From d74d5267bdf45e7de0bb5261541fa88759746cc9 Mon Sep 17 00:00:00 2001 From: Jacob Page Date: Wed, 14 Oct 2026 12:55:51 -0700 Subject: [PATCH] fix(deps): update rustls to 0.23.46 to address four TLS security advisories Picks up fixes for RUSTSEC-2026-0346, -0347, -0348 and -0349, which cover session secrets appearing in Debug output, application data being sent to the outer server after an Encrypted Client Hello rejection, oversized Brotli certificate decompression allocations, and an unauthenticated ServerHello downgrading later connections to classical key exchange. Co-Authored-By: Claude Sonnet 5.5 --- rust/Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rust/Cargo.lock b/rust/Cargo.lock index 692e476d..59164096 100644 --- a/rust/Cargo.lock +++ b/rust/Cargo.lock @@ -3477,9 +3477,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "aws-lc-rs", "once_cell",