Skip to content

build(deps): bump the cargo group across 1 directory with 4 updates - #48

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-c99b90fe59
Closed

build(deps): bump the cargo group across 1 directory with 4 updates#48
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-c99b90fe59

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 6, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the cargo group with 4 updates in the / directory: aws-lc-sys, aws-sdk-sso, openssl and quinn-proto.

Updates aws-lc-sys from 0.37.0 to 0.37.1

Commits

Updates aws-sdk-sso from 1.88.0 to 1.90.0

Commits

Updates openssl from 0.10.74 to 0.10.79

Release notes

Sourced from openssl's releases.

openssl-v0.10.79

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

openssl-v0.10.78

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.77...openssl-v0.10.78

openssl-v0.10.77

What's Changed

... (truncated)

Commits
  • 649f2d9 Release openssl 0.10.79 and openssl-sys 0.9.115 (#2632)
  • 257f9b2 Fix output buffer overflow for AES key-wrap-with-padding ciphers (#2630)
  • d43e917 Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders (#2631)
  • f46519c Add PkeyCtxRef::set_context_string for ML-DSA (#2629)
  • ad9ae31 Bind OSSL_PARAM_modified and use it for seed_into (#2628)
  • 4e25c9b Fix process abort when verify/PSK callbacks fire after SSL_CTX swap (#2624)
  • 3dd8f42 Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction (#2626)
  • 2c5e5a8 parallelize more builds in CI for cold caches (#2625)
  • 6685591 Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import (#2621)
  • 8f8fdce Drop once_cell in favor of std::sync::{LazyLock, OnceLock} (#2623)
  • Additional commits viewable in compare view

Updates quinn-proto from 0.11.13 to 0.11.14

Release notes

Sourced from quinn-proto's releases.

quinn-proto 0.11.14

@​jxs reported a denial of service issue in quinn-proto 5 days ago:

We coordinated with them to release this version to patch the issue. Unfortunately the maintainers missed these issues during code review and we did not have enough fuzzing coverage -- we regret the oversight and have added an additional fuzzing target.

Organizations that want to participate in coordinated disclosure can contact us privately to discuss terms.

What's Changed

Commits
  • 2c315aa proto: bump version to 0.11.14
  • 8ad47f4 Use newer rustls-pki-types PEM parser API
  • c81c028 ci: fix workflow syntax
  • 0050172 ci: pin wasm-bindgen-cli version
  • 8a6f82c Take semver-compatible dependency updates
  • e52db4a Apply suggestions from clippy 1.91
  • 6df7275 chore: Fix unnecessary_unwrap clippy
  • c8eefa0 proto: avoid unwrapping varint decoding during parameters parsing
  • 9723a97 fuzz: add fuzzing target for parsing transport parameters
  • eaf0ef3 Fix over-permissive proto dependency edge (#2385)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump the cargo group across 1 directory with 4 updates
6146d2a 
Bumps the cargo group with 4 updates in the / directory: [aws-lc-sys](https://github.com/aws/aws-lc-rs), [aws-sdk-sso](https://github.com/awslabs/aws-sdk-rust), [openssl](https://github.com/rust-openssl/rust-openssl) and [quinn-proto](https://github.com/quinn-rs/quinn).


Updates `aws-lc-sys` from 0.37.0 to 0.37.1
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@aws-lc-sys/v0.37.0...aws-lc-sys/v0.37.1)

Updates `aws-sdk-sso` from 1.88.0 to 1.90.0
- [Release notes](https://github.com/awslabs/aws-sdk-rust/releases)
- [Commits](https://github.com/awslabs/aws-sdk-rust/commits)

Updates `openssl` from 0.10.74 to 0.10.79
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.74...openssl-v0.10.79)

Updates `quinn-proto` from 0.11.13 to 0.11.14
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.13...quinn-proto-0.11.14)

---
updated-dependencies:
- dependency-name: aws-lc-sys
  dependency-version: 0.37.1
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: aws-sdk-sso
  dependency-version: 1.90.0
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: openssl
  dependency-version: 0.10.79
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: quinn-proto
  dependency-version: 0.11.14
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 6, 2026
@lukemarsden lukemarsden mentioned this pull request May 6, 2026
Closed
3 tasks
lukemarsden added a commit that referenced this pull request May 6, 2026
@lukemarsden @claude
docs: fix PR reference in session_creation_chain doc comments
39d975e 
The doc comments said "#48" (a guess before the PR was
opened); the actual PR is #50. Per project rules, use full URLs.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
lukemarsden added a commit to helixml/helix that referenced this pull request May 6, 2026
@lukemarsden @claude
fix(sandbox): bump zed pin to include doc URL fix
5c0cd73 
The previous pin (b16e4a9) had `helixml/zed#48` placeholders in doc
comments — the actual zed PR is #50. Roll forward to 39d975e which
fixes those references to use full URLs per project rules.

No runtime change.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github May 7, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this May 7, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-c99b90fe59 branch May 7, 2026 19:28
@lukemarsden lukemarsden mentioned this pull request Jul 29, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants