From 9ba8d6a8fbb23c63a904b8817f54b2308be42283 Mon Sep 17 00:00:00 2001 From: Weihang Lo Date: Wed, 28 Oct 2026 09:03:54 -0400 Subject: [PATCH 1/2] fix(libz-sys): stop printing zlib cmd in build script The env vars may be captured by Cargo in fingerprint and leaked, similar to the miri case, see: https://blog.rust-lang.org/2026/09/21/github-actions-leaking-secrets-when-miri-output-is-cached/ --- build.rs | 1 - 1 file changed, 1 deletion(-) diff --git a/build.rs b/build.rs index 1a1f37a7..8737295d 100644 --- a/build.rs +++ b/build.rs @@ -243,7 +243,6 @@ fn zlib_installed(cfg: &mut cc::Build) -> bool { .arg("/dev/null") .arg("-lz"); - println!("running {:?}", cmd); if let Ok(status) = cmd.status() { if status.success() { return true; From 2992007df003d37a4e7475b39aa53ea67fc121ea Mon Sep 17 00:00:00 2001 From: Weihang Lo Date: Wed, 28 Oct 2026 09:35:38 -0400 Subject: [PATCH 2/2] chore(libz-sys): bump version to 1.1.31 --- Cargo-zng.toml | 2 +- Cargo.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo-zng.toml b/Cargo-zng.toml index 564161da..9e0dd28e 100644 --- a/Cargo-zng.toml +++ b/Cargo-zng.toml @@ -1,6 +1,6 @@ [package] name = "libz-ng-sys" -version = "1.1.30" +version = "1.1.31" authors = [ "Alex Crichton ", "Josh Triplett ", diff --git a/Cargo.toml b/Cargo.toml index 0e673eb2..fdd770a0 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "libz-sys" -version = "1.1.30" +version = "1.1.31" authors = [ "Alex Crichton ", "Josh Triplett ",