cargo upgrade failed in CI (2026-04-20)

[github-actions]

Cargo upgrade failed during CI\n\n### Summary\n- Upgrade exit: 0\n- Install exit: 0\n- Format fix exit: 0\n- Clippy fix exit: 101\n- Format exit: 0\n- Clippy exit: 101\n- Build exit: 101\n- Test exit: 101\n- Core bindings exit: 1\n- CLI verify exit: 101\n- Audit exit: 1\n\n### Run\n- https://github.com/pRizz/opencode-cloud/actions/runs/24675044534\n\n### Result\n- PR not created because checks failed.\n\n### Cargo Upgrade Output (tail)\n```\n Checking virtual workspace's dependencies

name old req compatible latest new req
==== ======= ========== ====== =======
clap 4.5 4.6.1 4.6.1 4.6
tokio 1.49 1.52.1 1.52.1 1.52
jsonc-parser 0.29 0.29.0 0.32.3 0.32
bollard 0.20.1 0.20.2 0.20.2 0.20.2
webbrowser 1.0 1.2.1 1.2.1 1.2
rand 0.9 0.9.4 0.10.1 0.10
Checking opencode-cloud's dependencies
Checking opencode-cloud-core's dependencies
name old req compatible latest new req
==== ======= ========== ====== =======
clap 4.5 4.6.1 4.6.1 4.6
tokio 1.49 1.52.1 1.52.1 1.52
jsonc-parser 0.29 0.29.0 0.32.3 0.32
bollard 0.20.1 0.20.2 0.20.2 0.20.2
Upgrading recursive dependencies
Locking 46 packages to latest compatible versions
Updating anstyle v1.0.13 -> v1.0.14
Updating anyhow v1.0.101 -> v1.0.102
Updating bitflags v2.10.0 -> v2.11.1
Updating cc v1.2.55 -> v1.2.60
Updating colorchoice v1.0.4 -> v1.0.5
Updating futures-channel v0.3.31 -> v0.3.32
Updating futures-core v0.3.31 -> v0.3.32
Updating futures-io v0.3.31 -> v0.3.32
Updating futures-macro v0.3.31 -> v0.3.32
Updating futures-sink v0.3.31 -> v0.3.32
Updating futures-task v0.3.31 -> v0.3.32
Updating futures-util v0.3.31 -> v0.3.32
Adding hashbrown v0.17.0
Updating hyper v1.8.1 -> v1.9.0
Updating hyper-rustls v0.27.7 -> v0.27.9
Updating icu_collections v2.1.1 -> v2.2.0
Updating icu_locale_core v2.1.1 -> v2.2.0
Updating icu_normalizer v2.1.1 -> v2.2.0
Updating icu_normalizer_data v2.1.1 -> v2.2.0
Updating icu_properties v2.1.2 -> v2.2.0
Updating icu_properties_data v2.1.2 -> v2.2.0
Updating icu_provider v2.1.1 -> v2.2.0
Updating indexmap v2.13.0 -> v2.14.0
Updating ipnet v2.11.0 -> v2.12.0
Updating itoa v1.0.17 -> v1.0.18
Updating litemap v0.8.1 -> v0.8.2
Updating once_cell v1.21.3 -> v1.21.4
Updating pin-project-lite v0.2.16 -> v0.2.17
Removing pin-utils v0.1.0
Updating potential_utf v0.1.4 -> v0.1.5
Updating rand v0.9.2 -> v0.9.4
Updating rustls v0.23.36 -> v0.23.38
Updating rustls-webpki v0.103.9 -> v0.103.12
Updating semver v1.0.27 -> v1.0.28
Updating tinystr v0.8.2 -> v0.8.3
Updating unicode-ident v1.0.23 -> v1.0.24
Updating writeable v0.6.2 -> v0.6.3
Updating yoke v0.8.1 -> v0.8.2
Updating yoke-derive v0.8.1 -> v0.8.2
Updating zerocopy v0.8.39 -> v0.8.48
Updating zerocopy-derive v0.8.39 -> v0.8.48
Updating zerofrom v0.1.6 -> v0.1.7
Updating zerofrom-derive v0.1.6 -> v0.1.7
Updating zerotrie v0.2.3 -> v0.2.4
Updating zerovec v0.11.5 -> v0.11.6
Updating zerovec-derive v0.11.2 -> v0.11.3
Updating zmij v1.0.20 -> v1.0.21
note: pass --verbose to see 10 unchanged dependencies behind latest
note: Re-run with --verbose to show more dependencies
latest: 30 packages
Checking virtual workspace's dependencies
Checking opencode-cloud's dependencies
Checking opencode-cloud-core's dependencies
note: Re-run with --verbose to show more dependencies
latest: 36 packages
Checking virtual workspace's dependencies
Checking opencode-cloud's dependencies
Checking opencode-cloud-core's dependencies
note: Re-run with --verbose to show more dependencies
latest: 36 packages
\n\n\n### Clippy Fix Output (tail)\n\n Compiling proc-macro2 v1.0.106
Compiling unicode-ident v1.0.24
Compiling quote v1.0.45
Compiling libc v0.2.185
Compiling memchr v2.8.0
Compiling smallvec v1.15.1
Compiling thiserror v2.0.18
Compiling regex-automata v0.4.14
Compiling syn v2.0.117
Compiling bytes v1.11.1
Compiling cfg-if v1.0.4
Compiling once_cell v1.21.4
Compiling parking_lot_core v0.9.12
Compiling bstr v1.12.1
Compiling stable_deref_trait v1.2.1
Compiling tinyvec_macros v0.1.1
Compiling tinyvec v1.10.0
Compiling fastrand v2.3.0
Compiling gix-trace v0.1.17
Compiling gix-validate v0.11.0
Compiling unicode-normalization v0.1.25
Compiling scopeguard v1.2.0
Compiling lock_api v0.4.14
Compiling crc32fast v1.5.0
Compiling parking_lot v0.12.5
Compiling gix-utils v0.3.1
Compiling jobserver v0.1.34
Compiling shlex v1.3.0
Compiling find-msvc-tools v0.1.9
Compiling same-file v1.0.6
Compiling cc v1.2.60
Compiling walkdir v2.5.0
Compiling prodash v31.0.0
Compiling itoa v1.0.18
Compiling zlib-rs v0.5.5
Compiling bitflags v2.11.1
Compiling typenum v1.19.0
Compiling version_check v0.9.5
Compiling generic-array v0.14.7
Compiling cmake v0.1.57
Compiling synstructure v0.13.2
Compiling dunce v1.0.5
Compiling heapless v0.8.0
Compiling equivalent v1.0.2
Compiling byteorder v1.5.0
Compiling fs_extra v1.3.0
Compiling hash32 v0.3.1
Compiling aws-lc-sys v0.37.0
Checking pin-project-lite v0.2.17
Compiling thiserror-impl v2.0.18
Compiling zerofrom-derive v0.1.7
Compiling yoke-derive v0.8.2
Compiling zerovec-derive v0.11.3
Compiling gix-path v0.11.0
Compiling displaydoc v0.2.5
Compiling gix-features v0.46.0
Compiling block-buffer v0.10.4
Compiling crypto-common v0.1.7
Compiling digest v0.10.7
Compiling faster-hex v0.10.0
Compiling gix-error v0.0.0
Compiling cpufeatures v0.2.17
Compiling sha1 v0.10.6
Checking futures-core v0.3.32
Compiling aws-lc-rs v1.15.4
Compiling sha1-checked v0.10.0
Compiling httparse v1.10.1
Compiling jiff v0.2.19
Compiling gix-hash v0.22.0
Compiling allocator-api2 v0.2.21
Compiling foldhash v0.2.0
Checking errno v0.3.14
Compiling winnow v0.7.14
Compiling hashbrown v0.16.1
Compiling rustix v1.1.3
Compiling gix-hashtable v0.12.0
Checking signal-hook-registry v1.4.8
Compiling tokio-macros v2.7.0
Checking socket2 v0.6.3
Checking mio v1.2.0
Compiling linux-raw-sys v0.11.0
Checking tokio v1.52.1
Compiling gix-date v0.13.0
Compiling gix-actor v0.38.0
Compiling gix-object v0.55.0
Compiling icu_normalizer_data v2.2.0
Checking futures-sink v0.3.32
Compiling icu_properties_data v2.2.0
Compiling zerofrom v0.1.7
Compiling memmap2 v0.9.9
Compiling getrandom v0.3.4
Compiling yoke v0.8.2
Checking http v1.4.0
Checking slab v0.4.12
Checking futures-channel v0.3.32
Checking tracing-core v0.1.36
Compiling tempfile v3.24.0
Compiling zerovec v0.11.6
Compiling gix-chunk v0.5.0
Compiling gix-fs v0.19.0
Compiling tracing-attributes v0.1.31
Compiling futures-macro v0.3.32
Checking hashbrown v0.17.0
Checking futures-io v0.3.32
Checking futures-task v0.3.32
Checking indexmap v2.14.0
Checking futures-util v0.3.32
Compiling gix-tempfile v21.0.0
Checking tracing v0.1.44
Compiling gix-quote v0.6.1
Checking percent-encoding v2.3.2
Checking http-body v1.0.1
Checking tokio-util v0.7.18
Checking getrandom v0.2.17
Compiling serde_core v1.0.228
Compiling zeroize v1.8.2
Compiling tinystr v0.8.3
Compiling gix-commitgraph v0.32.0
Compiling gix-glob v0.24.0
Compiling fnv v1.0.7
Checking log v0.4.29
Compiling litemap v0.8.2
Checking tower-service v0.3.3
Compiling writeable v0.6.3
Compiling icu_locale_core v2.2.0
Compiling gix-revwalk v0.26.0
Compiling rustls-pki-types v1.14.0
Compiling gix-lock v21.0.0
Compiling potential_utf v0.1.5
Compiling zerotrie v0.2.4
Compiling ring v0.17.14
Compiling anyhow v1.0.102
Checking base64 v0.22.1
Compiling utf8_iter v1.0.4
Compiling icu_collections v2.2.0
Compiling icu_provider v2.2.0
Checking atomic-waker v1.1.2
Checking try-lock v0.2.5
Compiling unicode-bom v2.0.3
Compiling autocfg v1.5.0
Compiling untrusted v0.9.0
Compiling rustls v0.23.38
Checking h2 v0.4.13
Compiling num-traits v0.2.19
Checking want v0.3.1
Compiling gix-config-value v0.17.0
Compiling subtle v2.6.1
Compiling shell-words v1.1.1
Compiling static_assertions v1.1.0
Checking httpdate v1.0.3
Checking hyper v1.9.0
Compiling kstring v2.0.2
Compiling gix-command v0.7.0
Compiling icu_normalizer v2.2.0
Compiling icu_properties v2.2.0
Checking sync_wrapper v1.0.2
Compiling gix-sec v0.13.0
Checking ipnet v2.12.0
Checking tower-layer v0.3.3
Checking hyper-util v0.1.20
Compiling idna_adapter v1.2.1
Compiling gix-attributes v0.30.0
Checking http-body-util v0.1.3
Compiling encoding_rs v0.8.35
Compiling zerocopy v0.8.48
Compiling serde v1.0.228
Compiling openssl-probe v0.2.1
Compiling rustls-native-certs v0.8.3
Compiling tower v0.5.3
Compiling idna v1.1.0
Compiling gix-ref v0.58.0
Compiling form_urlencoded v1.2.2
Compiling gix-url v0.35.0
Compiling gix-packetline v0.21.0
Compiling serde_derive v1.0.228
Compiling either v1.15.0
Compiling iri-string v0.7.10
Compiling rustversion v1.0.22
Compiling itertools v0.14.0
Compiling tower-http v0.6.8
Compiling url v2.5.8
Compiling gix-prompt v0.13.0
Compiling gix-revision v0.40.0
Compiling gix-traverse v0.52.0
Compiling gix-bitmap v0.2.15
Compiling pin-project-internal v1.1.10
Compiling filetime v0.2.27
Checking mime v0.3.17
Checking pin-project v1.1.10
Checking axum-core v0.5.6
Compiling gix-index v0.46.0
Checking ppv-lite86 v0.2.21
Compiling gix-refspec v0.36.0
Compiling gix-credentials v0.35.0
Compiling prost-derive v0.14.3
Compiling gix-ignore v0.19.0
Compiling zmij v1.0.21
Compiling dtor-proc-macro v0.0.6
Checking matchit v0.8.4
Compiling clru v0.6.2
Checking axum v0.8.8
Compiling gix-pack v0.65.0
Checking prost v0.14.3
Compiling arc-swap v1.8.1
Compiling gix-worktree v0.47.0
Compiling gix-config v0.51.0
Compiling gix-filter v0.25.0
Checking num-integer v0.1.46
Compiling gix-pathspec v0.15.0
Checking hyper-timeout v0.5.2
Compiling gix-shallow v0.8.0
Compiling gix-negotiate v0.26.0
Checking tokio-stream v0.1.18
Compiling async-trait v0.1.89
Compiling maybe-async v0.2.10
Compiling io-close v0.3.7
Compiling serde_json v1.0.149
Compiling napi-build v2.3.1
Compiling gix-worktree-state v0.25.0
Compiling gix-submodule v0.25.0
Checking tonic v0.14.3
Compiling gix-odb v0.75.0
Compiling gix-discover v0.46.0
Checking ureq-proto v0.5.3
Compiling gix-diff v0.58.0
Checking utf-8 v0.7.6
Checking unicode-width v0.2.2
Compiling ctor-proc-macro v0.0.7
Checking option-ext v0.2.0
Checking utf8parse v0.2.2
Compiling bollard-buildkit-proto v0.7.0
Checking anstyle-parse v1.0.0
Checking dirs-sys v0.5.0
Checking tonic-prost v0.14.3
Checking num-bigint v0.4.6
Checking prost-types v0.14.3
Checking rand_core v0.9.5
Checking rand_core v0.6.4
Compiling unicode-segmentation v1.12.0
Checking colorchoice v1.0.5
Checking anstyle-query v1.1.5
Checking iana-time-zone v0.1.65
Compiling portable-atomic v1.13.1
Checking is_terminal_polyfill v1.70.2
Checking powerfmt v0.2.0
Checking anstyle v1.0.14
Checking deranged v0.5.5
Compiling convert_case v0.10.0
Checking anstream v1.0.0
Checking chrono v0.4.43
Checking num-rational v0.4.2
Checking rand_chacha v0.3.1
Checking rand_chacha v0.9.0
Checking console v0.16.2
Compiling napi v3.8.2
Checking num-iter v0.1.45
Compiling dtor v0.1.1
Checking num-complex v0.4.6
Checking futures-executor v0.3.31
Compiling async-stream-impl v0.3.6
Compiling serde_repr v0.1.20
Checking libloading v0.9.0
Compiling semver v1.0.28
Checking clap_lex v1.1.0
Checking num-conv v0.2.0
Checking strsim v0.11.1
Checking ryu v1.0.23
Compiling heck v0.5.0
Checking adler2 v2.0.1
Checking time-core v0.1.8
Checking simd-adler32 v0.3.8
Checking hex v0.4.3
Checking miniz_oxide v0.8.9
Checking hyperlocal v0.9.1
Checking time v0.3.47
Compiling clap_derive v4.6.1
Checking serde_urlencoded v0.7.1
Checking clap_builder v4.6.0
Checking async-stream v0.3.6
Compiling napi-derive-backend v5.0.1
Checking napi-sys v3.2.1
Checking num v0.4.3
Checking futures v0.3.31
Checking ctor v0.6.3
Checking rand v0.9.4
Checking rand v0.8.5
Checking dirs v6.0.0
Compiling opencode-cloud-core v25.1.3 (/home/runner/work/opencode-cloud/opencode-cloud/packages/core)
Checking xattr v1.6.1
Checking webpki-roots v1.0.6
Checking quick-xml v0.38.4
Checking unit-prefix v0.5.2
Checking home v0.5.12
Checking rustc-hash v2.1.1
Checking regex-syntax v0.8.9
Checking nohash-hasher v0.2.0
Compiling getrandom v0.4.2
Checking glob v0.3.3
Compiling litrs v1.0.0
Checking wildmatch v2.6.1
Checking rand_core v0.10.1
Compiling napi-derive v3.5.1
Compiling document-features v0.2.12
Checking plist v1.8.0
Checking indicatif v0.18.3
Checking tar v0.4.44
Checking flate2 v1.1.9
Checking tokio-retry v0.3.0
Checking clap v4.6.1
Checking directories v6.0.0
Checking jsonc-parser v0.32.3
Checking whoami v2.1.0
Checking lazy_static v1.5.0
Checking cpufeatures v0.3.0
Checking chacha20 v0.10.0
Checking sharded-slab v0.1.7
Checking crossterm v0.29.0
Checking matchers v0.2.0
Checking tracing-log v0.2.0
Checking thread_local v1.1.9
Checking nu-ansi-term v0.50.3
Checking tracing-subscriber v0.3.22
Checking comfy-table v7.2.2
Checking dialoguer v0.12.0
Checking rand v0.10.1
Checking webbrowser v1.2.1
Checking sysinfo v0.38.1
Checking humantime v2.3.0
Checking rustls-webpki v0.103.12
Checking tokio-rustls v0.26.4
Checking ureq v3.2.0
Checking rustls-platform-verifier v0.6.2
Checking hyper-rustls v0.27.9
Checking reqwest v0.13.1
Compiling gix-transport v0.53.0
Compiling gix-protocol v0.56.0
Checking bollard-stubs v1.52.1-rc.29.1.3
Compiling gix v0.78.0
Compiling ssh2-config-rs v0.7.2
Checking bollard v0.20.2
error[E0282]: type annotations needed
--> packages/core/src/config/mod.rs:93:28
|
93 | let mut parsed_value = parse_to_serde_value(&contents, &Default::default())
| ^^^^^^^^^^^^^^^^^^^^ cannot infer type of the type parameter T declared on the function parse_to_serde_value
|
help: consider specifying the generic argument
|
93 | let mut parsed_value = parse_to_serde_value::(&contents, &Default::default())
| +++++

For more information about this error, try rustc --explain E0282.
error: could not compile opencode-cloud-core (lib) due to 1 previous error
warning: build failed, waiting for other jobs to finish...
error: could not compile opencode-cloud-core (lib test) due to 1 previous error
\n\n\n### Clippy Output (tail)\n\ncargo clippy --all-targets --all-features -- -D warnings
Compiling opencode-cloud-core v25.1.3 (/home/runner/work/opencode-cloud/opencode-cloud/packages/core)
error[E0282]: type annotations needed
--> packages/core/src/config/mod.rs:93:28
|
93 | let mut parsed_value = parse_to_serde_value(&contents, &Default::default())
| ^^^^^^^^^^^^^^^^^^^^ cannot infer type of the type parameter T declared on the function parse_to_serde_value
|
help: consider specifying the generic argument
|
93 | let mut parsed_value = parse_to_serde_value::(&contents, &Default::default())
| +++++

For more information about this error, try rustc --explain E0282.
error: could not compile opencode-cloud-core (lib) due to 1 previous error
warning: build failed, waiting for other jobs to finish...
error: could not compile opencode-cloud-core (lib test) due to 1 previous error
error: Recipe check-rust-clippy failed on line 55 with exit code 101
\n\n\n### Cargo Build Output (tail)\n\ncargo build --workspace
Compiling libc v0.2.185
Compiling cfg-if v1.0.4
Compiling bytes v1.11.1
Compiling once_cell v1.21.4
Compiling memchr v2.8.0
Compiling itoa v1.0.18
Compiling stable_deref_trait v1.2.1
Compiling equivalent v1.0.2
Compiling thiserror v2.0.18
Compiling pin-project-lite v0.2.17
Compiling fastrand v2.3.0
Compiling bstr v1.12.1
Compiling bitflags v2.11.1
Compiling scopeguard v1.2.0
Compiling lock_api v0.4.14
Compiling gix-utils v0.3.1
Compiling futures-core v0.3.32
Compiling gix-validate v0.11.0
Compiling parking_lot_core v0.9.12
Compiling mio v1.2.0
Compiling gix-path v0.11.0
Compiling parking_lot v0.12.5
Compiling socket2 v0.6.3
Compiling crc32fast v1.5.0
Compiling prodash v31.0.0
Compiling jobserver v0.1.34
Compiling futures-sink v0.3.32
Compiling http v1.4.0
Compiling cc v1.2.60
Compiling percent-encoding v2.3.2
Compiling gix-features v0.46.0
Compiling slab v0.4.12
Compiling heapless v0.8.0
Compiling linux-raw-sys v0.11.0
Compiling cmake v0.1.57
Compiling faster-hex v0.10.0
Compiling gix-error v0.0.0
Compiling hashbrown v0.17.0
Compiling sha1 v0.10.6
Compiling zerofrom v0.1.7
Compiling zeroize v1.8.2
Compiling yoke v0.8.2
Compiling sha1-checked v0.10.0
Compiling http-body v1.0.1
Compiling fnv v1.0.7
Compiling futures-task v0.3.32
Compiling aws-lc-sys v0.37.0
Compiling gix-date v0.13.0
Compiling gix-hash v0.22.0
Compiling indexmap v2.14.0
Compiling tower-service v0.3.3
Compiling zerovec v0.11.6
Compiling rustls-pki-types v1.14.0
Compiling hashbrown v0.16.1
Compiling httparse v1.10.1
Compiling winnow v0.7.14
Compiling atomic-waker v1.1.2
Compiling untrusted v0.9.0
Compiling errno v0.3.14
Compiling try-lock v0.2.5
Compiling gix-hashtable v0.12.0
Compiling base64 v0.22.1
Compiling want v0.3.1
Compiling signal-hook-registry v1.4.8
Compiling rustix v1.1.3
Compiling tinystr v0.8.3
Compiling litemap v0.8.2
Compiling writeable v0.6.3
Compiling smallvec v1.15.1
Compiling icu_locale_core v2.2.0
Compiling gix-actor v0.38.0
Compiling gix-object v0.55.0
Compiling tokio v1.52.1
Compiling potential_utf v0.1.5
Compiling zerotrie v0.2.4
Compiling memmap2 v0.9.9
Compiling utf8_iter v1.0.4
Compiling subtle v2.6.1
Compiling icu_collections v2.2.0
Compiling icu_provider v2.2.0
Compiling sync_wrapper v1.0.2
Compiling ipnet v2.12.0
Compiling tower-layer v0.3.3
Compiling getrandom v0.3.4
Compiling icu_normalizer_data v2.2.0
Compiling tracing-core v0.1.36
Compiling tempfile v3.24.0
Compiling icu_properties_data v2.2.0
Compiling gix-chunk v0.5.0
Compiling gix-fs v0.19.0
Compiling tracing v0.1.44
Compiling gix-tempfile v21.0.0
Compiling icu_properties v2.2.0
Compiling http-body-util v0.1.3
Compiling gix-quote v0.6.1
Compiling getrandom v0.2.17
Compiling gix-commitgraph v0.32.0
Compiling gix-glob v0.24.0
Compiling tokio-util v0.7.18
Compiling mime v0.3.17
Compiling log v0.4.29
Compiling futures-util v0.3.32
Compiling gix-revwalk v0.26.0
Compiling serde_core v1.0.228
Compiling gix-lock v21.0.0
Compiling ring v0.17.14
Compiling openssl-probe v0.2.1
Compiling shell-words v1.1.1
Compiling rustls-native-certs v0.8.3
Compiling h2 v0.4.13
Compiling gix-config-value v0.17.0
Compiling futures-channel v0.3.32
Compiling httpdate v1.0.3
Compiling hyper v1.9.0
Compiling anyhow v1.0.102
Compiling gix-command v0.7.0
Compiling icu_normalizer v2.2.0
Compiling gix-sec v0.13.0
Compiling iri-string v0.7.10
Compiling idna_adapter v1.2.1
Compiling hyper-util v0.1.20
Compiling num-traits v0.2.19
Compiling gix-attributes v0.30.0
Compiling encoding_rs v0.8.35
Compiling idna v1.1.0
Compiling tower v0.5.3
Compiling gix-ref v0.58.0
Compiling gix-packetline v0.21.0
Compiling gix-url v0.35.0
Compiling form_urlencoded v1.2.2
Compiling filetime v0.2.27
Compiling serde v1.0.228
Compiling url v2.5.8
Compiling tower-http v0.6.8
Compiling zerocopy v0.8.48
Compiling gix-prompt v0.13.0
Compiling gix-revision v0.40.0
Compiling gix-traverse v0.52.0
Compiling gix-bitmap v0.2.15
Compiling pin-project v1.1.10
Compiling gix-index v0.46.0
Compiling gix-refspec v0.36.0
Compiling gix-credentials v0.35.0
Compiling prost-derive v0.14.3
Compiling ppv-lite86 v0.2.21
Compiling gix-ignore v0.19.0
Compiling axum-core v0.5.6
Compiling matchit v0.8.4
Compiling gix-pack v0.65.0
Compiling gix-worktree v0.47.0
Compiling prost v0.14.3
Compiling axum v0.8.8
Compiling gix-config v0.51.0
Compiling gix-filter v0.25.0
Compiling num-integer v0.1.46
Compiling gix-pathspec v0.15.0
Compiling hyper-timeout v0.5.2
Compiling gix-shallow v0.8.0
Compiling gix-negotiate v0.26.0
Compiling tokio-stream v0.1.18
Compiling io-close v0.3.7
Compiling gix-submodule v0.25.0
Compiling gix-worktree-state v0.25.0
Compiling tonic v0.14.3
Compiling gix-odb v0.75.0
Compiling zmij v1.0.21
Compiling gix-discover v0.46.0
Compiling ureq-proto v0.5.3
Compiling gix-diff v0.58.0
Compiling utf8parse v0.2.2
Compiling utf-8 v0.7.6
Compiling option-ext v0.2.0
Compiling unicode-width v0.2.2
Compiling dirs-sys v0.5.0
Compiling anstyle-parse v1.0.0
Compiling tonic-prost v0.14.3
Compiling serde_json v1.0.149
Compiling num-bigint v0.4.6
Compiling prost-types v0.14.3
Compiling rand_core v0.9.5
Compiling rand_core v0.6.4
Compiling iana-time-zone v0.1.65
Compiling colorchoice v1.0.5
Compiling powerfmt v0.2.0
Compiling anstyle-query v1.1.5
Compiling anstyle v1.0.14
Compiling is_terminal_polyfill v1.70.2
Compiling deranged v0.5.5
Compiling anstream v1.0.0
Compiling chrono v0.4.43
Compiling num-rational v0.4.2
Compiling rand_chacha v0.3.1
Compiling rand_chacha v0.9.0
Compiling console v0.16.2
Compiling num-iter v0.1.45
Compiling num-complex v0.4.6
Compiling clap_lex v1.1.0
Compiling rand_core v0.10.1
Compiling regex-syntax v0.8.9
Compiling simd-adler32 v0.3.8
Compiling ryu v1.0.23
Compiling adler2 v2.0.1
Compiling time-core v0.1.8
Compiling strsim v0.11.1
Compiling num-conv v0.2.0
Compiling hex v0.4.3
Compiling hyperlocal v0.9.1
Compiling clap_builder v4.6.0
Compiling time v0.3.47
Compiling regex-automata v0.4.14
Compiling miniz_oxide v0.8.9
Compiling opencode-cloud-core v25.1.3 (/home/runner/work/opencode-cloud/opencode-cloud/packages/core)
Compiling serde_urlencoded v0.7.1
Compiling num v0.4.3
Compiling async-stream v0.3.6
Compiling rand v0.9.4
Compiling rand v0.8.5
Compiling portable-atomic v1.13.1
Compiling dirs v6.0.0
Compiling xattr v1.6.1
Compiling webpki-roots v1.0.6
Compiling quick-xml v0.38.4
Compiling home v0.5.12
Compiling lazy_static v1.5.0
Compiling unit-prefix v0.5.2
Compiling cpufeatures v0.3.0
Compiling wildmatch v2.6.1
Compiling glob v0.3.3
Compiling plist v1.8.0
Compiling chacha20 v0.10.0
Compiling indicatif v0.18.3
Compiling sharded-slab v0.1.7
Compiling tar v0.4.44
Compiling tokio-retry v0.3.0
Compiling matchers v0.2.0
Compiling crossterm v0.29.0
Compiling clap v4.6.1
Compiling flate2 v1.1.9
Compiling getrandom v0.4.2
Compiling directories v6.0.0
Compiling jsonc-parser v0.32.3
Compiling tracing-log v0.2.0
Compiling thread_local v1.1.9
Compiling unicode-segmentation v1.12.0
Compiling nu-ansi-term v0.50.3
Compiling whoami v2.1.0
Compiling comfy-table v7.2.2
Compiling tracing-subscriber v0.3.22
Compiling dialoguer v0.12.0
Compiling rand v0.10.1
Compiling webbrowser v1.2.1
Compiling sysinfo v0.38.1
Compiling humantime v2.3.0
Compiling aws-lc-rs v1.15.4
Compiling rustls v0.23.38
Compiling rustls-webpki v0.103.12
Compiling tokio-rustls v0.26.4
Compiling rustls-platform-verifier v0.6.2
Compiling hyper-rustls v0.27.9
Compiling reqwest v0.13.1
Compiling ureq v3.2.0
Compiling gix-transport v0.53.0
Compiling gix-protocol v0.56.0
Compiling bollard-buildkit-proto v0.7.0
Compiling gix v0.78.0
Compiling bollard-stubs v1.52.1-rc.29.1.3
Compiling ssh2-config-rs v0.7.2
Compiling bollard v0.20.2
error[E0282]: type annotations needed
--> packages/core/src/config/mod.rs:93:28
|
93 | let mut parsed_value = parse_to_serde_value(&contents, &Default::default())
| ^^^^^^^^^^^^^^^^^^^^ cannot infer type of the type parameter T declared on the function parse_to_serde_value
|
help: consider specifying the generic argument
|
93 | let mut parsed_value = parse_to_serde_value::(&contents, &Default::default())
| +++++

For more information about this error, try rustc --explain E0282.
error: could not compile opencode-cloud-core (lib) due to 1 previous error
error: Recipe build-rust-workspace failed on line 58 with exit code 101
\n\n\n### Test Output (tail)\n\ncargo test --workspace
Compiling opencode-cloud-core v25.1.3 (/home/runner/work/opencode-cloud/opencode-cloud/packages/core)
error[E0282]: type annotations needed
--> packages/core/src/config/mod.rs:93:28
|
93 | let mut parsed_value = parse_to_serde_value(&contents, &Default::default())
| ^^^^^^^^^^^^^^^^^^^^ cannot infer type of the type parameter T declared on the function parse_to_serde_value
|
help: consider specifying the generic argument
|
93 | let mut parsed_value = parse_to_serde_value::(&contents, &Default::default())
| +++++

For more information about this error, try rustc --explain E0282.
error: could not compile opencode-cloud-core (lib) due to 1 previous error
warning: build failed, waiting for other jobs to finish...
error: could not compile opencode-cloud-core (lib test) due to 1 previous error
error: Recipe test-rust failed on line 255 with exit code 101
\n\n\n### Core Bindings Build Output (tail)\n\nbun run --cwd packages/core build
$ napi build --platform --release --features napi --no-js && cp src/bindings.js index.js && cp src/bindings.d.ts index.d.ts
Compiling proc-macro2 v1.0.106
Compiling quote v1.0.45
Compiling unicode-ident v1.0.24
Compiling libc v0.2.185
Compiling memchr v2.8.0
Compiling smallvec v1.15.1
Compiling thiserror v2.0.18
Compiling regex-automata v0.4.14
Compiling bytes v1.11.1
Compiling syn v2.0.117
Compiling cfg-if v1.0.4
Compiling once_cell v1.21.4
Compiling bstr v1.12.1
Compiling stable_deref_trait v1.2.1
Compiling tinyvec_macros v0.1.1
Compiling tinyvec v1.10.0
Compiling fastrand v2.3.0
Compiling gix-trace v0.1.17
Compiling unicode-normalization v0.1.25
Compiling gix-validate v0.11.0
Compiling parking_lot_core v0.9.12
Compiling gix-utils v0.3.1
Compiling crc32fast v1.5.0
Compiling scopeguard v1.2.0
Compiling lock_api v0.4.14
Compiling jobserver v0.1.34
Compiling shlex v1.3.0
Compiling parking_lot v0.12.5
Compiling find-msvc-tools v0.1.9
Compiling cc v1.2.60
Compiling same-file v1.0.6
Compiling walkdir v2.5.0
Compiling prodash v31.0.0
Compiling zlib-rs v0.5.5
Compiling itoa v1.0.18
Compiling bitflags v2.11.1
Compiling typenum v1.19.0
Compiling version_check v0.9.5
Compiling generic-array v0.14.7
Compiling cmake v0.1.57
Compiling dunce v1.0.5
Compiling fs_extra v1.3.0
Compiling aws-lc-sys v0.37.0
Compiling synstructure v0.13.2
Compiling byteorder v1.5.0
Compiling equivalent v1.0.2
Compiling heapless v0.8.0
Compiling hash32 v0.3.1
Compiling block-buffer v0.10.4
Compiling crypto-common v0.1.7
Compiling thiserror-impl v2.0.18
Compiling zerofrom-derive v0.1.7
Compiling yoke-derive v0.8.2
Compiling zerovec-derive v0.11.3
Compiling displaydoc v0.2.5
Compiling pin-project-lite v0.2.17
Compiling faster-hex v0.10.0
Compiling gix-path v0.11.0
Compiling digest v0.10.7
Compiling gix-features v0.46.0
Compiling gix-error v0.0.0
Compiling cpufeatures v0.2.17
Compiling aws-lc-rs v1.15.4
Compiling sha1 v0.10.6
Compiling httparse v1.10.1
Compiling futures-core v0.3.32
Compiling sha1-checked v0.10.0
Compiling jiff v0.2.19
Compiling foldhash v0.2.0
Compiling allocator-api2 v0.2.21
Compiling gix-hash v0.22.0
Compiling winnow v0.7.14
Compiling hashbrown v0.16.1
Compiling rustix v1.1.3
Compiling gix-hashtable v0.12.0
Compiling tokio-macros v2.7.0
Compiling mio v1.2.0
Compiling socket2 v0.6.3
Compiling linux-raw-sys v0.11.0
Compiling icu_properties_data v2.2.0
Compiling tokio v1.52.1
Compiling icu_normalizer_data v2.2.0
Compiling futures-sink v0.3.32
Compiling zerofrom v0.1.7
Compiling memmap2 v0.9.9
Compiling gix-date v0.13.0
Compiling getrandom v0.3.4
Compiling gix-actor v0.38.0
Compiling gix-object v0.55.0
Compiling yoke v0.8.2
Compiling http v1.4.0
Compiling slab v0.4.12
Compiling futures-channel v0.3.32
Compiling tempfile v3.24.0
Compiling zerovec v0.11.6
Compiling gix-fs v0.19.0
Compiling gix-chunk v0.5.0
Compiling futures-macro v0.3.32
Compiling futures-task v0.3.32
Compiling futures-io v0.3.32
Compiling hashbrown v0.17.0
Compiling gix-tempfile v21.0.0
Compiling tracing-core v0.1.36
Compiling futures-util v0.3.32
Compiling indexmap v2.14.0
Compiling gix-quote v0.6.1
Compiling tracing-attributes v0.1.31
Compiling tracing v0.1.44
Compiling tokio-util v0.7.18
Compiling http-body v1.0.1
Compiling getrandom v0.2.17
Compiling serde_core v1.0.228
Compiling zeroize v1.8.2
Compiling percent-encoding v2.3.2
Compiling tinystr v0.8.3
Compiling gix-commitgraph v0.32.0
Compiling gix-glob v0.24.0
Compiling writeable v0.6.3
Compiling fnv v1.0.7
Compiling anyhow v1.0.102
Compiling litemap v0.8.2
Compiling tower-service v0.3.3
Compiling icu_locale_core v2.2.0
Compiling gix-revwalk v0.26.0
Compiling rustls-pki-types v1.14.0
Compiling gix-lock v21.0.0
Compiling potential_utf v0.1.5
Compiling zerotrie v0.2.4
Compiling ring v0.17.14
Compiling utf8_iter v1.0.4
Compiling base64 v0.22.1
Compiling icu_collections v2.2.0
Compiling icu_provider v2.2.0
Compiling rustls v0.23.38
Compiling try-lock v0.2.5
Compiling autocfg v1.5.0
Compiling atomic-waker v1.1.2
Compiling untrusted v0.9.0
Compiling unicode-bom v2.0.3
Compiling h2 v0.4.13
Compiling num-traits v0.2.19
Compiling want v0.3.1
Compiling gix-config-value v0.17.0
Compiling static_assertions v1.1.0
Compiling httpdate v1.0.3
Compiling log v0.4.29
Compiling shell-words v1.1.1
Compiling subtle v2.6.1
Compiling gix-command v0.7.0
Compiling hyper v1.9.0
Compiling kstring v2.0.2
Compiling icu_normalizer v2.2.0
Compiling icu_properties v2.2.0
Compiling sync_wrapper v1.0.2
Compiling gix-sec v0.13.0
Compiling tower-layer v0.3.3
Compiling ipnet v2.12.0
Compiling hyper-util v0.1.20
Compiling idna_adapter v1.2.1
Compiling gix-attributes v0.30.0
Compiling http-body-util v0.1.3
Compiling encoding_rs v0.8.35
Compiling zerocopy v0.8.48
Compiling serde v1.0.228
Compiling openssl-probe v0.2.1
Compiling rustls-native-certs v0.8.3
Compiling tower v0.5.3
Compiling idna v1.1.0
Compiling gix-ref v0.58.0
Compiling gix-url v0.35.0
Compiling form_urlencoded v1.2.2
Compiling gix-packetline v0.21.0
Compiling serde_derive v1.0.228
Compiling rustversion v1.0.22
Compiling either v1.15.0
Compiling iri-string v0.7.10
Compiling tower-http v0.6.8
Compiling itertools v0.14.0
Compiling url v2.5.8
Compiling gix-prompt v0.13.0
Compiling gix-traverse v0.52.0
Compiling gix-revision v0.40.0
Compiling gix-bitmap v0.2.15
Compiling pin-project-internal v1.1.10
Compiling filetime v0.2.27
Compiling mime v0.3.17
Compiling axum-core v0.5.6
Compiling ppv-lite86 v0.2.21
Compiling gix-index v0.46.0
Compiling pin-project v1.1.10
Compiling gix-refspec v0.36.0
Compiling gix-credentials v0.35.0
Compiling prost-derive v0.14.3
Compiling gix-ignore v0.19.0
Compiling matchit v0.8.4
Compiling dtor-proc-macro v0.0.6
Compiling zmij v1.0.21
Compiling clru v0.6.2
Compiling gix-pack v0.65.0
Compiling prost v0.14.3
Compiling axum v0.8.8
Compiling gix-worktree v0.47.0
Compiling arc-swap v1.8.1
Compiling gix-filter v0.25.0
Compiling gix-config v0.51.0
Compiling gix-pathspec v0.15.0
Compiling num-integer v0.1.46
Compiling hyper-timeout v0.5.2
Compiling gix-shallow v0.8.0
Compiling gix-negotiate v0.26.0
Compiling tokio-stream v0.1.18
Compiling async-trait v0.1.89
Compiling maybe-async v0.2.10
Compiling io-close v0.3.7
Compiling serde_json v1.0.149
Compiling napi-build v2.3.1
Compiling gix-worktree-state v0.25.0
Compiling tonic v0.14.3
Compiling gix-submodule v0.25.0
Compiling gix-odb v0.75.0
Compiling gix-discover v0.46.0
Compiling ureq-proto v0.5.3
Compiling gix-diff v0.58.0
Compiling utf-8 v0.7.6
Compiling utf8parse v0.2.2
Compiling ctor-proc-macro v0.0.7
Compiling option-ext v0.2.0
Compiling bollard-buildkit-proto v0.7.0
Compiling dirs-sys v0.5.0
Compiling anstyle-parse v1.0.0
Compiling rand_core v0.9.5
Compiling rustls-webpki v0.103.12
Compiling tonic-prost v0.14.3
Compiling num-bigint v0.4.6
Compiling prost-types v0.14.3
Compiling tokio-rustls v0.26.4
Compiling hyper-rustls v0.27.9
Compiling rustls-platform-verifier v0.6.2
Compiling rand_core v0.6.4
Compiling reqwest v0.13.1
Compiling iana-time-zone v0.1.65
Compiling portable-atomic v1.13.1
Compiling colorchoice v1.0.5
Compiling is_terminal_polyfill v1.70.2
Compiling unicode-segmentation v1.12.0
Compiling powerfmt v0.2.0
Compiling anstyle v1.0.14
Compiling anstyle-query v1.1.5
Compiling anstream v1.0.0
Compiling gix-transport v0.53.0
Compiling gix-protocol v0.56.0
Compiling gix v0.78.0
Compiling convert_case v0.10.0
Compiling deranged v0.5.5
Compiling chrono v0.4.43
Compiling rand_chacha v0.3.1
Compiling num-rational v0.4.2
Compiling rand_chacha v0.9.0
Compiling napi v3.8.2
Compiling num-iter v0.1.45
Compiling dtor v0.1.1
Compiling num-complex v0.4.6
Compiling ssh2-config-rs v0.7.2
Compiling futures-executor v0.3.31
Compiling libloading v0.9.0
Compiling async-stream-impl v0.3.6
Compiling serde_repr v0.1.20
Compiling ryu v1.0.23
Compiling adler2 v2.0.1
Compiling hex v0.4.3
Compiling clap_lex v1.1.0
Compiling time-core v0.1.8
Compiling num-conv v0.2.0
Compiling strsim v0.11.1
Compiling simd-adler32 v0.3.8
Compiling semver v1.0.28
Compiling unicode-width v0.2.2
Compiling heck v0.5.0
Compiling console v0.16.2
Compiling clap_derive v4.6.1
Compiling napi-derive-backend v5.0.1
Compiling miniz_oxide v0.8.9
Compiling clap_builder v4.6.0
Compiling time v0.3.47
Compiling hyperlocal v0.9.1
Compiling serde_urlencoded v0.7.1
Compiling async-stream v0.3.6
Compiling napi-sys v3.2.1
Compiling futures v0.3.31
Compiling num v0.4.3
Compiling ctor v0.6.3
Compiling rand v0.9.4
Compiling rand v0.8.5
Compiling xattr v1.6.1
Compiling dirs v6.0.0
Compiling opencode-cloud-core v25.1.3 (/home/runner/work/opencode-cloud/opencode-cloud/packages/core)
Compiling webpki-roots v1.0.6
Compiling quick-xml v0.38.4
Compiling glob v0.3.3
Compiling unit-prefix v0.5.2
Compiling rustc-hash v2.1.1
Compiling nohash-hasher v0.2.0
Compiling home v0.5.12
Compiling wildmatch v2.6.1
Compiling indicatif v0.18.3
Compiling plist v1.8.0
Compiling tar v0.4.44
Compiling tokio-retry v0.3.0
Compiling napi-derive v3.5.1
Compiling clap v4.6.1
Compiling flate2 v1.1.9
Compiling directories v6.0.0
Compiling jsonc-parser v0.32.3
Compiling whoami v2.1.0
Compiling ureq v3.2.0
Compiling bollard-stubs v1.52.1-rc.29.1.3
Compiling bollard v0.20.2
error[E0282]: type annotations needed
--> packages/core/src/config/mod.rs:93:28
|
93 | let mut parsed_value = parse_to_serde_value(&contents, &Default::default())
| ^^^^^^^^^^^^^^^^^^^^ cannot infer type of the type parameter T declared on the function parse_to_serde_value
|
help: consider specifying the generic argument
|
93 | let mut parsed_value = parse_to_serde_value::(&contents, &Default::default())
| +++++

For more information about this error, try rustc --explain E0282.
error: could not compile opencode-cloud-core (lib) due to 1 previous error
Internal Error: Build failed with exit code 101
at ChildProcess. (file:///home/runner/work/opencode-cloud/opencode-cloud/node_modules/.bun/@napi-rs+cli@3.5.1/node_modules/@napi-rs/cli/dist/cli.js:1304:36)
at Object.onceWrapper (node:events:639:26)
at ChildProcess.emit (node:events:536:35)
at ChildProcess._handle.onexit (node:internal/child_process:293:12)
error: script "build" exited with code 1
error: Recipe build-core-bindings failed on line 64 with exit code 1
\n\n\n### CLI Verify Output (tail)\n\ncargo run -p opencode-cloud -- --version
Compiling opencode-cloud-core v25.1.3 (/home/runner/work/opencode-cloud/opencode-cloud/packages/core)
error[E0282]: type annotations needed
--> packages/core/src/config/mod.rs:93:28
|
93 | let mut parsed_value = parse_to_serde_value(&contents, &Default::default())
| ^^^^^^^^^^^^^^^^^^^^ cannot infer type of the type parameter T declared on the function parse_to_serde_value
|
help: consider specifying the generic argument
|
93 | let mut parsed_value = parse_to_serde_value::(&contents, &Default::default())
| +++++

For more information about this error, try rustc --explain E0282.
error: could not compile opencode-cloud-core (lib) due to 1 previous error
error: Recipe verify-cli-version failed on line 61 with exit code 101
\n\n\n### Audit Output (tail)\n\n Fetching advisory database from https://github.com/RustSec/advisory-db.git
Loaded 1049 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (468 crate dependencies)
Crate: aws-lc-sys
Version: 0.37.0
Title: AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Date: 2026-03-19
ID: RUSTSEC-2026-0044
URL: https://rustsec.org/advisories/RUSTSEC-2026-0044
Solution: Upgrade to >=0.39.0
Dependency tree:
aws-lc-sys 0.37.0
└── aws-lc-rs 1.15.4
├── rustls-webpki 0.103.12
│ ├── rustls-platform-verifier 0.6.2
│ │ └── reqwest 0.13.1
│ │ ├── opencode-cloud-core 25.1.3
│ │ │ └── opencode-cloud 25.1.3
│ │ ├── opencode-cloud 25.1.3
│ │ └── gix-transport 0.53.0
│ │ ├── gix-protocol 0.56.0
│ │ │ └── gix 0.78.0
│ │ │ └── ssh2-config-rs 0.7.2
│ │ │ └── opencode-cloud-core 25.1.3
│ │ └── gix 0.78.0
│ └── rustls 0.23.38
│ ├── ureq 3.2.0
│ │ └── bollard-buildkit-proto 0.7.0
│ │ ├── bollard-stubs 1.52.1-rc.29.1.3
│ │ │ └── bollard 0.20.2
│ │ │ └── opencode-cloud-core 25.1.3
│ │ └── bollard 0.20.2
│ ├── tokio-rustls 0.26.4
│ │ ├── reqwest 0.13.1
│ │ └── hyper-rustls 0.27.9
│ │ ├── reqwest 0.13.1
│ │ └── bollard 0.20.2
│ ├── rustls-platform-verifier 0.6.2
│ ├── reqwest 0.13.1
│ ├── quinn-proto 0.11.13
│ │ └── quinn 0.11.9
│ │ └── reqwest 0.13.1
│ ├── quinn 0.11.9
│ ├── hyper-rustls 0.27.9
│ └── bollard 0.20.2
├── rustls 0.23.38
└── quinn-proto 0.11.13

Crate: aws-lc-sys
Version: 0.37.0
Title: CRL Distribution Point Scope Check Logic Error in AWS-LC
Date: 2026-03-19
ID: RUSTSEC-2026-0048
URL: https://rustsec.org/advisories/RUSTSEC-2026-0048
Severity: 7.4 (high)
Solution: Upgrade to >=0.39.0

Crate: aws-lc-sys
Version: 0.37.0
Title: Timing Side-Channel in AES-CCM Tag Verification in AWS-LC
Date: 2026-03-02
ID: RUSTSEC-2026-0045
URL: https://rustsec.org/advisories/RUSTSEC-2026-0045
Severity: 5.9 (medium)
Solution: Upgrade to >=0.38.0

Crate: aws-lc-sys
Version: 0.37.0
Title: PKCS7_verify Signature Validation Bypass in AWS-LC
Date: 2026-03-02
ID: RUSTSEC-2026-0047
URL: https://rustsec.org/advisories/RUSTSEC-2026-0047
Severity: 7.5 (high)
Solution: Upgrade to >=0.38.0

Crate: aws-lc-sys
Version: 0.37.0
Title: PKCS7_verify Certificate Chain Validation Bypass in AWS-LC
Date: 2026-03-02
ID: RUSTSEC-2026-0046
URL: https://rustsec.org/advisories/RUSTSEC-2026-0046
Severity: 7.5 (high)
Solution: Upgrade to >=0.38.0

Crate: quinn-proto
Version: 0.11.13
Title: Denial of service in Quinn endpoints
Date: 2026-03-09
ID: RUSTSEC-2026-0037
URL: https://rustsec.org/advisories/RUSTSEC-2026-0037
Severity: 8.7 (high)
Solution: Upgrade to >=0.11.14
Dependency tree:
quinn-proto 0.11.13
└── quinn 0.11.9
└── reqwest 0.13.1
├── opencode-cloud-core 25.1.3
│ └── opencode-cloud 25.1.3
├── opencode-cloud 25.1.3
└── gix-transport 0.53.0
├── gix-protocol 0.56.0
│ └── gix 0.78.0
│ └── ssh2-config-rs 0.7.2
│ └── opencode-cloud-core 25.1.3
└── gix 0.78.0

Crate: tar
Version: 0.4.44
Title: tar-rs incorrectly ignores PAX size headers if header size is nonzero
Date: 2026-03-19
ID: RUSTSEC-2026-0068
URL: https://rustsec.org/advisories/RUSTSEC-2026-0068
Severity: 5.1 (medium)
Solution: Upgrade to >=0.4.45
Dependency tree:
tar 0.4.44
└── opencode-cloud-core 25.1.3
└── opencode-cloud 25.1.3

Crate: tar
Version: 0.4.44
Title: unpack_in can chmod arbitrary directories by following symlinks
Date: 2026-03-19
ID: RUSTSEC-2026-0067
URL: https://rustsec.org/advisories/RUSTSEC-2026-0067
Severity: 5.1 (medium)
Solution: Upgrade to >=0.4.45

Crate: rand
Version: 0.8.5
Warning: unsound
Title: Rand is unsound with a custom logger using rand::rng()
Date: 2026-04-09
ID: RUSTSEC-2026-0097
URL: https://rustsec.org/advisories/RUSTSEC-2026-0097
Dependency tree:
rand 0.8.5
└── tokio-retry 0.3.0
└── opencode-cloud-core 25.1.3
└── opencode-cloud 25.1.3

error: 8 vulnerabilities found!
warning: 1 allowed warning found
\n```\n