[PR #419] chore(deps): bump openssl from 0.10.75 to 0.10.80 in /desktop/src-tauri #402

Open
opened 2026-06-05 14:22:43 -04:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/Drop-OSS/drop/pull/419
Author: @dependabot[bot]
Created: 5/28/2026
Status: 🔄 Open

Base: developHead: dependabot/cargo/desktop/src-tauri/openssl-0.10.80


📝 Commits (1)

  • 32171ae chore(deps): bump openssl from 0.10.75 to 0.10.80 in /desktop/src-tauri

📊 Changes

1 file changed (+4 additions, -5 deletions)

View changed files

📝 desktop/src-tauri/Cargo.lock (+4 -5)

📄 Description

Bumps openssl from 0.10.75 to 0.10.80.

Release notes

Sourced from openssl's releases.

openssl-v0.10.80

What's Changed

Full Changelog: https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.79...openssl-v0.10.80

openssl-v0.10.79

What's Changed

Full Changelog: https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.78...openssl-v0.10.79

openssl-v0.10.78

What's Changed

... (truncated)

Commits
  • 35be7ae Release openssl 0.10.80 and openssl-sys 0.9.116 (#2639)
  • 19eceb2 Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-pad...
  • b460eb3 Prefer Homebrew openssl@4 and stop looking for openssl@1.1 (#2633)
  • 649f2d9 Release openssl 0.10.79 and openssl-sys 0.9.115 (#2632)
  • 257f9b2 Fix output buffer overflow for AES key-wrap-with-padding ciphers (#2630)
  • d43e917 Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders (#2631)
  • f46519c Add PkeyCtxRef::set_context_string for ML-DSA (#2629)
  • ad9ae31 Bind OSSL_PARAM_modified and use it for seed_into (#2628)
  • 4e25c9b Fix process abort when verify/PSK callbacks fire after SSL_CTX swap (#2624)
  • 3dd8f42 Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction (#2626)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Drop-OSS/drop/pull/419 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/28/2026 **Status:** 🔄 Open **Base:** `develop` ← **Head:** `dependabot/cargo/desktop/src-tauri/openssl-0.10.80` --- ### 📝 Commits (1) - [`32171ae`](https://github.com/Drop-OSS/drop/commit/32171ae311ff7c4a1ce82c37f936029ab3254dba) chore(deps): bump openssl from 0.10.75 to 0.10.80 in /desktop/src-tauri ### 📊 Changes **1 file changed** (+4 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `desktop/src-tauri/Cargo.lock` (+4 -5) </details> ### 📄 Description Bumps [openssl](https://github.com/rust-openssl/rust-openssl) from 0.10.75 to 0.10.80. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rust-openssl/rust-openssl/releases">openssl's releases</a>.</em></p> <blockquote> <h2>openssl-v0.10.80</h2> <h2>What's Changed</h2> <ul> <li>Prefer Homebrew openssl@4 and stop looking for openssl@1.1 by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2633">rust-openssl/rust-openssl#2633</a></li> <li>Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2638">rust-openssl/rust-openssl#2638</a></li> <li>Release openssl 0.10.80 and openssl-sys 0.9.116 by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2639">rust-openssl/rust-openssl#2639</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.79...openssl-v0.10.80">https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.79...openssl-v0.10.80</a></p> <h2>openssl-v0.10.79</h2> <h2>What's Changed</h2> <ul> <li>Bump actions/cache from 5.0.4 to 5.0.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2610">rust-openssl/rust-openssl#2610</a></li> <li>Try to fix OpenSSL 1.1.0l download by <a href="https://github.com/botovq"><code>@​botovq</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2614">rust-openssl/rust-openssl#2614</a></li> <li>Require &amp;mut BigNumContextRef for EcPointRef mul/invert by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2615">rust-openssl/rust-openssl#2615</a></li> <li>Fix UB in EcGroupRef::generator on groups without a generator by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2617">rust-openssl/rust-openssl#2617</a></li> <li>Replace <code>use libc::*;</code> with targeted imports in openssl-sys by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2618">rust-openssl/rust-openssl#2618</a></li> <li>Add PKeyRef::is_a and KeyType for name-based key identification by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2619">rust-openssl/rust-openssl#2619</a></li> <li>Add PKey::{public,private}_key_from_raw_bytes_ex by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2620">rust-openssl/rust-openssl#2620</a></li> <li>Bump MSRV to 1.80 by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2622">rust-openssl/rust-openssl#2622</a></li> <li>Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2623">rust-openssl/rust-openssl#2623</a></li> <li>Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2621">rust-openssl/rust-openssl#2621</a></li> <li>parallelize more builds in CI for cold caches by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2625">rust-openssl/rust-openssl#2625</a></li> <li>Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2626">rust-openssl/rust-openssl#2626</a></li> <li>Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2624">rust-openssl/rust-openssl#2624</a></li> <li>Bind OSSL_PARAM_modified and use it for seed_into by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2628">rust-openssl/rust-openssl#2628</a></li> <li>Add PkeyCtxRef::set_context_string for ML-DSA by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2629">rust-openssl/rust-openssl#2629</a></li> <li>Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2631">rust-openssl/rust-openssl#2631</a></li> <li>Fix output buffer overflow for AES key-wrap-with-padding ciphers by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2630">rust-openssl/rust-openssl#2630</a></li> <li>Release openssl 0.10.79 and openssl-sys 0.9.115 by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2632">rust-openssl/rust-openssl#2632</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.78...openssl-v0.10.79">https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.78...openssl-v0.10.79</a></p> <h2>openssl-v0.10.78</h2> <h2>What's Changed</h2> <ul> <li>Fix Suite B flag assignments in verify.rs by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2592">rust-openssl/rust-openssl#2592</a></li> <li>Use cvt_p for OPENSSL_malloc error handling by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2593">rust-openssl/rust-openssl#2593</a></li> <li>Mark BIO_get_mem_data on AWS-LC to be unsafe by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2594">rust-openssl/rust-openssl#2594</a></li> <li>Set timeout for package installation step by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2595">rust-openssl/rust-openssl#2595</a></li> <li>Panic in Crypter::new when IV is required but not provided by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2596">rust-openssl/rust-openssl#2596</a></li> <li>openssl 4 support by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2591">rust-openssl/rust-openssl#2591</a></li> <li>Avoid panic for overlong OIDs by <a href="https://github.com/botovq"><code>@​botovq</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2598">rust-openssl/rust-openssl#2598</a></li> <li>Fix dangling stack pointer in custom extension add callback by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2599">rust-openssl/rust-openssl#2599</a></li> <li>Add support for LibreSSL 4.3.x by <a href="https://github.com/botovq"><code>@​botovq</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2603">rust-openssl/rust-openssl#2603</a></li> <li>fix inverted bounds assertion in AES key unwrap by <a href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2604">rust-openssl/rust-openssl#2604</a></li> <li>Reject oversized length returns from password callback trampoline by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2605">rust-openssl/rust-openssl#2605</a></li> <li>Validate callback-returned lengths in PSK and cookie trampolines by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2607">rust-openssl/rust-openssl#2607</a></li> <li>Error for short out in MdCtxRef::digest_final() by <a href="https://github.com/botovq"><code>@​botovq</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2608">rust-openssl/rust-openssl#2608</a></li> <li>Check derive output buffer length on OpenSSL 1.1.x by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2606">rust-openssl/rust-openssl#2606</a></li> <li>Release openssl v0.10.78 and openssl-sys v0.9.114 by <a href="https://github.com/alex"><code>@​alex</code></a> in <a href="https://redirect.github.com/rust-openssl/rust-openssl/pull/2609">rust-openssl/rust-openssl#2609</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/35be7ae43b207fc0448a648a21e9156bc360c9af"><code>35be7ae</code></a> Release openssl 0.10.80 and openssl-sys 0.9.116 (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2639">#2639</a>)</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/19eceb26f2404aae187e5444e65c404ebc1348a7"><code>19eceb2</code></a> Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-pad...</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/b460eb378c335610df5395a251408ad70bb60d42"><code>b460eb3</code></a> Prefer Homebrew openssl@4 and stop looking for openssl@1.1 (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2633">#2633</a>)</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/649f2d9e37f3aa701e20bd8ab5cd7eb5afa0a90f"><code>649f2d9</code></a> Release openssl 0.10.79 and openssl-sys 0.9.115 (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2632">#2632</a>)</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/257f9b20c001b888986f93579f118fa2a57d4f45"><code>257f9b2</code></a> Fix output buffer overflow for AES key-wrap-with-padding ciphers (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2630">#2630</a>)</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/d43e9179b1885fc66269a42361cc7a80f631ac8f"><code>d43e917</code></a> Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2631">#2631</a>)</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/f46519c8694a3e121091dafe38aab77c2f756546"><code>f46519c</code></a> Add PkeyCtxRef::set_context_string for ML-DSA (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2629">#2629</a>)</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/ad9ae312771f898749a9471549519d45eba6a033"><code>ad9ae31</code></a> Bind OSSL_PARAM_modified and use it for seed_into (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2628">#2628</a>)</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/4e25c9be20dae1e78f1a3815950cd0973addae82"><code>4e25c9b</code></a> Fix process abort when verify/PSK callbacks fire after SSL_CTX swap (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2624">#2624</a>)</li> <li><a href="https://github.com/rust-openssl/rust-openssl/commit/3dd8f425ef34a069b5bec46f3971b67db1c295c7"><code>3dd8f42</code></a> Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction (<a href="https://redirect.github.com/rust-openssl/rust-openssl/issues/2626">#2626</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.75...openssl-v0.10.80">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=openssl&package-manager=cargo&previous-version=0.10.75&new-version=0.10.80)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Drop-OSS/drop/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-05 14:22:43 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Drop-OSS/drop#402