Repository navigation
chore(deps): bump the cargo group across 1 directory with 2 updates - #63
Merged
Merged
Conversation
dependabot
Bot
added
dependencies
Contributor
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Bumps the cargo group with 2 updates in the /rust directory: [tar](https://github.com/composefs/tar-rs) and [openssl](https://github.com/rust-openssl/rust-openssl). Updates `tar` from 0.4.45 to 0.4.46 - [Release notes](https://github.com/composefs/tar-rs/releases) - [Commits](composefs/tar-rs@0.4.45...0.4.46) Updates `openssl` from 0.10.75 to 0.10.81 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.81) --- updated-dependencies: - dependency-name: openssl dependency-version: 0.10.81 dependency-type: indirect - dependency-name: tar dependency-version: 0.4.46 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/cargo/rust/cargo-12eefdbfd9
branch
from
October 10, 2026 05:30
e2db339 to
e222810
Compare
Keep only tar 0.4.46, openssl 0.10.81 and required openssl-sys 0.9.117. Preserve unrelated resolved dependency edges and regenerate both candidate attribution profiles from the actual package closure.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Reconciled on merged v0.8 source
Published repair
c37e7ba55e4f7462d576fff60aedd630d6e0ac67is based on main36c2aab2c885b8416fd4e39cf8c37c510596d6e4. The final tree changes only tar 0.4.45 → 0.4.46, openssl 0.10.75 → 0.10.81, and the required openssl-sys 0.9.111 → 0.9.117, plus both generated candidate notice/inventory pairs. Unrelated rand/bytes changes from the earlier bot head and Windows resolver downgrades from the rebased bot head are excluded.Both actual default/S3 dependency closures remain 378/428 packages. Upstream legal text is unchanged; package/source labels and inventory hashes are regenerated. Independent review checked crate archive checksums, required dependency edges, all notice inputs, and final tree
5da473e14348e9be9da035cd2c43fe8be7271781.Local checks passed: strict workspace all-target/all-feature Clippy, locked metadata/fetch, cross-target dependency features, both attribution gates, 33 release Node tests, five focused Python tests, ownership/version checks, five archive tests, four native-cohort tests, and the actual authenticated HTTPS workflow with CA verification. One existing official-cohort qualification test is intentionally ignored. Exact-head Build 38028254090 and CodeQL passed all active jobs, including all three native platforms, headless modes, strict packaged synthetic lifecycle and confined dependency/protocol checks. Merged after clean expected-head verification.
Bumps the cargo group with 2 updates in the /rust directory: tar and openssl.
Updates
tarfrom 0.4.45 to 0.4.46Release notes
Sourced from tar's releases.
Commits
fc459c1Release 0.4.4643e05a8ci: Add crates.io trusted publishing workflowbba5666Update repo linkscd94c46docs: Document TOCTOU / concurrent-mutation threat model1b4997cbuilder: Expand docs for follow_symlinks and append_dir_allbab14ddarchive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm)2349b49Add support of absolute paths39d0311Update some links59d803eUpdate astral-tokio-tar requirement from 0.5 to 0.68296b9aci: Fix and re-enable reverse dependency testing (#444)Updates
opensslfrom 0.10.75 to 0.10.81Release notes
Sourced from openssl's releases.
... (truncated)
Commits
db9c9e2Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)3a7fb56Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)d059c43Fix verify_mode() panic on unmodeled verify mode bits (#2651)8b1519eDeprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)d5713d6add mldsa.h to the boringssl bindgen (#2650)9fac317Merge pull request #2538 from ocdlroux/feat/crl-full4dae20bx509: adding minimal support for X509CrlBuilder47f7777Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)659da17Bump aws-ls-sys to 0.41 (#2640)35be7aeRelease openssl 0.10.80 and openssl-sys 0.9.116 (#2639)