Skip to content

chore(deps): update rustls to 0.23.45 for RUSTSEC-2026-0285 - #279

Merged
krisztian-gajdar merged 1 commit into
mainfrom
chore/rustsec-2026-0285-rustls
Sep 14, 2026
Merged

krisztian-gajdar merged 1 commit into
mainfrom
chore/rustsec-2026-0285-rustls

Conversation

@krisztian-gajdar

Copy link
Copy Markdown
Contributor

Summary

mise run gateway-deny fails on every pull request since RUSTSEC-2026-0285 (rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries) was published. The advisory's fix is rustls >= 0.23.45.

This updates rustls 0.23.41 -> 0.23.45 (and its rustls-webpki 0.103.13 -> 0.103.15) in the workspace lockfile and in the standalone packages/sie_server_rust lockfile, which the CI audit step checks separately. No manifest changes.

Verification

  • mise run gateway-deny: advisories ok, bans ok, licenses ok, sources ok.
  • cargo-deny --locked --manifest-path packages/sie_server_rust/Cargo.toml --all-features check: advisories ok.
  • mise run rust-check and cargo check --manifest-path packages/sie_server_rust/Cargo.toml --locked --all-targets: finished.

@krisztian-gajdar
krisztian-gajdar requested a review from a team as a code owner September 14, 2026 17:54
@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (2)
  • Cargo.lock is excluded by !**/*.lock
  • packages/sie_server_rust/Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 53b67fca-bbd9-4586-8259-4cb7410d66a3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@krisztian-gajdar

Copy link
Copy Markdown
Contributor Author

@coderabbitai review

@krisztian-gajdar
krisztian-gajdar merged commit 1b3479d into main Sep 14, 2026
21 checks passed
@krisztian-gajdar
krisztian-gajdar deleted the chore/rustsec-2026-0285-rustls branch September 14, 2026 18:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant