Skip to content

build(deps): update rustls-webpki to 0.103.16 - #447

Merged
A-EDev merged 2 commits into
mainfrom
fix/rustls-webpki
Nov 8, 2026
Merged

A-EDev merged 2 commits into
mainfrom
fix/rustls-webpki

Conversation

@A-EDev

@A-EDev A-EDev commented Nov 7, 2026

Copy link
Copy Markdown
Collaborator

Summary

Updates rustls-webpki to 0.103.16, which refuses certificate paths through intermediates the upstream project has distrusted (RUSTSEC-2026-0382). No code change.

Related issue

None.

Change type

  • Build, packaging, or CI

Validation

  • cargo update -p rustls-webpki --precise 0.103.16 in src-tauri.
  • cargo test --test sync2_server: 17 passed.
  • CI runs the full suite on this PR.
  • No TLS connection against a real server was made locally.

Risk and compatibility

The lock file also moves tempfile's getrandom from 0.4.3 to 0.3.4, a version already in the lock, as a result of re-resolving.

  • Dependency and lockfile changes are intentional and limited to this PR.
  • No new secrets, private data, telemetry, or broad Tauri permissions were introduced.

Copilot AI balanced review requested due to automatic review settings November 7, 2026 13:44

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@A-EDev
A-EDev merged commit 3faa74f into main Nov 8, 2026
7 checks passed
@A-EDev
A-EDev deleted the fix/rustls-webpki branch November 8, 2026 19:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants