Skip to content

chore: update rustls-webpki 0.103.10 → 0.103.12#244

Merged
mohamedmansour merged 1 commit intomainfrom
chore/update-rustls-webpki
Apr 16, 2026
Merged

chore: update rustls-webpki 0.103.10 → 0.103.12#244
mohamedmansour merged 1 commit intomainfrom
chore/update-rustls-webpki

Conversation

@janechu
Copy link
Copy Markdown
Contributor

@janechu janechu commented Apr 16, 2026

Description

Update rustls-webpki from 0.103.10 to 0.103.12 to resolve two security advisories that are failing the cargo deny lint gate:

  • RUSTSEC-2026-0098: Name constraints for URI names were incorrectly accepted
  • RUSTSEC-2026-0099: Name constraints were accepted for certificates asserting a wildcard name

This vulnerability on main is also causing lint failures on these open PRs:

Test Plan

  • cargo deny check passes cleanly after the update
  • No code changes, only Cargo.lock version bump

Checklist

  • I have added tests for my changes.
  • I have tested my changes.
  • I have updated the project documentation to reflect my changes.
  • I understand and have considered the performance impact of my changes.

Fixes RUSTSEC-2026-0098 (URI name constraints incorrectly accepted)
and RUSTSEC-2026-0099 (wildcard name constraints incorrectly accepted).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@janechu janechu marked this pull request as ready for review April 16, 2026 03:24
@janechu janechu requested review from a team and mohamedmansour April 16, 2026 03:24
@mohamedmansour mohamedmansour merged commit 94aa30a into main Apr 16, 2026
21 checks passed
@mohamedmansour mohamedmansour deleted the chore/update-rustls-webpki branch April 16, 2026 04:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants