Skip to content

chore(deps): bump rustls-webpki and webpki-roots (RUSTSEC-2026-0381/0382) - #191

Merged
shoedog merged 1 commit into
mainfrom
chore/bump-webpki-advisories
Oct 21, 2026
Merged

shoedog merged 1 commit into
mainfrom
chore/bump-webpki-advisories

Conversation

@shoedog

@shoedog shoedog commented Oct 21, 2026

Copy link
Copy Markdown
Owner

cargo deny check advisories now fails on unmodified main (same-environment control, reproduced locally) because of two new advisories:

  • RUSTSEC-2026-0381: rustls-webpki 0.103.15 may accept distrusted intermediates → 0.103.16
  • RUSTSEC-2026-0382: webpki-roots 1.0.7 bundles distrusted emSign intermediates → 1.0.10

Cargo.lock-only patch bumps. Local: cargo build --workspace --all-targets and cargo deny check (advisories/bans/licenses/sources) pass. This unblocks #190's Build, Lint, Coverage job.

🤖 Generated with Claude Code

https://claude.ai/code/session_017izEynabPeSUBT573AtvaZ

…1/0382

cargo deny advisories began failing on unmodified main: rustls-webpki 0.103.15
may accept distrusted intermediates (RUSTSEC-2026-0381) and webpki-roots 1.0.7
bundles distrusted emSign intermediates (RUSTSEC-2026-0382). Lockfile-only
patch bumps to 0.103.16 and 1.0.10. Local: workspace build and cargo deny check
pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017izEynabPeSUBT573AtvaZ
@shoedog
shoedog merged commit 5b043dd into main Oct 21, 2026
5 checks passed
@shoedog
shoedog deleted the chore/bump-webpki-advisories branch October 21, 2026 02:37
@github-actions github-actions Bot locked and limited conversation to collaborators Oct 21, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant