Skip to content

chore(deps): update astral-tokio-tar#9997

Merged
jdx merged 1 commit into
mainfrom
codex/fix-cargo-deny-check
May 19, 2026
Merged

chore(deps): update astral-tokio-tar#9997
jdx merged 1 commit into
mainfrom
codex/fix-cargo-deny-check

Conversation

@jdx

@jdx jdx commented May 19, 2026

Copy link
Copy Markdown
Owner

Summary

  • update astral-tokio-tar from 0.6.1 to 0.6.2 in Cargo.lock
  • resolves the RUSTSEC-2026-0145 cargo-deny vulnerability failure

Validation

  • cargo deny check

Note: cargo deny check still prints the existing stale advisory ignore warning for RUSTSEC-2024-0370, but exits successfully.


Note

Low Risk
Low risk lockfile-only dependency bump; main impact is updated transitive code pulled from crates.io, which could affect build/runtime behavior if the crate is exercised.

Overview
Updates the pinned dependency astral-tokio-tar from 0.6.1 → 0.6.2 (checksum change) in Cargo.lock, primarily to resolve the cargo-deny advisory failure (RUSTSEC-2026-0145).

Reviewed by Cursor Bugbot for commit 34911e0. Bugbot is set up for automated code reviews on this repo. Configure here.

@greptile-apps

greptile-apps Bot commented May 19, 2026

Copy link
Copy Markdown
Contributor

No reviewable files after applying ignore patterns.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the astral-tokio-tar dependency in Cargo.lock from version 0.6.1 to 0.6.2. There are no review comments to address, and I have no further feedback to provide.

@github-actions

Copy link
Copy Markdown

Hyperfine Performance

mise x -- echo

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.5.12 x -- echo 65.2 ± 10.0 30.5 115.7 1.16 ± 0.32
mise x -- echo 56.3 ± 13.1 28.0 83.1 1.00
✅ Performance improvement for x -- echo is 16%

mise env

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.5.12 env 61.2 ± 10.7 29.5 92.2 1.00 ± 0.24
mise env 61.1 ± 10.3 29.9 82.4 1.00

mise hook-env

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.5.12 hook-env 65.5 ± 11.4 26.8 90.8 1.00
mise hook-env 66.5 ± 10.0 28.9 92.5 1.02 ± 0.23

mise ls

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.5.12 ls 53.1 ± 9.9 25.2 75.6 1.00
mise ls 54.7 ± 7.9 29.1 78.6 1.03 ± 0.24

xtasks/test/perf

Command mise-2026.5.12 mise Variance
install (cached) 289ms 304ms -4%
ls (cached) 205ms 204ms +0%
bin-paths (cached) 221ms 215ms +2%
task-ls (cached) 303ms 321ms -5%

@jdx jdx merged commit a52390d into main May 19, 2026
33 checks passed
@jdx jdx deleted the codex/fix-cargo-deny-check branch May 19, 2026 16:27
mise-en-dev added a commit that referenced this pull request May 21, 2026
### 🚀 Features

- **(npm)** disable npm lifecycle scripts by default by @risu729 in
[#9913](#9913)

### 🐛 Bug Fixes

- **(completion)** avoid network calls when generating completions by
@sargunv-headway in [#10010](#10010)
- **(config)** track install manifest option source by @risu729 in
[#9958](#9958)
- **(doctor)** honor http timeout for version checks by @risu729 in
[#9977](#9977)
- **(github)** prefer primary binary assets by @risu729 in
[#10008](#10008)
- **(release)** bake secondary mise-plugins vfox plugins by @risu729 in
[#9832](#9832)
- **(shim)** preserve optioned aliases during rebuilds by @risu729 in
[#9848](#9848)

### 🚜 Refactor

- **(dotnet)** parse backend tool options locally by @risu729 in
[#9962](#9962)

### 📚 Documentation

- remove how i use mise article by @jdx in
[#9996](#9996)

### 🧪 Testing

- **(s3)** cover current config over install manifest opts by @risu729
in [#9917](#9917)

### 📦️ Dependency Updates

- update astral-tokio-tar by @jdx in
[#9997](#9997)

### 📦 Registry

- update entry for vale by @eread in
[#10002](#10002)
- use aqua backend for vector by @jdx in
[#10011](#10011)

## 📦 Aqua Registry Updates

### New Packages (2)

- `google.com/antigravity-cli`
-
[`sholdee/crd-schema-publisher`](https://github.com/sholdee/crd-schema-publisher)

### Updated Packages (4)

- [`FairwindsOps/pluto`](https://github.com/FairwindsOps/pluto)
-
[`goccy/bigquery-emulator`](https://github.com/goccy/bigquery-emulator)
- [`sourcemeta/jsonschema`](https://github.com/sourcemeta/jsonschema)
- [`wasmCloud/wasmCloud/wash`](https://github.com/wasmCloud/wasmCloud)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant