Skip to content

chore: update dependencies for security advisors#588

Merged
burmecia merged 1 commit intomainfrom
bo/chore/upgrade-deps
Mar 19, 2026
Merged

chore: update dependencies for security advisors#588
burmecia merged 1 commit intomainfrom
bo/chore/upgrade-deps

Conversation

@burmecia
Copy link
Copy Markdown
Member

What kind of change does this PR introduce?

This PR is to upgrade several dependencies advised by Dependabot. Below dependencies are upgraded:

  • aws-lc-rs 1.14.1 → 1.16.1 (pulled in aws-lc-sys 0.32.3 → 0.38.0)
  • lz4_flex 0.11.5 → 0.11.6
  • quinn-proto 0.11.13 → 0.11.14
  • rustls 0.23.27 → 0.23.37
  • wasmtime 36.0.5 → 36.0.6

What is the current behavior?

N/A

What is the new behavior?

N/A

Additional context

N/A

Copilot AI review requested due to automatic review settings March 19, 2026 04:59
@burmecia burmecia added the dependencies Pull requests that update a dependency file label Mar 19, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates Rust dependencies in the workspace to incorporate Dependabot security advisories, primarily by bumping direct dependency constraints in wrappers and updating the resolved dependency graph in Cargo.lock.

Changes:

  • Bump rustls to 0.23.37 and wasmtime to 36.0.6 in wrappers/Cargo.toml.
  • Refresh Cargo.lock to resolve to newer patched versions (including aws-lc-rs/aws-lc-sys, lz4_flex, quinn-proto, and rustls).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
wrappers/Cargo.toml Updates direct dependency version requirements for rustls and wasmtime.
Cargo.lock Updates locked transitive dependency versions/checksums to match the upgraded graph.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

@burmecia burmecia merged commit b606e33 into main Mar 19, 2026
9 checks passed
@burmecia burmecia deleted the bo/chore/upgrade-deps branch March 19, 2026 05:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants