Skip to content

chore(deps): pin 12 dependency versions - #39

Merged
ggviolin-cw merged 1 commit into
mainfrom
ananke-fix-1787093014323
Aug 20, 2026
Merged

chore(deps): pin 12 dependency versions#39
ggviolin-cw merged 1 commit into
mainfrom
ananke-fix-1787093014323

Conversation

@cw-ananke

@cw-ananke cw-ananke Bot commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

Supply Chain Fix

This PR was automatically generated by ananke to pin 12 unpinned dependencies to their latest stable versions.

Changes

File Dependency Before After Source
Cargo.toml http 1.0.0 1.5.0 registry
Cargo.toml http-body 0.4 0.4.6 registry
Cargo.toml bytes 1.4.0 1.12.1 registry
Cargo.toml tower-service 0.3 0.3.3 registry
Cargo.toml serde 1.0 1.0.229 registry
Cargo.toml tokio 1 1.53.1 registry
Cargo.toml hyper 1 1.11.0 registry
Cargo.toml serde 1 1.0.229 registry
Cargo.toml tokio 1 1.53.1 registry
Cargo.toml serde_json 1.0 1.0.151 registry
examples/hello-world/Cargo.toml axum-test-helper 0.* 0.4.0 registry
examples/hello-world/Cargo.toml tokio 1.0 1.53.1 registry

Skipped

4 dependencies were skipped and require manual attention:

File Dependency Reason
Cargo.toml axum Registry lookup failed
Cargo.toml reqwest Registry lookup failed
Cargo.toml tower Registry lookup failed
examples/hello-world/Cargo.toml axum Registry lookup failed

Generated by ananke — automated supply chain security

Auto-generated by ananke supply chain detector.

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Looks good overall. This PR only tightens Rust dependency constraints to exact versions in Cargo.toml files and does not change runtime code paths, API behavior, auth, or money/data handling logic.

I did not find concrete correctness or security regressions in the diff itself. Exact pinning here is consistent with supply-chain hardening and should improve reproducibility.

@ggviolin-cw
ggviolin-cw merged commit d341840 into main Aug 20, 2026
@ggviolin-cw
ggviolin-cw deleted the ananke-fix-1787093014323 branch August 20, 2026 04:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant