From 2f588046bf45a7b9adeda3ed0f0e881d38e6f3f5 Mon Sep 17 00:00:00 2001
From: Bert Belder <bertbelder@gmail.com>
Date: Fri, 25 Sep 2026 17:08:16 -0700
Subject: [PATCH] chore: bump bytes to 1.11.1

* bytes 1.10.1 -> 1.11.1 - fixes an integer overflow in
  BytesMut::reserve's unique-reclaim path: an unchecked
  new_cap + offset addition could overflow in release builds and
  pass the capacity check anyway, leaving self.cap larger than the
  actual allocation and letting spare_capacity_mut() hand out
  out-of-bounds slices (GHSA-434x-w66g-qw3r, medium)

bytes is only a dev-dependency here (used in tests), so it never
reaches consumers of the published v8 crate. Lockfile-only bump, no
source changes.
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 411676c85f..579bf9e1f8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -153,9 +153,9 @@ checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
 
 [[package]]
 name = "bytes"
-version = "1.10.1"
+version = "1.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
 
 [[package]]
 name = "calendrical_calculations"