Skip to content

fix(deps): bump rustls to 0.23.45 for TLS handshake advisory - #170

Merged
mattenarle10 merged 1 commit into
mainfrom
fix/rustls-advisory
Oct 6, 2026
Merged

mattenarle10 merged 1 commit into
mainfrom
fix/rustls-advisory

Conversation

@mattenarle10

Copy link
Copy Markdown
Owner

Summary

  • bump rustls 0.23.40 → 0.23.45 and rustls-webpki 0.103.13 → 0.103.15 in src-tauri/Cargo.lock
  • resolves the open Dependabot alert for rustls (TLS 1.3 handshake messages accepted across encryption level boundaries, fixed in 0.23.45); Dependabot's own update kept failing because it could only resolve 0.23.43 without also moving rustls-webpki

Verification

  • cargo check --release --manifest-path src-tauri/Cargo.toml
  • bun run tauri build --no-bundle

@mattenarle10
mattenarle10 merged commit 63c256d into main Oct 6, 2026
2 checks passed
@mattenarle10
mattenarle10 deleted the fix/rustls-advisory branch October 6, 2026 16:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant