chore(deps): bump static-alloc from 0.2.4 to 0.2.6 in /core/embed/rust
What the developer wrote
Authored by dependabot[bot]
chore(deps): bump static-alloc from 0.2.4 to 0.2.6 in /core/embed/rust
Bumps [static-alloc](https://github.com/197g/static-alloc) from 0.2.4 to 0.2.6.
- [Changelog](https://github.com/197g/static-alloc/blob/master/release_checks)
- [Commits](https://github.com/197g/static-alloc/commits)
---
updated-dependencies:
- dependency-name: static-alloc
dependency-version: 0.2.6
dependency-type: direct:production
...
[no changelog]
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated dependency update by Dependabot, bumping the Rust crate 'static-alloc' from version 0.2.4 to 0.2.6. Only two metadata files (Cargo.lock and Cargo.toml) were changed, with no code modifications. There is no indication in the commit of any security fix or vulnerability.
No immediate security action is required. If reviewing for supply-chain risk, verify the static-alloc 0.2.6 upstream release notes for any relevant fixes, but the commit itself does not indicate a security update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the pinned version of the static-alloc crate in the Trezor firmware’s embedded Rust workspace. The diff consists solely of version and checksum changes in Cargo.lock and the version requirement in Cargo.toml. No source code, API usage, or feature flags were altered. No changelog entry was requested (‘[no changelog]’). No security advisory, CVE, or upstream release note is referenced in the commit or supplied references.
Changed components
core/embed/rust/Cargo.lockcore/embed/rust/Cargo.tomlInspect captured patch +3 / −3
diff --git a/core/embed/rust/Cargo.lock b/core/embed/rust/Cargo.lock
index 241be78f..85837e1d 100644
--- a/core/embed/rust/Cargo.lock
+++ b/core/embed/rust/Cargo.lock
@@ -309,9 +309,9 @@ checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3"
[[package]]
name = "static-alloc"
-version = "0.2.4"
+version = "0.2.6"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "570b7e840addf99f80c5b26abba410e21537002316fc82f2747fd87c171e9d7e"
+checksum = "2e1e06c73b06b04d730f68ecb5f805e86b8d509cf80072a28128160025fbf928"
dependencies = [
"alloc-traits",
]
diff --git a/core/embed/rust/Cargo.toml b/core/embed/rust/Cargo.toml
index 40595f0e..0da4a587 100644
--- a/core/embed/rust/Cargo.toml
+++ b/core/embed/rust/Cargo.toml
@@ -135,7 +135,7 @@ features = ["libm"]
version = "0.4.2"
[dependencies.static-alloc]
-version = "0.2.4"
+version = "0.2.6"
[dependencies.without-alloc]
version = "0.2.2"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.