fix: mock OS-level reaping on Windows to avoid child processes potentially detached (#3922)

2026-07-21 23:01:05 +00:00 · 2026-04-30 18:50:51 +08:00 · 2026-04-30 18:50:51 +08:00 · 1caa5807c6
commit 1caa5807c6
parent c4c533e3ef
11 changed files with 167 additions and 152 deletions
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@ -25,7 +25,7 @@ jobs:
          rustup component add clippy

      - name: Setup sccache
-        uses: mozilla-actions/sccache-action@v0.0.9
+        uses: mozilla-actions/sccache-action@v0.0.10

      - name: Clippy
        run: cargo clippy --all
@ -42,7 +42,7 @@ jobs:
          rustup component add rustfmt --toolchain nightly

      - name: Setup sccache
-        uses: mozilla-actions/sccache-action@v0.0.9
+        uses: mozilla-actions/sccache-action@v0.0.10

      - name: Rustfmt
        run: rustfmt +nightly --check **/*.rs
--- a/.github/workflows/draft.yml
+++ b/.github/workflows/draft.yml
@ -53,7 +53,7 @@ jobs:
          targets: ${{ matrix.target }}

      - name: Setup sccache
-        uses: mozilla-actions/sccache-action@v0.0.9
+        uses: mozilla-actions/sccache-action@v0.0.10

      - name: Build
        run: ./scripts/build.sh ${{ matrix.target }}
@ -88,7 +88,7 @@ jobs:
          targets: ${{ matrix.target }}

      - name: Setup sccache
-        uses: mozilla-actions/sccache-action@v0.0.9
+        uses: mozilla-actions/sccache-action@v0.0.10

      - name: Build
        run: cargo build --profile release-windows --locked --target ${{ matrix.target }}
@ -127,7 +127,7 @@ jobs:
          targets: ${{ matrix.target }}

      - name: Setup sccache
-        uses: mozilla-actions/sccache-action@v0.0.9
+        uses: mozilla-actions/sccache-action@v0.0.10

      - name: Build
        run: ./scripts/build.sh ${{ matrix.target }}
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@ -27,7 +27,7 @@ jobs:
        run: rustup toolchain install stable --profile minimal

      - name: Setup sccache
-        uses: mozilla-actions/sccache-action@v0.0.9
+        uses: mozilla-actions/sccache-action@v0.0.10

      - name: Build
        run: cargo build --verbose
--- a/Cargo.lock
+++ b/Cargo.lock
@ -589,9 +589,9 @@ dependencies = [

 [[package]]
 name = "cc"
-version = "1.2.60"
+version = "1.2.61"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "43c5703da9466b66a946814e1adf53ea2c90f10063b86290cc9eb67ce3478a20"
+checksum = "d16d90359e986641506914ba71350897565610e87ce0ad9e6f28569db3dd5c6d"
 dependencies = [
 "find-msvc-tools",
 "jobserver",
@ -692,9 +692,9 @@ dependencies = [

 [[package]]
 name = "clap_complete"
-version = "4.6.2"
+version = "4.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ff7a1dccbdd8b078c2bdebff47e404615151534d5043da397ec50286816f9cb"
+checksum = "660c0520455b1013b9bcb0393d5f643d7e4454fb69c915b8d6d2aa0e9a45acc3"
 dependencies = [
 "clap",
 ]
@ -829,9 +829,9 @@ checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"

 [[package]]
 name = "cpubits"
-version = "0.1.0"
+version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5ef0c543070d296ea414df2dd7625d1b24866ce206709d8a4a424f28377f5861"
+checksum = "15b85f9c39137c3a891689859392b1bd49812121d0d61c9caf00d46ed5ce06ae"

 [[package]]
 name = "cpufeatures"
@ -950,9 +950,9 @@ checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"

 [[package]]
 name = "crypto-bigint"
-version = "0.7.3"
+version = "0.7.0-rc.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42a0d26b245348befa0c121944541476763dcc46ede886c88f9d12e1697d27c3"
+checksum = "96dacf199529fb801ae62a9aafdc01b189e9504c0d1ee1512a4c16bcd8666a93"
 dependencies = [
 "cpubits",
 "ctutils",
@ -988,9 +988,9 @@ dependencies = [

 [[package]]
 name = "crypto-primes"
-version = "0.7.0"
+version = "0.7.0-pre.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "21f41f23de7d24cdbda7f0c4d9c0351f99a4ceb258ef30e5c1927af8987ffe5a"
+checksum = "6081ce8b60c0e533e2bba42771b94eb6149052115f4179744d5779883dc98583"
 dependencies = [
 "crypto-bigint",
 "libm",
@ -1133,9 +1133,9 @@ dependencies = [

 [[package]]
 name = "data-encoding"
-version = "2.10.0"
+version = "2.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
+checksum = "a4ae5f15dda3c708c0ade84bfee31ccab44a3da4f88015ed22f63732abe300c8"

 [[package]]
 name = "deadpool"
@ -1310,9 +1310,9 @@ checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"

 [[package]]
 name = "ecdsa"
-version = "0.17.0-rc.17"
+version = "0.17.0-rc.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc4bf51f0534ed6e59a0f2f26272b64ba55c470133f8424c2adfd1c4d59d9988"
+checksum = "91bbdd377139884fafcad8dc43a760a3e1e681aa26db910257fa6535b70e1829"
 dependencies = [
 "der",
 "digest 0.11.2",
@ -1357,9 +1357,9 @@ checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"

 [[package]]
 name = "elliptic-curve"
-version = "0.14.0-rc.31"
+version = "0.14.0-rc.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b148a81cede8f4023248f980cffdf7611c46f2add469c6980e815b7c5b764ba5"
+checksum = "bde7860544606d222fd6bd6d9f9a0773321bf78072a637e1d560a058c0031978"
 dependencies = [
 "base16ct",
 "crypto-bigint",
@ -1501,23 +1501,9 @@ checksum = "dd2e7510819d6fbf51a5545c8f922716ecfb14df168a3242f7d33e0239efe6a1"

 [[package]]
 name = "fax"
-version = "0.2.6"
+version = "0.2.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f05de7d48f37cd6730705cbca900770cab77a89f413d23e100ad7fad7795a0ab"
-dependencies = [
- "fax_derive",
-]
-
-[[package]]
-name = "fax_derive"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a0aca10fb742cb43f9e7bb8467c91aa9bcb8e3ffbc6a6f7389bb93ffc920577d"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.117",
-]
+checksum = "caf1079563223d5d59d83c85886a56e586cfd5c1a26292e971a0fa266531ac5a"

 [[package]]
 name = "fdeflate"
@ -1716,9 +1702,9 @@ dependencies = [

 [[package]]
 name = "generic-array"
-version = "1.3.5"
+version = "1.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eaf57c49a95fd1fe24b90b3033bee6dc7e8f1288d51494cb44e627c295e38542"
+checksum = "dab9e9188e97a93276e1fe7b56401b851e2b45a46d045ca658100c1303ada649"
 dependencies = [
 "generic-array 0.14.7",
 "rustversion",
@ -1915,9 +1901,9 @@ dependencies = [

 [[package]]
 name = "hybrid-array"
-version = "0.4.10"
+version = "0.4.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3944cf8cf766b40e2a1a333ee5e9b563f854d5fa49d6a8ca2764e97c6eddb214"
+checksum = "08d46837a0ed51fe95bd3b05de33cd64a1ee88fc797477ca48446872504507c5"
 dependencies = [
 "ctutils",
 "subtle",
@ -1996,9 +1982,9 @@ dependencies = [

 [[package]]
 name = "imgref"
-version = "1.12.0"
+version = "1.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e7c5cedc30da3a610cac6b4ba17597bdf7152cf974e8aab3afb3d54455e371c8"
+checksum = "40fac9d56ed6437b198fddba683305e8e2d651aa42647f00f5ae542e7f5c94a2"

 [[package]]
 name = "indexmap"
@ -2170,9 +2156,9 @@ dependencies = [

 [[package]]
 name = "js-sys"
-version = "0.3.95"
+version = "0.3.97"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2964e92d1d9dc3364cae4d718d93f227e3abb088e747d92e0395bfdedf1c12ca"
+checksum = "a1840c94c045fbcf8ba2812c95db44499f7c64910a912551aaaa541decebcacf"
 dependencies = [
 "cfg-if",
 "futures-util",
@ -2260,9 +2246,9 @@ checksum = "7a79a3332a6609480d7d0c9eab957bca6b455b91bb84e66d19f5ff66294b85b8"

 [[package]]
 name = "libc"
-version = "0.2.185"
+version = "0.2.186"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52ff2c0fe9bc6cb6b14a0592c2ff4fa9ceb83eea9db979b0487cd054946a2b8f"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"

 [[package]]
 name = "libfuzzer-sys"
@ -2351,9 +2337,9 @@ dependencies = [

 [[package]]
 name = "lru"
-version = "0.17.0"
+version = "0.18.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e0b564323a0fb6d54b864f625ae139de9612e27edb944dda37c109f05aac531"
+checksum = "8a860605968fce16869fd239cf4237a82f3ac470723415db603b0e8b6c8d4fb9"
 dependencies = [
 "hashbrown 0.17.0",
 ]
@ -2462,9 +2448,9 @@ dependencies = [

 [[package]]
 name = "ml-kem"
-version = "0.3.0-rc.2"
+version = "0.3.0-rc.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04437cb1a66c0b78740927b76cc61f218344b9f6ef3dd430e283274a718ef0e9"
+checksum = "8198b5db27ac9773534c371751a59dc18aec8b80aa141e69abfdd1dec2e3f78c"
 dependencies = [
 "hybrid-array",
 "kem",
@ -2526,9 +2512,9 @@ dependencies = [

 [[package]]
 name = "module-lattice"
-version = "0.2.1"
+version = "0.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "164eb3faeaecbd14b0b2a917c1b4d0c035097a9c559b0bed85c2cdd032bc8faa"
+checksum = "dc7c90d33a0dac244570c26461d761ffaeadb3bfc2b17cc625ae2185cafdffae"
 dependencies = [
 "ctutils",
 "hybrid-array",
@ -2803,9 +2789,9 @@ checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"

 [[package]]
 name = "onig"
-version = "6.5.1"
+version = "6.5.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "336b9c63443aceef14bea841b899035ae3abe89b7c486aaf4c5bd8aafedac3f0"
+checksum = "0cc3cbf698f9438986c11a880c90a6d04b9de27575afd28bbf45b154b6c709e2"
 dependencies = [
 "bitflags 2.11.1",
 "libc",
@ -2815,9 +2801,9 @@ dependencies = [

 [[package]]
 name = "onig_sys"
-version = "69.9.1"
+version = "69.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c7f86c6eef3d6df15f23bcfb6af487cbd2fed4e5581d58d5bf1f5f8b7f6727dc"
+checksum = "1e68317604e77e53b85896388e1a803c1d21b74c899ec9e5e1112db90735edd7"
 dependencies = [
 "cc",
 "pkg-config",
@ -2866,9 +2852,9 @@ dependencies = [

 [[package]]
 name = "p256"
-version = "0.14.0-rc.9"
+version = "0.14.0-rc.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b97e3bf0465157ae90975ff52dbeb1362ba618924878c9f74c25baa27a65f9a"
+checksum = "018bfbb86e05fd70a83e985921241035ee09fcd369c4a2c3680b389a01d2ad28"
 dependencies = [
 "ecdsa",
 "elliptic-curve",
@ -2879,9 +2865,9 @@ dependencies = [

 [[package]]
 name = "p384"
-version = "0.14.0-rc.9"
+version = "0.14.0-rc.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "437f30ebcb1e16ff48acead5f08bd69fbcdbc82421687bb48af5c315a0bfab03"
+checksum = "8c91df688211f5957dbe2ab599dcbcaade8d6d3cdc15c5b350d350d7d07ce423"
 dependencies = [
 "ecdsa",
 "elliptic-curve",
@ -2893,9 +2879,9 @@ dependencies = [

 [[package]]
 name = "p521"
-version = "0.14.0-rc.9"
+version = "0.14.0-rc.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e9fd792bab86ecf6249561752fb5a413511f999887107dd054bbda5143743d7"
+checksum = "de6cd9451de522549d36cc78a1b45a699a3d55a872e8ea0c8f0318e502d99e2c"
 dependencies = [
 "base16ct",
 "ecdsa",
@ -3012,9 +2998,9 @@ dependencies = [

 [[package]]
 name = "pbkdf2"
-version = "0.13.0-rc.10"
+version = "0.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1f24f3eb2f4471b1730d59e4b730b747939960a8c7eb0c33c5a9076f2d3dddea"
+checksum = "112d82ceb8c5bf524d9af484d4e4970c9fd5a0cc15ba14ad93dccd28873b0629"
 dependencies = [
 "digest 0.11.2",
 "hmac 0.13.0",
@ -3165,7 +3151,7 @@ dependencies = [
 "aes-gcm 0.11.0-rc.3",
 "cbc 0.2.0",
 "der",
- "pbkdf2 0.13.0-rc.10",
+ "pbkdf2 0.13.0",
 "rand_core 0.10.1",
 "scrypt",
 "sha2 0.11.0",
@ -3192,9 +3178,9 @@ checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e"

 [[package]]
 name = "plist"
-version = "1.8.0"
+version = "1.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "740ebea15c5d1428f910cd1a5f52cebf8d25006245ed8ade92702f4943d91e07"
+checksum = "092791278e026273c1b65bbdcfbba3a300f2994c896bd01ab01da613c29c46f1"
 dependencies = [
 "base64",
 "indexmap 2.14.0",
@ -3283,9 +3269,9 @@ dependencies = [

 [[package]]
 name = "primefield"
-version = "0.14.0-rc.9"
+version = "0.14.0-rc.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b52e6ee42db392378a95622b463c9740631171d1efce43fa445a569c1600cb6"
+checksum = "93401c13cc7ff24684571cfca9d3cf9ebabfaf3d4b7b9963ade41ec54da196b5"
 dependencies = [
 "crypto-bigint",
 "crypto-common 0.2.1",
@ -3297,9 +3283,9 @@ dependencies = [

 [[package]]
 name = "primeorder"
-version = "0.14.0-rc.9"
+version = "0.14.0-rc.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0556580e42c19833f5d232aca11a7687a503ee41f937b54f5ae1d50fc2a6a36a"
+checksum = "a0c5c8a39bcd764bfedf456e8d55e115fe86dda3e0f555371849f2a41cbc9706"
 dependencies = [
 "elliptic-curve",
 ]
@ -3393,9 +3379,9 @@ checksum = "a993555f31e5a609f617c12db6250dedcac1b0a85076912c436e6fc9b2c8e6a3"

 [[package]]
 name = "quick-xml"
-version = "0.38.4"
+version = "0.39.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b66c2058c55a409d601666cffe35f04333cf1013010882cec174a7467cd4e21c"
+checksum = "958f21e8e7ceb5a1aa7fa87fab28e7c75976e0bfe7e23ff069e0a260f894067d"
 dependencies = [
 "memchr",
 ]
@ -3776,9 +3762,9 @@ dependencies = [

 [[package]]
 name = "rsa"
-version = "0.10.0-rc.17"
+version = "0.10.0-rc.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "87ed3e93fc7e473e464b9726f4759659e72bc8665e4b8ea227547024f416d905"
+checksum = "6fb9fd8c1edd9e6a2693623baf0fe77ff05ce022a5d7746900ffc38a15c233de"
 dependencies = [
 "const-oid 0.10.2",
 "crypto-bigint",
@ -3795,18 +3781,23 @@ dependencies = [

 [[package]]
 name = "russh"
-version = "0.60.1"
+version = "0.60.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d937f3f4a79bffd67fc12fd437785effdfc8b94edc89ab90392f9ac9e11cc9fc"
+checksum = "9c9e358980fe9b079b99da387117864ee6f0a3fd02f39e5b5fde6af9c2895374"
 dependencies = [
+ "aead 0.6.0-rc.10",
 "aes 0.8.4",
+ "aes 0.9.0",
+ "aes-gcm 0.11.0-rc.3",
 "bitflags 2.11.1",
 "block-padding 0.3.3",
 "byteorder",
 "bytes",
 "cbc 0.1.2",
+ "cbc 0.2.0",
 "cipher 0.5.1",
 "crypto-bigint",
+ "ctr 0.10.0",
 "ctr 0.9.2",
 "curve25519-dalek",
 "data-encoding",
@ -3818,22 +3809,28 @@ dependencies = [
 "elliptic-curve",
 "enum_dispatch",
 "futures",
- "generic-array 1.3.5",
+ "generic-array 1.4.1",
 "getrandom 0.2.17",
+ "ghash 0.6.0",
 "hex-literal",
+ "hkdf",
 "hmac 0.12.1",
+ "hmac 0.13.0",
 "inout 0.1.4",
 "internal-russh-forked-ssh-key",
 "internal-russh-num-bigint",
+ "keccak",
 "log",
 "md5",
 "ml-kem",
 "module-lattice",
+ "num-bigint",
 "p256",
 "p384",
 "p521",
 "pageant",
 "pbkdf2 0.12.2",
+ "pbkdf2 0.13.0",
 "pkcs1",
 "pkcs5",
 "pkcs8",
@ -3844,9 +3841,14 @@ dependencies = [
 "rsa",
 "russh-cryptovec",
 "russh-util",
+ "salsa20",
+ "scrypt",
 "sec1",
 "sha1 0.10.6",
+ "sha1 0.11.0",
 "sha2 0.10.9",
+ "sha2 0.11.0",
+ "sha3",
 "signature",
 "spki",
 "ssh-encoding",
@ -4022,12 +4024,12 @@ checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"

 [[package]]
 name = "scrypt"
-version = "0.12.0-rc.10"
+version = "0.12.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e03ed5b54ed5fcc8e016cd94301416bc2c01c05c87a6742b97468337c8804598"
+checksum = "d87af57419b594aa23fa95f09f0e06d80d84ba01c26148c43844cad6ff4485f0"
 dependencies = [
 "cfg-if",
- "pbkdf2 0.13.0-rc.10",
+ "pbkdf2 0.13.0",
 "salsa20",
 "sha2 0.11.0",
 ]
@ -4344,9 +4346,9 @@ checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"

 [[package]]
 name = "spki"
-version = "0.8.0"
+version = "0.8.0-rc.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d9efca8738c78ee9484207732f728b1ef517bbb1833d6fc0879ca898a522f6f"
+checksum = "8baeff88f34ed0691978ec34440140e1572b68c7dd4a495fd14a3dc1944daa80"
 dependencies = [
 "base64ct",
 "der",
@ -5111,9 +5113,9 @@ dependencies = [

 [[package]]
 name = "wasm-bindgen"
-version = "0.2.118"
+version = "0.2.120"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bf938a0bacb0469e83c1e148908bd7d5a6010354cf4fb73279b7447422e3a89"
+checksum = "df52b6d9b87e0c74c9edfa1eb2d9bf85e5d63515474513aa50fa181b3c4f5db1"
 dependencies = [
 "cfg-if",
 "once_cell",
@ -5124,9 +5126,9 @@ dependencies = [

 [[package]]
 name = "wasm-bindgen-futures"
-version = "0.4.68"
+version = "0.4.70"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f371d383f2fb139252e0bfac3b81b265689bf45b6874af544ffa4c975ac1ebf8"
+checksum = "af934872acec734c2d80e6617bbb5ff4f12b052dd8e6332b0817bce889516084"
 dependencies = [
 "js-sys",
 "wasm-bindgen",
@ -5134,9 +5136,9 @@ dependencies = [

 [[package]]
 name = "wasm-bindgen-macro"
-version = "0.2.118"
+version = "0.2.120"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eeff24f84126c0ec2db7a449f0c2ec963c6a49efe0698c4242929da037ca28ed"
+checksum = "78b1041f495fb322e64aca85f5756b2172e35cd459376e67f2a6c9dffcedb103"
 dependencies = [
 "quote",
 "wasm-bindgen-macro-support",
@ -5144,9 +5146,9 @@ dependencies = [

 [[package]]
 name = "wasm-bindgen-macro-support"
-version = "0.2.118"
+version = "0.2.120"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9d08065faf983b2b80a79fd87d8254c409281cf7de75fc4b773019824196c904"
+checksum = "9dcd0ff20416988a18ac686d4d4d0f6aae9ebf08a389ff5d29012b05af2a1b41"
 dependencies = [
 "bumpalo",
 "proc-macro2",
@ -5157,9 +5159,9 @@ dependencies = [

 [[package]]
 name = "wasm-bindgen-shared"
-version = "0.2.118"
+version = "0.2.120"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5fd04d9e306f1907bd13c6361b5c6bfc7b3b3c095ed3f8a9246390f8dbdee129"
+checksum = "49757b3c82ebf16c57d69365a142940b384176c24df52a087fb748e2085359ea"
 dependencies = [
 "unicode-ident",
 ]
@ -5658,9 +5660,9 @@ checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"

 [[package]]
 name = "winnow"
-version = "1.0.1"
+version = "1.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09dac053f1cd375980747450bfc7250c264eaae0583872e845c0c7cd578872b5"
+checksum = "2ee1708bef14716a11bae175f579062d4554d95be2c6829f518df847b7b3fdd0"

 [[package]]
 name = "wit-bindgen"
@ -6250,7 +6252,7 @@ dependencies = [
 "foldhash 0.2.0",
 "hashbrown 0.17.0",
 "libc",
- "lru 0.17.0",
+ "lru 0.18.0",
 "mlua",
 "ordered-float 5.3.0",
 "parking_lot",
--- a/Cargo.toml
+++ b/Cargo.toml
@ -52,8 +52,8 @@ futures             = "0.3.32"
 globset             = "0.4.18"
 hashbrown           = { version = "0.17.0", features = [ "serde" ] }
 indexmap            = { version = "2.14.0", features = [ "serde" ] }
-libc                = "0.2.185"
-lru                 = "0.17.0"
+libc                = "0.2.186"
+lru                 = "0.18.0"
 mlua                = { version = "0.11.6", features = [ "anyhow", "async", "error-send", "lua55", "macros", "serde" ] }
 objc2               = "0.6.4"
 ordered-float       = { version = "5.3.0", features = [ "serde" ] }
@ -63,7 +63,7 @@ percent-encoding    = "2.3.2"
 rand                = { version = "0.10.1", default-features = false, features = [ "std", "sys_rng" ] }
 ratatui             = { version = "0.30.0", features = [ "serde", "unstable-rendered-line-info", "unstable-widget-ref" ] }
 regex               = "1.12.3"
-russh               = { version = "0.60.1", default-features = false, features = [ "ring", "rsa" ] }
+russh               = { version = "0.60.2", default-features = false, features = [ "ring", "rsa" ] }
 scopeguard          = "1.2.0"
 serde               = { version = "1.0.228", features = [ "derive" ] }
 serde_json          = "1.0.149"
--- a/scripts/validate-form/package-lock.json
+++ b/scripts/validate-form/package-lock.json
@ -8,30 +8,20 @@
 			"name": "validate-form",
 			"version": "1.0.0",
 			"dependencies": {
-				"@actions/core": "^3.0.0",
-				"@actions/github": "^9.1.0"
+				"@actions/core": "^3.0.1",
+				"@actions/github": "^9.1.1"
 			}
 		},
 		"node_modules/@actions/core": {
-			"version": "3.0.0",
-			"resolved": "https://registry.npmjs.org/@actions/core/-/core-3.0.0.tgz",
-			"integrity": "sha512-zYt6cz+ivnTmiT/ksRVriMBOiuoUpDCJJlZ5KPl2/FRdvwU3f7MPh9qftvbkXJThragzUZieit2nyHUyw53Seg==",
+			"version": "3.0.1",
+			"resolved": "https://registry.npmjs.org/@actions/core/-/core-3.0.1.tgz",
+			"integrity": "sha512-a6d/Nwahm9fliVGRhdhofo40HjHQasUPusmc7vBfyky+7Z+P2A1J68zyFVaNcEclc/Se+eO595oAr5nwEIoIUA==",
 			"license": "MIT",
 			"dependencies": {
 				"@actions/exec": "^3.0.0",
 				"@actions/http-client": "^4.0.0"
 			}
 		},
-		"node_modules/@actions/core/node_modules/@actions/http-client": {
-			"version": "4.0.0",
-			"resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-4.0.0.tgz",
-			"integrity": "sha512-QuwPsgVMsD6qaPD57GLZi9sqzAZCtiJT8kVBCDpLtxhL5MydQ4gS+DrejtZZPdIYyB1e95uCK9Luyds7ybHI3g==",
-			"license": "MIT",
-			"dependencies": {
-				"tunnel": "^0.0.6",
-				"undici": "^6.23.0"
-			}
-		},
 		"node_modules/@actions/exec": {
 			"version": "3.0.0",
 			"resolved": "https://registry.npmjs.org/@actions/exec/-/exec-3.0.0.tgz",
@ -42,9 +32,9 @@
 			}
 		},
 		"node_modules/@actions/github": {
-			"version": "9.1.0",
-			"resolved": "https://registry.npmjs.org/@actions/github/-/github-9.1.0.tgz",
-			"integrity": "sha512-u0hDGQeCS+7VNoLA8hYG65RLdPLMaPGfka0sZ0up7P0AiShqfX6xcuXNteGkQ7X7Tod7AMNwHd4p7DS63i8zzA==",
+			"version": "9.1.1",
+			"resolved": "https://registry.npmjs.org/@actions/github/-/github-9.1.1.tgz",
+			"integrity": "sha512-tL5JbYOBZHc0ngEnCsaDcryUizIUIlQyIMwy1Wkx93H5HzbBJ7TbiPx2PnFjBwZW0Vh05JmfFZhecE6gglYegA==",
 			"license": "MIT",
 			"dependencies": {
 				"@actions/http-client": "^3.0.2",
@ -56,7 +46,7 @@
 				"undici": "^6.23.0"
 			}
 		},
-		"node_modules/@actions/http-client": {
+		"node_modules/@actions/github/node_modules/@actions/http-client": {
 			"version": "3.0.2",
 			"resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.2.tgz",
 			"integrity": "sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==",
@ -66,6 +56,16 @@
 				"undici": "^6.23.0"
 			}
 		},
+		"node_modules/@actions/http-client": {
+			"version": "4.0.1",
+			"resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-4.0.1.tgz",
+			"integrity": "sha512-+Nvd1ImaOZBSoPbsUtEhv+1z99H12xzncCkz0a3RuehINE81FZSe2QTj3uvAPTcJX/SCzUQHQ0D1GrPMbrPitg==",
+			"license": "MIT",
+			"dependencies": {
+				"tunnel": "^0.0.6",
+				"undici": "^6.23.0"
+			}
+		},
 		"node_modules/@actions/io": {
 			"version": "3.0.2",
 			"resolved": "https://registry.npmjs.org/@actions/io/-/io-3.0.2.tgz",
@ -100,9 +100,9 @@
 			}
 		},
 		"node_modules/@octokit/endpoint": {
-			"version": "11.0.2",
-			"resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-11.0.2.tgz",
-			"integrity": "sha512-4zCpzP1fWc7QlqunZ5bSEjxc6yLAlRTnDwKtgXfcI/FxxGoqedDG8V2+xJ60bV2kODqcGB+nATdtap/XYq2NZQ==",
+			"version": "11.0.3",
+			"resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-11.0.3.tgz",
+			"integrity": "sha512-FWFlNxghg4HrXkD3ifYbS/IdL/mDHjh9QcsNyhQjN8dplUoZbejsdpmuqdA76nxj2xoWPs7p8uX2SNr9rYu0Ag==",
 			"license": "MIT",
 			"dependencies": {
 				"@octokit/types": "^16.0.0",
@ -163,15 +163,16 @@
 			}
 		},
 		"node_modules/@octokit/request": {
-			"version": "10.0.7",
-			"resolved": "https://registry.npmjs.org/@octokit/request/-/request-10.0.7.tgz",
-			"integrity": "sha512-v93h0i1yu4idj8qFPZwjehoJx4j3Ntn+JhXsdJrG9pYaX6j/XRz2RmasMUHtNgQD39nrv/VwTWSqK0RNXR8upA==",
+			"version": "10.0.8",
+			"resolved": "https://registry.npmjs.org/@octokit/request/-/request-10.0.8.tgz",
+			"integrity": "sha512-SJZNwY9pur9Agf7l87ywFi14W+Hd9Jg6Ifivsd33+/bGUQIjNujdFiXII2/qSlN2ybqUHfp5xpekMEjIBTjlSw==",
 			"license": "MIT",
 			"dependencies": {
-				"@octokit/endpoint": "^11.0.2",
+				"@octokit/endpoint": "^11.0.3",
 				"@octokit/request-error": "^7.0.2",
 				"@octokit/types": "^16.0.0",
 				"fast-content-type-parse": "^3.0.0",
+				"json-with-bigint": "^3.5.3",
 				"universal-user-agent": "^7.0.2"
 			},
 			"engines": {
@ -221,6 +222,12 @@
 			],
 			"license": "MIT"
 		},
+		"node_modules/json-with-bigint": {
+			"version": "3.5.8",
+			"resolved": "https://registry.npmjs.org/json-with-bigint/-/json-with-bigint-3.5.8.tgz",
+			"integrity": "sha512-eq/4KP6K34kwa7TcFdtvnftvHCD9KvHOGGICWwMFc4dOOKF5t4iYqnfLK8otCRCRv06FXOzGGyqE8h8ElMvvdw==",
+			"license": "MIT"
+		},
 		"node_modules/tunnel": {
 			"version": "0.0.6",
 			"resolved": "https://registry.npmjs.org/tunnel/-/tunnel-0.0.6.tgz",
@ -231,9 +238,9 @@
 			}
 		},
 		"node_modules/undici": {
-			"version": "6.24.0",
-			"resolved": "https://registry.npmjs.org/undici/-/undici-6.24.0.tgz",
-			"integrity": "sha512-lVLNosgqo5EkGqh5XUDhGfsMSoO8K0BAN0TyJLvwNRSl4xWGZlCVYsAIpa/OpA3TvmnM01GWcoKmc3ZWo5wKKA==",
+			"version": "6.25.0",
+			"resolved": "https://registry.npmjs.org/undici/-/undici-6.25.0.tgz",
+			"integrity": "sha512-ZgpWDC5gmNiuY9CnLVXEH8rl50xhRCuLNA97fAUnKi8RRuV4E6KG31pDTsLVUKnohJE0I3XDrTeEydAXRw47xg==",
 			"license": "MIT",
 			"engines": {
 				"node": ">=18.17"
--- a/scripts/validate-form/package.json
+++ b/scripts/validate-form/package.json
@ -6,7 +6,7 @@
 	},
 	"private": true,
 	"dependencies": {
-		"@actions/core": "^3.0.0",
-		"@actions/github": "^9.1.0"
+		"@actions/core": "^3.0.1",
+		"@actions/github": "^9.1.1"
 	}
 }
--- a/yazi-binding/Cargo.toml
+++ b/yazi-binding/Cargo.toml
@ -49,4 +49,4 @@ libc = { workspace = true }
 crossterm = { workspace = true, features = [ "use-dev-tty", "libc" ] }

 [target."cfg(windows)".dependencies]
-windows-sys = { version = "0.61.2", features = [ "Win32_System_JobObjects" ] }
+windows-sys = { version = "0.61.2", features = [ "Win32_Foundation", "Win32_System_JobObjects" ] }
--- a/yazi-binding/src/process/command.rs
+++ b/yazi-binding/src/process/command.rs
@ -55,9 +55,9 @@ impl Command {
 	fn spawn(&mut self) -> io::Result<Child> {
 		use std::os::windows::io::RawHandle;

-		use windows_sys::Win32::System::JobObjects::{AssignProcessToJobObject, CreateJobObjectW, JOB_OBJECT_LIMIT_PROCESS_MEMORY, JOBOBJECT_EXTENDED_LIMIT_INFORMATION, JobObjectExtendedLimitInformation, SetInformationJobObject};
+		use windows_sys::Win32::{Foundation::CloseHandle, System::JobObjects::{AssignProcessToJobObject, CreateJobObjectW, JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE, JOB_OBJECT_LIMIT_PROCESS_MEMORY, JOBOBJECT_EXTENDED_LIMIT_INFORMATION, JobObjectExtendedLimitInformation, SetInformationJobObject}};

-		fn assign_job(max: usize, handle: RawHandle) -> io::Result<RawHandle> {
+		fn create_job(handle: RawHandle, memory: Option<usize>) -> io::Result<RawHandle> {
 			unsafe {
 				let job = CreateJobObjectW(std::ptr::null_mut(), std::ptr::null());
 				if job.is_null() {
@ -65,31 +65,37 @@ impl Command {
 				}

 				let mut info: JOBOBJECT_EXTENDED_LIMIT_INFORMATION = std::mem::zeroed();
-				info.BasicLimitInformation.LimitFlags = JOB_OBJECT_LIMIT_PROCESS_MEMORY;
-				info.ProcessMemoryLimit = max;
+				info.BasicLimitInformation.LimitFlags = JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE;
+				if let Some(m) = memory {
+					info.BasicLimitInformation.LimitFlags |= JOB_OBJECT_LIMIT_PROCESS_MEMORY;
+					info.ProcessMemoryLimit = m;
+				}

-				let result = SetInformationJobObject(
+				if SetInformationJobObject(
 					job,
 					JobObjectExtendedLimitInformation,
 					&mut info as *mut _ as *mut _,
 					std::mem::size_of_val(&info) as u32,
-				);
-
-				if result == 0 {
-					Err(io::Error::last_os_error())
-				} else if AssignProcessToJobObject(job, handle) == 0 {
-					Err(io::Error::last_os_error())
-				} else {
-					Ok(job)
+				) == 0
+				{
+					CloseHandle(job);
+					return Err(io::Error::last_os_error());
 				}
+
+				if AssignProcessToJobObject(job, handle) == 0 {
+					CloseHandle(job);
+					return Err(io::Error::last_os_error());
+				}
+
+				Ok(job)
 			}
 		}

 		let child = self.inner.spawn()?;
-		if let (Some(max), Some(handle)) = (self.memory, child.raw_handle()) {
-			if let Ok(job) = assign_job(max, handle) {
-				return Ok(Child::new(child, Some(job)));
-			}
+		if let Some(handle) = child.raw_handle()
+			&& let Ok(job) = create_job(handle, self.memory)
+		{
+			return Ok(Child::new(child, Some(job)));
 		}

 		Ok(Child::new(child, None))
--- a/yazi-boot/Cargo.toml
+++ b/yazi-boot/Cargo.toml
@ -33,7 +33,7 @@ yazi-shared = { path = "../yazi-shared", version = "26.2.2" }

 # External dependencies
 clap                  = { workspace = true }
-clap_complete         = "4.6.2"
+clap_complete         = "4.6.3"
 clap_complete_fig     = "4.5.2"
 clap_complete_nushell = "4.6.0"
 vergen-gitcl          = { version = "9.1.0", features = [ "build", "rustc" ] }
--- a/yazi-cli/Cargo.toml
+++ b/yazi-cli/Cargo.toml
@ -47,7 +47,7 @@ yazi-shared = { path = "../yazi-shared", version = "26.2.2" }
 # External build dependencies
 anyhow                = { workspace = true }
 clap                  = { workspace = true }
-clap_complete         = "4.6.2"
+clap_complete         = "4.6.3"
 clap_complete_fig     = "4.5.2"
 clap_complete_nushell = "4.6.0"
 serde                 = { workspace = true }