rustls / rustls-native-certs

Integration with OS certificate stores for rustls
Other
196 stars 55 forks source link

build(deps): bump the crates-io group with 4 updates #142

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the crates-io group with 4 updates: rustls-pemfile, schannel, rustls and tempfile.

Updates rustls-pemfile from 2.1.3 to 2.2.0

Release notes

Sourced from rustls-pemfile's releases.

2.2.0

Release notes

The main function of this crate has been incorporated into rustls-pki-types. 2.2.0 maintains the existing public API for this crate, on top of this new implementation. This drops the dependency on the base64 crate, and allows for constant-time decoding of private keys.

This crate will continue to exist in its current form, but it is somewhat unlikely that the API will be extended from its current state.

Should you wish to migrate to using the new rustls-pki-types PEM APIs directly, here is a rough cheat-sheet:

Use case Replace
File stream to CertificateDer iterator rustls_pemfile::certs(io::BufRead) ➡️ CertificateDer::pem_reader_iter(io::Read)
File stream to one PrivateKeyDer rustls_pemfile::private_key(io::BufRead) ➡️ PrivateKeyDer::from_pem_reader(io::Read)
File stream to one CertificateSigningRequestDer rustls_pemfile::csr(io::BufRead) ➡️ CertificateSigningRequestDer::from_pem_reader(io::Read)
File stream to CertificateRevocationListDer iterator rustls_pemfile::crls(io::BufRead) ➡️ CertificateRevocationListDer::pem_reader_iter(io::Read)
File stream to PrivatePkcs1KeyDer iterator rustls_pemfile::rsa_private_keys(io::BufRead) ➡️ PrivatePkcs1KeyDer::pem_reader_iter(io::Read)
File stream to PrivatePkcs8KeyDer iterator rustls_pemfile::pkcs8_private_keys(io::BufRead) ➡️ PrivatePkcs8KeyDer::pem_reader_iter(io::Read)
File stream to PrivateSec1KeyDer iterator rustls_pemfile::ec_private_keys(io::BufRead) ➡️ PrivateSec1KeyDer::pem_reader_iter(io::Read)
File stream to SubjectPublicKeyInfoDer iterator rustls_pemfile::public_keys(io::BufRead) ➡️ SubjectPublicKeyInfoDer::pem_reader_iter(io::Read)

What's Changed

Full Changelog: https://github.com/rustls/pemfile/compare/v/2.1.3...v/2.2.0

Commits


Updates schannel from 0.1.24 to 0.1.26

Commits


Updates rustls from 0.23.13 to 0.23.14

Commits
  • cf736e3 Prepare 0.23.14
  • 262ae99 Accept kyber deprecation
  • c9f5734 Take aws-lc-rs 1.10
  • 0560938 Take latest bogo release
  • 7bf82dc Send illegal_parameter alert on illegal group
  • d752eb2 Send illegal_parameter alert on invalid key share
  • 2d3b7ab default crypto provider improvements
  • bcc295d Fix new cargo doc warnings in examples
  • e7dd2fd fips.rs: reflect certificate issuance for aws-lc 2.0.0
  • 58a5891 fix(deps): update rust crate brotli to v7
  • Additional commits viewable in compare view


Updates tempfile from 3.12.0 to 3.13.0

Changelog

Sourced from tempfile's changelog.

3.13.0

  • Add with_suffix constructors for easily creating new temporary files with a specific suffix (e.g., a specific file extension). Thanks to @​Borgerr.
  • Update dependencies (fastrand & rustix).
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 3 weeks ago

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

djc commented 3 weeks ago

See #143.