What changed, and why it matters
This is a routine dependency update by Dependabot, bumping the 'ctrlc' crate from version 3.5.0 to 3.5.1. The change only affects the Windows build of the project and updates internal macOS/Apple-related transitive dependencies. There is no indication in the commit or supplied references that this fixes or introduces any security issue.
No security action required. Treat as normal dependency maintenance; review ctrlc 3.5.1 release notes separately if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the direct Windows-only dependency ctrlc from 3.5.0 to 3.5.1. The Cargo.lock diff shows that ctrlc replaced its ‘dispatch’ transitive dependency with ‘dispatch2’, which in turn pulls in ‘block2’, ‘objc2’, and ‘objc2-encode’ on Apple platforms. No source code changes are present, and no security advisory, CVE, or release-note content is provided in the commit message or verified references.
Changed components
Cargo.tomlCargo.lockWindows-only ctrlc dependencyInspect captured patch +37 / −7
diff --git a/Cargo.lock b/Cargo.lock
index 22d0713..4911571 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -187,6 +187,15 @@ dependencies = [
"generic-array",
]
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
[[package]]
name = "bzip2-sys"
version = "0.1.13+1.0.8"
@@ -337,11 +346,11 @@ dependencies = [
[[package]]
name = "ctrlc"
-version = "3.5.0"
+version = "3.5.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "881c5d0a13b2f1498e2306e82cbada78390e152d4b1378fb28a84f4dcd0dc4f3"
+checksum = "73736a89c4aff73035ba2ed2e565061954da00d4970fc9ac25dcc85a2a20d790"
dependencies = [
- "dispatch",
+ "dispatch2",
"nix",
"windows-sys 0.61.0",
]
@@ -378,10 +387,16 @@ dependencies = [
]
[[package]]
-name = "dispatch"
-version = "0.2.0"
+name = "dispatch2"
+version = "0.3.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bd0c93bb4b0c6d9b77f4435b0ae98c24d17f1c45b2ff844c6151a07256ca923b"
+checksum = "89a09f22a6c6069a18470eb92d2298acf25463f14256d24778e1230d789a2aec"
+dependencies = [
+ "bitflags",
+ "block2",
+ "libc",
+ "objc2",
+]
[[package]]
name = "either"
@@ -697,6 +712,21 @@ dependencies = [
"minimal-lexical",
]
+[[package]]
+name = "objc2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c2599ce0ec54857b29ce62166b0ed9b4f6f1a70ccc9a71165b6154caca8c05"
+dependencies = [
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
[[package]]
name = "once_cell"
version = "1.21.3"
diff --git a/Cargo.toml b/Cargo.toml
index c4c44ed..98f2bcf 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -40,7 +40,7 @@ serde_json = "1.0"
tiny_http = { version = "0.12", optional = true }
[target.'cfg(windows)'.dependencies]
-ctrlc = "=3.5.0"
+ctrlc = "=3.5.1"
[target.'cfg(not(windows))'.dependencies]
signal-hook = "0.3"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.