What changed, and why it matters
This is an automated dependency update by Dependabot that bumps the `ctrlc` crate (used only on Windows builds) from version 3.5.1 to 3.5.2, along with its indirect dependencies `libc` and `nix`. There is no indication in the commit or supplied references that this fixes a security issue. It appears to be a routine patch-level maintenance update.
No security action required. Treat as routine dependency maintenance. If desired, review the upstream `ctrlc` 3.5.2 release notes for any bug fixes relevant to Windows signal handling, but no security relevance is evident from this commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates ctrlc from 3.5.1 to 3.5.2 in Cargo.toml and Cargo.lock. The ctrlc crate is a Windows-only dependency in this project (gated by cfg(windows)). The lockfile also updates libc (0.2.178 → 0.2.180) and nix (0.30.1 → 0.31.1), which are transitive dependencies of ctrlc. No code changes are present, and the commit message describes this as a semver-patch dependency update with no security context.
Changed components
Cargo.tomlCargo.lockctrlc dependency (Windows-only)libc transitive dependencynix transitive dependencyInspect captured patch +7 / −7
diff --git a/Cargo.lock b/Cargo.lock
index 7a37539..e4b3bff 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -346,9 +346,9 @@ dependencies = [
[[package]]
name = "ctrlc"
-version = "3.5.1"
+version = "3.5.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "73736a89c4aff73035ba2ed2e565061954da00d4970fc9ac25dcc85a2a20d790"
+checksum = "e0b1fab2ae45819af2d0731d60f2afe17227ebb1a1538a236da84c93e9a60162"
dependencies = [
"dispatch2",
"nix",
@@ -614,9 +614,9 @@ checksum = "830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55"
[[package]]
name = "libc"
-version = "0.2.178"
+version = "0.2.180"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "37c93d8daa9d8a012fd8ab92f088405fb202ea0b6ab73ee2482ae66af4f42091"
+checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc"
[[package]]
name = "libredox"
@@ -692,9 +692,9 @@ dependencies = [
[[package]]
name = "nix"
-version = "0.30.1"
+version = "0.31.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
+checksum = "225e7cfe711e0ba79a68baeddb2982723e4235247aefce1482f2f16c27865b66"
dependencies = [
"bitflags",
"cfg-if",
diff --git a/Cargo.toml b/Cargo.toml
index 8af0480..75d41a2 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -40,7 +40,7 @@ serde_json = "1.0"
tiny_http = { version = "0.12", optional = true }
[target.'cfg(windows)'.dependencies]
-ctrlc = "=3.5.1"
+ctrlc = "=3.5.2"
[target.'cfg(not(windows))'.dependencies]
signal-hook = "0.4"
Why this scored 10/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.