From b2172bbe63fe890e8c267ac8066cee14577e4327 Mon Sep 17 00:00:00 2001 From: Logan Johnson Date: Wed, 14 Oct 2026 09:41:24 -0400 Subject: [PATCH] fix(deps): bump rustls to 0.23.46 for RUSTSEC-2026-0346 and -0347 cargo-deny now fails every branch on two new rustls 0.23.45 advisories: Debug output of client session values exposes TLS secrets (RUSTSEC-2026-0346), and buffered data can reach the outer server after an ECH rejection (RUSTSEC-2026-0347). 0.23.46 fixes both. Only the rustls entry changes in the root and desktop lockfiles. Co-authored-by: Larry <627498bd4bd1f281a16431e3c6cce3b5c25b6692798c78672298aefbf2f8f8b5@buzz.block.builderlab.xyz> Signed-off-by: Logan Johnson --- Cargo.lock | 4 ++-- desktop/src-tauri/Cargo.lock | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 0a924f4e36f..07609434647 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -8814,9 +8814,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "aws-lc-rs", "log", diff --git a/desktop/src-tauri/Cargo.lock b/desktop/src-tauri/Cargo.lock index 7ba160f8c8c..2b622d7c6c1 100644 --- a/desktop/src-tauri/Cargo.lock +++ b/desktop/src-tauri/Cargo.lock @@ -9071,9 +9071,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "aws-lc-rs", "log",