Skip to content

chore(deps): bump rustls to 0.23.46 - #855

Merged
wan9chi merged 1 commit into
mainfrom
chore/bump-rustls
Oct 14, 2026
Merged

wan9chi merged 1 commit into
mainfrom
chore/bump-rustls

Conversation

@wan9chi

@wan9chi wan9chi commented Oct 14, 2026

Copy link
Copy Markdown
Member

Motivation

The Security Analysis check (cargo-deny advisories) now fails on every PR because four advisories published on 2026-10-14 affect rustls 0.23.45, which Cargo.lock currently pins:

All four are fixed in >=0.23.46. rustls reaches us through reqwest / hyper-rustls / tokio-rustls / rustls-platform-verifier, and vt_remote_cache also depends on it directly. Example failing run: https://github.com/voidzero-dev/vite-task/actions/runs/38589437116

Summary

cargo update -p rustls: a lockfile-only bump from 0.23.45 to 0.23.46. No other packages change.

🤖 Generated with Claude Code

Fixes RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348 and
RUSTSEC-2026-0349, which affect rustls 0.23.45.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​rustls@​0.23.45 ⏵ 0.23.4681 +110093100100

View full report

@github-actions

Copy link
Copy Markdown

fspy benchmark

linux

dynamic/launch             change  -0.27%  [ -5.52% ..  +5.50%]  overhead   +49.25%
dynamic/access             change  +0.00%  [ -1.71% ..  +2.49%]  overhead   +11.29%
dynamic/access-relative    change  +0.21%  [ -1.50% ..  +2.09%]  overhead   +60.29%
dynamic/access-contended   change  +1.50%  [ -6.12% .. +14.38%]  overhead   +16.32%
static/launch              change  +0.54%  [ -4.97% ..  +8.73%]  overhead  +178.16%
static/access              change  -0.16%  [ -1.48% ..  +1.50%]  overhead  +810.58%
static/access-relative     change  -0.43%  [ -1.90% ..  +1.45%]  overhead +1381.01%
static/access-contended    change  +0.54%  [ -1.71% ..  +5.57%]  overhead +3246.86%

macos

dynamic/launch             change  -0.03%  [ -3.13% ..  +2.98%]  overhead  +220.29%
dynamic/access             change  +0.70%  [ -3.88% ..  +4.12%]  overhead    +6.44%
dynamic/access-relative    change  -0.55%  [ -4.47% ..  +2.39%]  overhead  +250.95%
dynamic/access-contended   change  -0.10%  [ -4.07% ..  +3.69%]  overhead    +4.01%

windows

dynamic/launch             change  +2.28%  [-27.75% .. +28.25%]  overhead   +25.75%
dynamic/access             change  -0.14%  [ -3.03% ..  +2.03%]  overhead    +1.49%
dynamic/access-relative    change  +0.59%  [ -2.52% ..  +2.95%]  overhead    +1.49%
dynamic/access-contended   change  +0.99%  [ -1.83% ..  +2.98%]  overhead    +2.96%

@wan9chi
wan9chi merged commit d7125e8 into main Oct 14, 2026
21 checks passed
@wan9chi
wan9chi deleted the chore/bump-rustls branch October 14, 2026 16:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant