What the developer wrote
Authored by dependabot[bot]
Bump signal-hook from 0.4.1 to 0.4.3
Bumps [signal-hook](https://github.com/vorner/signal-hook) from 0.4.1 to 0.4.3.
- [Changelog](https://github.com/vorner/signal-hook/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/signal-hook/compare/v0.4.1...v0.4.3)
---
updated-dependencies:
- dependency-name: signal-hook
dependency-version: 0.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated dependency update by Dependabot, bumping the signal-hook library from version 0.4.1 to 0.4.3. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in the commit itself that this fixes a security vulnerability.
No immediate action required. If reviewing for security, verify whether signal-hook 0.4.2 or 0.4.3 addresses any relevant advisories (e.g., via cargo-audit or the upstream changelog), but the commit itself does not claim to fix a security issue.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies Cargo.lock to upgrade the signal-hook crate from 0.4.1 to 0.4.3, a semver-patch update. It also updates the Cargo.lock format version from 3 to 4. No source code changes are present. The commit message frames this as a routine dependency update, not a security fix. No verified references were supplied linking this specific version bump to a disclosed vulnerability.
Changed components
Cargo.locksignal-hook dependencyInspect captured patch +3 / −3
diff --git a/Cargo.lock b/Cargo.lock
index e09a9f4..92db7eb 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1,6 +1,6 @@
# This file is automatically @generated by Cargo.
# It is not intended for manual editing.
-version = 3
+version = 4
[[package]]
name = "aho-corasick"
@@ -1114,9 +1114,9 @@ checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
[[package]]
name = "signal-hook"
-version = "0.4.1"
+version = "0.4.3"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a37d01603c37b5466f808de79f845c7116049b0579adb70a6b7d47c1fa3a952"
+checksum = "3b57709da74f9ff9f4a27dce9526eec25ca8407c45a7887243b031a58935fb8e"
dependencies = [
"libc",
"signal-hook-registry",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.