[PR #3474] [CLOSED] build(deps): bump rustls from 0.23.36 to 0.23.37 #3873

New issue

Closed

opened 2026-03-16 12:07:18 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 12:07:18 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/3474
Author: @dependabot[bot]
Created: 2/26/2026
Status: ❌ Closed

Base: main ← Head: dependabot/cargo/rustls-0.23.37

📝 Commits (1)

0e3de8d build(deps): bump rustls from 0.23.36 to 0.23.37

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 Cargo.lock (+2 -2)
📝 Cargo.toml (+1 -1)

📄 Description

Bumps rustls from 0.23.36 to 0.23.37.

Commits

4b455b8 Bump version of rustls
245963b Add ML-KEM-1024 key encapsulation mechanism
e1886fd Take semver-compatible updates
86ad94b Refresh verify-bench certificates
4df9216 Do not "warm up" aws-lc-rs RNG in other benchmarks
ff6f798 ci-bench: "pre-warm" per-thread entropy source
3c1841c chore(deps): update actions/cache action to v5
1735677 chore(deps): update actions/upload-artifact action to v6
c91fce0 chore(deps): update taiki-e/cache-cargo-install-action action to v3
c3a6a11 upgrade to zlib-rs 0.6.0
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
rustls	[< 0.21, > 0.20.0]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/3474 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/26/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `dependabot/cargo/rustls-0.23.37` --- ### 📝 Commits (1) - [`0e3de8d`](https://github.com/hickory-dns/hickory-dns/commit/0e3de8d74a9a7ce0a280e7a041da3fad8675e2bc) build(deps): bump rustls from 0.23.36 to 0.23.37 ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.lock` (+2 -2) 📝 `Cargo.toml` (+1 -1) </details> ### 📄 Description Bumps [rustls](https://github.com/rustls/rustls) from 0.23.36 to 0.23.37. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rustls/rustls/commit/4b455b819962978b4b6e009def15107ac5f4c5e8"><code>4b455b8</code></a> Bump version of rustls</li> <li><a href="https://github.com/rustls/rustls/commit/245963b1510fa2f42aaca217bba8d04393ab7fef"><code>245963b</code></a> Add ML-KEM-1024 key encapsulation mechanism</li> <li><a href="https://github.com/rustls/rustls/commit/e1886fd05a59c6df373f33508aa0136ce516e481"><code>e1886fd</code></a> Take semver-compatible updates</li> <li><a href="https://github.com/rustls/rustls/commit/86ad94b64bf0a87e103e5a79ffbec42b7c07bbef"><code>86ad94b</code></a> Refresh verify-bench certificates</li> <li><a href="https://github.com/rustls/rustls/commit/4df9216e57f2650f05f88e9dc826946fb848a5b6"><code>4df9216</code></a> Do not "warm up" aws-lc-rs RNG in other benchmarks</li> <li><a href="https://github.com/rustls/rustls/commit/ff6f7985aa89a67a7ac29e0a5663af7953af0c3b"><code>ff6f798</code></a> ci-bench: "pre-warm" per-thread entropy source</li> <li><a href="https://github.com/rustls/rustls/commit/3c1841c73263683a80c2eaa2f70754bbc44012df"><code>3c1841c</code></a> chore(deps): update actions/cache action to v5</li> <li><a href="https://github.com/rustls/rustls/commit/1735677c858e87a746e2a2a2928d7ec1b998d579"><code>1735677</code></a> chore(deps): update actions/upload-artifact action to v6</li> <li><a href="https://github.com/rustls/rustls/commit/c91fce039aa994a1fd0e946b147c3eca21b6e19e"><code>c91fce0</code></a> chore(deps): update taiki-e/cache-cargo-install-action action to v3</li> <li><a href="https://github.com/rustls/rustls/commit/c3a6a11a615a50f1ba3dfa8901d5d802263fd8c1"><code>c3a6a11</code></a> upgrade to zlib-rs 0.6.0</li> <li>Additional commits viewable in <a href="https://github.com/rustls/rustls/compare/v/0.23.36...v/0.23.37">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | rustls | [< 0.21, > 0.20.0] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls&package-manager=cargo&previous-version=0.23.36&new-version=0.23.37)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>