Skip to content

Bump rustls to 0.23.46 - #13

Merged
haimbj1 merged 1 commit into
mainfrom
chore/rustls-0.23.46
Oct 19, 2026
Merged

haimbj1 merged 1 commit into
mainfrom
chore/rustls-0.23.46

Conversation

@liorbond

@liorbond liorbond commented Oct 19, 2026 •

Copy link
Copy Markdown
Collaborator

Lockfile bump for the rustls advisories RUSTSEC-2026-0346 to 0349, all fixed in 0.23.46. The exact-version pin in Cargo.toml moves with it. No code change.

Note: cargo deny check on main fails on these advisories today; this unblocks the supply-chain job.

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Maintenance
    • Updated the rustls dependency to version 0.23.46.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@liorbond
liorbond requested a review from a team as a code owner October 19, 2026 00:37
@coderabbitai

coderabbitai Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 3fd99b88-8696-4309-9422-354819c6586c
📥 Commits

Reviewing files that changed from the base of the PR and between ffba731 and 8e141fb.

⛔ Files ignored due to path filters: 1
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing: 1
  • Cargo.toml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 7 remain after this review.

📝 Walkthrough

The pinned rustls dependency changes from version 0.23.45 to 0.23.46. The ring feature remains enabled.

Changes: Rustls version update

Layer / File(s) Summary
Update the pinned rustls version
Cargo.toml
The pinned rustls version changes to 0.23.46. The ring feature remains enabled.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: haimbj1

Merge Risk: ⚪ Minimal · up to 8e141

The rustls pin and lockfile both resolve to 0.23.46, and the application's ring-provider setup is unchanged. No concrete merge-blocking regression is evident.

### Architecture Summary

Architecture risk: 🔵 Low · up to 8e141

The change affects 1 system.

Changed systems: Cargo.toml

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — Cargo.toml (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in Cargo.toml: The pinned rustls version changes from 0.23.45 to 0.23.46; the ring feature is unchanged.
Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly and concisely describes the main change: updating the pinned rustls dependency to version 0.23.46.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@haimbj1
haimbj1 merged commit 3638eaf into main Oct 19, 2026
6 checks passed
@haimbj1
haimbj1 deleted the chore/rustls-0.23.46 branch October 19, 2026 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants