Closed dependabot[bot] closed 9 months ago
Dependabot tried to add @fdo-rs/fdo-rs-maintainers
as a reviewer to this PR, but received the following error from GitHub:
POST https://api.github.com/repos/fdo-rs/fido-device-onboard-rs/pulls/581/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the teams you specified is not a collaborator of the fdo-rs/fido-device-onboard-rs repository. // See: https://docs.github.com/rest/pulls/review-requests#request-reviewers-for-a-pull-request
This would fix a security alert, but at the time of writing Fedora is still on 0.10.59
This would fix a security alert, but at the time of writing Fedora is still on 0.10.59
I think merging this is fine, openssl is generally bumped pretty quickly in Fedora.
Bumps openssl from 0.10.55 to 0.10.60.
Release notes
Sourced from openssl's releases.
... (truncated)
Commits
8f4b97a
Merge pull request #2104 from alex/bump-for-releasedf66283
Release openssl v0.10.60 and openssl-sys v0.9.961a09dc8
Merge pull request #2102 from sfackler/ex-leakb0a1da5
Merge branch 'master' into ex-leakf456b60
Merge pull request #2099 from alex/deprecate-store-ref-objectsa8413b8
Merge pull request #2100 from alex/symm-update-uncheckeda92c237
clippye839496
Don't leak when overwriting ex data602d38d
Addedupdate_unchecked
tosymm::Crypter
cf9681a
fixes #2096 -- deprecateX509StoreRef::objects
, it is unsoundDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show