Michael HigginsandClaude Opus 5.5 b24c0360f1 Dependencies: require ruzstd 0.9.1 for RUSTSEC-2026-0344 (#4952) (#5225) ...

ruzstd before 0.9.1 lets a crafted zstd input under 128 KB allocate
several gigabytes at once. PhotoCraft decodes zstd when it opens .pcraft
and Affinity files, so such a file could end the process with an
out-of-memory abort.

Raise the minimum in both crates that use it and update the lockfile
from 0.9.0 to 0.9.1.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-15 13:37:56 -06:00

..

fuzz

Fuzz: ignore the same build leftovers in every fuzz crate (#3585)

2026-10-12 10:19:06 -04:00

src

fix(doc): variable definitions follow layer id remapping on copy and load (#5023)

2026-10-14 15:02:43 -07:00

tests

fix(doc): variable definitions follow layer id remapping on copy and load (#5023)

2026-10-14 15:02:43 -07:00

Cargo.toml

Dependencies: require ruzstd 0.9.1 for RUSTSEC-2026-0344 (#4952) (#5225)

2026-10-15 13:37:56 -06:00