Skip to content

chore(deps): bump rustls to 0.23.46 - #157

Merged
gRoussac merged 3 commits into
Interchouette-ITC:devfrom
Interchouette:chore/rustls-0.23.46-20261017
Oct 17, 2026
Merged

gRoussac merged 3 commits into
Interchouette-ITC:devfrom
Interchouette:chore/rustls-0.23.46-20261017

Conversation

@Interchouette

Copy link
Copy Markdown
Member

Summary

  • Bump transitive rustls to 0.23.46 (RUSTSEC-2026-0346 / 0347 / 0348 / 0349)
  • Bump quinn-proto to 0.11.19 when the lock still had a vulnerable line

Test plan

  • CI cargo audit / supply-chain green
  • repo lint/test as wired in Actions

Made with Cursor

Clear cargo-audit advisories RUSTSEC-2026-0346 through 0349.
Also bump quinn-proto when the lock still pulled a vulnerable line.

Co-authored-by: Cursor <cursoragent@cursor.com>
@codecov

codecov Bot commented Oct 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

object 0.36 (aya) pins ruzstd ^0.7; fixed line needs object >=0.40.

Co-authored-by: Cursor <cursoragent@cursor.com>
@Interchouette

Copy link
Copy Markdown
Member Author

CI audit: ignore RUSTSEC-2026-0344 (ruzstd) until aya allows object >=0.40.

Co-authored-by: Cursor <cursoragent@cursor.com>
@Interchouette

Copy link
Copy Markdown
Member Author

Follow-up: deny.toml advisory ignores so make deny matches make audit (same upstream pins).

@gRoussac
gRoussac merged commit 51c590a into Interchouette-ITC:dev Oct 17, 2026
5 checks passed
@Interchouette
Interchouette deleted the chore/rustls-0.23.46-20261017 branch October 17, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants