Skip to content

fix(deps): bump rustls to clear RUSTSEC advisories - #260

Merged
yordis merged 1 commit into
mainfrom
yordis/fix-rustls-advisories
Oct 19, 2026
Merged

yordis merged 1 commit into
mainfrom
yordis/fix-rustls-advisories

Conversation

@yordis

@yordis yordis commented Oct 19, 2026 •

Copy link
Copy Markdown
Member
  • rustls 0.23.45 is flagged by RUSTSEC-2026-0346, 0347, 0348, and 0349, which fails the Security Audit job on main and every open PR.

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>
@cursor

cursor Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

PR Summary

Low Risk
Patch-level TLS library lockfile bump with no direct code changes; typical low-risk dependency maintenance.

Overview
Bumps the locked rustls crate from 0.23.45 to 0.23.46 in Cargo.lock (checksum updated). No application source changes—this is a transitive dependency resolution update.

The goal is to clear RUSTSEC-2026-0346 through 0349 on the previous rustls version so the Security Audit CI job can pass again on main and PRs.

Reviewed by Cursor Bugbot for commit 44de805. Bugbot is set up for automated code reviews on this repo. Configure here.

@yordis
yordis merged commit 109bbce into main Oct 19, 2026
13 checks passed
@yordis
yordis deleted the yordis/fix-rustls-advisories branch October 19, 2026 18:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant