From ea952f7a3c5c71160f2ac729975e8df64d8806b7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 18:35:39 +0000 Subject: [PATCH 1/2] chore(deps): update p256 requirement from 0.13 to 0.14 Updates the requirements on [p256](https://github.com/RustCrypto/elliptic-curves) to permit the latest version. - [Commits](https://github.com/RustCrypto/elliptic-curves/compare/primeorder/v0.13.0...p256/v0.14.0) --- updated-dependencies: - dependency-name: p256 dependency-version: 0.14.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- conformance/Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conformance/Cargo.toml b/conformance/Cargo.toml index 42a5e851f..de9a44dd0 100644 --- a/conformance/Cargo.toml +++ b/conformance/Cargo.toml @@ -32,5 +32,5 @@ anyhow = "1" reqwest = { version = "0.13", features = ["json"] } urlencoding = "2" url = "2" -p256 = { version = "0.13", features = ["ecdsa"] } +p256 = { version = "0.14", features = ["ecdsa"] } base64 = "0.22" From d614c4c48b6dabd76958de9a997586f4b01c4481 Mon Sep 17 00:00:00 2001 From: Dale Seo <5466341+DaleSeo@users.noreply.github.com> Date: Mon, 6 Jul 2026 21:23:48 -0400 Subject: [PATCH 2/2] fix(conformance): update p256 key parsing --- conformance/src/bin/client.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conformance/src/bin/client.rs b/conformance/src/bin/client.rs index 8dabff0ff..6176fb430 100644 --- a/conformance/src/bin/client.rs +++ b/conformance/src/bin/client.rs @@ -658,7 +658,7 @@ fn openssl_free_ec_sign(pem: &str, client_id: &str, audience: &str) -> anyhow::R let signing_input = format!("{}.{}", header, payload); // Sign with p256 - let secret_key = p256::ecdsa::SigningKey::from_bytes(raw_key.as_slice().into()) + let secret_key = p256::ecdsa::SigningKey::from_slice(raw_key.as_slice()) .map_err(|e| anyhow::anyhow!("Invalid EC key: {}", e))?; use p256::ecdsa::signature::Signer; let sig: p256::ecdsa::Signature = secret_key.sign(signing_input.as_bytes());