fix(deps): update rustls to 0.23.45 for RUSTSEC-2026-0285
📱 Test APK / Build test APK (push) Canceled after 0s
Publish Documentation / Build & publish docs to gitea-pages (push) Canceled after 0s
🏗️ Build and Test JellyTau / Run Tests (push) Successful in 20m56s
🏗️ Build and Test JellyTau / Android Compile Check (push) Waiting to run
🏗️ Build and Test JellyTau / Supply Chain (push) Successful in 1m7s
Traceability Validation / Check Requirement Traces (push) Successful in 31s

cargo-deny in the Supply Chain job started failing on a new advisory
against the locked rustls 0.23.35 (TLS 1.3 handshake messages accepted
across encryption level boundaries). Upgrade to the patched release.
This commit is contained in:
2026-09-20 20:53:45 +02:00
parent ed26eb881a
commit 1093c5bad8
+2 -2
View File
@@ -4000,9 +4000,9 @@ dependencies = [
[[package]] [[package]]
name = "rustls" name = "rustls"
version = "0.23.35" version = "0.23.45"
source = "registry+https://github.com/rust-lang/crates.io-index" source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "533f54bc6a7d4f647e46ad909549eda97bf5afc1585190ef692b4286b198bd8f" checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
dependencies = [ dependencies = [
"once_cell", "once_cell",
"ring", "ring",