fix(deps): update non-major dependencies - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
rcgen	dependencies	minor	0.13 → 0.14.10
webrtc-util (source)	dependencies	minor	0.11 → 0.17.2
x509-parser	dependencies	minor	0.16 → 0.18.1

---

Release Notes

rustls/rcgen (rcgen)

v0.14.10: 0.14.10

What's Changed

• Spec compliance bug fixes by @​cpu in #​445
• Take advantage of stable ML-DSA in aws-lc-rs by @​djc in #​447

v0.14.8: 0.14.8

Compare Source

What's Changed

• Fix incorrect identifier for ML-DSA signature algorithms by @​DarkmatterVale in #​412
• Upgrade yasna to 0.6 by @​djc in #​419
• Add support for is_ca in CSR Params by @​5Dev24 in #​420
• Add support for serializing BasicConstraints in CSR's by @​5Dev24 in #​422
• update key_pair to signing_key in README.md by @​fakelozic in #​427
• Fix encoding of directoryName constraints by @​sfackler in #​429

v0.14.7: 0.14.7

Compare Source

What's Changed

• Implement From<KeyPair> for PrivateKeyDer<'static> by @​LebedevRI in #​403
• update copyright year in LICENSE by @​jasmyhigh in #​407
• Add P521-SHA256 and P521-SHA384 signing algorithms by @​djc in #​408

v0.14.6: 0.14.6

Compare Source

What's Changed

• Use private cfg for docs.rs-like builds by @​ctz in #​384
• Expand rustdoc for CertificateSigningRequestParams::from_der by @​dwhjames in #​386
• Group imports by @​iamjpotts in #​381
• examples: add signing new cert using existing ca pem files by @​iamjpotts in #​379
• Tweak CSR parsing errors/documentation by @​djc in #​390
• Rename invalid CSR signature error variant by @​djc in #​393
• chore: fix some typos in comments by @​black5box in #​395
• ci: sync cargo-check-external-types nightly by @​cpu in #​399
• Forward selected crypto backend to x509-parser by @​djc in #​398

v0.14.5: 0.14.5

Compare Source

Implement SigningKey for &impl SigningKey to make Issuer more broadly useful.

What's Changed

• Forward signing and public key data through references by @​djc in #​380

v0.14.4: 0.14.4

Compare Source

What's Changed

• Upgrade botan to 0.12 by @​djc in #​377
• Upgrade x509-parser to 0.18 by @​djc in #​376
• Add unstable support for ML-DSA algorithms by @​djc in #​374

v0.14.3: 0.14.3

Compare Source

What's Changed

• docs: fix typo in PKCS_RSA_SHA384 doc comment by @​Bravo555 in #​367
• Fix regression in key usage purpose encoding by @​djc in #​369

v0.14.2: 0.14.2

Compare Source

• Add a CertifiedIssuer type (see #​363)

What's changed

• Add a CertifiedIssuer by @​djc in #​363
• Provide a non-owning constructor for Issuer by @​p-avital in #​362
• Allow access to the CertifiedIssuer's Certificate by @​djc in #​364

v0.14.1: 0.14.1

Compare Source

Declare 1.71 rust-version and check MSRV in CI.

What's Changed

• Check MSRV in CI by @​djc in #​361

v0.14.0: 0.14.0

Compare Source

0.14.0 contains a number of potentially breaking API changes, though hopefully the rate of API change should slow down after this. Here is a summary of the most noticeable changes you might run into:

• signed_by() methods now take a reference to an &Issuer type that contains both the issuer's relevant certificate parameters and the signing key (see #​356). The from_ca_cert_der() and from_ca_cert_pem() constructors that were previously attached to CertificateParams are now attached to Issuer instead, removing a number of documented caveats.
• The RemoteKeyPair trait is now called SigningKey and instead of KeyPair being an enum that contains a Remote variant, that variant has been removed in favor of KeyPair implementing the trait (see #​328). To align with this change, the CertifiedKey::key_pair field is now called signing_key, and CertifiedKey is generic over the signing key type.
• The KeyPair::public_key_der() method has moved to PublicKeyData::subject_public_key_info() (see #​328).
• Output types like Certificate no longer contain their originating CertificateParams. Instead, signed_by() and self_signed() now take &self, allowing the caller to retain access to the input parameters (see #​328). In order to make this possible, Certificate::key_identifier() can now be accessed via CertificateParams directly.
• String types have been moved into a module (see #​329).

What's Changed

• Revert impl AsRef issuer by @​audunhalland in #​325
• Move string types to separate module by @​est31 in #​329
• Unbundle params from output types by @​djc in #​328
• Deduplicate Issuer construction by @​djc in #​332
• Extract write_extensions() method, reducing rightward drift by @​djc in #​333
• Update 0.12-to-0.13.md by @​Alirexaa in #​338
• Distribute methods for parsing params elements from x509 by @​djc in #​336
• Eagerly derive Clone, Copy, where possible by @​lvkv in #​341
• Updated .gitignore to be more specific by @​Rynibami in #​342
• Eagerly implemented Debug trait by @​Rynibami in #​343
• Minor tweaks to Debug impls and other style improvements by @​djc in #​348
• tests: only test against openssl on Unix by @​djc in #​350
• Eagerly implemented PartialEq and Eq traits by @​Rynibami in #​344
• Use Issuer directly in the public API by @​djc in #​356
• Tweak docstring for PublicKeyData::subject_public_key_info() by @​djc in #​358

v0.13.3: 0.13.3

Compare Source

This release was yanked due to #​324

What's Changed

• Update dependencies by @​djc in #​305
• Add link to GitHub releases by @​djc in #​304
• change signature of signed_by to accept &impl AsRef issuer by @​audunhalland in #​307
• Clarify CertificateParams::signed_by() docs by @​djc in #​308
• refactor: Generalize csr/crl signed_by to take &impl AsRef issuer by @​audunhalland in #​312
• Fix: mark SAN as critical when subject is empty by @​howardjohn in #​311
• Elide private key in KeyPair Debug impl by @​lvkv in #​314
• derive Debug for non-sensitive struct types by @​cpu in #​316
• update LICENSE by @​jasmyhigh in #​318
• Make Certificate cloneable (derive Clone) by @​MadLittleMods in #​319
• Update dependencies by @​djc in #​321

v0.13.2: 0.13.2

Compare Source

Several improvements to the capabilities available when working with certificate signing requests.

What's Changed

• Clarify internal data dependencies for signing APIs by @​djc in #​269
• error: feature-gate ExternalError by @​cpu in #​271
• Pass extended key usage parameters when importing CertificateSigningRequestParams by @​uglyoldbob in #​264
• ci: update cargo-check-external-types toolchain, fix build by @​cpu in #​276
• Revert "ci: temp. pin nightly to avoid ICE" by @​cpu in #​277
• Expose algorithm field on PublicKey by @​rickvanprim in #​281
• Update semver-compatible dependencies by @​djc in #​283
• crl: avoid markdown footnotes by @​cpu in #​284
• Disable default features for aws-lc-rs by @​daxpedda in #​286
• Add KeyUsage support to CSR generation by @​lvkv in #​287
• Fix compilation issues of OpenSSL tests on 32-bit architectures by @​decathorpe in #​290
• Enable signing without private key by @​djc in #​291
• Clarify CSR signing docs by @​lvkv in #​295
• ci: adjust nightly for cargo-check-external-types by @​cpu in #​297
• Add PKCS#10 attributes to CSR serializer by @​lvkv in #​296
• Bump codecov/codecov-action from 4 to 5 by @​dependabot in #​299
• Update README.md example to match what's in lib.rs by @​ghenry in #​298
• rcgen: 0.13.1 -> 0.13.2 by @​lvkv in #​303

v0.13.1: 0.13.1

Compare Source

Fixed incorrect usage of the subject certificate's parameter's key identifier method when computing the key identifier of the issuer for the subject's authority key identifier (AKI) extension.

What's Changed

• Fix reference in changelog about RSA key generation by @​djc in #​258
• Set library version for CLI crate by @​djc in #​257
• cli: add more Cargo metadata by @​djc in #​259
• examples: sign-leaf-with-ca uses ca key for signing end entity cert by @​markdingram in #​263
• cert: use key_identifier_method of issuer for AKI by @​cpu in #​262

webrtc-rs/webrtc (webrtc-util)

v0.17.2

Compare Source

What's Changed

• ice: Release TURN allocation even if candidate was already closed by @​marcin-p-porebski in #​799
• fix(ice): always send STUN consent checks (RFC 7675) by @​brady-pplx in #​803
• util: don't tear down UDP listener read_loop on WSAECONNRESET (Windows) by @​rwtd in #​812
• Release mDNS resources when connections close by @​mmalmi in #​818
• sctp: lower INITIAL_MTU to 1191 and expose the MTU in association::Config by @​phact in #​807

New Contributors

• @​brady-pplx made their first contribution in #​803
• @​rwtd made their first contribution in #​812
• @​mmalmi made their first contribution in #​818
• @​phact made their first contribution in #​807

Full Changelog: webrtc-rs/webrtc@v0.17.1...v0.17.2

v0.17.1

Compare Source

Full Changelog: webrtc-rs/webrtc@v0.17.0...v0.17.1

v0.17.0

Compare Source

🚨 Important Notice: v0.17.0 Release and Future Direction

v0.17.x is the final feature release of the Tokio-coupled async WebRTC implementation.

• v0.17.x branch: A dedicated branch will be created for v0.17.x that will receive bug fixes only (no new features).
• Master branch: Will transition to a new Sans-IO based architecture built on top of webrtc-rs/rtc.

Why this change?

The project is shifting toward a Sans-IO WebRTC implementation that decouples the protocol logic from any specific async runtime. This new architecture will:

• ✅ Support multiple async runtimes (Tokio, smol, async-std, etc.)
• ✅ Provide a clean, protocol-centric Sans-IO core via webrtc-rs/rtc
• ✅ Enable a truly runtime-agnostic, async-friendly WebRTC implementation in Rust

If you need Tokio-specific stability, please use the v0.17.x branch. If you want to adopt the new runtime-agnostic approach, follow development on the master branch.

What's Changed

• Add support for multi codec negotiation by @​rainliu in #​741
• tokio-test dev-dependencies is used for only webrtc-util by @​Razzwan in #​742
• chore: fix a typo "dail"->"dial" by @​link2xt in #​744
• Remove Seek requirement for some writers by @​Yesterday17 in #​743
• Perf: Changed RR and SR ticker behavior to Skip to avoid overdue reports and catchup bursts by @​Havunen in #​745
• PR Submission for Issue #​749 by @​Wandalen in #​750
• Make psk callback async-capable by @​mdelete in #​751
• Add markdown files for basic explanation on WebRTC by @​amitnos123 in #​756
• Document feature flags in lib.rs by @​amitnos123 in #​759
• Certain enhancements, from my experience I wish I knew sooner by @​ris-work in #​760
• feat(srtp): add AES CM 256 crypto profiles by @​RRRadicalEdward in #​764
• refactor(dtls): replace bincode serialization crate with rkyv by @​MikeRomaniuk in #​767
• feat: Add H.264 High Profile codec support by @​sachaarbonel in #​768
• Accept unknown bandwidth types in SDP parser per RFC 8866 by @​alps3325 in #​770

New Contributors

• @​Razzwan made their first contribution in #​742
• @​link2xt made their first contribution in #​744
• @​Yesterday17 made their first contribution in #​743
• @​Havunen made their first contribution in #​745
• @​Wandalen made their first contribution in #​750
• @​mdelete made their first contribution in #​751
• @​amitnos123 made their first contribution in #​756
• @​RRRadicalEdward made their first contribution in #​764
• @​MikeRomaniuk made their first contribution in #​767
• @​sachaarbonel made their first contribution in #​768
• @​alps3325 made their first contribution in #​770

Full Changelog: webrtc-rs/webrtc@v0.14.0...v0.17.0

v0.12.0

Compare Source

rusticata/x509-parser (x509-parser)

v0.18.0

Compare Source

v0.17.0

Compare Source

Added/Changed/Fixed

Global:

• Upgrade asn1-rs to version 0.6.2. (#​161)
• Update asn1-rs to 0.7, der-parser to 10.0 and oid-registry to 0.8
• Upgrade time to 0.3.35 to make the crate compatible with rust >1.79.0 (#​168, #​175)
• Update MSRV to 1.67 (due to time 0.3.35, see #​168)
• Add Visitor traits for X.509 Certificates and Certificate Revocation Lists (#​179)

Code:

• Add support for RSA-PSS signature verification (#​156)
• ASN1Time: store the kind of time (UTC or Generalized) in ASN1Time (#​163)
• X509StructureValidator: add validation for dates encoding (#​163)
• X509StructureValidator: enforce version > 1 for issuerUniqueID or subjectUniqueID (Closes #​162)

Thanks

• Daniel McCarney, DefiCake, Victor M. Alvarez, Nikolaus Thuemmel

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.