Skip to content

fix(deps): update dependencies and switch to naersk for nix builds#42

Merged
tembleking merged 2 commits intomasterfrom
fix/deps-and-naersk
May 7, 2026
Merged

fix(deps): update dependencies and switch to naersk for nix builds#42
tembleking merged 2 commits intomasterfrom
fix/deps-and-naersk

Conversation

@tembleking
Copy link
Copy Markdown
Member

Fixes security vulnerabilities found by cargo audit:

  • RUSTSEC-2026-0104: rustls-webpki reachable panic in CRL parsing
  • RUSTSEC-2026-0098: rustls-webpki incorrect URI name constraints
  • RUSTSEC-2026-0099: rustls-webpki wildcard name constraints accepted
  • RUSTSEC-2026-0097: rand unsoundness with custom logger

Also switches Nix build from rustPlatform.buildRustPackage to naersk.buildPackage for Rust build caching.

tembleking added 2 commits May 7, 2026 16:48
Fixes RUSTSEC-2026-0104, RUSTSEC-2026-0098, RUSTSEC-2026-0099 in rustls-webpki and RUSTSEC-2026-0097 in rand. Replaces rustPlatform.buildRustPackage with naersk for Rust build caching in Nix.
@tembleking tembleking enabled auto-merge (squash) May 7, 2026 14:59
@tembleking tembleking merged commit a903f87 into master May 7, 2026
5 checks passed
@tembleking tembleking deleted the fix/deps-and-naersk branch May 7, 2026 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants