Skip to content

ci: acknowledge pgrx serde_cbor advisory - #820

Merged
ruvnet merged 1 commit into
mainfrom
codex/postgres-audit-serde-cbor
Aug 12, 2026
Merged

ci: acknowledge pgrx serde_cbor advisory#820
ruvnet merged 1 commit into
mainfrom
codex/postgres-audit-serde-cbor

Conversation

@ruvnet

@ruvnet ruvnet commented Aug 12, 2026

Copy link
Copy Markdown
Owner

Summary

  • acknowledge the new informational RUSTSEC-2021-0127 advisory
  • document that serde_cbor is an unmaintained transitive dependency of pgrx
  • restore PostgreSQL Extension security-audit CI while continuing to fail on actual vulnerabilities

Verification

  • cargo audit --file crates/ruvector-postgres/Cargo.lock
  • git diff --check

Follow-up to #819 post-merge validation.

@ruvnet
ruvnet merged commit 96f805c into main Aug 12, 2026
43 of 44 checks passed
@ruvnet
ruvnet deleted the codex/postgres-audit-serde-cbor branch August 12, 2026 23:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant