Skip to content

chore(deps): bump the validation-deps group across 1 directory with 21 updates#203

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/validation/local_ping_pong_openssl/validation-deps-2794c79b46
Open

chore(deps): bump the validation-deps group across 1 directory with 21 updates#203
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/validation/local_ping_pong_openssl/validation-deps-2794c79b46

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026

Bumps the validation-deps group with 15 updates in the /validation/local_ping_pong_openssl directory:

Package From To
rustls 0.23.38 0.23.40
openssl 0.10.77 0.10.78
bitflags 2.11.0 2.11.1
cc 1.2.60 1.2.61
cpubits 0.1.0 0.1.1
ecdsa 0.17.0-rc.16 0.17.0-rc.18
ed25519 3.0.0-rc.4 3.0.0-rc.5
hybrid-array 0.4.10 0.4.11
libc 0.2.185 0.2.186
p256 0.14.0-rc.8 0.14.0-rc.9
p384 0.14.0-rc.8 0.14.0-rc.9
rsa 0.10.0-rc.17 0.10.0-rc.18
rustls-pki-types 1.14.0 1.14.1
rustls-webpki 0.103.11 0.103.13
wasip2 1.0.2+wasi-0.2.9 1.0.3+wasi-0.2.9

Updates rustls from 0.23.38 to 0.23.40

Commits
  • b44c09f Prepare 0.23.40
  • e7a555f Prefer Ord::max to core::cmp
  • c0005be ech: base inner name padding on actual extension
  • 4e49529 ech: test inner name padding
  • 3e06ef1 ech: add both name and "gross" padding
  • c574ffd ech: avoid short-lived allocation for padding
  • 8bf935c ech: pop comment from match arm
  • 9088004 ech: expand maximum_name_length to usize ASAP
  • a612901 Default require_ems based on CryptoProvider FIPS status
  • 0541605 Cargo: version 0.23.38 -> 0.23.39
  • Additional commits viewable in compare view

Updates openssl from 0.10.77 to 0.10.78

Release notes

Sourced from openssl's releases.

openssl-v0.10.78

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.77...openssl-v0.10.78

Commits
  • a6debf5 Release openssl v0.10.78 and openssl-sys v0.9.114 (#2609)
  • 09b425e Check derive output buffer length on OpenSSL 1.1.x (#2606)
  • 826c388 Error for short out in MdCtxRef::digest_final() (#2608)
  • 1d10902 Validate callback-returned lengths in PSK and cookie trampolines (#2607)
  • 5af6895 Reject oversized length returns from password callback trampoline (#2605)
  • 718d07f fix inverted bounds assertion in AES key unwrap (#2604)
  • 53cc69d Add support for LibreSSL 4.3.x (#2603)
  • 0b41e79 Fix dangling stack pointer in custom extension add callback (#2599)
  • cbdedf8 Avoid panic for overlong OIDs (#2598)
  • 1fc51ef openssl 4 support (#2591)
  • Additional commits viewable in compare view

Updates bitflags from 2.11.0 to 2.11.1

Release notes

Sourced from bitflags's releases.

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Changelog

Sourced from bitflags's changelog.

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Commits
  • 4ed9ffa Merge pull request #482 from KodrAus/cargo/2.11.1
  • c53cd57 prepare for 2.11.1 release
  • a44410a Merge pull request #481 from KodrAus/docs/clarifications
  • 3d671b9 update more compile error messages
  • 5f3adad fix up compile error messages
  • 780765d fix up contains and intersection docs
  • 97b7607 clarify self and other in method docs
  • 88a7a18 Merge pull request #477 from DanielEScherzer/patch-1
  • f0e4646 example_generated.rs: add missing third slash for doc comment
  • a31c96f Merge pull request #478 from DanielEScherzer/beta-bless
  • Additional commits viewable in compare view

Updates cc from 1.2.60 to 1.2.61

Release notes

Sourced from cc's releases.

cc-v1.2.61

Other

  • fix OutputKind::Capture documentation (#1705)
Changelog

Sourced from cc's changelog.

1.2.61 - 2026-04-24

Other

  • fix OutputKind::Capture documentation (#1705)
Commits
  • 360f691 chore(cc): release v1.2.61 (#1707)
  • 17a2788 Bump taiki-e/install-action from 2.75.16 to 2.75.17 (#1706)
  • da52db7 command_helpers.rs: fix OutputKind::Capture documentation (#1705)
  • ee64d58 Bump taiki-e/install-action from 2.75.4 to 2.75.5 (#1703)
  • 78cf7e4 CI: Hash-pin all actions, apply other suggestions from zizmor (#1702)
  • See full diff in compare view

Updates cpubits from 0.1.0 to 0.1.1

Commits

Updates ecdsa from 0.17.0-rc.16 to 0.17.0-rc.18

Commits

Updates ed25519 from 3.0.0-rc.4 to 3.0.0-rc.5

Commits

Updates elliptic-curve from 0.14.0-rc.30 to 0.14.0-rc.32

Commits
  • c6d4dd7 elliptic-curve v0.14.0-rc.32 (#2399)
  • f2069a2 elliptic-curve: bump pkcs8 to v0.11 (#2397)
  • 8250383 elliptic-curve: bump pkcs8 to v0.11.0-rc.12 (#2396)
  • 54e464f signature: remove long-winded intro section in rustdoc (#2392)
  • 5cb62a4 signature: enable/fix workspace-level lints; reformat docs (#2391)
  • 375378f elliptic-curve: consistent PKCS#8 / SEC1 naming in secret_key.rs (#2388)
  • 30a48ab elliptic-curve: add mul_by_generator(_vartime) benchmarks (#2389)
  • f7e7c3d Implement SecretKey::from_pem to decode variety of keys (#2387)
  • b397bd3 elliptic-curve v0.14.0-rc.31 (#2386)
  • 4aa20fa elliptic-curve: shorten name of mul_by_generator_and_mul_add_vartime (#2385)
  • Additional commits viewable in compare view

Updates hybrid-array from 0.4.10 to 0.4.11

Changelog

Sourced from hybrid-array's changelog.

0.4.11 (2026-04-24)

Added

  • HPKE Hybrid KEM sizes (#218)

Removed

  • Clone bounds on Box/Vec conversions (#209)

#209: RustCrypto/hybrid-array#209 #218: RustCrypto/hybrid-array#218

Commits

Updates libc from 0.2.185 to 0.2.186

Release notes

Sourced from libc's releases.

0.2.186

Added

  • Apple: Add KEVENT_FLAG_* constants (#5070)
  • Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

  • CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)
Changelog

Sourced from libc's changelog.

0.2.186 - 2026-04-24

Added

  • Apple: Add KEVENT_FLAG_* constants (#5070)
  • Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

  • CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)
Commits
  • 42620ff [0.2] libc: Release 0.2.186
  • 9db2eaa apple: add KEVENT_FLAG_* constants
  • 3840939 Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE for linux
  • f697deb chore: migrate from Cirrus CI to GHA
  • See full diff in compare view

Updates openssl-sys from 0.9.113 to 0.9.114

Release notes

Sourced from openssl-sys's releases.

openssl-sys-v0.9.114

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.113...openssl-sys-v0.9.114

Commits
  • a6debf5 Release openssl v0.10.78 and openssl-sys v0.9.114 (#2609)
  • 09b425e Check derive output buffer length on OpenSSL 1.1.x (#2606)
  • 826c388 Error for short out in MdCtxRef::digest_final() (#2608)
  • 1d10902 Validate callback-returned lengths in PSK and cookie trampolines (#2607)
  • 5af6895 Reject oversized length returns from password callback trampoline (#2605)
  • 718d07f fix inverted bounds assertion in AES key unwrap (#2604)
  • 53cc69d Add support for LibreSSL 4.3.x (#2603)
  • 0b41e79 Fix dangling stack pointer in custom extension add callback (#2599)
  • cbdedf8 Avoid panic for overlong OIDs (#2598)
  • 1fc51ef openssl 4 support (#2591)
  • Additional commits viewable in compare view

Updates p256 from 0.14.0-rc.8 to 0.14.0-rc.9

Commits

Updates p384 from 0.14.0-rc.8 to 0.14.0-rc.9

Commits

Updates pkcs8 from 0.11.0-rc.11 to 0.11.0

Commits

Updates primefield from 0.14.0-rc.8 to 0.14.0-rc.9

Commits

Updates primeorder from 0.14.0-rc.8 to 0.14.0-rc.9

Commits

Updates rsa from 0.10.0-rc.17 to 0.10.0-rc.18

Commits

Updates rustls-pki-types from 1.14.0 to 1.14.1

Release notes

Sourced from rustls-pki-types's releases.

1.14.1

Parsing PEM will now error for PEM sections larger than 256 MB in size, to avoid running out of memory during parsing. The limit was chosen based on historical data from large certificate revocation lists from the web PKI.

What's Changed

Commits
  • bb3c1da Adjust PEM size limit to account for huge CRLs
  • 20bcfe1 Bump version to 1.14.1
  • b796d3d pem: error for sections that are too large
  • 422d8cf Update ECH reference to RFC 9849
  • 14ce65c Remove mention of rustls-pemfile from docs
  • See full diff in compare view

Updates rustls-webpki from 0.103.11 to 0.103.13

Release notes

Sourced from rustls-webpki's releases.

0.103.13

  • Fix reachable panic in parsing a CRL. This was reported to us as GHSA-82j2-j2ch-gfr8. Users who don't use CRLs are not affected.
  • For name constraints on URI names, we incorrectly processed excluded subtrees in a way which inverted the desired meaning. See rustls/webpki#471. This was a case missing in the fix for GHSA-965h-392x-2mh5.

What's Changed

Full Changelog: rustls/webpki@v/0.103.12...v/0.103.13

0.103.12

This release fixes two bugs in name constraint enforcement:

  • GHSA-965h-392x-2mh5: name constraints for URI names were ignored and therefore accepted. URI name constraints are now rejected unconditionally. Note this library does not provide an API for asserting URI names, and URI name constraints are otherwise not implemented.
  • GHSA-xgp8-3hg3-c2mh: permitted subtree name constraints for DNS names were accepted for certificates asserting a wildcard name. This was incorrect because, given a name constraint of accept.example.com, *.example.com could feasibly allow a name of reject.example.com which is outside the constraint. This is very similar to CVE-2025-61727.

Since name constraints are restrictions on otherwise properly-issued certificates, these bugs are reachable only after signature verification and require misissuance to exploit.

What's Changed

Full Changelog: rustls/webpki@v/0.103.11...v/0.103.12

Commits
  • 2879b2c Prepare 0.103.13
  • 2c49773 Improve tests for padding of BitStringFlags
  • 4e3c0b3 Correct validation of BIT STRING constraints
  • 39c91d2 Actually fail closed for URI matching against excluded subtrees
  • 27131d4 Bump version to 0.103.12
  • 6ecb876 Clean up stutt...

    Description has been truncated

@dependabot
chore(deps): bump the validation-deps group across 1 directory with 2…
7867af7 
…1 updates

Bumps the validation-deps group with 15 updates in the /validation/local_ping_pong_openssl directory:

| Package | From | To |
| --- | --- | --- |
| [rustls](https://github.com/rustls/rustls) | `0.23.38` | `0.23.40` |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.77` | `0.10.78` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.11.0` | `2.11.1` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.60` | `1.2.61` |
| [cpubits](https://github.com/RustCrypto/utils) | `0.1.0` | `0.1.1` |
| [ecdsa](https://github.com/RustCrypto/signatures) | `0.17.0-rc.16` | `0.17.0-rc.18` |
| [ed25519](https://github.com/RustCrypto/signatures) | `3.0.0-rc.4` | `3.0.0-rc.5` |
| [hybrid-array](https://github.com/RustCrypto/hybrid-array) | `0.4.10` | `0.4.11` |
| [libc](https://github.com/rust-lang/libc) | `0.2.185` | `0.2.186` |
| [p256](https://github.com/RustCrypto/elliptic-curves) | `0.14.0-rc.8` | `0.14.0-rc.9` |
| [p384](https://github.com/RustCrypto/elliptic-curves) | `0.14.0-rc.8` | `0.14.0-rc.9` |
| [rsa](https://github.com/RustCrypto/RSA) | `0.10.0-rc.17` | `0.10.0-rc.18` |
| [rustls-pki-types](https://github.com/rustls/pki-types) | `1.14.0` | `1.14.1` |
| [rustls-webpki](https://github.com/rustls/webpki) | `0.103.11` | `0.103.13` |
| [wasip2](https://github.com/bytecodealliance/wasi-rs) | `1.0.2+wasi-0.2.9` | `1.0.3+wasi-0.2.9` |



Updates `rustls` from 0.23.38 to 0.23.40
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.38...v/0.23.40)

Updates `openssl` from 0.10.77 to 0.10.78
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.77...openssl-v0.10.78)

Updates `bitflags` from 2.11.0 to 2.11.1
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.11.0...2.11.1)

Updates `cc` from 1.2.60 to 1.2.61
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.60...cc-v1.2.61)

Updates `cpubits` from 0.1.0 to 0.1.1
- [Commits](RustCrypto/utils@cpubits-v0.1.0...cpubits-v0.1.1)

Updates `ecdsa` from 0.17.0-rc.16 to 0.17.0-rc.18
- [Commits](RustCrypto/signatures@ecdsa/v0.17.0-rc.16...ecdsa/v0.17.0-rc.18)

Updates `ed25519` from 3.0.0-rc.4 to 3.0.0-rc.5
- [Commits](RustCrypto/signatures@ed25519/v3.0.0-rc.4...ed25519/v3.0.0-rc.5)

Updates `elliptic-curve` from 0.14.0-rc.30 to 0.14.0-rc.32
- [Commits](RustCrypto/traits@elliptic-curve-v0.14.0-rc.30...elliptic-curve-v0.14.0-rc.32)

Updates `hybrid-array` from 0.4.10 to 0.4.11
- [Changelog](https://github.com/RustCrypto/hybrid-array/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/hybrid-array@v0.4.10...v0.4.11)

Updates `libc` from 0.2.185 to 0.2.186
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.185...0.2.186)

Updates `openssl-sys` from 0.9.113 to 0.9.114
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-sys-v0.9.113...openssl-sys-v0.9.114)

Updates `p256` from 0.14.0-rc.8 to 0.14.0-rc.9
- [Commits](RustCrypto/elliptic-curves@p256/v0.14.0-rc.8...p256/v0.14.0-rc.9)

Updates `p384` from 0.14.0-rc.8 to 0.14.0-rc.9
- [Commits](RustCrypto/elliptic-curves@p384/v0.14.0-rc.8...p384/v0.14.0-rc.9)

Updates `pkcs8` from 0.11.0-rc.11 to 0.11.0
- [Commits](RustCrypto/formats@pkcs8/v0.11.0-rc.11...pkcs8/v0.11.0)

Updates `primefield` from 0.14.0-rc.8 to 0.14.0-rc.9
- [Commits](RustCrypto/elliptic-curves@primefield/v0.14.0-rc.8...primefield/v0.14.0-rc.9)

Updates `primeorder` from 0.14.0-rc.8 to 0.14.0-rc.9
- [Commits](RustCrypto/elliptic-curves@primeorder/v0.14.0-rc.8...primeorder/v0.14.0-rc.9)

Updates `rsa` from 0.10.0-rc.17 to 0.10.0-rc.18
- [Changelog](https://github.com/RustCrypto/RSA/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/RSA@v0.10.0-rc.17...v0.10.0-rc.18)

Updates `rustls-pki-types` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](rustls/pki-types@v/1.14.0...v/1.14.1)

Updates `rustls-webpki` from 0.103.11 to 0.103.13
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](rustls/webpki@v/0.103.11...v/0.103.13)

Updates `typenum` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/paholg/typenum/releases)
- [Changelog](https://github.com/paholg/typenum/blob/main/CHANGELOG.md)
- [Commits](paholg/typenum@v1.19.0...v1.20.0)

Updates `wasip2` from 1.0.2+wasi-0.2.9 to 1.0.3+wasi-0.2.9
- [Commits](bytecodealliance/wasi-rs@wasip2-1.0.2...wasip2-1.0.3)

---
updated-dependencies:
- dependency-name: rustls
  dependency-version: 0.23.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: openssl
  dependency-version: 0.10.78
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: bitflags
  dependency-version: 2.11.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: cc
  dependency-version: 1.2.61
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: cpubits
  dependency-version: 0.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: ecdsa
  dependency-version: 0.17.0-rc.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: ed25519
  dependency-version: 3.0.0-rc.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: elliptic-curve
  dependency-version: 0.14.0-rc.32
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: hybrid-array
  dependency-version: 0.4.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: libc
  dependency-version: 0.2.186
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: openssl-sys
  dependency-version: 0.9.114
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: p256
  dependency-version: 0.14.0-rc.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: p384
  dependency-version: 0.14.0-rc.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: pkcs8
  dependency-version: 0.11.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: primefield
  dependency-version: 0.14.0-rc.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: primeorder
  dependency-version: 0.14.0-rc.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: rsa
  dependency-version: 0.10.0-rc.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: rustls-pki-types
  dependency-version: 1.14.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: rustls-webpki
  dependency-version: 0.103.13
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
- dependency-name: typenum
  dependency-version: 1.20.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: validation-deps
- dependency-name: wasip2
  dependency-version: 1.0.3+wasi-0.2.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: validation-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants