/rust-lang/crates.io-index
   │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ security vulnerability detected
   │
   ├ ID: RUSTSEC-2026-0258
   ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0258
   ├ The h2 crate, used internally by hyper, had a flaw that would accept and queue empty DATA frames without limit.
     If streams were not actively drained, this could lead to unbounded memory usage, or a panic if the length overflows.
     
     Low severity.
     
     Patched in v0.4.16.
   ├ Announcement: https://github.com/hyperium/hyper/security/advisories/GHSA-q83h-524g-xf6h
   ├ Solution: Upgrade to >=0.4.16 (try `cargo update -p h2`)
   ├ h2 v0.4.13
     ├── hyper v1.9.0
     │   ├── hyper-rustls v0.27.9
     │   │   └── reqwest v0.12.28
     │   │       ├── matrix-sdk v0.16.0
     │   │       │   └── headjack v0.6.0
     │   │       └── oauth2 v5.0.0
     │   │           └── matrix-sdk v0.16.0 (*)
     │   ├── hyper-util v0.1.20
     │   │   ├── hyper-rustls v0.27.9 (*)
     │   │   └── reqwest v0.12.28 (*)
     │   └── reqwest v0.12.28 (*)
     └── reqwest v0.12.28 (*)

error[unmaintained]: proc-macro-error2 is unmaintained
    ┌─ /home/runner/work/headjack/headjack/Cargo.lock:163:1
    │
163 │ proc-macro-error2 2.0.1 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2026-0173
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0173
    ├ The author of `proc-macro-error2` has [confirmed](https://github.com/GnomedDev/proc-macro-error-2/issues/17#issuecomment-4643215473) that the crate is no longer maintained and recommends that users migrate away from it.
      
      `proc-macro-error2` was originally created as a maintained fork of [`proc-macro-error`](https://crates.io/crates/proc-macro-error) (see [RUSTSEC-2024-0370](https://rustsec.org/advisories/RUSTSEC-2024-0370)). Both the original crate and this fork are now unmaintained.
      
      ## Possible Alternative(s)
      
      - [manyhow](https://crates.io/crates/manyhow)
      - [proc-macro2-diagnostics](https://github.com/SergioBenitez/proc-macro2-diagnostics)
    ├ Announcement: https://github.com/GnomedDev/proc-macro-error-2/issues/17
    ├ Solution: No safe upgrade is available!
    ├ proc-macro-error2 v2.0.1
      ├── aquamarine v0.6.0
      │   └── matrix-sdk v0.16.0
      │       └── headjack v0.6.0
      └── matrix-pickle-derive v0.2.2
          └── matrix-pickle v0.2.2
              └── vodozemac v0.9.0
                  └── matrix-sdk v0.16.0 (*)

error[vulnerability]: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
    ┌─ /home/runner/work/headjack/headjack/Cargo.lock:194:1
    │
194 │ rustls 0.23.38 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ security vulnerability detected
    │
    ├ ID: RUSTSEC-2026-0285
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0285
    ├ Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level
      when they followed a key-changing message in the same record. For example,
      a plaintext `EncryptedExtensions` message packed into the same record as the
      `ServerHello` was accepted.
      
      RFC 8446 section 5.1 requires that handshake messages do not span key changes,
      and that implementations terminate the connection with an "unexpected_message"
      alert if they do.
      
      The handshake transcript is still authenticated, so a network-position attacker
      cannot use this to alter or complete a handshake; the practical effect is that
      a peer could send handshake messages that should be encrypted in plaintext
      without rustls rejecting the connection.
      
      This is functionally the same bug as Go's
      [GO-2026-4340](https://pkg.go.dev/vuln/GO-2026-4340) (CVE-2025-61730).
    ├ Announcement: https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc
    ├ Solution: Upgrade to >=0.23.45 (try `cargo update -p rustls`)
    ├ rustls v0.23.38
      ├── hyper-rustls v0.27.9
      │   └── reqwest v0.12.28
      │       ├── matrix-sdk v0.16.0
      │       │   └── headjack v0.6.0
      │       └── oauth2 v5.0.0
      │           └── matrix-sdk v0.16.0 (*)
      ├── reqwest v0.12.28 (*)
      └── tokio-rustls v0.26.4
          ├── hyper-rustls v0.27.9 (*)
          └── reqwest v0.12.28 (*)

error[vulnerability]: Reachable panic in certificate revocation list parsing
    ┌─ /home/runner/work/headjack/headjack/Cargo.lock:196:1
    │
196 │ rustls-webpki 0.103.12 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ security vulnerability detected
    │
    ├ ID: RUSTSEC-2026-0104
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0104
    ├ A panic was reachable when parsing certificate revocation lists via [`BorrowedCertRevocationList::from_der`]
      or [`OwnedCertRevocationList::from_der`].  This was the result of mishandling a syntactically valid empty
      `BIT STRING` appearing in the `onlySomeReasons` element of a `IssuingDistributionPoint` CRL extension.
      
      This panic is reachable prior to a CRL's signature being verified.
      
      Applications that do not use CRLs are not affected.
      
      Thank you to [@tynus3](https://github.com/tynus3) for the report.
    ├ Solution: Upgrade to >=0.103.13, <0.104.0-alpha.1 OR >=0.104.0-alpha.7 (try `cargo update -p rustls-webpki`)
    ├ rustls-webpki v0.103.12
      └── rustls v0.23.38
          ├── hyper-rustls v0.27.9
          │   └── reqwest v0.12.28
          │       ├── matrix-sdk v0.16.0
          │       │   └── headjack v0.6.0
          │       └── oauth2 v5.0.0
          │           └── matrix-sdk v0.16.0 (*)
          ├── reqwest v0.12.28 (*)
          └── tokio-rustls v0.26.4
              ├── hyper-rustls v0.27.9 (*)
              └── reqwest v0.12.28 (*)

advisories FAILED

Action required: Review the advisories above and update affected dependencies or add ignore entries to .config/deny.toml if appropriate.

Last checked: 2026-09-17T06:08:52Z

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions