Skip to content

fix: Bump lru to 0.18.2 for RUSTSEC-2026-0253 - #206

Merged
jsonbailey merged 1 commit into
launchdarkly:mainfrom
JackDanger:bump-lru-0.18
Oct 14, 2026
Merged

jsonbailey merged 1 commit into
launchdarkly:mainfrom
JackDanger:bump-lru-0.18

Conversation

@JackDanger

@JackDanger JackDanger commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps lru to 0.18.2, which fixes RUSTSEC-2026-0253.


Note

Overview
Bumps the lru crate from 0.16.3 to 0.18.2 in launchdarkly-server-sdk to address RUSTSEC-2026-0253. No other manifest or source changes; LruCache in the events dispatcher continues to use the same dependency with default-features = false.

Reviewed by Cursor Bugbot for commit 2ab6a3a. Bugbot is set up for automated code reviews on this repo. Configure here.

Copilot AI balanced review requested due to automatic review settings October 13, 2026 06:01
@JackDanger
JackDanger requested a review from a team as a code owner October 13, 2026 06:01

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@jsonbailey
jsonbailey merged commit 944aea9 into launchdarkly:main Oct 14, 2026
17 checks passed
jsonbailey pushed a commit that referenced this pull request Oct 14, 2026
🤖 I have created a release *beep* *boop*
---


##
[3.3.1](3.3.0...3.3.1)
(2026-10-14)


### Bug Fixes

* Bump lru to 0.18.2 for RUSTSEC-2026-0253
([#206](#206))
([944aea9](944aea9))
* Bump MSRV from 1.96 to 1.97
([#204](#204))
([487dfd5](487dfd5))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Overview**
> **Release 3.3.1** — bumps `launchdarkly-server-sdk` from **3.3.0** to
**3.3.1** in `.release-please-manifest.json` and `Cargo.toml`, and adds
the **3.3.1** changelog section.
> 
> The release notes capture two already-merged fixes: upgrading **`lru`
to 0.18.2** (RUSTSEC-2026-0253) and raising **MSRV to Rust 1.97**. No
application or SDK logic changes appear in this diff—only versioning and
release documentation.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
dc078d9. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@jsonbailey

Copy link
Copy Markdown

@JackDanger thanks for the PR. Version 3.3.1 has been released with the update.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants