Skip to content

build(deps): update rustls and chacha20 - #1915

Merged
SequeI merged 1 commit into
mainfrom
cargoAudit
Sep 14, 2026
Merged

SequeI merged 1 commit into
mainfrom
cargoAudit

Conversation

@SequeI

@SequeI SequeI commented Sep 14, 2026

Copy link
Copy Markdown
Member

Upgrade rustls to 0.23.45 to address RUSTSEC-2026-0285 and refresh
chacha20 to replace the yanked 0.10.1 release.

Linked Issue

Closes #

Summary

Test Plan

Checklist

  • An issue exists and is linked above
  • All commits are signed-off, using DCO
  • All new code follows the project's coding standards (CLAUDE.md) and is covered by tests
  • Public-facing changes are paired with documentation updates
  • If this PR introduces a major feature, capability, or security-relevant change, a corresponding NEP has been opened or accepted and is linked

@github-actions

Copy link
Copy Markdown
Contributor

PR Review Summary

Size

Metric Value
Lines added +7
Lines removed -7
Total changed 14
Classification Small (< 50 lines)

Affected crates

No crate source directories are directly affected.

Blast radius — Contained

This PR touches: source code


Updated automatically on each push to this PR.

@nogent-nolabs-ai nogent-nolabs-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nogent code review

1 high-severity security issue found.

Automated code + security review. CI already covers clippy, rustfmt, tests, cargo-audit and commit-lint.

Comment thread Cargo.lock
  Upgrade rustls to 0.23.45 to address RUSTSEC-2026-0285 and refresh
  chacha20 to replace the yanked 0.10.1 release.

Signed-off-by: Aleksy Siek <aleksy@nolabs.ai>
@SequeI
SequeI merged commit 0173eaa into main Sep 14, 2026
31 of 32 checks passed
@SequeI
SequeI deleted the cargoAudit branch September 14, 2026 18:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants