Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

fix: zip 8.6.0 advisories in rust/Cargo.lock

Open Beginner friendly
#91 1 comment 1 reaction 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
78/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
rust

Research direction

Start in rust/Cargo.lock and identify zip 8.6.0 and the dependencies that require it. Update to a compatible 9.x release, then run cargo test from rust/; done means the tests pass and theme packages (.fsbt) still read.

Written by the indexing model from the issue text.

Description

bug lib

rust/Cargo.lock locks zip 8.6.0, which RUSTSEC-2026-0367, RUSTSEC-2026-0368 and RUSTSEC-2026-0369 affect (severity: info). Fixed in 9.0.0.

Found by the dependency scanner on lollipopkit/flutter_gpt_box#278.

  • bump zip to 9.x (and whatever depends on 8.x)
  • cargo test in rust/; theme packages (.fsbt) still read
Dominant language
Dart
Stars
3
Forks
7
Avg merge
44m
Merged PRs (30d)
31

Getting set up

This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from lollipopkit/fl_lib

All issues in lollipopkit/fl_lib

Similar issues

More Dart issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.