Update rustls-webpki and webpki-roots for two advisories #208

Merged
littlefox merged 1 commit from deps-webpki-advisories into main 2026-10-20 21:10:32 +00:00
Owner

RUSTSEC-2026-0382 (rustls-webpki 0.103.16) and RUSTSEC-2026-0381 (webpki-roots 1.0.10). Lockfile only. Verified: cargo-deny check passes (advisories ok), kom-client unit tests, and the TLS integration test against the devserver's stunnel port.

🤖 Generated with Claude Code

https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

RUSTSEC-2026-0382 (rustls-webpki 0.103.16) and RUSTSEC-2026-0381 (webpki-roots 1.0.10). Lockfile only. Verified: cargo-deny check passes (advisories ok), kom-client unit tests, and the TLS integration test against the devserver's stunnel port. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8
Update rustls-webpki and webpki-roots for two advisories
All checks were successful
ci / check (push) Successful in 7m42s
packaging / arch (pull_request) Successful in 11m32s
packaging / debian (pull_request) Successful in 19m55s
ci / desktop (push) Successful in 20m18s
packaging / nix (pull_request) Successful in 22m5s
packaging / fedora (pull_request) Successful in 35m4s
packaging / release (pull_request) Has been skipped
ci / e2e (push) Successful in 35m41s
3ccb6f7076
cargo-deny now flags RUSTSEC-2026-0382 (rustls-webpki could accept
distrusted intermediates; fixed in 0.103.16) and RUSTSEC-2026-0381
(webpki-roots bundled distrusted emSign roots; removed in 1.0.10). CI's
dependency audit fails on every branch until these are in.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8
littlefox referenced this pull request from a commit 2026-10-21 18:55:55 +00:00
Sign in to join this conversation.
No description provided.