Skip to content

build(deps): bump the cargo-minor-patch group with 3 updates - #334

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/cargo-minor-patch-c565a08357
Open

build(deps): bump the cargo-minor-patch group with 3 updates#334
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/cargo-minor-patch-c565a08357

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 3 updates: openssl, radixtarget and log.

Updates openssl from 0.10.81 to 0.10.82

Release notes

Sourced from openssl's releases.

openssl-v0.10.82

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.81...openssl-v0.10.82

Commits
  • 321ba6c Release openssl 0.10.82 and openssl-sys 0.9.118 (#2711)
  • ad29ed5 Ask OpenSSL for the output size of wrap-mode ciphers (#2705)
  • baa5c70 Clear borrowed certificates when X509StoreContextRef::init returns (#2703)
  • 23b53a5 Fix output buffer bound for the Triple-DES key wrap cipher (#2704)
  • d2820a7 Check output buffer length in PkeyCtxRef::verify_recover (#2702)
  • 5e76216 CI: update LibreSSL to latest stable, drop 4.1
  • 1949094 Clear SSL_OP_ALL for LibreSSL 4.4
  • 986a4f2 Allow LibreSSL 4.4.x
  • 6a639a0 Expose X509 key usage and extended key usage
  • dc6b02f Build vcpkg OpenSSL with MSVC 14.44 on Windows arm64
  • Additional commits viewable in compare view

Updates radixtarget from 4.3.0 to 4.3.1

Release notes

Sourced from radixtarget's releases.

v4.3.1

What's Changed

New Contributors

Full Changelog: blacklanternsecurity/radixtarget@v4.3.0...v4.3.1

Commits
  • 06eacab Merge pull request #116 from blacklanternsecurity/promote/2026-11-03
  • 09d3641 Merge stable into sync/stable-into-dev
  • 914c8e7 Merge pull request #110 from blacklanternsecurity/ci/publish-on-tag
  • 83aec27 ci: pin shared workflows to release-workflows v1.0.0
  • f442bed Merge remote-tracking branch 'upstream/dev' into ci/publish-on-tag
  • 293fcc7 Merge pull request #109 from blacklanternsecurity/dependabot/uv/dev/ruff-0.17.2
  • 470892c ci: pin the runner image and the branch-ref actions (#111)
  • d6b5fe2 Merge pull request #112 from blacklanternsecurity/license/agpl-metadata-dev
  • 3510c97 ci(publish): per-job permissions, drop dependabot auto-merge, document releasing
  • d864279 Bump ruff from 0.17.1 to 0.17.2
  • Additional commits viewable in compare view

Updates log from 0.4.34 to 0.4.35

Release notes

Sourced from log's releases.

v0.4.35

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

  • rework CI/CD to align with Rust project standards
Changelog

Sourced from log's changelog.

0.4.35 - 2026-10-30

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

  • rework CI/CD to align with Rust project standards
Commits
  • a46450b Update CHANGELOG.md
  • a715f17 chore: release v0.4.35
  • b4e2b12 Merge pull request #747 from rust-lang/chore/release-plz-mgnt
  • 6b490b6 run fmt
  • 2c7fd52 simplify some crate release tasks for easier automation
  • 5bc5545 Merge pull request #745 from marcoienibot/release-plz-disable-semver-check
  • 4234b8c Disable release-plz semver check
  • 95918ff Merge pull request #744 from Kobzol/trusted-publishing
  • e7ed747 Fix Zizmor lints
  • e87a3c6 Setup trusted publishing
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo-minor-patch group with 3 updates
dae09bf 
Bumps the cargo-minor-patch group with 3 updates: [openssl](https://github.com/rust-openssl/rust-openssl), [radixtarget](https://github.com/blacklanternsecurity/radixtarget) and [log](https://github.com/rust-lang/log).


Updates `openssl` from 0.10.81 to 0.10.82
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.81...openssl-v0.10.82)

Updates `radixtarget` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/blacklanternsecurity/radixtarget/releases)
- [Commits](blacklanternsecurity/radixtarget@v4.3.0...v4.3.1)

Updates `log` from 0.4.34 to 0.4.35
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/main/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.34...v0.4.35)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.82
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: radixtarget
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: log
  dependency-version: 0.4.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 8, 2026
singlerider
singlerider approved these changes Nov 9, 2026
View reviewed changes

@singlerider singlerider left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Cargo patches. radixtarget 4.3.1 has no code changes (CI, AGPL metadata and a release bump only). openssl 0.10.82 hardens refcount return checks. log 0.4.35 is a patch. No API impact. Tests green.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@singlerider singlerider singlerider approved these changes

Assignees

@liquidsec liquidsec

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@singlerider @liquidsec