Skip to content

fix: update serde_with to patched 3.23 release - #170

Open
ahu04 wants to merge 1 commit into
AeroRust:mainfrom
ahu04:fix/serde-with-advisory
Open

ahu04 wants to merge 1 commit into
AeroRust:mainfrom
ahu04:fix/serde-with-advisory

Conversation

@ahu04

@ahu04 ahu04 commented Sep 9, 2026 •

Copy link
Copy Markdown

The serde_with = "~3.11" constraint prevents downstream projects from resolving a version patched for GHSA-7gcf-g7xr-8hxj. Update it to ~3.23 and regenerate the workspace lockfile, retaining the existing minor-version cap to avoid unplanned MSRV increases.

Patched serde_with releases require Rust 1.88. Update the library and benchmark-harness MSRV, README, and CI matrix accordingly. Convert two nested conditions to equivalent let chains required by Clippy at the new MSRV; parser behavior is unchanged.

@ahu04
ahu04 marked this pull request as ready for review September 9, 2026 20:54

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant