bump url package

Signed-off-by: Dentrax <[email protected]>
wolfi-dev · Jan 5, 2025 · 3271463 · 3271463
1 parent 9c13c1d
commit 3271463
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/starship.yaml b/starship.yaml
@@ -26,6 +26,9 @@ pipeline:
 
   - uses: rust/cargobump
 
+  - name: Mitigate GHSA-wwq9-3cpr-mm53
+    runs: cargo update -p [email protected] --precise 0.15.1
+
   - runs: |
       cargo auditable build --release
       install -Dm755 target/release/starship "${{targets.destdir}}"/usr/bin/starship

diff --git a/starship/cargobump-deps.yaml b/starship/cargobump-deps.yaml
@@ -1,5 +1,5 @@
 packages:
-    - name: gix-path
-      version: 0.10.11
-    - name: idna
-      version: 1.0.0
+  - name: gix-path
+    version: 0.10.11
+  - name: url
+    version: 2.5.4