Merge pull request rust-skia#842 from pragmatrix/fix-libwebp-oob

Update Skia (libwebp v1.3.1-1-g2af26267) to fix CVE-2023-4863 and CVE…

Author: pragmatrix

README.md

@@ -4,8 +4,8 @@
 
 Skia Submodule Status: chrome/m117 ([upstream changes][skia-upstream], [our changes][skia-ours]).
 
-[skia-upstream]: https://github.com/rust-skia/skia/compare/m117-0.65.1...google:chrome/m117
-[skia-ours]: https://github.com/google/skia/compare/chrome/m117...rust-skia:m117-0.65.1
+[skia-upstream]: https://github.com/rust-skia/skia/compare/m117-0.65.3...google:chrome/m117
+[skia-ours]: https://github.com/google/skia/compare/chrome/m117...rust-skia:m117-0.65.3
 
 ## About
 

skia-bindings/Cargo.toml

@@ -9,7 +9,7 @@ keywords = ["skia", "rust-bindings", "vulkan", "opengl", "pdf"]
 categories = ["external-ffi-bindings", "graphics", "multimedia::images", "rendering::graphics-api", "visualization"]
 license = "MIT"
 
-version = "0.66.2"
+version = "0.66.3"
 authors = ["LongYinan <[email protected]>", "Armin Sander <[email protected]>"]
 edition = "2021"
 build = "build.rs"
@@ -30,7 +30,7 @@ doctest = false
 # Metadata used from inside the packaged crate that defines where to download skia and depot_tools archives from.
 # Note: use short hashes here because of filesystem path size restrictions.
 [package.metadata]
-skia = "m117-0.65.1"
+skia = "m117-0.65.3"
 depot_tools = "73a2624"
 
 [features]

skia-bindings/skia

@@ -12,7 +12,7 @@ keywords = ["skia", "rust-bindings", "vulkan", "opengl", "pdf"]
 categories = ["api-bindings", "graphics", "multimedia::images", "rendering::graphics-api", "visualization"] 
 license = "MIT"
 
-version = "0.66.2"
+version = "0.66.3"
 authors = ["Armin Sander <[email protected]>"]
 edition = "2021"
 
@@ -48,7 +48,7 @@ shaper = ["textlayout", "skia-bindings/shaper"]
 [dependencies]
 bitflags = "2.0"
 lazy_static = "1.4"
-skia-bindings = { version = "=0.66.2", path = "../skia-bindings", default-features = false }
+skia-bindings = { version = "=0.66.3", path = "../skia-bindings", default-features = false }
 
 # D3D types
 winapi = { version = "0.3.9", features = ["d3d12", "dxgi"], optional = true }