YoursFunny/TelegramTwitterMediaBot
1
0
Fork 0
mirror of https://github.com/TheFunny/TelegramTwitterMediaBot.git synced 2026-10-16 03:02:16 +00:00
Code Releases Activity

fix(deps): bump rustls to 0.23.46 for RUSTSEC-2026-0346..0349

Browse Source 
Four advisories dated 2026-10-14 hit rustls 0.23.45 (a brotli
certificate-decompression allocation, a ServerHello key-exchange
downgrade, and two more), all fixed in 0.23.46, and cargo audit fails the
CI gate on them. Only rustls changes in the lock (version + checksum).
The remaining audit findings (dotenv/proc-macro-error2 unmaintained,
yoke-derive yanked) are warnings the action leaves non-fatal.
This commit is contained in:
YoursFunny
2026-10-14 23:42:32 +08:00
parent dfb2ccae3e
commit 0d06d4d31b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Cargo.lock
Generated
+2 -2
View File
@@ -1897,9 +1897,9 @@ dependencies = [
[[package]]
name = "rustls"
version = "0.23.45"
version = "0.23.46"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf"
dependencies = [
"once_cell",
"ring",