Skip to content

Fix RUSTSEC with some major changes#47

Merged
grydz merged 44 commits into
mainfrom
bump-and-fix
May 20, 2026
Merged

Fix RUSTSEC with some major changes#47
grydz merged 44 commits into
mainfrom
bump-and-fix

Conversation

@grydz
Copy link
Copy Markdown
Contributor

@grydz grydz commented Mar 30, 2026 •
edited
Loading

Added

  • Bump sev crate to tag 7.1.0
  • Bump tdx-attest-rs to tag DCAP_1.24
  • Bump version of many common crates
  • tls-cert crate to fetch TLS peer certificate

Fixed

  • maa_client:
    • parsing of JSON response from MAA API
    • bump API version of MAA API
    • parsing of certificates in SEV quote before sending to MAA API
  • .devcontainer/Dockerfile with Ubuntu 24.04 instead of Ubuntu 22.04
  • rsa crate replaced by aws-ls-rs due to RUSTSEC-2023-0071

Removed

  • bincode crate which isn't maintained anymore
  • jwt-simple replaced by jsonwebtoken to avoid rsa dependency
  • tracing-subscriber due to RUSTSEC-2025-0055

grydz added 21 commits February 5, 2026 17:40
@grydz
Fix: optional field in JSON response from MAA API
23df759
@grydz
Fix: warning 'hiding a lifetime that's elided elsewhere is confusing'
c059e7f
@grydz
Bump asn1 crate
1769284
@grydz
Bump log crate
51610c1
@grydz
Bump reqwest crate
de310cd
@grydz
Bump crate rsa
6bfca54
@grydz
Bump crate scroll
c8db95b
@grydz
Bump crate serde and serde_json
61bce6e
@grydz
Bump crate sha2
165f4af
@grydz
Bump crate x509-parser
01e6173
@grydz
Bump Rust edition to 2024 and fix clippy warnings
4223f11
@grydz
Bump crate thiserror
3d38054
@grydz
Fix: maa_client crate should use rsa crate from workspace
5b9220a
@grydz
Bump crate tdx-attest-rs to tag DCAP_1.24
dadfb49
@grydz
Remove crate tracing-subscriber due to RUSTSEC-2025-0055
ae613ba
@grydz
Bump crate sev to tag v7.1.0
f7f4f7e
@grydz
WIP: changes due to bump of sev crate to v7.1.0
cde4ded
@grydz
Fix: dockerfile for vscode dev container and update README
a152838
@grydz
WIP
7c88f31
@grydz
Fix: replace jwt-simple with jsonwebtoken to get rid of rsa crate
644347e
@grydz
Fix: tests of ratls crate due to new SEV quote serialization
aa6fb0c
@grydz grydz marked this pull request as ready for review May 13, 2026 14:18
@grydz grydz requested a review from Manuthor May 13, 2026 14:18
Manuthor
Manuthor reviewed May 18, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@Manuthor Manuthor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great job!

Comment thread crate/azure_cvm/src/lib.rs
Comment thread crate/sev_quote/src/quote.rs Outdated
Comment thread crate/tls-cert/src/lib.rs Outdated
Comment thread crate/azure_cvm/src/lib.rs Outdated
Comment thread crate/azure_cvm/src/lib.rs Outdated
Comment thread crate/azure_cvm/src/lib.rs Outdated
Comment thread crate/tls-cert/Cargo.toml Outdated
Comment thread crate/sev_quote/src/quote.rs Outdated
Comment thread crate/sev_quote/src/quote.rs Outdated
Comment thread crate/sev_quote/src/quote.rs Outdated
grydz and others added 4 commits May 18, 2026 16:15
@grydz @Manuthor
Fix: remove unused comment in sev_quote crate
662d0be 
Co-authored-by: Manuthor <32013169+Manuthor@users.noreply.github.com>
@grydz grydz merged commit e5dcf48 into main May 20, 2026
1 check passed
@grydz grydz deleted the bump-and-fix branch May 20, 2026 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Manuthor Manuthor Manuthor approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@grydz @Manuthor