tari-project / tari / 25106105978 / 1
62%
development: 62%

DEFAULT BRANCH: development
Ran
Files 702
Run time 35s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 61.025% (+0.08%) from 60.949%
25106105978.1

push

github

web-flow 
fix(deps): upgrade diesel to 2.3.8 for RUSTSEC-2026-0111 (#7790)

Description
---
Upgrade Diesel dependencies from 2.2.10 to 2.3.8 across Tari crates that
use the SQLite backend, and refresh diesel_migrations to 2.3.

This addresses the RUSTSEC-2026-0111 advisory (possible UTF-8 corruption
unsoundness in Diesel's SQLite backend).

Motivation and Context
---
Issue #7787 reports that the workspace lockfile includes vulnerable
diesel 2.2.10.

This patch keeps the scope limited to dependency updates in crates that
directly depend on Diesel:
- common_sqlite
- comms/core
- comms/dht
- base_layer/wallet
- base_layer/transaction_key_manager

How Has This Been Tested?
---
- cargo check --locked --ignore-rust-version -p tari_common_sqlite -p
tari_comms -p tari_comms_dht -p tari_transaction_key_manager -p
minotari_wallet

Note: local toolchain in this environment is rustc 1.92.0 while
workspace requires 1.93.0; therefore --ignore-rust-version was used for
local verification.

What process can a PR reviewer use to test or verify this change?
---
1. Confirm Cargo.toml Diesel version bumps in the five crates above.
2. Confirm Cargo.lock no longer contains diesel 2.2.10.
3. Run:
cargo check --locked -p tari_common_sqlite -p tari_comms -p
tari_comms_dht -p tari_transaction_key_manager -p minotari_wallet

Breaking Changes
---
- [x] None
- [ ] Requires data directory on base node to be deleted
- [ ] Requires hard fork
- [ ] Other - Please specify

Closes #7787.

70852 of 116103 relevant lines covered (61.03%)

223856.56 hits per line

Source Files on job 25106105978.1