Skip to content

fix(deps): chacha20 0.10.2 — 0.10.1 was yanked - #27

Merged
piekstra merged 1 commit into
mainfrom
fix/yanked-chacha20
Sep 15, 2026
Merged

piekstra merged 1 commit into
mainfrom
fix/yanked-chacha20

Conversation

@piekstra

Copy link
Copy Markdown
Owner

What

Lockfile-only bump: cargo update -p chacha20 moves chacha20 0.10.1 -> 0.10.2. No manifest change; the transitive range already admits 0.10.2.

Why

chacha20 0.10.1 was yanked on 2026-08-27. This repo's deny.toml sets yanked = "deny", so cargo-deny (the audit / deny / secrets job) fails on any PR until the lock moves. Same fix as the rest of the family sweep, applied pre-emptively here.

Gate

Mirrored locally before merge: repo gate (make verify or the CI-equivalent) plus cargo deny check; CI must also be green.

Lockfile-only: `cargo update -p chacha20`. No manifest change; the transitive range already admits 0.10.2.

@piekstra-dev piekstra-dev left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated PR Review

Reviewed commit: 15a2d38ac760
Profile: reviewer - Posting as: piekstra-dev

Summary

Reviewer Findings
rust:implementation-tests 0
security:code-auditor 0

Reviewer Coverage

  • rust:implementation-tests — complete (broad); skipped: none; constraints: Cargo.lock is a generated dependency-version bump (chacha20 0.10.1 -> 0.10.2) with no source or test code changes, so this agent's checks (error handling, resource/lifetime handling, test coverage, etc.) do not apply.
  • security:code-auditor — complete (broad); skipped: none; constraints: none

0 PR discussion threads considered. 0 summarized; 0 resolved.


Completed in 36s | ~$0.43 (est.) | claude-sonnet-5 | cr 0.10.289
Field Value
Model claude-sonnet-5
Reviewers rust:implementation-tests, security:code-auditor
Engine claude_cli · claude-sonnet-5
Reviewed by cr · piekstra-dev
Duration 36s wall · 44s compute
Cost ~$0.43 (est.)
Tokens 22 in / 2.7k out

Per-workstream usage

  • orchestrator-selection — claude-sonnet-5
    • In: 6
    • Out: 892
    • Cache read: 73.6k
    • Cache create: 23.2k
    • Cost: ~$0.12 (est.)
    • Duration: 14s
  • rust:implementation-tests — claude-sonnet-5
    • In: 6
    • Out: 771
    • Cache read: 83.3k
    • Cache create: 22.0k
    • Cost: ~$0.12 (est.)
    • Duration: 11s
  • security:code-auditor — claude-sonnet-5
    • In: 6
    • Out: 647
    • Cache read: 84.3k
    • Cache create: 22.8k
    • Cost: ~$0.12 (est.)
    • Duration: 11s
  • orchestrator-rollup — claude-sonnet-5
    • In: 4
    • Out: 360
    • Cache read: 55.5k
    • Cache create: 11.5k
    • Cost: ~$0.07 (est.)
    • Duration: 7s

@piekstra
piekstra merged commit 38a57fe into main Sep 15, 2026
2 checks passed
@piekstra
piekstra deleted the fix/yanked-chacha20 branch September 15, 2026 19:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants