clawpanel

mirror of https://github.com/qingchencloud/clawpanel.git synced 2026-05-07 06:03:02 +08:00

Files

晴天 08b767b212 chore(deps): update Rust dependencies for security

- Bump rand 0.9.2 -> 0.9.4 (addresses unsoundness alert)
- Update getrandom, fastrand, and other transitive deps via cargo update

Note: rand 0.8.5/0.7.3 remain as indirect deps of upstream crates
(Tauri/winit/etc) and cannot be forced to 0.9.x due to API breakage.
The vulnerable code path (custom logger calling rand::rng()) is not
exercised by ClawPanel.

2026-04-16 14:19:48 +08:00