chore(deps): bump openssl from 0.10.73 to 0.10.81 - #90
Conversation
Bumps [openssl](https://github.com/rust-openssl/rust-openssl) from 0.10.73 to 0.10.81. - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.73...openssl-v0.10.81) --- updated-dependencies: - dependency-name: openssl dependency-version: 0.10.81 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
) Discharges #90 and #88. Both transitive — openssl via native-tls, rustls-webpki via rustls — so this is lockfile-only, plus openssl-sys 0.9.109 -> 0.9.117 as openssl's companion. Verified against OSV rather than the release notes, which undercount: rustls-webpki 0.103.4 and openssl 0.10.73 each carried 8 advisories; both target versions are clean. 16 cleared, including GHSA-82j2-j2ch-gfr8 and RUSTSEC-2026-0049. cargo check --workspace --locked --all-targets passes. These sat seven weeks looking harmless because the deps lane has been green over all of them while scanning nothing: .gitignore lists the tracked Cargo.lock, which is inert for git but hides it from osv-scanner. Tracked in #108; this lands first so the scan does not go from blind straight to red.
|
Superseded by #107, merged as Closing so it stops ranking as an open item on the Front Desk board rather than because anything here was wrong. Worth knowing why this sat for seven weeks looking routine: the Generated by Claude Code |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps openssl from 0.10.73 to 0.10.81.
Release notes
Sourced from openssl's releases.
... (truncated)
Commits
db9c9e2Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)3a7fb56Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)d059c43Fix verify_mode() panic on unmodeled verify mode bits (#2651)8b1519eDeprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)d5713d6add mldsa.h to the boringssl bindgen (#2650)9fac317Merge pull request #2538 from ocdlroux/feat/crl-full4dae20bx509: adding minimal support for X509CrlBuilder47f7777Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)659da17Bump aws-ls-sys to 0.41 (#2640)35be7aeRelease openssl 0.10.80 and openssl-sys 0.9.116 (#2639)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.