Skip to content

deps: update webpki crates for RUSTSEC-2026-0381/0382/0383 - #903

Open
QuakeString wants to merge 1 commit into
mainfrom
claude/faster-ci-ftmbqn
Open

QuakeString wants to merge 1 commit into
mainfrom
claude/faster-ci-ftmbqn

Conversation

@QuakeString

Copy link
Copy Markdown
Owner

Before: cargo deny check failed on every PR because of three RustSec advisories published today against webpki-roots 1.0.9, rustls-webpki 0.103.15 and webpki-root-certs 1.0.9 (distrusted emSign intermediates).

After: those crates are on rustls-webpki 0.103.16 and webpki-roots / webpki-root-certs 1.0.10, and cargo deny check passes.

How: cargo update -p rustls-webpki -p webpki-roots -p webpki-root-certs, raised the workspace webpki-roots floor to 1.0.10, and regenerated credits with ci/gen-credits.sh. Unblocks #902.


Generated by Claude Code

rustls-webpki 0.103.16, webpki-roots and webpki-root-certs 1.0.10
drop the distrusted emSign intermediates, so cargo deny passes again.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011SjQCgzrwv6R7jzmnYZdno
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants