Skip to content

chore(deps): Update Rust crate git2 to v0.20.4 [SECURITY]#483

Merged
renovate[bot] merged 1 commit intomasterfrom
renovate/crate-git2-vulnerability
Feb 4, 2026
Merged

chore(deps): Update Rust crate git2 to v0.20.4 [SECURITY]#483
renovate[bot] merged 1 commit intomasterfrom
renovate/crate-git2-vulnerability

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 4, 2026

This PR contains the following updates:

Package Type Update Change
git2 dependencies patch 0.20.30.20.4

GitHub Vulnerability Alerts

GHSA-j39j-6gw9-jw6h

If the Buf struct is dereferenced immediately after calling new() or default() on the Buf struct, a null pointer is passed to the unsafe function slice::from_raw_parts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing a null pointer will lead to undefined behavior.


Release Notes

rust-lang/git2-rs (git2)

v0.20.4

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) February 4, 2026 22:06
@renovate renovate bot merged commit eecc021 into master Feb 4, 2026
20 of 21 checks passed
@renovate renovate bot deleted the renovate/crate-git2-vulnerability branch February 4, 2026 22:07
@coveralls
Copy link

Pull Request Test Coverage Report for Build 21690232076

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 22.295%

Totals Coverage Status
Change from base Build 21554434861: 0.0%
Covered Lines: 136
Relevant Lines: 610

💛 - Coveralls

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant