29159609093
84%

Ran 11 Jul 2026 04:25PM UTC

Jobs 1

Files 29

Run time 1min

Badge

Embed ▾

Committed 11 Jul 2026 04:20PM UTC coverage: 85.007%. Remained the same

Build # 29159609093

Build Type

push

github

Committed by

web-flow

Commit Message

chore: drop pprof dev-dependency to remove vulnerable quick-xml (#769)

The pprof dev-dependency (used only for flamegraph generation in
benches/bench.rs) pulled in inferno 0.11 -> quick-xml 0.26.0, which
carries two RUSTSEC advisories:

  * #764 / RUSTSEC-2026-0194: quadratic duplicate-attribute check
  * #765 / RUSTSEC-2026-0195: unbounded namespace-declaration allocation

Upgrading quick-xml to the patched 0.41.0 requires inferno 0.12, but
pprof 0.15.0 (the latest release) pins inferno ^0.11, so the upgrade
is blocked upstream. These are dev/benchmark-only dependencies with no
impact on the published handlebars crate, so drop pprof entirely and
run benchmarks with plain criterion.

Refs #764, #765.

Coverage Stats

1701 of 2001 relevant lines covered (85.01%)

8.32 hits per line

Coverage Regressions

Lines	Coverage	∆	File
1	47.42	-0.49%	src/error.rs

Jobs

ID	Job ID	Ran	Files	Coverage
1	29159609093.1	11 Jul 2026 04:25PM UTC	29	85.01	GitHub Action Run

sunng87 / handlebars-rust / 29159609093
84%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 29159609093

sunng87 / handlebars-rust / 29159609093 84%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 29159609093

sunng87 / handlebars-rust / 29159609093
84%

README BADGES
x