anyrun-org / anyrun

A wayland native, highly customizable runner.
GNU General Public License v3.0
560 stars 44 forks source link

chore: update dependencies marked by audit workflow #166

Open NotAShelf opened 1 month ago

NotAShelf commented 1 month ago

The audit workflow that I've added has marked some of the dependencies as vulnerable. Some of those dependencies are also marked by dependabot to be vulnerable to various expoits.

I've prepared a best-effort patch (that I've confirmed to be working) for those dependencies, updating the cargo lock to remedy some of them.