Skip to content

chore(deps): bump crossbeam-epoch to 0.9.20 (RUSTSEC-2026-0204)#3804

Merged
rakita merged 1 commit into
mainfrom
update-crossbeam-epoch
Jul 16, 2026
Merged

chore(deps): bump crossbeam-epoch to 0.9.20 (RUSTSEC-2026-0204)#3804
rakita merged 1 commit into
mainfrom
update-crossbeam-epoch

Conversation

@rakita

@rakita rakita commented Jul 16, 2026

Copy link
Copy Markdown
Member

Fixes the deny CI failure seen on #3803 (and any other recent runs).

A new advisory RUSTSEC-2026-0204 was published against crossbeam-epoch v0.9.18 (invalid pointer dereference in the fmt::Pointer impl for Atomic/Shared). It reaches the workspace only through the dev-dependency chain codspeed-criterion-compat → rayon → rayon-core → crossbeam-deque → crossbeam-epoch.

Fix per the advisory: cargo update -p crossbeam-epoch (0.9.18 → 0.9.20). cargo deny check advisories passes locally with this change.

@codspeed-hq

codspeed-hq Bot commented Jul 16, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 181 untouched benchmarks
⏩ 1 skipped benchmark1


Comparing update-crossbeam-epoch (17b302e) with main (4c5cc3a)

Open in CodSpeed

Footnotes

  1. 1 benchmark was skipped, so the baseline result was used instead. If it was deleted from the codebase, click here and archive it to remove it from the performance reports.

@rakita
rakita merged commit 5199506 into main Jul 16, 2026
34 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant