[timo9378]

tokio 1.53.2 is flagged by RUSTSEC-2026-0386 (AsyncFd constructors violate I/O safety), which fails cargo-deny on main. We don't use AsyncFd; this is a lockfile-only bump.

[github-actions]

📦 Frontend bundle size

app	Download (gzip)	main baseline	Change	Uncompressed
web	4.31 MB	4.31 MB	no change	13.05 MB

_{Download: js/css/html/json/svg estimated with gzip -6; fonts, images and other already-compressed files counted at their raw size · The main baseline is the last successful build of main}

Largest files in web

Size	File
3819.8 KB	assets/takumi_wasm_bg-DqEGul08.wasm
797.0 KB	assets/cpp-D-zMBwDY.js
662.1 KB	assets/chunk-FOHPRMQF-DzxwRta7.js
434.9 KB	assets/cytoscape.esm-NgwPT4ez.js
387.7 KB	assets/index-seQ0G820.js
367.7 KB	assets/dashboard-Bv0_MM-C.js
306.7 KB	assets/dist-BX8XaRwB.js
258.7 KB	assets/katex-ZlcWpGUi.js

[github-actions]

🐳 tessera-server:ci image size

	This build	main baseline	Change	Budget
Download (what docker pull transfers)	20.6 MB	20.6 MB	+0.00 MB (+0.0%)	—
On disk (unpacked after the pull)	46.0 MB	46.0 MB	+0.01 MB (+0.0%)	60 MB
└ of which the binary	42.9 MB	42.9 MB	+0.01 MB (+0.0%)	56 MB
├ backend	29.7 MB	29.7 MB	−0.01 MB (−0.1%)	—
└ embedded frontend (web)	13.2 MB	13.2 MB	+0.02 MB (+0.2%)	—

_{Baseline: main @ bad8b3b · Download is every layer gzipped and summed, roughly what the registry stores · On disk already includes the frontend, which is inside the binary; do not add the bundle size to it}

Layers (uncompressed)

Size	Instruction that made the layer
42.9 MB	COPY /tessera-server /usr/local/bin/tessera-server # buildkit
1.5 MB	bazel build @bookworm//tzdata/amd64:data_statusd
0.3 MB	bazel build @bookworm//base-files/amd64:data_statusd
0.3 MB	bazel build //common:cacerts_debian12_amd64_tar
0.1 MB	6 more layers, each under 0.1 MB (distroless base)