Repository navigation
build(deps): Bump rustls from 0.23.45 to 0.23.46 - #11
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [rustls](https://github.com/rustls/rustls) from 0.23.45 to 0.23.46. - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.45...v/0.23.46) --- updated-dependencies: - dependency-name: rustls dependency-version: 0.23.46 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
BerryManifold
left a comment
BerryManifold
left a comment
There was a problem hiding this comment.
Automated Codex static review of 4a7e4af96eb873ecdd88fe6343f07cfe3a15c19d is complete. Result: incomplete; details retained privately. Details and coverage limits are recorded in the project's private review log. No tests were executed by this reviewer. Both account submissions represent the same Codex review, not independent reviews.
Matr0xshka
left a comment
Matr0xshka
left a comment
There was a problem hiding this comment.
Automated Codex static review of 4a7e4af96eb873ecdd88fe6343f07cfe3a15c19d is complete. Result: incomplete; details retained privately. Details and coverage limits are recorded in the project's private review log. No tests were executed by this reviewer. Both account submissions represent the same Codex review, not independent reviews.
There was a problem hiding this comment.
Codex review using BerryManifold at the owner's request, pinned to 4a7e4af96eb873ecdd88fe6343f07cfe3a15c19d.
Reviewed the complete Cargo.lock diff: only rustls 0.23.45 -> 0.23.46 and its crates.io checksum change; dependency edges and registry origin remain unchanged. Current-head GitHub checks are green (CI and secret-scan); I did not execute a separate audit run. No blocking finding in this patch.
Scope: static diff review plus the existing GitHub checks at this commit. I did not execute a new local test run for this review. This is one automated review, not an additional independent human review.
Bumps rustls from 0.23.45 to 0.23.46.
Commits
f04804fDelay saving KX hint until handshake confirmation049d39bBump version to 0.23.466d0ba08Eliminate secret from impl Debug forServerSessionValue2b82b81unbuffered: update TLS 1.3 traffic keys before exhausting them74343e7conn: update TLS 1.3 traffic keys within fragmented writes795eea7Advance the HPKE sequence only after seal succeedsd67cb71stream: provide backpressure while buffering received plaintext7a69adeutil: fuse flushes from connections with errors493d089conn: fuse writes for connections with errorsdb00e01util: keep flushing after short writesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.