[iainlane]

Cargo audit warns that the lockfile contains yanked chacha20 0.10.1. Update its lockfile entry and checksum to non-yanked 0.10.2, which fixes use of an SSE4.1 instruction in the SSE2 RNG and legacy backends. No other dependencies change.

Upstream fix: RustCrypto/stream-ciphers#580

Validation:

• cargo test --workspace --locked: 120 tests passed.
• cargo audit against the current RustSec database: the chacha20 yanked warning is gone. The standalone branch still reports RUSTSEC-2026-0285 until fix(deps): update rustls for RUSTSEC-2026-0285 #2236 merges; both updates together pass with zero vulnerabilities and zero warnings.

[github-actions]

🍹 preview on lambda-rssfilter/organization/lambda-rssfilter/prod

Pulumi report

  Previewing update (prod):
Downloading plugin aws-7.48.0: starting
Downloading plugin cloudflare-6.21.0: starting
Downloading plugin aws-native-1.81.0: starting
Downloading plugin cloudflare-6.21.0: done
Installing plugin cloudflare-6.21.0: starting
Downloading plugin aws-7.48.0: done
Installing plugin aws-7.48.0: starting
@ previewing update....
Downloading plugin aws-native-1.81.0: done
Installing plugin aws-native-1.81.0: starting
Installing plugin aws-native-1.81.0: done
@ previewing update....
Installing plugin cloudflare-6.21.0: done
@ previewing update......
Installing plugin aws-7.48.0: done

@ previewing update....
  pulumi:pulumi:Stack lambda-rssfilter-prod running 
@ previewing update.............
  pulumi:pulumi:Stack lambda-rssfilter-prod running read pulumi:pulumi:StackReference organization/lambda-rssfilter-core/shared
@ previewing update.....
  pulumi:pulumi:Stack lambda-rssfilter-prod running read aws-native:kms:Alias stateBucketKey
  pulumi:pulumi:Stack lambda-rssfilter-prod running read pulumi:pulumi:StackReference organization/lambda-rssfilter-core/shared
  pulumi:pulumi:Stack lambda-rssfilter-prod running read aws-native:kms:Alias stateBucketKey
  pulumi:pulumi:Stack lambda-rssfilter-prod running read aws-native:kms:Key stateBucketKey
@ previewing update....
  aws-native:kms:Key stateBucketKey  warning: Can't import write-only properties: bypassPolicyLockoutSafetyCheck, pendingWindowInDays, rotationPeriodInDays
  pulumi:pulumi:Stack lambda-rssfilter-prod running read aws-native:kms:Key stateBucketKey
  aws-native:kms:Key stateBucketKey  1 warning
  pulumi:pulumi:Stack lambda-rssfilter-prod  
Diagnostics:
aws-native:kms:Key (stateBucketKey):
  warning: Can't import write-only properties: bypassPolicyLockoutSafetyCheck, pendingWindowInDays, rotationPeriodInDays

Resources:
  18 unchanged

  

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	rssfilter	e974f3e	Commit Preview URL Branch Preview URL	Oct 04 2026, 11:08 AM