diff options
| author | Alan Wu <XrXr@users.noreply.github.com> | 2024-06-13 13:02:02 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-06-13 10:02:02 -0700 |
| commit | aa957546fa553abadd888ba18675c099df1178e0 (patch) | |
| tree | 2e88ce6be5d02566f0aa89e3bd128ed47243211a | |
| parent | f1c7b6f435f1167a0514b39a5f72f55cec4d1426 (diff) | |
Bump shlex from 1.1.0 to 1.3.0 in /yjit/bindgen (#10985)
`yjit-bindgen` isn't run to build Ruby releases at all, but people might
be running security scanners on the source tarball. Upgrade this
dependency to calm the scanners.
Backport of <https://github.com/ruby/ruby/pull/9652>.
See: <https://github.com/ruby/ruby/pull/10980>
| -rw-r--r-- | yjit/bindgen/Cargo.lock | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/yjit/bindgen/Cargo.lock b/yjit/bindgen/Cargo.lock index fc8d3927c4..6338d9fea8 100644 --- a/yjit/bindgen/Cargo.lock +++ b/yjit/bindgen/Cargo.lock @@ -279,9 +279,9 @@ dependencies = [ [[package]] name = "shlex" -version = "1.1.0" +version = "1.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "43b2853a4d09f215c24cc5489c992ce46052d359b5109343cbafbf26bc62f8a3" +checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64" [[package]] name = "syn" |