Bump qp-rusty-crystals dilithium/hdwallet to 4.1.1 #14
n13dependency-cooldown.yml
on: pull_request
dependency-cooldown
/
Dependency cooldown
8s
Annotations
3 warnings
|
dependency-cooldown / Dependency cooldown
Dependency cooldown bypassed for 2 version(s) via the "dependency-cooldown-bypass" label. Reason: dilithium 4.1.1 fixes a signature-forgery vulnerability (degenerate t1 public keys accepted forged signatures); first-party crates published by our own CI, waiting 30 days leaves the vulnerable 4.1.0 pinned.
|
|
dependency-cooldown / Dependency cooldown:
Cargo.lock#L1
qp-rusty-crystals-hdwallet@4.1.1 was published 0 day(s) ago (2026-08-31), less than the required 30 day cooldown. Wait 30 more day(s), pick an older version, or request an emergency bypass.
|
|
dependency-cooldown / Dependency cooldown:
Cargo.lock#L1
qp-rusty-crystals-dilithium@4.1.1 was published 0 day(s) ago (2026-08-31), less than the required 30 day cooldown. Wait 30 more day(s), pick an older version, or request an emergency bypass.
|