fix(buck2): Remediate GHSA-rhfx-m35p-ff5j by bumping lru

[Ankush-Pathak]

Signed-off-by: Ankush Pathak ankush.pathak@chainguard.dev

[octo-sts]

❓ Build Failed: Unknown

Failed to run command "/bin/sh -c 'set -e \n[ -d '/home/build' ] || mkdir -p '/home/build'\ncd '/home/build'\nsed -i 's/lru = "0.12.3"/lru = "0.16.3"/' Cargo.toml\nexit 1\n\nexit 0'": Process exited with status 1

Build Details

Category	Details
Build System	melange
Failure Point	Bump dependency for CVE remediation

Root Cause Analysis 🔍

The build script contains an unconditional 'exit 1' command that causes the process to fail regardless of the sed operation outcome. This appears to be a script logic error where the script is designed to always exit with status 1, making the build step always fail.

---

Was this comment helpful? Please use 👍 or 👎 reactions on this comment.