[fengmk2]

Motivation

The task cache uses bundled SQLite affected by RUSTSEC-2026-0459. Opening a crafted database and WAL file can expose uninitialized memory.

Upgrade rusqlite to 0.41 and update Cargo.lock to resolve rusqlite 0.41.1 and libsqlite3-sys 0.39.1. This includes the patched SQLite 3.54.1.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​hashbrown@​0.17.1
	cargo/​rusqlite@​0.39.0 ⏵ 0.41.1

View full report

[github-actions]

fspy benchmark

linux

dynamic/launch             change  +1.22%  [ -4.55% ..  +7.52%]  overhead   +57.58%
dynamic/access             change  -0.41%  [ -5.13% ..  +4.81%]  overhead   +18.85%
dynamic/access-relative    change  +0.77%  [ -3.86% ..  +7.01%]  overhead   +69.72%
dynamic/access-contended   change  +1.20%  [ -9.35% ..  +9.65%]  overhead   +52.52%
static/launch              change  +0.09%  [ -4.23% ..  +5.38%]  overhead  +196.53%
static/access              change  -0.03%  [-12.35% .. +10.70%]  overhead +1480.81%
static/access-relative     change  +6.10%  [-16.09% .. +42.96%]  overhead +2162.84%
static/access-contended    change  +0.03%  [-17.62% .. +18.05%]  overhead +1611.10%

macos

dynamic/launch             change  -0.51%  [ -4.64% ..  +3.72%]  overhead  +247.35%
dynamic/access             change  -0.88%  [-29.18% .. +61.71%]  overhead    +3.27%
dynamic/access-relative    change  -2.21%  [-34.67% .. +12.91%]  overhead  +262.77%
dynamic/access-contended   change  -1.24%  [-54.28% ..  +6.07%]  overhead    -0.40%

windows

dynamic/launch             change  +2.68%  [ -6.87% ..  +9.71%]  overhead   +26.19%
dynamic/access             change  -0.53%  [-16.95% .. +20.13%]  overhead    +2.23%
dynamic/access-relative    change  -1.17%  [-21.33% .. +11.06%]  overhead    +1.37%
dynamic/access-contended   change  -0.91%  [-14.02% ..  +8.32%]  overhead    +1.62%