This repository was archived by the owner on Oct 8, 2025. It is now read-only.
This repository was archived by the owner on Oct 8, 2025. It is now read-only.
Can't update rustls for OTEL #1503
Description
For some reason we can't update the version of rustls to fix a vulnerability.
dependabot tried and failed.
Trying myself (with version 0.23.19) I get the following error
cargo build --release --manifest-path src/otel/Cargo.toml
Updating crates.io index
error: failed to select a version for `rustls-pki-types`.
... required by package `rustls v0.23.19`
... which satisfies dependency `rustls = "^0.23.4"` (locked to 0.23.19) of package `reqwest v0.12.8`
... which satisfies dependency `reqwest = "^0.12.7"` (locked to 0.12.8) of package `otel v0.1.0 (/home/andrew/src/unit/src/otel)`
versions that meet the requirements `^1.10` are: 1.10.0
all possible versions conflict with previously selected packages.
previously selected package `rustls-pki-types v1.9.0`
... which satisfies dependency `rustls-pki-types = "^1.1.0"` (locked to 1.9.0) of package `reqwest v0.12.8`
... which satisfies dependency `reqwest = "^0.12.7"` (locked to 0.12.8) of package `otel v0.1.0 (/home/andrew/src/unit/src/otel)`
failed to select a version for `rustls-pki-types` which could resolve this conflict
make: *** [build/Makefile:2168: src/otel/target/release/libotel.a] Error 101
@avahahn Any idea?
Cc: @callahad