8000 chore(deps): bump rustls from 0.23.45 to 0.23.46 by dependabot[bot] · Pull Request #43 · KingSahil/Blinky · GitHub
[go: up one dir, main page]

Skip to content
1 8000

chore(deps): bump rustls from 0.23.45 to 0.23.46 - #43

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rustls-0.23.46
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rustls-0.23.46

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Nov 2, 2026
8000 Copy link
Copy Markdown
Contributor

Bumps rustls from 0.23.45 to 0.23.46.

Commits
  • f04804f Delay saving KX hint until handshake confirmation
  • 049d39b Bump version to 0.23.46
  • 6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
  • 2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
  • 74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
  • 795eea7 Advance the HPKE sequence only after seal succeeds
  • d67cb71 stream: provide backpressure while buffering received plaintext
  • 7a69ade util: fuse flushes from connections with errors
  • 493d089 conn: fuse writes for connections with errors
  • db00e01 util: keep flushing after short writes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [rustls](https://github.com/rustls/rustls) from 0.23.45 to 0.23.46.
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.45...v/0.23.46)

---
updated-dependencies:
- dependency-name: rustls
  dependency-version: 0.23.46
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 2, 2026
@ecc-tools
ecc-tools Bot commented Nov 2, 2026
Copy link
Copy Markdown

ECC Tools / Security Evidence

Commit: fca4b017b4aa0b7984377156f5ca2c631adfe581

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 1 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

@ecc-tools
ecc-tools Bot commented Nov 2, 2026
Copy link
Copy Markdown

ECC Tools / PR Risk Taxonomy

Commit: fca4b017b4aa0b7984377156f5ca2c631adfe581

PR taxonomy clear (success)

Scanned 1 changed file(s). No taxonomy bucket signals were detected.

Scanned 1 changed file(s).

No PR taxonomy bucket signals were detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

@ecc-tools
ecc-tools Bot commented Nov 2, 2026
Copy link
Copy Markdown

ECC Tools / Reference Set Readiness

Commit: fca4b017b4aa0b7984377156f5ca2c631adfe581

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 1 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area Status Evidence / Next Step
Deep analyzer corpus Missing Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison Missing Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus Missing Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus Missing Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility Missing Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence Missing Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence Missing Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

@ecc-tools
ecc-tools Bot commented Nov 2, 2026
Copy link
Copy Markdown

ECC Tools / Hosted Promotion Readiness

Commit: fca4b017b4aa0b7984377156f5ca2c631adfe581

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 1 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

@coderabbitai
coderabbitai Bot commented Nov 2, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 97806ecf-25f8-4bf4-a29f-9d994d25d9f4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants

0