Skip to content

build(deps): bump cvss-rs from 0.4.0 to 0.5.0 - #984

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cvss-rs-0.5.0
Open

build(deps): bump cvss-rs from 0.4.0 to 0.5.0#984
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cvss-rs-0.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps cvss-rs from 0.4.0 to 0.5.0.

Release notes

Sourced from cvss-rs's releases.

0.5.0

cvss-rs 0.5.0

This release improves CVSS vector fidelity, makes handling of optional and Not Defined metrics consistent across CVSS versions, and adds a shared severity-banding API. It also introduces an online CVSS vector validator.

Breaking changes

  • The minimum supported Rust version is now 1.88, and the workspace uses Rust edition 2024.
  • CvssV2, CvssV3, and CvssV4 are now #[non_exhaustive]. Downstream code should parse or deserialize CVSS values instead of constructing these structs with exhaustive struct literals.

Highlights

  • Added the public score_to_severity and score_to_severity_v2 helpers for consistent severity banding.
  • Added the public Defined trait, providing a shared way to treat absent and explicitly Not Defined metrics as equivalent during calculations.
  • Added schema-required version fields to CVSS v2 and v4 values while retaining compatibility with documents that omit them during deserialization.
  • Corrected CVSS v3 roundup behavior using specification-aligned integer arithmetic, including boundary-focused tests.
  • Aligned CVSS v3 scoring variable names, ordering, and documentation more closely with the specification.
  • Corrected CVSS v4 nomenclature when optional metrics are explicitly set to Not Defined.
  • Expanded Display implementations to preserve complete temporal and environmental vectors across CVSS v2, v3, and v4 parse/display round trips.
  • Preserved whether a CVSS v2 vector originally included the optional CVSS:2.0/ prefix, including across serde round trips.
  • Added the web-based CVSS vector validator.

Validation

  • Tested on Rust 1.88 and stable across Linux, macOS, and Windows.
  • Compared the merged changes against the current cvelistV5 corpus without finding scoring regressions relative to main or v0.4.0.
  • Verified the crates.io package with cargo publish --dry-run --locked.

Thanks to @​ctron, @​gronke, and @​peinjoh for their contributions, reviews, issue reports, and earlier implementation work that informed this release.

Commit log

Features

  • #17 add Defined trait for NotDefined metric equivalence (fab6054)
  • Add score-to-severity helpers (2035eba)
  • Add web-based CVSS vector string validator (463ba6e)

Fixes

  • Allow release workflow OIDC publishing (747edbe)
  • Preserve v2 prefix across serde round trips (0bedc4c)
  • #34 v2 Display includes temporal/environmental metrics and round-trips all versions (8979406)
  • Use integer arithmetic for v3 roundup (98aa4de)
  • Handle undefined metrics consistently (6cf7cd0)
  • Add required version fields to CVSS v2 and v4 (f5ff63c)
  • #23 make ProviderUrgency (U) metric parsing case-insensitive (998aec9)

... (truncated)

Commits
  • 747edbe fix: allow release workflow OIDC publishing
  • ed66118 refactor: pass metric options by reference
  • 0bedc4c fix: preserve v2 prefix across serde round trips
  • f588d91 style: inline format args in write_metric helper
  • 8b13854 style: apply rustfmt formatting
  • 8979406 fix: v2 Display includes temporal/env metrics, round-trip all versions
  • 98aa4de fix: use integer arithmetic for v3 roundup
  • e168e56 chore: clean up v3 scoring code for spec alignment
  • 6cf7cd0 fix: handle undefined metrics consistently
  • fab6054 feat: add Defined trait for NotDefined metric equivalence
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 14, 2026 03:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 14, 2026
github-actions[bot]
github-actions Bot reviewed Sep 14, 2026
View reviewed changes

@github-actions github-actions Bot left a comment •
edited
Loading

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CSAF Validation Benchmark

Details
Benchmark suite Current: 7a3b78a Previous: e163f52 Ratio
csaf_2_0_tests/6.1.1 101279 ns/iter (± 183) 139959 ns/iter (± 3161) 0.72
csaf_2_0_tests/6.1.2 44206 ns/iter (± 515) 57942 ns/iter (± 136) 0.76
csaf_2_0_tests/6.1.3 13896 ns/iter (± 13) 17660 ns/iter (± 33) 0.79
csaf_2_0_tests/6.1.4 25449 ns/iter (± 39) 32479 ns/iter (± 50) 0.78
csaf_2_0_tests/6.1.5 13977 ns/iter (± 31) 18369 ns/iter (± 115) 0.76
csaf_2_0_tests/6.1.6 34357 ns/iter (± 79) 43348 ns/iter (± 119) 0.79
csaf_2_0_tests/6.1.7 30080 ns/iter (± 88) 37754 ns/iter (± 62) 0.80
csaf_2_0_tests/6.1.8 71689 ns/iter (± 110) 94442 ns/iter (± 214) 0.76
csaf_2_0_tests/6.1.9 55438 ns/iter (± 379) 73309 ns/iter (± 404) 0.76
csaf_2_0_tests/6.1.10 124070 ns/iter (± 483) 163662 ns/iter (± 1851) 0.76
csaf_2_0_tests/6.1.11 14211 ns/iter (± 13) 18889 ns/iter (± 36) 0.75
csaf_2_0_tests/6.1.12 28646 ns/iter (± 27) 34950 ns/iter (± 75) 0.82
csaf_2_0_tests/6.1.13 29296 ns/iter (± 31) 39469 ns/iter (± 74) 0.74
csaf_2_0_tests/6.1.14 58035 ns/iter (± 176) 70793 ns/iter (± 185) 0.82
csaf_2_0_tests/6.1.15 13119 ns/iter (± 17) 19563 ns/iter (± 27) 0.67
csaf_2_0_tests/6.1.16 42426 ns/iter (± 29) 54449 ns/iter (± 132) 0.78
csaf_2_0_tests/6.1.17 14122 ns/iter (± 13) 20957 ns/iter (± 47) 0.67
csaf_2_0_tests/6.1.18 15948 ns/iter (± 407) 23451 ns/iter (± 72) 0.68
csaf_2_0_tests/6.1.19 15770 ns/iter (± 10) 23355 ns/iter (± 419) 0.68
csaf_2_0_tests/6.1.20 13960 ns/iter (± 14) 24210 ns/iter (± 13) 0.58
csaf_2_0_tests/6.1.21 46266 ns/iter (± 84) 57886 ns/iter (± 117) 0.80
csaf_2_0_tests/6.1.22 54775 ns/iter (± 437) 65055 ns/iter (± 77) 0.84
csaf_2_0_tests/6.1.23 16318 ns/iter (± 24) 23493 ns/iter (± 122) 0.69
csaf_2_0_tests/6.1.24 15864 ns/iter (± 40) 23251 ns/iter (± 30) 0.68
csaf_2_0_tests/6.1.25 32333 ns/iter (± 71) 44410 ns/iter (± 66) 0.73
csaf_2_0_tests/6.1.26 19289 ns/iter (± 22) 25764 ns/iter (± 29) 0.75
csaf_2_0_tests/6.1.27.1 14039 ns/iter (± 25) 18266 ns/iter (± 44) 0.77
csaf_2_0_tests/6.1.27.2 14066 ns/iter (± 15) 18258 ns/iter (± 27) 0.77
csaf_2_0_tests/6.1.27.3 13869 ns/iter (± 12) 17934 ns/iter (± 304) 0.77
csaf_2_0_tests/6.1.27.4 14168 ns/iter (± 37) 18478 ns/iter (± 230) 0.77
csaf_2_0_tests/6.1.27.5 14629 ns/iter (± 9) 19197 ns/iter (± 21) 0.76
csaf_2_0_tests/6.1.27.6 14289 ns/iter (± 17) 18447 ns/iter (± 55) 0.77
csaf_2_0_tests/6.1.27.7 13302 ns/iter (± 30) 17760 ns/iter (± 49) 0.75
csaf_2_0_tests/6.1.27.8 13432 ns/iter (± 13) 17598 ns/iter (± 20) 0.76
csaf_2_0_tests/6.1.27.9 24229 ns/iter (± 24) 31967 ns/iter (± 126) 0.76
csaf_2_0_tests/6.1.27.10 14878 ns/iter (± 32) 19194 ns/iter (± 38) 0.78
csaf_2_0_tests/6.1.27.11 14110 ns/iter (± 14) 18412 ns/iter (± 31) 0.77
csaf_2_0_tests/6.1.28 23955 ns/iter (± 30) 31325 ns/iter (± 106) 0.76
csaf_2_0_tests/6.1.29 13602 ns/iter (± 13) 20900 ns/iter (± 26) 0.65
csaf_2_0_tests/6.1.30 38650 ns/iter (± 32) 49455 ns/iter (± 120) 0.78
csaf_2_0_tests/6.1.31 30884 ns/iter (± 314) 43530 ns/iter (± 120) 0.71
csaf_2_0_tests/6.1.32 13783 ns/iter (± 63) 21500 ns/iter (± 24) 0.64
csaf_2_0_tests/6.1.33 19385 ns/iter (± 23) 27648 ns/iter (± 109) 0.70
csaf_2_0_tests/6.2.1 119065 ns/iter (± 142) 162774 ns/iter (± 1078) 0.73
csaf_2_0_tests/6.2.2 17309 ns/iter (± 75) 27277 ns/iter (± 30) 0.63
csaf_2_0_tests/6.2.3 16633 ns/iter (± 76) 22159 ns/iter (± 74) 0.75
csaf_2_0_tests/6.2.4 15925 ns/iter (± 14) 21764 ns/iter (± 19) 0.73
csaf_2_0_tests/6.2.5 47201 ns/iter (± 42) 59494 ns/iter (± 133) 0.79
csaf_2_0_tests/6.2.6 47671 ns/iter (± 95) 60006 ns/iter (± 105) 0.79
csaf_2_0_tests/6.2.7 13695 ns/iter (± 14) 17775 ns/iter (± 26) 0.77
csaf_2_0_tests/6.2.8 29769 ns/iter (± 62) 40153 ns/iter (± 77) 0.74
csaf_2_0_tests/6.2.9 30566 ns/iter (± 65) 40750 ns/iter (± 83) 0.75
csaf_2_0_tests/6.2.10 33880 ns/iter (± 53) 43309 ns/iter (± 155) 0.78
csaf_2_0_tests/6.2.11 137683 ns/iter (± 148) 168511 ns/iter (± 1114) 0.82
csaf_2_0_tests/6.2.12 74966 ns/iter (± 186) 101994 ns/iter (± 101) 0.74
csaf_2_0_tests/6.2.13 665694 ns/iter (± 1506) 831606 ns/iter (± 1530) 0.80
csaf_2_0_tests/6.2.14 39053 ns/iter (± 38) 48709 ns/iter (± 180) 0.80
csaf_2_0_tests/6.2.15 30548 ns/iter (± 31) 36782 ns/iter (± 384) 0.83
csaf_2_0_tests/6.2.16 42887 ns/iter (± 314) 59472 ns/iter (± 133) 0.72
csaf_2_0_tests/6.2.17 14698 ns/iter (± 29) 21169 ns/iter (± 45) 0.69
csaf_2_0_tests/6.2.18 23373 ns/iter (± 13) 32308 ns/iter (± 58) 0.72
csaf_2_0_tests/6.2.19 13957 ns/iter (± 84) 19574 ns/iter (± 51) 0.71
csaf_2_0_tests/6.2.20 1284415 ns/iter (± 1305) 1623226 ns/iter (± 2364) 0.79
csaf_2_0_tests/6.3.1 31855 ns/iter (± 90) 39733 ns/iter (± 231) 0.80
csaf_2_0_tests/6.3.2 19433 ns/iter (± 31) 25761 ns/iter (± 52) 0.75
csaf_2_0_tests/6.3.3 22433 ns/iter (± 104) 29970 ns/iter (± 41) 0.75
csaf_2_0_tests/6.3.4 29132 ns/iter (± 73) 39169 ns/iter (± 55) 0.74
csaf_2_0_tests/6.3.5 32178 ns/iter (± 60) 41545 ns/iter (± 79) 0.77
csaf_2_0_tests/6.3.6 12840 ns/iter (± 60) 16452 ns/iter (± 99) 0.78
csaf_2_0_tests/6.3.7 12965 ns/iter (± 25) 16568 ns/iter (± 26) 0.78
csaf_2_0_tests/6.3.8 13088 ns/iter (± 11) 16720 ns/iter (± 11) 0.78
csaf_2_0_tests/6.3.9 26009 ns/iter (± 63) 33271 ns/iter (± 60) 0.78
csaf_2_0_tests/6.3.10 23711 ns/iter (± 49) 32189 ns/iter (± 72) 0.74
csaf_2_0_tests/6.3.11 23501 ns/iter (± 21) 32976 ns/iter (± 75) 0.71
csaf_2_1_tests/6.1.1 544860 ns/iter (± 2683) 702256 ns/iter (± 1438) 0.78
csaf_2_1_tests/6.1.2 212602 ns/iter (± 497) 279097 ns/iter (± 885) 0.76
csaf_2_1_tests/6.1.3 74463 ns/iter (± 131) 94205 ns/iter (± 659) 0.79
csaf_2_1_tests/6.1.4 120764 ns/iter (± 344) 151972 ns/iter (± 557) 0.79
csaf_2_1_tests/6.1.5 54577 ns/iter (± 190) 69241 ns/iter (± 172) 0.79
csaf_2_1_tests/6.1.6 111970 ns/iter (± 166) 139515 ns/iter (± 741) 0.80
csaf_2_1_tests/6.1.7 143123 ns/iter (± 548) 188989 ns/iter (± 207) 0.76
csaf_2_1_tests/6.1.8 488116 ns/iter (± 1086) 626562 ns/iter (± 1146) 0.78
csaf_2_1_tests/6.1.9 416990 ns/iter (± 31344) 538780 ns/iter (± 1708) 0.77
csaf_2_1_tests/6.1.10 662379 ns/iter (± 5483) 832655 ns/iter (± 6090) 0.80
csaf_2_1_tests/6.1.11 67365 ns/iter (± 243) 88510 ns/iter (± 145) 0.76
csaf_2_1_tests/6.1.12 86538 ns/iter (± 538) 103601 ns/iter (± 273) 0.84
csaf_2_1_tests/6.1.13 172949 ns/iter (± 795) 225310 ns/iter (± 845) 0.77
csaf_2_1_tests/6.1.14 189148 ns/iter (± 224) 245246 ns/iter (± 648) 0.77
csaf_2_1_tests/6.1.15 50601 ns/iter (± 319) 63482 ns/iter (± 94) 0.80
csaf_2_1_tests/6.1.16 144667 ns/iter (± 1095) 194519 ns/iter (± 517) 0.74
csaf_2_1_tests/6.1.17 54440 ns/iter (± 268) 70998 ns/iter (± 683) 0.77
csaf_2_1_tests/6.1.18 60556 ns/iter (± 37) 84110 ns/iter (± 144) 0.72
csaf_2_1_tests/6.1.19 59473 ns/iter (± 394) 80502 ns/iter (± 118) 0.74
csaf_2_1_tests/6.1.20 54535 ns/iter (± 332) 71322 ns/iter (± 127) 0.76
csaf_2_1_tests/6.1.21 155752 ns/iter (± 11711) 203825 ns/iter (± 530) 0.76
csaf_2_1_tests/6.1.22 171213 ns/iter (± 194) 214500 ns/iter (± 976) 0.80
csaf_2_1_tests/6.1.23 59918 ns/iter (± 132) 80687 ns/iter (± 965) 0.74
csaf_2_1_tests/6.1.24 59880 ns/iter (± 911) 72664 ns/iter (± 79) 0.82
csaf_2_1_tests/6.1.25 154326 ns/iter (± 537) 201382 ns/iter (± 430) 0.77
csaf_2_1_tests/6.1.26 75519 ns/iter (± 417) 95503 ns/iter (± 325) 0.79
csaf_2_1_tests/6.1.27.1 54897 ns/iter (± 51) 69288 ns/iter (± 170) 0.79
csaf_2_1_tests/6.1.27.2 55279 ns/iter (± 141) 69709 ns/iter (± 152) 0.79
csaf_2_1_tests/6.1.27.3 56889 ns/iter (± 205) 71732 ns/iter (± 738) 0.79
csaf_2_1_tests/6.1.27.4 56079 ns/iter (± 88) 71195 ns/iter (± 250) 0.79
csaf_2_1_tests/6.1.27.5 57204 ns/iter (± 83) 73181 ns/iter (± 154) 0.78
csaf_2_1_tests/6.1.27.6 56634 ns/iter (± 69) 72066 ns/iter (± 142) 0.79
csaf_2_1_tests/6.1.27.7 53520 ns/iter (± 190) 67805 ns/iter (± 152) 0.79
csaf_2_1_tests/6.1.27.8 53925 ns/iter (± 58) 67682 ns/iter (± 367) 0.80
csaf_2_1_tests/6.1.27.9 70837 ns/iter (± 140) 91579 ns/iter (± 776) 0.77
csaf_2_1_tests/6.1.27.10 55642 ns/iter (± 325) 70251 ns/iter (± 54) 0.79
csaf_2_1_tests/6.1.27.11 57059 ns/iter (± 54) 72709 ns/iter (± 62) 0.78
csaf_2_1_tests/6.1.27.12 55648 ns/iter (± 44) 72750 ns/iter (± 74) 0.76
csaf_2_1_tests/6.1.27.13 48452 ns/iter (± 64) 62824 ns/iter (± 112) 0.77
csaf_2_1_tests/6.1.27.14 57207 ns/iter (± 91) 73381 ns/iter (± 134) 0.78
csaf_2_1_tests/6.1.27.15 56989 ns/iter (± 89) 73288 ns/iter (± 76) 0.78
csaf_2_1_tests/6.1.27.16 57381 ns/iter (± 64) 73420 ns/iter (± 99) 0.78
csaf_2_1_tests/6.1.27.17 60771 ns/iter (± 114) 77417 ns/iter (± 161) 0.78
csaf_2_1_tests/6.1.27.18 63048 ns/iter (± 85) 80752 ns/iter (± 98) 0.78
csaf_2_1_tests/6.1.27.19 61722 ns/iter (± 102) 79030 ns/iter (± 412) 0.78
csaf_2_1_tests/6.1.28 78239 ns/iter (± 145) 92633 ns/iter (± 120) 0.84
csaf_2_1_tests/6.1.29 54054 ns/iter (± 78) 69152 ns/iter (± 170) 0.78
csaf_2_1_tests/6.1.30 134390 ns/iter (± 372) 186668 ns/iter (± 428) 0.72
csaf_2_1_tests/6.1.31 155429 ns/iter (± 1323) 201443 ns/iter (± 354) 0.77
csaf_2_1_tests/6.1.32 55148 ns/iter (± 601) 70619 ns/iter (± 119) 0.78
csaf_2_1_tests/6.1.33 61222 ns/iter (± 274) 78984 ns/iter (± 118) 0.78
csaf_2_1_tests/6.1.34 62350 ns/iter (± 160) 80670 ns/iter (± 158) 0.77
csaf_2_1_tests/6.1.35 79051 ns/iter (± 77) 102975 ns/iter (± 236) 0.77
csaf_2_1_tests/6.1.36 120076 ns/iter (± 179) 151937 ns/iter (± 202) 0.79
csaf_2_1_tests/6.1.37 50981 ns/iter (± 58) 68293 ns/iter (± 101) 0.75
csaf_2_1_tests/6.1.38 53975 ns/iter (± 86) 70784 ns/iter (± 153) 0.76
csaf_2_1_tests/6.1.39 54600 ns/iter (± 93) 70790 ns/iter (± 139) 0.77
csaf_2_1_tests/6.1.40 54661 ns/iter (± 127) 72627 ns/iter (± 128) 0.75
csaf_2_1_tests/6.1.41 55194 ns/iter (± 117) 71858 ns/iter (± 108) 0.77
csaf_2_1_tests/6.1.42 183410 ns/iter (± 320) 242977 ns/iter (± 783) 0.75
csaf_2_1_tests/6.1.43 155829 ns/iter (± 311) 206557 ns/iter (± 547) 0.75
csaf_2_1_tests/6.1.44 156397 ns/iter (± 478) 208178 ns/iter (± 520) 0.75
csaf_2_1_tests/6.1.45 150894 ns/iter (± 603) 196515 ns/iter (± 501) 0.77
csaf_2_1_tests/6.1.46 227863 ns/iter (± 316) 310887 ns/iter (± 461) 0.73
csaf_2_1_tests/6.1.47 336802 ns/iter (± 2341) 461769 ns/iter (± 1487) 0.73
csaf_2_1_tests/6.1.48 56165 ns/iter (± 539) 71291 ns/iter (± 145) 0.79
csaf_2_1_tests/6.1.49 401622 ns/iter (± 1649) 542526 ns/iter (± 1753) 0.74
csaf_2_1_tests/6.1.50 56563 ns/iter (± 44) 71612 ns/iter (± 138) 0.79
csaf_2_1_tests/6.1.51 156888 ns/iter (± 850) 205205 ns/iter (± 429) 0.76
csaf_2_1_tests/6.1.52 161782 ns/iter (± 270) 205140 ns/iter (± 506) 0.79
csaf_2_1_tests/6.1.53 62629 ns/iter (± 170) 80208 ns/iter (± 84) 0.78
csaf_2_1_tests/6.1.54 70937 ns/iter (± 144) 89368 ns/iter (± 285) 0.79
csaf_2_1_tests/6.1.55 70976 ns/iter (± 75) 90251 ns/iter (± 158) 0.79
csaf_2_1_tests/6.1.56 94627 ns/iter (± 131) 124144 ns/iter (± 160) 0.76
csaf_2_1_tests/6.1.57 128062 ns/iter (± 289) 155136 ns/iter (± 227) 0.83
csaf_2_1_tests/6.1.58 87810 ns/iter (± 188) 116289 ns/iter (± 125) 0.76
csaf_2_1_tests/6.1.59 58522 ns/iter (± 68) 74064 ns/iter (± 147) 0.79
csaf_2_1_tests/6.1.60.1 47908 ns/iter (± 71) 62164 ns/iter (± 272) 0.77
csaf_2_1_tests/6.1.60.2 47317 ns/iter (± 81) 62141 ns/iter (± 67) 0.76
csaf_2_1_tests/6.1.60.3 47409 ns/iter (± 73) 62079 ns/iter (± 62) 0.76
csaf_2_1_tests/6.1.61 160095 ns/iter (± 253) 209760 ns/iter (± 452) 0.76
csaf_2_1_tests/6.2.1 590223 ns/iter (± 1232) 761225 ns/iter (± 1750) 0.78
csaf_2_1_tests/6.2.2 72636 ns/iter (± 289) 93039 ns/iter (± 177) 0.78
csaf_2_1_tests/6.2.3 67666 ns/iter (± 62) 88846 ns/iter (± 144) 0.76
csaf_2_1_tests/6.2.4 58433 ns/iter (± 109) 78821 ns/iter (± 144) 0.74
csaf_2_1_tests/6.2.5 163751 ns/iter (± 253) 230640 ns/iter (± 2211) 0.71
csaf_2_1_tests/6.2.6 171947 ns/iter (± 362) 233331 ns/iter (± 615) 0.74
csaf_2_1_tests/6.2.7 53804 ns/iter (± 124) 67633 ns/iter (± 50) 0.80
csaf_2_1_tests/6.2.8 147642 ns/iter (± 4903) 196252 ns/iter (± 263) 0.75
csaf_2_1_tests/6.2.9 149019 ns/iter (± 187) 198455 ns/iter (± 696) 0.75
csaf_2_1_tests/6.2.11 523159 ns/iter (± 1901) 630166 ns/iter (± 1338) 0.83
csaf_2_1_tests/6.2.12 312573 ns/iter (± 1267) 456423 ns/iter (± 2138) 0.68
csaf_2_1_tests/6.2.13 3099056 ns/iter (± 33085) 3979983 ns/iter (± 103718) 0.78
csaf_2_1_tests/6.2.14 115074 ns/iter (± 155) 133168 ns/iter (± 119) 0.86
csaf_2_1_tests/6.2.15 99343 ns/iter (± 103) 118483 ns/iter (± 152) 0.84
csaf_2_1_tests/6.2.16 224172 ns/iter (± 390) 287638 ns/iter (± 833) 0.78
csaf_2_1_tests/6.2.17 64807 ns/iter (± 44) 84785 ns/iter (± 246) 0.76
csaf_2_1_tests/6.2.18 130878 ns/iter (± 165) 170271 ns/iter (± 280) 0.77
csaf_2_1_tests/6.2.19 60727 ns/iter (± 58) 74473 ns/iter (± 113) 0.82
csaf_2_1_tests/6.2.20 6910631 ns/iter (± 150120) 9291650 ns/iter (± 389319) 0.74
csaf_2_1_tests/6.2.21 305831 ns/iter (± 1212) 393380 ns/iter (± 1757) 0.78
csaf_2_1_tests/6.2.22 139515 ns/iter (± 264) 181349 ns/iter (± 428) 0.77
csaf_2_1_tests/6.2.23 75492 ns/iter (± 109) 96123 ns/iter (± 159) 0.79
csaf_2_1_tests/6.2.24 199119 ns/iter (± 167) 252159 ns/iter (± 346) 0.79
csaf_2_1_tests/6.2.25 77691 ns/iter (± 139) 104968 ns/iter (± 167) 0.74
csaf_2_1_tests/6.2.26 76705 ns/iter (± 82) 97538 ns/iter (± 142) 0.79
csaf_2_1_tests/6.2.27 130945 ns/iter (± 292) 173355 ns/iter (± 376) 0.76
csaf_2_1_tests/6.2.28 65749 ns/iter (± 125) 88037 ns/iter (± 187) 0.75
csaf_2_1_tests/6.2.29 65145 ns/iter (± 193) 88601 ns/iter (± 185) 0.74
csaf_2_1_tests/6.2.30 66080 ns/iter (± 300) 92065 ns/iter (± 130) 0.72
csaf_2_1_tests/6.2.31 181656 ns/iter (± 271) 240784 ns/iter (± 230) 0.75
csaf_2_1_tests/6.2.32 262679 ns/iter (± 959) 354892 ns/iter (± 925) 0.74
csaf_2_1_tests/6.2.33 197168 ns/iter (± 537) 264372 ns/iter (± 728) 0.75
csaf_2_1_tests/6.2.34 397386 ns/iter (± 3779) 520852 ns/iter (± 996) 0.76
csaf_2_1_tests/6.2.35 351621 ns/iter (± 4163) 477129 ns/iter (± 1103) 0.74
csaf_2_1_tests/6.2.36 353013 ns/iter (± 3934) 467133 ns/iter (± 1269) 0.76
csaf_2_1_tests/6.2.37 371416 ns/iter (± 3075) 492603 ns/iter (± 895) 0.75
csaf_2_1_tests/6.2.38 87756 ns/iter (± 252) 119682 ns/iter (± 2586) 0.73
csaf_2_1_tests/6.2.39.1 47632 ns/iter (± 74) 62279 ns/iter (± 53) 0.76
csaf_2_1_tests/6.2.39.2 58069 ns/iter (± 72) 74159 ns/iter (± 79) 0.78
csaf_2_1_tests/6.2.39.3 60545 ns/iter (± 86) 76938 ns/iter (± 187) 0.79
csaf_2_1_tests/6.2.39.4 60784 ns/iter (± 139) 77070 ns/iter (± 124) 0.79
csaf_2_1_tests/6.2.39.5 48163 ns/iter (± 135) 63328 ns/iter (± 104) 0.76
csaf_2_1_tests/6.2.40 64677 ns/iter (± 101) 80743 ns/iter (± 104) 0.80
csaf_2_1_tests/6.2.41 166912 ns/iter (± 502) 217400 ns/iter (± 611) 0.77
csaf_2_1_tests/6.2.42 65175 ns/iter (± 60) 81010 ns/iter (± 103) 0.80
csaf_2_1_tests/6.2.43 65425 ns/iter (± 56) 81265 ns/iter (± 431) 0.81
csaf_2_1_tests/6.2.44 65734 ns/iter (± 104) 81668 ns/iter (± 276) 0.80
csaf_2_1_tests/6.2.45 66134 ns/iter (± 80) 82134 ns/iter (± 133) 0.81
csaf_2_1_tests/6.2.46 66336 ns/iter (± 64) 82359 ns/iter (± 200) 0.81
csaf_2_1_tests/6.2.47 265302 ns/iter (± 820) 327802 ns/iter (± 1470) 0.81
csaf_2_1_tests/6.2.48 142447 ns/iter (± 212) 184316 ns/iter (± 295) 0.77
csaf_2_1_tests/6.2.49 66934 ns/iter (± 97) 83047 ns/iter (± 202) 0.81
csaf_2_1_tests/6.2.50.1 48069 ns/iter (± 57) 62770 ns/iter (± 97) 0.77
csaf_2_1_tests/6.2.50.2 48468 ns/iter (± 436) 63101 ns/iter (± 42) 0.77
csaf_2_1_tests/6.2.50.3 48087 ns/iter (± 59) 62949 ns/iter (± 127) 0.76
csaf_2_1_tests/6.2.51 66864 ns/iter (± 67) 84581 ns/iter (± 94) 0.79
csaf_2_1_tests/6.2.52 169746 ns/iter (± 557) 223537 ns/iter (± 279) 0.76
csaf_2_1_tests/6.2.53 73167 ns/iter (± 58) 90578 ns/iter (± 182) 0.81
csaf_2_1_tests/6.2.54.1 48622 ns/iter (± 118) 63272 ns/iter (± 85) 0.77
csaf_2_1_tests/6.2.54.2 48116 ns/iter (± 95) 63435 ns/iter (± 339) 0.76
csaf_2_1_tests/6.2.54.3 48079 ns/iter (± 102) 63310 ns/iter (± 199) 0.76
csaf_2_1_tests/6.2.54.4 48674 ns/iter (± 104) 62940 ns/iter (± 43) 0.77
csaf_2_1_tests/6.2.55 67724 ns/iter (± 73) 83734 ns/iter (± 145) 0.81
csaf_2_1_tests/6.3.1 48527 ns/iter (± 73) 63059 ns/iter (± 233) 0.77
csaf_2_1_tests/6.3.2 71630 ns/iter (± 213) 95573 ns/iter (± 292) 0.75
csaf_2_1_tests/6.3.3 98687 ns/iter (± 233) 127053 ns/iter (± 124) 0.78
csaf_2_1_tests/6.3.4 115919 ns/iter (± 93) 148119 ns/iter (± 313) 0.78
csaf_2_1_tests/6.3.5 154537 ns/iter (± 287) 200977 ns/iter (± 258) 0.77
csaf_2_1_tests/6.3.6 49646 ns/iter (± 27) 65537 ns/iter (± 90) 0.76
csaf_2_1_tests/6.3.7 50174 ns/iter (± 224) 66108 ns/iter (± 94) 0.76
csaf_2_1_tests/6.3.8 50420 ns/iter (± 49) 66834 ns/iter (± 72) 0.75
csaf_2_1_tests/6.3.9 145613 ns/iter (± 288) 194008 ns/iter (± 243) 0.75
csaf_2_1_tests/6.3.10 137886 ns/iter (± 204) 176903 ns/iter (± 623) 0.78
csaf_2_1_tests/6.3.11 132208 ns/iter (± 176) 170237 ns/iter (± 282) 0.78
csaf_2_1_tests/6.3.12 191838 ns/iter (± 464) 254723 ns/iter (± 950) 0.75
csaf_2_1_tests/6.3.13 68839 ns/iter (± 101) 84948 ns/iter (± 214) 0.81
csaf_2_1_tests/6.3.14 116890 ns/iter (± 440) 154473 ns/iter (± 409) 0.76
csaf_2_1_tests/6.3.15 116954 ns/iter (± 614) 148414 ns/iter (± 328) 0.79
csaf_2_1_tests/6.3.16 69872 ns/iter (± 70) 85603 ns/iter (± 186) 0.82
csaf_2_1_tests/6.3.17 69557 ns/iter (± 92) 86192 ns/iter (± 160) 0.81
csaf_2_1_tests/6.3.18 78776 ns/iter (± 100) 97452 ns/iter (± 414) 0.81
csaf_2_1_tests/6.3.19.1 48489 ns/iter (± 101) 63510 ns/iter (± 251) 0.76
csaf_2_1_tests/6.3.19.2 48169 ns/iter (± 85) 63534 ns/iter (± 83) 0.76
csaf_2_1_tests/6.3.19.3 48077 ns/iter (± 57) 63234 ns/iter (± 74) 0.76
csaf_2_1_tests/6.3.19.4 48380 ns/iter (± 4028) 62937 ns/iter (± 457) 0.77
csaf_2_1_tests/6.3.19.5 56195 ns/iter (± 1066) 62988 ns/iter (± 96) 0.89
csaf_2_1_tests/6.3.20 81789 ns/iter (± 476) 98364 ns/iter (± 199) 0.83
csaf_2_1_tests/6.3.21.1 51583 ns/iter (± 41) 63481 ns/iter (± 734) 0.81
csaf_2_1_tests/6.3.21.2 48100 ns/iter (± 76) 62949 ns/iter (± 324) 0.76
csaf_2_1_tests/6.3.21.3 47943 ns/iter (± 59) 62924 ns/iter (± 67) 0.76
csaf_2_1_tests/6.3.21.4 48268 ns/iter (± 212) 64868 ns/iter (± 61) 0.74
csaf_2_1_tests/6.3.21.5 47999 ns/iter (± 81) 62974 ns/iter (± 61) 0.76
csaf_2_1_tests/6.3.21.6 48177 ns/iter (± 53) 63017 ns/iter (± 113) 0.76
csaf_2_1_tests/6.3.21.7 48129 ns/iter (± 59) 62936 ns/iter (± 78) 0.76
csaf_2_1_tests/6.3.21.8 48154 ns/iter (± 39) 63348 ns/iter (± 47) 0.76
csaf_2_1_tests/6.3.21.9 49396 ns/iter (± 47) 62950 ns/iter (± 58) 0.78
csaf_2_1_tests/6.3.22 70627 ns/iter (± 98) 87080 ns/iter (± 455) 0.81
csaf_2_1_tests/6.3.24 70776 ns/iter (± 86) 87336 ns/iter (± 242) 0.81
full_validation/csaf_2_0_full_preset 5904083 ns/iter (± 60684) 7951658 ns/iter (± 41244) 0.74
full_validation/csaf_2_1_full_preset 45514374 ns/iter (± 173078) 65335199 ns/iter (± 445134) 0.70
parse_only/csaf_2_0 910010 ns/iter (± 2528) 1152778 ns/iter (± 4083) 0.79
parse_only/csaf_2_1 4632245 ns/iter (± 8714) 5839748 ns/iter (± 13035) 0.79
typed_parse/csaf_2_0 1539814 ns/iter (± 2503) 2004221 ns/iter (± 14978) 0.77
typed_parse/csaf_2_1 7570521 ns/iter (± 23592) 9777263 ns/iter (± 22905) 0.77

This comment was automatically generated by workflow using github-action-benchmark.

@dependabot @tziemek
build(deps): bump cvss-rs from 0.4.0 to 0.5.0
7a3b78a 
Bumps [cvss-rs](https://github.com/scm-rs/cvss-rs) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/scm-rs/cvss-rs/releases)
- [Commits](scm-rs/cvss-rs@v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: cvss-rs
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@tziemek
tziemek force-pushed the dependabot/cargo/cvss-rs-0.5.0 branch from c8a421e to 7a3b78a Compare September 17, 2026 10:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants