Skip to content

fix: rustls 0.23.46 for new advisories; obc ci with gh 2.102 - #2717

Merged
timohueser merged 2 commits into
developfrom
claude/rustls-0.23.46
Oct 15, 2026
Merged

timohueser merged 2 commits into
developfrom
claude/rustls-0.23.46

Conversation

@timohueser

@timohueser timohueser commented Oct 15, 2026 •

Copy link
Copy Markdown
Owner

deny fails on every pull request that selects ci.licenses, for example #2703. Four new advisories name rustls 0.23.45: RUSTSEC-2026-0346, -0347, -0348 and -0349. Each names 0.23.46 as the fix.

  • cargo update -p rustls --precise 0.23.46 in the workspace and in builder/desktop. ureq reads rustls; nothing else changes in the lockfiles.
  • tools/licenses/THIRD-PARTY.md names rustls 0.23.46. cargo-about 0.9.1 is not installed on this machine, so this one line is edited by hand; the licence texts of the patch release do not change, and the deny job checks the file with --check.
  • obc ci printed no failure with gh 2.102: gh refuses a response with terminal escape sequences without --allow-escape-sequences. tools/ci_log.py passes the flag. Its clean already removes the escape sequences of each line.

Checks: cargo check --locked -p obc-data (builds rustls 0.23.46), python -m unittest tools.tests.test_ci_log, and python3 tools/ci_log.py on the failed run of #2703, which now prints the four advisories. Left out: no local cargo-deny (not installed here) and no desktop build; CI is the gate.

Public docs changed: no.

Requirements: none

🤖 Generated with Claude Code

@coderabbitai

coderabbitai Bot commented Oct 15, 2026 •

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8b7e7ddf-66d1-45fb-b65f-77177f8fa728
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

timohueser and others added 2 commits October 15, 2026 21:11
cargo-deny refuses rustls 0.23.45: four advisories name 0.23.46 as the
fix. ureq reads it in the workspace and in builder/desktop.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
gh 2.102 refuses to print a response with terminal escape sequences
without `--allow-escape-sequences`, so `obc ci` printed no failure.
`clean` already removes the escape sequences of each line.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@timohueser
timohueser force-pushed the claude/rustls-0.23.46 branch from 93d71b4 to dc02616 Compare October 15, 2026 19:11
@timohueser
timohueser merged commit a5f559c into develop Oct 15, 2026
30 checks passed
@timohueser
timohueser deleted the claude/rustls-0.23.46 branch October 15, 2026 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant