From b156c96e9f271d70b7f19c2a480ac788b38c3d9a Mon Sep 17 00:00:00 2001
From: Minh <github@mtruong.dev>
Date: Fri, 9 Oct 2026 07:13:19 -0300
Subject: [PATCH 1/2] chore(input-capture): drop unused memmap dependency

Nothing in the workspace references memmap, including build scripts and
cfg-gated modules. The crate is unmaintained (RUSTSEC-2020-0077).
---
 Cargo.lock               | 11 -----------
 input-capture/Cargo.toml |  1 -
 2 files changed, 12 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index a39d1d0b4..a0c913b7b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1579,7 +1579,6 @@ dependencies = [
  "keycode",
  "libc",
  "log",
- "memmap",
  "once_cell",
  "reis",
  "tempfile",
@@ -1948,16 +1947,6 @@ version = "2.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
 
-[[package]]
-name = "memmap"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6585fd95e7bb50d6cc31e20d4cf9afb4e2ba16c5846fc76793f11218da9c475b"
-dependencies = [
- "libc",
- "winapi",
-]
-
 [[package]]
 name = "memoffset"
 version = "0.7.1"
diff --git a/input-capture/Cargo.toml b/input-capture/Cargo.toml
index 75414ff39..98f299280 100644
--- a/input-capture/Cargo.toml
+++ b/input-capture/Cargo.toml
@@ -11,7 +11,6 @@ futures = "0.3.28"
 futures-core = "0.3.30"
 log = "0.4.22"
 input-event = { path = "../input-event", version = "0.4.0" }
-memmap = "0.7"
 tempfile = "3.25.0"
 thiserror = "2.0.0"
 tokio = { version = "1.32.0", features = [

From 83f3aa493035e0bac5de2b82aaa033b215439525 Mon Sep 17 00:00:00 2001
From: Minh <github@mtruong.dev>
Date: Fri, 9 Oct 2026 07:13:53 -0300
Subject: [PATCH 2/2] chore(deps): update crates with RustSec advisories

Bump the lockfile to versions that carry fixes:

- quick-xml 0.39.2 -> 0.41.0 (RUSTSEC-2026-0194, RUSTSEC-2026-0195)
- rustls 0.23.37 -> 0.23.45 (RUSTSEC-2026-0285)
- rustls-webpki 0.103.10 -> 0.103.15 (RUSTSEC-2026-0098,
  RUSTSEC-2026-0099, RUSTSEC-2026-0104)
- anyhow 1.0.102 -> 1.0.103 (RUSTSEC-2026-0190, unsound)
- event-listener 5.4.1 -> 5.4.2 (RUSTSEC-2026-0221, unsound)
- rand 0.8.5 -> 0.8.6 (RUSTSEC-2026-0097, unsound)

wayland-scanner moves 0.31.10 -> 0.31.11 as well. 0.31.10 requires
quick-xml 0.39, so this bump is what allows quick-xml to update. It runs
at build time only.

No code changes.
---
 Cargo.lock | 29 ++++++++++++++---------------
 1 file changed, 14 insertions(+), 15 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index a0c913b7b..843c25c6f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -107,9 +107,9 @@ dependencies = [
 
 [[package]]
 name = "anyhow"
-version = "1.0.102"
+version = "1.0.103"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+checksum = "2a4385e2e34eb35d6b3efe798b9eb88096925d87726c0798709bf56d9ed84af3"
 
 [[package]]
 name = "arraydeque"
@@ -785,11 +785,10 @@ dependencies = [
 
 [[package]]
 name = "event-listener"
-version = "5.4.1"
+version = "5.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab"
+checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2"
 dependencies = [
- "concurrent-queue",
  "parking",
  "pin-project-lite",
 ]
@@ -2361,9 +2360,9 @@ dependencies = [
 
 [[package]]
 name = "quick-xml"
-version = "0.39.2"
+version = "0.41.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "958f21e8e7ceb5a1aa7fa87fab28e7c75976e0bfe7e23ff069e0a260f894067d"
+checksum = "e660451e55124f798a69a5af3f49ccfbefbd41910eefd25caf2393e1f3473ec1"
 dependencies = [
  "memchr",
 ]
@@ -2391,9 +2390,9 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 
 [[package]]
 name = "rand"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
 dependencies = [
  "libc",
  "rand_chacha",
@@ -2540,9 +2539,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.37"
+version = "0.23.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "758025cb5fccfd3bc2fd74708fd4682be41d99e5dff73c377c0646c6012c73a4"
+checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
 dependencies = [
  "once_cell",
  "ring",
@@ -2563,9 +2562,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.10"
+version = "0.103.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df33b2b81ac578cabaf06b89b0631153a3f416b0a886e8a7a1707fb51abbd1ef"
+checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2"
 dependencies = [
  "ring",
  "rustls-pki-types",
@@ -3417,9 +3416,9 @@ dependencies = [
 
 [[package]]
 name = "wayland-scanner"
-version = "0.31.10"
+version = "0.31.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c324a910fd86ebdc364a3e61ec1f11737d3b1d6c273c0239ee8ff4bc0d24b4a"
+checksum = "338e30461b3a2b67d70eb30a6d89f8e0c93a833e07d2ae89085cd070c4a00ac0"
 dependencies = [
  "proc-macro2",
  "quick-xml",