deps(cargo): bump rustls from 0.23.42 to 0.23.43 #241

2026-07-30T04:12:35Z

dependabot[bot] commented

2026-07-30 04:12:35 +00:00

(Migrated from github.com)

Bumps rustls from 0.23.42 to 0.23.43.

Commits

fcf61cd Prepare 0.23.43
f0dad4c Check server's proposed suite against actual offer
b480cc6 Test for server choosing a non-QUIC TLS1.3 suite
883a44d Consider Protocol in ServerConfig::supports_version
c2f1fd9 Check suitability of server version in QUIC client
d98e1b9 Add test for server Tls13RequiredForQuic
e63d9bf Bound ticket age calculation
79cd462 Defensiveness improvement for binder suffix arithmetic
4a9f025 use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt
3131e5c Accept that libcrux deps are vulnerable
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rustls](https://github.com/rustls/rustls) from 0.23.42 to 0.23.43. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rustls/rustls/commit/fcf61cdbba30913cfd5b40aefa83989c6233812d"><code>fcf61cd</code></a> Prepare 0.23.43</li> <li><a href="https://github.com/rustls/rustls/commit/f0dad4c57112955eb1f4fa2f076458329b4221b3"><code>f0dad4c</code></a> Check server's proposed suite against actual offer</li> <li><a href="https://github.com/rustls/rustls/commit/b480cc674c5229cbd56d0551d1fc0e32839e5fdd"><code>b480cc6</code></a> Test for server choosing a non-QUIC TLS1.3 suite</li> <li><a href="https://github.com/rustls/rustls/commit/883a44d45aa3e8fd6db56b3429c3156cc28d737b"><code>883a44d</code></a> Consider <code>Protocol</code> in <code>ServerConfig::supports_version</code></li> <li><a href="https://github.com/rustls/rustls/commit/c2f1fd9c38e53f2c902a2481f4f78ae8aaa37e64"><code>c2f1fd9</code></a> Check suitability of server version in QUIC client</li> <li><a href="https://github.com/rustls/rustls/commit/d98e1b9ea10138f6dddfe48f5440dc0aa95e22cc"><code>d98e1b9</code></a> Add test for server <code>Tls13RequiredForQuic</code></li> <li><a href="https://github.com/rustls/rustls/commit/e63d9bf2c0c8f67932a0941890d36845329f7abe"><code>e63d9bf</code></a> Bound ticket age calculation</li> <li><a href="https://github.com/rustls/rustls/commit/79cd46294ccb50f6a5faac9a67857e3201ddba2a"><code>79cd462</code></a> Defensiveness improvement for binder suffix arithmetic</li> <li><a href="https://github.com/rustls/rustls/commit/4a9f025d50e6b98ebaa0ccb35c416998f51776d0"><code>4a9f025</code></a> use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt</li> <li><a href="https://github.com/rustls/rustls/commit/3131e5c307591c0627cd670ec2585657661093d9"><code>3131e5c</code></a> Accept that libcrux deps are vulnerable</li> <li>Additional commits viewable in <a href="https://github.com/rustls/rustls/compare/v/0.23.42...v/0.23.43">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls&package-manager=cargo&previous-version=0.23.42&new-version=0.23.43)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/nuncio#241