Downgrade the minimum version of cpufeatures
What the developer wrote
Authored by Tobin C. Harding
Downgrade the minimum version of cpufeatures
The update script does this and it is slightly confusing when it
showings up in unrelated PRs.
Run `just ulf`.
What changed, and why it matters
This commit only lowers the minimum required version of a small helper crate called `cpufeatures` in a lockfile used for testing the oldest supported dependency versions. It is a routine housekeeping change with no security relevance.
No action needed; this is a benign dependency-version housekeeping change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change updates Cargo-minimal.lock, which pins the oldest dependency versions used in CI/testing, from cpufeatures 0.2.17 to cpufeatures 0.2.5. This is a downgrade of the minimum tested version, not an upgrade or runtime dependency change. The commit message states this is done by an update script (just ulf) to avoid unrelated noise in future PRs.
Changed components
Cargo-minimal.lockInspect captured patch +2 / −2
diff --git a/Cargo-minimal.lock b/Cargo-minimal.lock
index 0c1cfa8d..9a08ea82 100644
--- a/Cargo-minimal.lock
+++ b/Cargo-minimal.lock
@@ -235,9 +235,9 @@ dependencies = [
[[package]]
name = "cpufeatures"
-version = "0.2.17"
+version = "0.2.5"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+checksum = "28d997bd5e24a5928dd43e46dc529867e207907fe0b239c3477d924f7f2ca320"
dependencies = [
"libc",
]
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.