Dave Kempe 2095c7f2fb deps: batch bump pulldown-cmark 0.13.4, tower-http 0.6.11, serde_json 1.0.150, cbc 0.2.1, russh 0.60.3 ...

Closes dependabot #146, #143, #142, #145, #141, #140.

All patch/minor bumps within existing Cargo.toml constraints; no source
changes. russh held at the 0.60.x patch line (0.60.3); the 0.61.0 minor
(#144) was declined for now to avoid absorbing its new-API churn without
a reason to. fuzz/Cargo.lock russh bumped to match (#140).

229 tests pass, clippy and fmt clean.

2026-05-28 06:29:06 +10:00

..

fuzz_targets

Security hardening: open redirect, cookie flags, constant-time auth, fuzz targets

2026-02-12 08:42:33 +11:00

.gitignore

Add fuzz testing infrastructure and fix UTF-8 boundary panic

2026-02-07 13:39:16 +11:00

Cargo.lock

deps: batch bump pulldown-cmark 0.13.4, tower-http 0.6.11, serde_json 1.0.150, cbc 0.2.1, russh 0.60.3

2026-05-28 06:29:06 +10:00

Cargo.toml

Security hardening: open redirect, cookie flags, constant-time auth, fuzz targets

2026-02-12 08:42:33 +11:00

FINDINGS.md

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00