Auto merge of #13417 - ehuss:beta-update-libgit2, r=weihanglo

[Beta-1.77] Update libgit2 This is a beta packport of #13412 to update libgit2 to fix the security issues mentioned in https://github.com/libgit2/libgit2/releases/tag/v1.7.2. From what I can tell, the threat to cargo is very small. The best I can come up with is a carefully crafted `rev` field in a `Cargo.toml` will cause cargo to hang. However, I would feel safer having this backported.
rust-lang · Feb 7, 2024 · c8a48fa · c8a48fa
2 parents 9075a2c + 8489dbe
commit c8a48fa
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -44,7 +44,7 @@ curl = "0.4.44"
 curl-sys = "0.4.70"
 filetime = "0.2.23"
 flate2 = { version = "1.0.28", default-features = false, features = ["zlib"] }
-git2 = "0.18.1"
+git2 = "0.18.2"
 git2-curl = "0.19.0"
 gix = { version = "0.57.1", default-features = false, features = ["blocking-http-transport-curl", "progress-tree", "revision"] }
 gix-features-for-configuration-only = { version = "0.37.1", package = "gix-features", features = [ "parallel" ] }
@@ -62,7 +62,7 @@ itertools = "0.12.0"
 jobserver = "0.1.27"
 lazycell = "1.3.0"
 libc = "0.2.151"
-libgit2-sys = "0.16.1"
+libgit2-sys = "0.16.2"
 libloading = "0.8.1"
 memchr = "2.7.1"
 miow = "0.6.0"