Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Chore(deps): bump the crates-io group across 1 directory with 7 updates #92

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 16, 2024

Bumps the crates-io group with 6 updates in the / directory:

Package From To
rustls 0.23.5 0.23.7
rustls-native-certs 0.7.0 0.8.0
rustls-pemfile 2.1.2 2.1.3
bit-vec 0.6.3 0.8.0
log 0.4.21 0.4.22
webpki-roots 0.26.1 0.26.5

Updates rustls from 0.23.5 to 0.23.7

Commits
  • e45fec4 Prepare 0.23.7
  • 2c72fb0 Test for more close_notify conditions
  • 7d4e809 Ignore duplicative send_close_notify calls
  • ced64bc read_tls refuse to read further data after close_notify alert
  • 386b6fd Correctly discard data after close_notify alert
  • 06dc1d5 deps: update cargo semver compatible deps
  • 252b5d3 Prepare 0.23.6
  • 55890f0 Test for junk in unbuffered input after close_notify
  • 972da7f Test app data after close_notify is ignored
  • 424bb31 Test for junk in deframer buffer after close_notify
  • Additional commits viewable in compare view

Updates rustls-native-certs from 0.7.0 to 0.8.0

Release notes

Sourced from rustls-native-certs's releases.

v/0.8.0

Breaking changes

  • load_native_certs() now returns a CertificateResult value containing all the certificates that were successfully found as well as any errors encountered. Changes made in 0.7.1 in order to find certificates in more locations resulted in new errors in scenarios that previously worked for most users. This change allows callers to determine the error handling strategy most appropriate to their application.

What's Changed

0.7.3

Release notes

  • If loading certificates from a directory fails, only raise that error if no certificates were successfully loaded from a file. See #124.

    In 0.8.0 we plan to alter the API to give the caller full error details, so they can choose the level of success they require; see #128.

What's Changed

Full Changelog: rustls/rustls-native-certs@v/0.7.2...v/0.7.3

0.7.2

  • Improve error reporting if we fail when loading certificates from the filesystem.

What's Changed

Full Changelog: rustls/rustls-native-certs@v/0.7.1...v/0.7.2

0.7.1

Notable changes

  • Include certificates from the SSL_CERT_DIR environment variable and openssl-probe ProbeResult::cert_dir in the set of returned certificates. This should improve results on FreeBSD (in case the ca_root_nss package is not installed).

What's changed

... (truncated)

Commits
  • 0c2305c Bump version to 0.8.0 for incompatible changes
  • 8aa350a Return all errors to caller
  • cc1222a windows: reorder items
  • a370164 windows: import types directly
  • 202aee2 Organize imports in StdExternalCrate order
  • 290bdac Apply clippy suggestions for test targets
  • 0d6fb06 Prepare 0.7.3
  • 7ada714 Prefer partial success to failure
  • 9832a72 Adjust error wording when loading missing files
  • 98612b4 Prepare 0.7.2
  • Additional commits viewable in compare view

Updates rustls-pemfile from 2.1.2 to 2.1.3

Release notes

Sourced from rustls-pemfile's releases.

2.1.3

Notable changes

What's Changed

Commits
  • 38c6f8b Add RawPublicKeyCertificate
  • 5d9960f Bump pki-types from 1.3 to 1.7 and version from
  • bd9773d Bump base64 from 0.22.0 to 0.22.1
  • e4f1fae ci: add cron schedule trigger
  • 2433110 ci: switch linux hosts to ubuntu-latest
  • See full diff in compare view

Updates rustls-pki-types from 1.5.0 to 1.8.0

Release notes

Sourced from rustls-pki-types's releases.

1.8.0

  • New const CertificateDer::from_slice() function for creating a CertificateDer instance from a slice of DER.

What's Changed

Full Changelog: rustls/pki-types@v/1.7.0...v/1.8.0

1.7.0

  • SubjectPublicKeyInfo was renamed to SubjectPublicKeyInfoDer, and a deprecated type alias under the old name was added.

What's Changed

Full Changelog: rustls/pki-types@v/1.6.0...v/1.7.0

1.6.0

What's Changed

Commits
  • 9382315 Cargo: version 1.7.0 -> 1.8.0
  • e8597ba add const CertificateDer::from_slice
  • b39d810 server_name: fix clippy::use_self findings
  • c58f07e server_name: fix clippy::missing_transmute_annotations
  • 0319c7d Cargo: v1.6.0 -> 1.7.0
  • 4b62445 Deprecated type alias for SubjectPublicKeyInfo
  • 7184ef5 SubjectPublicKeyInfo -> SubjectPublicKeyInfoDer
  • e5c3e1c Cargo: v1.5.0 -> v1.6.0
  • 5836456 Add SubjectPublicKeyInfo DER newtype
  • See full diff in compare view

Updates bit-vec from 0.6.3 to 0.8.0

Changelog

Sourced from bit-vec's changelog.

Version 0.8.0 (2024-07-16)

  • fn insert is implemented
  • impl Display is implemented
  • impl Debug has different output
Commits

Updates log from 0.4.21 to 0.4.22

Changelog

Sourced from log's changelog.

[0.4.22] - 2024-06-27

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.21...0.4.22

Commits
  • d5ba2cf Merge pull request #634 from rust-lang/cargo/0.4.22
  • d1a8306 prepare for 0.4.22 release
  • 46894ef Merge pull request #633 from rust-lang/feat/panic-info
  • e0d389c Merge pull request #632 from rust-lang/feat/loosen-atomics
  • c9e5e13 use Location::caller() for file and line info
  • 507b672 loosen orderings for logger initialization
  • c879b01 Merge pull request #628 from Thomasdezeeuw/fix-warnings
  • 405fdb4 Merge pull request #627 from Thomasdezeeuw/check-features
  • 1307ade Remove unneeded import
  • 710560e Don't use --all-features in CI
  • Additional commits viewable in compare view

Updates webpki-roots from 0.26.1 to 0.26.5

Release notes

Sourced from webpki-roots's releases.

0.26.5

New trust anchors

What's Changed

Full Changelog: rustls/webpki-roots@v/0.26.4...v/0.26.5

0.26.4

  • New webpki-root-certs crate. This crate is similar to webpki-roots, but for use with other projects that require the full self-signed X.509 certificate for each trusted root. This is unnecessary overhead for webpki and rustls and you should prefer using webpki-roots for these projects.

What's Changed

Full Changelog: rustls/webpki-roots@v/0.26.3...v/0.26.4

0.26.3

Removed trust anchors:

  • GLOBALTRUST 2020 CA has been removed due to a prolonged pattern of operational and compliance issues.

What's Changed

Full Changelog: rustls/webpki-roots@v/0.26.2...v/0.26.3

0.26.2

New trust anchors:

What's Changed

... (truncated)

Commits
  • 1175f11 webpki-root(-certs): v0.26.5
  • dc6d7c8 aug 29th upstream ccadb updates
  • 10f8379 webpki-root-certs: 0.26.3 -> 0.26.4
  • ec9d1fa project: use symlinks for license files
  • 893b156 docs: update workspace README
  • dfdf31f ci: enforce consistent formatting
  • 2effb54 webpki-roots: use explicit lifetimes
  • 30ac407 webpki-root-certs: add initial crate, code generation
  • bd3b7bc Cargo: update pki-types 1 -> 1.8
  • 8e411bc tests: use values() for tls_roots_map iter
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the crates-io group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rustls](https://github.com/rustls/rustls) | `0.23.5` | `0.23.7` |
| [rustls-native-certs](https://github.com/rustls/rustls-native-certs) | `0.7.0` | `0.8.0` |
| [rustls-pemfile](https://github.com/rustls/pemfile) | `2.1.2` | `2.1.3` |
| [bit-vec](https://github.com/contain-rs/bit-vec) | `0.6.3` | `0.8.0` |
| [log](https://github.com/rust-lang/log) | `0.4.21` | `0.4.22` |
| [webpki-roots](https://github.com/rustls/webpki-roots) | `0.26.1` | `0.26.5` |



Updates `rustls` from 0.23.5 to 0.23.7
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.5...v/0.23.7)

Updates `rustls-native-certs` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/rustls/rustls-native-certs/releases)
- [Commits](rustls/rustls-native-certs@v/0.7.0...v/0.8.0)

Updates `rustls-pemfile` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/rustls/pemfile/releases)
- [Commits](rustls/pemfile@v/2.1.2...v/2.1.3)

Updates `rustls-pki-types` from 1.5.0 to 1.8.0
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](rustls/pki-types@v/1.5.0...v/1.8.0)

Updates `bit-vec` from 0.6.3 to 0.8.0
- [Changelog](https://github.com/contain-rs/bit-vec/blob/master/RELEASES.md)
- [Commits](https://github.com/contain-rs/bit-vec/commits)

Updates `log` from 0.4.21 to 0.4.22
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.21...0.4.22)

Updates `webpki-roots` from 0.26.1 to 0.26.5
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/0.26.1...v/0.26.5)

---
updated-dependencies:
- dependency-name: rustls
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates-io
- dependency-name: rustls-native-certs
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crates-io
- dependency-name: rustls-pemfile
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates-io
- dependency-name: rustls-pki-types
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crates-io
- dependency-name: bit-vec
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crates-io
- dependency-name: log
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates-io
- dependency-name: webpki-roots
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates-io
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 16, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 23, 2024

Superseded by #94.

@dependabot dependabot bot closed this Sep 23, 2024
@dependabot dependabot bot deleted the dependabot/cargo/crates-io-cb98d81ff8 branch September 23, 2024 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants