Version updated for https://github.com/actions-rust-lang/audit to version v1.2.7. This action is used across all versions by 381 repositories. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the auditing of Rust project dependencies for vulnerabilities using cargo audit and the RustSec Advisory Database. It identifies security issues, generates a vulnerability summary, and optionally creates GitHub issues for each detected problem. The action streamlines dependency management and enhances security by integrating automated vulnerability assessments directly into your CI/CD workflows.

Version updated for https://github.com/actions-rust-lang/rustfmt to version v1.1.2. This action is used across all versions by 1,074 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes What’s Changed Fixed Fixed a command injection vulnerability via the manifest-path input parameter. The code was using GitHub action templates to inject the value directly into the shell command, which does not perform the necessary escaping. For fixing the issue, the value is passed via an environment variable, which performs the proper escaping.

Version updated for https://github.com/actions-rust-lang/audit to version v1.2.6. This action is used across all versions by 365 repositories. Go to the GitHub Marketplace to find the latest changes. Release notes What’s Changed [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in https://github.com/actions-rust-lang/audit/pull/123 [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in https://github.com/actions-rust-lang/audit/pull/125 Update cargo audit to 0.22.0 by @jonasbb in https://github.com/actions-rust-lang/audit/pull/126 Full Changelog: https://github.com/actions-rust-lang/audit/compare/v1.2.5...v1.2.6