chore: bump deps to address rustsec warnning

- Bump vm-memory to 1.14.1, vmm-sys-util to 0.12.1 and vhost to 0.11.0. - Bump cargo-deny-action version from v1 to v2 in workflows. Signed-off-by: Yang Kaiyong <[email protected]>
dragonflyoss · Feb 11, 2025 · 3beb9a7 · 3beb9a7
1 parent 3c10b59
commit 3beb9a7
Show file tree

Hide file tree

Showing 13 changed files with 107 additions and 124 deletions.
diff --git a/.github/workflows/smoke.yml b/.github/workflows/smoke.yml
@@ -312,7 +312,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4
-      - uses: EmbarkStudios/cargo-deny-action@v1
+      - uses: EmbarkStudios/cargo-deny-action@v2
 
   performance-test:
     runs-on: ubuntu-latest

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -53,7 +53,7 @@ tar = "0.4.40"
 tokio = { version = "1.35.1", features = ["macros"] }
 
 # Build static linked openssl library
-openssl = { version = '0.10.68', features = ["vendored"] }
+openssl = { version = '0.10.70', features = ["vendored"] }
 
 nydus-api = { version = "0.3.0", path = "api", features = [
     "error-backtrace",
@@ -69,21 +69,21 @@ nydus-storage = { version = "0.6.3", path = "storage", features = [
 ] }
 nydus-utils = { version = "0.4.2", path = "utils" }
 
-vhost = { version = "0.6.0", features = ["vhost-user-slave"], optional = true }
-vhost-user-backend = { version = "0.8.0", optional = true }
+vhost = { version = "0.11.0", features = ["vhost-user"], optional = true }
+vhost-user-backend = { version = "0.15.0", optional = true }
 virtio-bindings = { version = "0.1", features = [
     "virtio-v5_0_0",
 ], optional = true }
-virtio-queue = { version = "0.7.0", optional = true }
-vm-memory = { version = "0.10.0", features = ["backend-mmap"], optional = true }
-vmm-sys-util = { version = "0.11.0", optional = true }
+virtio-queue = { version = "0.12.0", optional = true }
+vm-memory = { version = "0.14.1", features = ["backend-mmap","backend-atomic"], optional = true }
+vmm-sys-util = { version = "0.12.1", optional = true }
 
 [build-dependencies]
 time = { version = "0.3.14", features = ["formatting"] }
 
 [dev-dependencies]
 xattr = "1.0.1"
-vmm-sys-util = "0.11.0"
+vmm-sys-util = "0.12.1"
 
 [features]
 default = [

diff --git a/api/Cargo.toml b/api/Cargo.toml
@@ -24,7 +24,7 @@ serde = { version = "1.0.110", features = ["rc", "serde_derive"] }
 url = { version = "2.1.1", optional = true }
 
 [dev-dependencies]
-vmm-sys-util = { version = "0.11" }
+vmm-sys-util = { version = "0.12.1" }
 
 [features]
 error-backtrace = ["backtrace"]

diff --git a/builder/Cargo.toml b/builder/Cargo.toml
@@ -20,7 +20,7 @@ serde = { version = "1.0.110", features = ["serde_derive", "rc"] }
 serde_json = "1.0.53"
 sha2 = "0.10.2"
 tar = "0.4.40"
-vmm-sys-util = "0.11.0"
+vmm-sys-util = "0.12.1"
 xattr = "1.0.1"
 
 nydus-api = { version = "0.3", path = "../api" }