build(deps): bump rustls from 0.23.4 to 0.23.5，fix CVE-2024-32650

rustls / rustls-ffi

Use Rustls from any language

Other

123 stars 31 forks source link

Closed gordonwwang closed 4 days ago

gordonwwang commented 4 days ago

We need to bump it for security!

ctz commented 4 days ago

Thanks for the change!

This is unnecessary for two reasons:

cargo's semver rules (see https://doc.rust-lang.org/cargo/reference/resolver.html#semver-compatibility) means version = "0.23.4" here already covers 0.23.5 and later versions. Just run cargo update
this crate does not call the affected function