From 13458a0733cff00e127f60ff7d921b8663a8d0df Mon Sep 17 00:00:00 2001 From: "Gregory Markou (ai)" Date: Mon, 6 Jul 2026 12:09:23 +0200 Subject: [PATCH] chore(deps): bump plist to pull quick-xml 0.41 quick-xml 0.39.4 is flagged by RUSTSEC-2026-0194 and RUSTSEC-2026-0195 (DoS-class parser advisories), failing cargo-deny. It comes in via plist -> tauri; plist 1.10.0 moves to quick-xml 0.41.0, which the advisories mark as fixed. Lockfile-only change. Co-Authored-By: Claude --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 037b81f..77719bf 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2324,9 +2324,9 @@ checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e" [[package]] name = "plist" -version = "1.9.0" +version = "1.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "092791278e026273c1b65bbdcfbba3a300f2994c896bd01ab01da613c29c46f1" +checksum = "7da1d65da6dd5d1e44199ac0f58712d241c0f439f80adea8924d832384087f85" dependencies = [ "base64 0.22.1", "indexmap 2.14.0", @@ -2490,9 +2490,9 @@ checksum = "a1d01941d82fa2ab50be1e79e6714289dd7cde78eba4c074bc5a4374f650dfe0" [[package]] name = "quick-xml" -version = "0.39.4" +version = "0.41.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cdcc8dd4e2f670d309a5f0e83fe36dfdc05af317008fea29144da1a2ac858e5e" +checksum = "e660451e55124f798a69a5af3f49ccfbefbd41910eefd25caf2393e1f3473ec1" dependencies = [ "memchr", ]