Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump the crates-io group with 4 updates #167

Closed
wants to merge 1 commit into from
Closed

build(deps): bump the crates-io group with 4 updates #167

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 3, 2025

Bumps the crates-io group with 4 updates: ring, rustls, rustls-webpki and tempfile.

Updates ring from 0.17.8 to 0.17.11

Release notes

Sourced from ring's releases.

0.17.11

This is an administrative release, which is functionally equivalent to 0.17.10. It changes the crate repository to https://github.com/ctz/ring where this project will receive future security maintenance.

0.17.10

Full Changelog: ctz/ring@0.17.9...0.17.10

0.17.9

Full Changelog: ctz/ring@0.17.8...0.17.9

Commits

Updates rustls from 0.23.22 to 0.23.23

Commits
  • 7742147 unbuffered: introduce PeerClosed state
  • 7abb149 tests/unbuffered: refactor
  • 1963cc7 Bump version to 0.23.23
  • ad5a31b tests: reuse SingleCertAndKey
  • 591c0c1 crypto: expose SingleCertAndKey
  • 82e1688 client: use SingleCertAndKey for with_client_auth_cert()
  • b0cc4df crypto: add CertifiedKey::from_der()
  • be2865a crypto: simplify SingleCertAndKey construction with OCSP
  • 82c3c2d crypto: use From impl to construct SingleCertAndKey
  • 27551e1 Move SingleCertAndKey to crypto::signer
  • Additional commits viewable in compare view

Updates rustls-webpki from 0.102.8 to 0.103.0

Release notes

Sourced from rustls-webpki's releases.

0.103.0

  • Breaking change: add context to name validation errors. This adds a value to the CertNotValidForName error variant.
  • Breaking change: stop Error being Copy -- the above change required this, as it started to have an allocated field.
  • Breaking change: add context to time-based errors. This adds fields to the CertNotValidYet, CertExpired, and CrlExpired error variants.
  • Breaking change: use algorithm identifiers from rustls-pki-types. This removes the alg_id module from this crate's public interface.
  • Breaking change: remove reexport of rustls-pki-types.
  • Breaking change: remove provider features from default feature set, and rename aws_lc_rs feature to aws-lc-rs.

What's Changed

Full Changelog: rustls/webpki@v/0.102.8...v/0.103.0

Commits
  • 5c72344 Include ignored tests in coverage measurement
  • d800833 Run all tests in CI
  • 9da0b63 build(deps): bump cryptography from 44.0.0 to 44.0.1
  • 84b1463 rustfmt: style_edition 2024
  • 59f69f3 build(deps): bump seanmiddleditch/gha-setup-ninja from 5 to 6
  • a182fb0 Add context to CrlExpired errors
  • 3f08209 Test for cert time validity
  • dee8d0a Add context to CertExpired errors
  • 1c770af Add context to CertNotValidYet errors
  • 739d98c Remove re-export of rustls-pki-types
  • Additional commits viewable in compare view

Updates tempfile from 3.16.0 to 3.17.1

Changelog

Sourced from tempfile's changelog.

3.17.1

  • Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

3.17.0

  • Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
  • Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
  • When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
  • Clarify some documentation.
  • Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.
Commits
  • 714a259 chore: release 3.17.1
  • 78309ed fix: cast handle to the windows crate HANDLE (#332)
  • 6e7d167 chore: release 3.17.0
  • 3718075 doc: remove incorrect documentation about windows and open files
  • 461369f feat: delete unnamed temporary files on windows immediately
  • 78d30a2 doc: clarify "inner file will be deleted" documentation (#329)
  • 0fe11c4 doc: document how to "keep" temporary files/dirs after creation (#328)
  • 35e0629 feat: simplify getrandom call (#325)
  • 1e5059f fix: handle TLS deallocation (#324)
  • c7b2e1a chore: simplify reborrow
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the crates-io group with 4 updates
a558428 
Bumps the crates-io group with 4 updates: [ring](https://github.com/ctz/ring), [rustls](https://github.com/rustls/rustls), [rustls-webpki](https://github.com/rustls/webpki) and [tempfile](https://github.com/Stebalien/tempfile).


Updates `ring` from 0.17.8 to 0.17.11
- [Release notes](https://github.com/ctz/ring/releases)
- [Commits](ctz/ring@0.17.8...0.17.11)

Updates `rustls` from 0.23.22 to 0.23.23
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.22...v/0.23.23)

Updates `rustls-webpki` from 0.102.8 to 0.103.0
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](rustls/webpki@v/0.102.8...v/0.103.0)

Updates `tempfile` from 3.16.0 to 3.17.1
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.16.0...v3.17.1)

---
updated-dependencies:
- dependency-name: ring
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates-io
- dependency-name: rustls
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates-io
- dependency-name: rustls-webpki
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crates-io
- dependency-name: tempfile
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crates-io
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Mar 3, 2025
@ctz ctz closed this Mar 3, 2025
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 3, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/cargo/crates-io-a05ceaac3c branch March 3, 2025 16:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@ctz