atuin/18.4.0 package update (#38432)

<p align="center"> <img src="https://raw.githubusercontent.com/wolfi-dev/.github/b535a42419ce0edb3c144c0edcff55a62b8ec1f8/profile/wolfi-logo-light-mode.svg" /> </p> --------- Signed-off-by: wolfi-bot <[email protected]> Signed-off-by: Batuhan Apaydin <[email protected]> Co-authored-by: wolfi-bot <[email protected]> Co-authored-by: Batuhan Apaydin <[email protected]>
wolfi-dev · Dec 28, 2024 · dcc884a · dcc884a
1 parent ed22613
commit dcc884a
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/atuin.yaml b/atuin.yaml
@@ -1,7 +1,7 @@
 package:
   name: atuin
-  version: 18.3.0
-  epoch: 3
+  version: 18.4.0
+  epoch: 0
   description: Magical shell history
   copyright:
     - license: MIT
@@ -22,11 +22,14 @@ pipeline:
     with:
       repository: https://github.com/atuinsh/atuin
       tag: v${{package.version}}
-      expected-commit: 9be49e434e549d6b13928b530139b66fef6171f1
+      expected-commit: dc7c26a640b1a134528caa894b3339c443b917b4
 
   - uses: rust/cargobump
 
   - runs: |
+      # mitigate GHSA-h97m-ww89-6jmq
+      cargo update url --precise 2.5.4
+      cargo update idna --precise 1.0.3
       cargo auditable build --locked --release
       cd target/release
       mkdir -p completions

diff --git a/atuin/cargobump-deps.yaml b/atuin/cargobump-deps.yaml
@@ -1,3 +1,5 @@
 packages:
     - name: curve25519-dalek
       version: 4.1.3
+    - name: tonic
+      version: 0.12.3