Skip to content

chore(deps): bump rustls from 0.23.44 to 0.23.46 in /src-tauri in the cargo group across 1 directory - #17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-8681492501
Open

chore(deps): bump rustls from 0.23.44 to 0.23.46 in /src-tauri in the cargo group across 1 directory#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-8681492501

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown

Bumps the cargo group with 1 update in the /src-tauri directory: rustls.

Updates rustls from 0.23.44 to 0.23.46

Commits
  • f04804f Delay saving KX hint until handshake confirmation
  • 049d39b Bump version to 0.23.46
  • 6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
  • 2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
  • 74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
  • 795eea7 Advance the HPKE sequence only after seal succeeds
  • d67cb71 stream: provide backpressure while buffering received plaintext
  • 7a69ade util: fuse flushes from connections with errors
  • 493d089 conn: fuse writes for connections with errors
  • db00e01 util: keep flushing after short writes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump rustls
9d152bd 
Bumps the cargo group with 1 update in the /src-tauri directory: [rustls](https://github.com/rustls/rustls).


Updates `rustls` from 0.23.44 to 0.23.46
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.44...v/0.23.46)

---
updated-dependencies:
- dependency-name: rustls
  dependency-version: 0.23.46
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 3, 2026
@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Rust Security Scan

  • cargo audit: FAIL (exit 1)
  • cargo deny (advisories): FAIL (exit 1)
  • cargo clippy security lints: PASS
cargo audit (tail) 
ntained
�[0m�[0m�[1m�[33mDate:     �[0m 2025-10-18
�[0m�[0m�[1m�[33mID:       �[0m RUSTSEC-2025-0081
�[0m�[0m�[1m�[33mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2025-0081

�[0m�[0m�[1m�[33mCrate:    �[0m unic-char-range
�[0m�[0m�[1m�[33mVersion:  �[0m 0.9.0
�[0m�[0m�[1m�[33mWarning:  �[0m unmaintained
�[0m�[0m�[1m�[33mTitle:    �[0m `unic-char-range` is unmaintained
�[0m�[0m�[1m�[33mDate:     �[0m 2025-10-18
�[0m�[0m�[1m�[33mID:       �[0m RUSTSEC-2025-0075
�[0m�[0m�[1m�[33mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2025-0075

�[0m�[0m�[1m�[33mCrate:    �[0m unic-common
�[0m�[0m�[1m�[33mVersion:  �[0m 0.9.0
�[0m�[0m�[1m�[33mWarning:  �[0m unmaintained
�[0m�[0m�[1m�[33mTitle:    �[0m `unic-common` is unmaintained
�[0m�[0m�[1m�[33mDate:     �[0m 2025-10-18
�[0m�[0m�[1m�[33mID:       �[0m RUSTSEC-2025-0080
�[0m�[0m�[1m�[33mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2025-0080

�[0m�[0m�[1m�[33mCrate:    �[0m unsafe-libyaml
�[0m�[0m�[1m�[33mVersion:  �[0m 0.2.11
�[0m�[0m�[1m�[33mWarning:  �[0m unmaintained
�[0m�[0m�[1m�[33mTitle:    �[0m unsafe-libyaml is unmaintained
�[0m�[0m�[1m�[33mDate:     �[0m 2024-03-25
�[0m�[0m�[1m�[33mID:       �[0m RUSTSEC-2024-0449
�[0m�[0m�[1m�[33mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2024-0449

�[0m�[0m�[1m�[33mCrate:    �[0m zbus_names
�[0m�[0m�[1m�[33mVersion:  �[0m 4.3.4
�[0m�[0m�[1m�[33mWarning:  �[0m unmaintained
�[0m�[0m�[1m�[33mTitle:    �[0m `zbus_names` is unmaintained
�[0m�[0m�[1m�[33mDate:     �[0m 2026-10-16
�[0m�[0m�[1m�[33mID:       �[0m RUSTSEC-2026-0371
�[0m�[0m�[1m�[33mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0371

�[0m�[0m�[1m�[33mCrate:    �[0m zvariant
�[0m�[0m�[1m�[33mVersion:  �[0m 5.15.0
�[0m�[0m�[1m�[33mWarning:  �[0m unmaintained
�[0m�[0m�[1m�[33mTitle:    �[0m `zvariant` is unmaintained
�[0m�[0m�[1m�[33mDate:     �[0m 2026-10-16
�[0m�[0m�[1m�[33mID:       �[0m RUSTSEC-2026-0370
�[0m�[0m�[1m�[33mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0370

�[0m�[0m�[1m�[33mCrate:    �[0m zvariant_derive
�[0m�[0m�[1m�[33mVersion:  �[0m 5.15.0
�[0m�[0m�[1m�[33mWarning:  �[0m unmaintained
�[0m�[0m�[1m�[33mTitle:    �[0m `zvariant_derive` is unmaintained
�[0m�[0m�[1m�[33mDate:     �[0m 2026-10-16
�[0m�[0m�[1m�[33mID:       �[0m RUSTSEC-2026-0372
�[0m�[0m�[1m�[33mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0372

�[0m�[0m�[1m�[33mCrate:    �[0m tokio
�[0m�[0m�[1m�[33mVersion:  �[0m 1.53.1
�[0m�[0m�[1m�[33mWarning:  �[0m unsound
�[0m�[0m�[1m�[33mTitle:    �[0m `AsyncFd::new` and related constructors violate I/O safety
�[0m�[0m�[1m�[33mDate:     �[0m 2026-10-13
�[0m�[0m�[1m�[33mID:       �[0m RUSTSEC-2026-0386
�[0m�[0m�[1m�[33mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0386

�[0m�[0m�[1m�[33mCrate:    �[0m async-executor
�[0m�[0m�[1m�[33mVersion:  �[0m 1.14.0
�[0m�[0m�[1m�[33mWarning:  �[0m yanked

�[0m�[0m�[1m�[31merror:�[0m 7 vulnerabilities found!
�[0m�[0m�[1m�[33mwarning:�[0m 11 allowed warnings found
cargo deny (tail) 
━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/kore/kore/src-tauri/deny.toml:33:6
   �[0m�[36m│�[0m
�[0m�[36m33�[0m �[0m�[36m│�[0m     "�[0m�[33mRUSTSEC-2024-0414�[0m",  # gtk-sys
   �[0m�[36m│�[0m      �[0m�[33m━━━━━━━━━━━━━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/kore/kore/src-tauri/deny.toml:34:6
   �[0m�[36m│�[0m
�[0m�[36m34�[0m �[0m�[36m│�[0m     "�[0m�[33mRUSTSEC-2024-0415�[0m",  # gtk3-macros
   �[0m�[36m│�[0m      �[0m�[33m━━━━━━━━━━━━━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/kore/kore/src-tauri/deny.toml:26:6
   �[0m�[36m│�[0m
�[0m�[36m26�[0m �[0m�[36m│�[0m     "�[0m�[33mRUSTSEC-2024-0416�[0m",  # atk-sys
   �[0m�[36m│�[0m      �[0m�[33m━━━━━━━━━━━━━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/kore/kore/src-tauri/deny.toml:31:6
   �[0m�[36m│�[0m
�[0m�[36m31�[0m �[0m�[36m│�[0m     "�[0m�[33mRUSTSEC-2024-0417�[0m",  # gdkx11-sys
   �[0m�[36m│�[0m      �[0m�[33m━━━━━━━━━━━━━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/kore/kore/src-tauri/deny.toml:28:6
   �[0m�[36m│�[0m
�[0m�[36m28�[0m �[0m�[36m│�[0m     "�[0m�[33mRUSTSEC-2024-0418�[0m",  # gdk-sys
   �[0m�[36m│�[0m      �[0m�[33m━━━━━━━━━━━━━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/kore/kore/src-tauri/deny.toml:29:6
   �[0m�[36m│�[0m
�[0m�[36m29�[0m �[0m�[36m│�[0m     "�[0m�[33mRUSTSEC-2024-0419�[0m",  # gdkwayland-sys
   �[0m�[36m│�[0m      �[0m�[33m━━━━━━━━━━━━━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/kore/kore/src-tauri/deny.toml:30:6
   �[0m�[36m│�[0m
�[0m�[36m30�[0m �[0m�[36m│�[0m     "�[0m�[33mRUSTSEC-2024-0420�[0m",  # gdkx11
   �[0m�[36m│�[0m      �[0m�[33m━━━━━━━━━━━━━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/kore/kore/src-tauri/deny.toml:13:6
   �[0m�[36m│�[0m
�[0m�[36m13�[0m �[0m�[36m│�[0m     "�[0m�[33mRUSTSEC-2024-0429�[0m",
   �[0m�[36m│�[0m      �[0m�[33m━━━━━━━━━━━━━━━━━�[0m �[0m�[33mno crate matched advisory criteria�[0m

advisories �[31mFAILED�[0m
cargo clippy (tail) 
m�[92m   Compiling�[0m simd_helpers v0.1.0
�[1m�[92m   Compiling�[0m rfd v0.16.0
�[1m�[92m    Checking�[0m imgref v1.12.3
�[1m�[92m    Checking�[0m data-encoding v2.11.1
�[1m�[92m    Checking�[0m reborrow v0.5.5
�[1m�[92m    Checking�[0m weezl v0.1.12
�[1m�[92m    Checking�[0m pulp-wasm-simd-flag v0.1.1
�[1m�[92m   Compiling�[0m noop_proc_macro v0.3.0
�[1m�[92m    Checking�[0m zune-core v0.5.3
�[1m�[92m    Checking�[0m kube-client v3.1.0
�[1m�[92m    Checking�[0m zune-jpeg v0.5.15
�[1m�[92m    Checking�[0m tungstenite v0.29.0
�[1m�[92m    Checking�[0m loop9 v0.1.5
�[1m�[92m    Checking�[0m async-stream v0.3.6
�[1m�[92m    Checking�[0m pin-project v1.1.13
�[1m�[92m    Checking�[0m is-wsl v0.4.0
�[1m�[92m    Checking�[0m webpki-roots v0.26.11
�[1m�[92m   Compiling�[0m educe v0.6.0
�[1m�[92m    Checking�[0m avif-serialize v0.8.9
�[1m�[92m    Checking�[0m rustls-platform-verifier v0.7.0
�[1m�[92m    Checking�[0m zune-inflate v0.2.54
�[1m�[92m    Checking�[0m xattr v1.6.1
�[1m�[92m    Checking�[0m backon v1.6.0
�[1m�[92m    Checking�[0m filetime v0.2.29
�[1m�[92m    Checking�[0m hostname v0.4.2
�[1m�[92m    Checking�[0m vte v0.14.1
�[1m�[92m    Checking�[0m color_quant v1.1.0
�[1m�[92m    Checking�[0m rgb v0.8.53
�[1m�[92m    Checking�[0m pxfm v0.1.30
�[1m�[92m    Checking�[0m fax v0.2.7
�[1m�[92m    Checking�[0m bit_field v0.10.3
�[1m�[92m    Checking�[0m lebe v0.5.3
�[1m�[92m    Checking�[0m byteorder-lite v0.1.0
�[1m�[92m    Checking�[0m ravif v0.13.0
�[1m�[92m    Checking�[0m image-webp v0.2.4
�[1m�[92m    Checking�[0m exr v1.74.2
�[1m�[92m    Checking�[0m tiff v0.11.3
�[1m�[92m    Checking�[0m moxcms v0.8.1
�[1m�[92m    Checking�[0m strip-ansi-escapes v0.2.1
�[1m�[92m    Checking�[0m gif v0.14.2
�[1m�[92m    Checking�[0m kube-runtime v3.1.0
�[1m�[92m    Checking�[0m tar v0.4.46
�[1m�[92m    Checking�[0m png v0.18.1
�[1m�[92m    Checking�[0m reqwest v0.13.4
�[1m�[92m    Checking�[0m inotify v0.11.5
�[1m�[92m    Checking�[0m tokio-tungstenite v0.29.0
�[1m�[92m    Checking�[0m open v5.4.3
�[1m�[92m    Checking�[0m notify-rust v4.18.0
�[1m�[92m    Checking�[0m hashlink v0.11.1
�[1m�[92m    Checking�[0m qoi v0.4.1
�[1m�[92m    Checking�[0m tempfile v3.27.0
�[1m�[92m   Compiling�[0m kore v0.5.0 (/home/runner/work/kore/kore/src-tauri)
�[1m�[92m   Compiling�[0m kube-derive v3.1.0
�[1m�[92m    Checking�[0m notify-types v2.1.0
�[1m�[92m    Checking�[0m iana-time-zone v0.1.65
�[1m�[92m    Checking�[0m home v0.5.12
�[1m�[92m    Checking�[0m fallible-iterator v0.3.0
�[1m�[92m    Checking�[0m minisign-verify v0.2.5
�[1m�[92m    Checking�[0m fallible-streaming-iterator v0.1.9
�[1m�[92m    Checking�[0m fix-path-env v0.0.0 (https://github.com/tauri-apps/fix-path-env-rs#c4c45d50)
�[1m�[92m    Checking�[0m kube v3.1.0
�[1m�[92m    Checking�[0m chrono v0.4.45
�[1m�[92m    Checking�[0m notify v8.2.0
�[1m�[92m    Checking�[0m image v0.25.10
�[1m�[92m    Checking�[0m rusqlite v0.38.0
�[1m�[92m    Finished�[0m `dev` profile [unoptimized + debuginfo] target(s) in 1m 46s

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants