What the developer wrote
Authored by dependabot[bot]
Bump ctrlc from 3.4.2 to 3.5.0 (#1229)
Bumps [ctrlc](https://github.com/Detegr/rust-ctrlc) from 3.4.2 to 3.5.0.
- [Release notes](https://github.com/Detegr/rust-ctrlc/releases)
- [Commits](https://github.com/Detegr/rust-ctrlc/commits)
---
updated-dependencies:
- dependency-name: ctrlc
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
What changed, and why it matters
This is a routine dependency update by Dependabot, bumping the 'ctrlc' library used only on Windows builds from version 3.4.2 to 3.5.0. The change itself only edits version numbers in the project's package manifest and lock file. There is no indication in the commit that this fixes a security vulnerability, and no security advisory was supplied.
No immediate action required. If security relevance is suspected, review the upstream ctrlc 3.5.0 release notes and nix/windows-sys changelogs for any security fixes, and consider pinning or further updating after validation.
Security signals we found
Dependency version bump with no stated security relevance
Transitive dependency updates (nix, windows-sys) may include upstream fixes, but none are identified in the supplied materials
No CVE, advisory, or security release notes referenced in commit
Evidence from the diff
The commit updates a single direct production dependency, ctrlc, from 3.4.2 to 3.5.0. The Cargo.lock diff shows transitive updates to nix (0.27.1 -> 0.30.1), windows-sys (0.52.0 -> 0.61.0), and additions of cfg_aliases, dispatch, and windows-link. ctrlc is gated to cfg(windows) in Cargo.toml, so this update affects Windows builds only. The commit message is a standard Dependabot semver-minor bump and does not mention security fixes.
Changed components
Cargo.toml dependency declaration for Windows targetCargo.lock transitive dependency treectrlc crate (Windows-only signal handling)Inspect captured patch +31 / −11
diff --git a/Cargo.lock b/Cargo.lock
index 72ebc62..4336e41 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -233,6 +233,12 @@ version = "1.0.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
[[package]]
name = "chunked_transfer"
version = "1.5.0"
@@ -331,12 +337,13 @@ dependencies = [
[[package]]
name = "ctrlc"
-version = "3.4.2"
+version = "3.5.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b467862cc8610ca6fc9a1532d7777cee0804e678ab45410897b9396495994a0b"
+checksum = "881c5d0a13b2f1498e2306e82cbada78390e152d4b1378fb28a84f4dcd0dc4f3"
dependencies = [
+ "dispatch",
"nix",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.0",
]
[[package]]
@@ -370,6 +377,12 @@ dependencies = [
"winapi",
]
+[[package]]
+name = "dispatch"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd0c93bb4b0c6d9b77f4435b0ae98c24d17f1c45b2ff844c6151a07256ca923b"
+
[[package]]
name = "either"
version = "1.15.0"
@@ -664,12 +677,13 @@ dependencies = [
[[package]]
name = "nix"
-version = "0.27.1"
+version = "0.30.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2eb04e9c688eff1c89d72b407f168cf79bb9e867a9d3323ed6c01519eb9cc053"
+checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
dependencies = [
"bitflags",
"cfg-if",
+ "cfg_aliases",
"libc",
]
@@ -1264,22 +1278,28 @@ version = "0.4.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+[[package]]
+name = "windows-link"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "45e46c0661abb7180e7b9c281db115305d49ca1709ab8242adf09666d2173c65"
+
[[package]]
name = "windows-sys"
-version = "0.52.0"
+version = "0.59.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
dependencies = [
"windows-targets",
]
[[package]]
name = "windows-sys"
-version = "0.59.0"
+version = "0.61.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+checksum = "e201184e40b2ede64bc2ea34968b28e33622acdbbf37104f0e4a33f7abe657aa"
dependencies = [
- "windows-targets",
+ "windows-link",
]
[[package]]
diff --git a/Cargo.toml b/Cargo.toml
index 19b0393..9b54292 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -40,7 +40,7 @@ serde_json = "1.0"
tiny_http = { version = "0.12", optional = true }
[target.'cfg(windows)'.dependencies]
-ctrlc = "=3.4.2"
+ctrlc = "=3.5.0"
[target.'cfg(not(windows))'.dependencies]
signal-hook = "0.3"
Why this scored 11/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.