Skip to content

chore(deps): bump the rust-dependencies group across 1 directory with 3 updates#5

Closed
dependabot[bot] wants to merge 23 commits intomainfrom
dependabot/cargo/rust-dependencies-545898c81d
Closed

chore(deps): bump the rust-dependencies group across 1 directory with 3 updates#5
dependabot[bot] wants to merge 23 commits intomainfrom
dependabot/cargo/rust-dependencies-545898c81d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 27, 2026 •
edited
Loading

Bumps the rust-dependencies group with 3 updates in the / directory: clap, reqwest and dirs.

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates reqwest from 0.11.27 to 0.12.28

Release notes

Sourced from reqwest's releases.

v0.12.28

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.27...v0.12.28

v0.12.27

tl;dr

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Pipe.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.26...v0.12.27

v0.12.26

tl;dr

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.25...v0.12.26

v0.12.25

Highlights

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

v0.12.24

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.

v0.12.23

  • Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
  • Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
  • Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
  • Add http3_* options to blocking::ClientBuilder.
  • Fix default TCP timeout values to enabled and faster.
  • Fix SOCKS proxies to default to port 1080
  • (wasm) Add cache methods to RequestBuilder.

v0.12.22

  • Fix socks proxies when resolving IPv6 destinations.

v0.12.21

  • Fix socks proxy to use socks4a:// instead of socks4h://.
  • Fix Error::is_timeout() to check for hyper and IO timeouts too.
  • Fix request Error to again include URLs when possible.
  • Fix socks connect error to include more context.
  • (wasm) implement Default for Body.

v0.12.20

... (truncated)

Commits

Updates dirs from 5.0.1 to 6.0.0

Commits

morgaesis added 11 commits March 12, 2026 14:45
@morgaesis
Initial release: LLM-powered SSH command filter for AI agents
13c865d 
Single-file bash tool that evaluates SSH commands via LLM function
calling before execution. Three policy modes (readonly, paranoid, safe),
output redaction, risk scoring, audit logging, and .env file resolution.
@morgaesis
Add git hooks: pre-commit secret scan and pre-push QA checks
da1bff1 
pre-commit: infisical secret scanning on staged files
pre-push: commit message validation, cargo fmt/clippy/test, shellcheck
@morgaesis
Fix shellcheck warnings in demo script
46bdcce
@morgaesis
Rewrite in Rust with CI, install script, and improved redaction
b2d8606 
- Full Rust rewrite: clap CLI with -v/-vv/-vvv/-vvvv verbosity,
  --mode flag, --dry-run, tracing-based logging
- Improved output redaction: catches high-entropy hex/base64 values
  in arbitrary env vars (e.g. X_CT0=9c52ab...), standalone base64
  blobs, plus all previous patterns
- CI: GitHub Actions for test/lint (fmt, clippy, test) and
  multi-arch release builds (linux x86_64/arm64, macOS x86_64/arm64)
- Release pipeline: tag-triggered builds with stripped binaries,
  version-locked install.sh in release assets
- install.sh: curl-pipe installer with platform detection
- INSTALL.md: detailed installation and provider setup guide
- Updated README to reference INSTALL.md for detailed instructions
@morgaesis
Remove generated demo assets, use VHS tape with SVG output only
dd0c971
@morgaesis
Allow HTTP query tools in readonly/safe modes, stream redacted output
72acaee 
- Add curl/wget/fetch/httpie to approved commands in readonly and safe
  policy prompts. The LLM evaluates intent rather than blanket-blocking
  HTTP tools.
- Refine pipe evaluation: pipes are assessed as a full pipeline (data
  flow) rather than each command in isolation, preventing false denials
  like "curl ... | head".
- Tighten "remote code execution" deny rule to only match piping to
  shell interpreters (bash/sh/eval), not all curl usage.
- Switch redacted output from full buffering (.output()) to line-by-line
  streaming via BufReader, so callers see output in real time.
- README markdown table formatting fixes.
@morgaesis
Add server mode for privileged SSH command execution
2befabd 
Implements ssh-guard server mode where unprivileged agents can execute
privileged SSH commands through a trusted guard daemon. The server listens
on UNIX socket and/or TCP port, validates auth tokens, enforces policy
rules, and executes commands on behalf of clients.

Key features:
- UNIX socket listener with group-based access control
- TCP socket listener for remote agent access
- Auth token validation for TCP connections
- UID allowlist for socket access control
- Policy engine with default-deny semantics
- Client config persistence in ~/.config/ssh-guard/client.yaml
- Simplified CLI: ssh-guard <host> <command>
- User inference from $USER environment variable
@morgaesis
Fix stdout/stderr capture and return to client
5ca0836 
Previously, command output was printed to the server's stdout instead of
being captured and returned to the client through the ExecuteResponse.

Changes:
- Add stdout/stderr fields to ExecuteResult and ExecuteResponse structs
- Use tokio::process::Command::output() to capture output synchronously
- Return captured stdout/stderr in ExecuteResponse
- Client prints stdout/stderr from response before exiting
- Simplify local command execution to use output() instead of spawned tasks
- Proper redaction handling for captured output

This enables the ssh-guard client to display command output from the server.
@morgaesis
Fix policy engine pattern matching and group priority
25065bd 
- Fix pattern_matches to require space boundary for prefix matching:
  'git' now correctly does NOT match 'github' (different command)
  'ssh' still matches 'ssh user@host' (command with args)

- Fix group priority sorting to descending order:
  Higher priority groups are now checked first, as intended
  Restrictive groups with priority 100 now take precedence over
  permissive groups with priority 1

Note: test_glob_star_suffix has a pre-existing hang bug in the glob
matching algorithm, and test_pass_backend_integration fails due to
pass version not supporting --multifile flag.
@morgaesis
Fix pre-existing test issues: glob infinite loop and pass multifile c…
b55d3e4 
…heck
@morgaesis
Cleanup: remove dead code and suppress fmt warnings
f8f9235
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 27, 2026

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot changed the title chore(deps): bump the rust-dependencies group with 3 updates chore(deps): bump the rust-dependencies group across 1 directory with 3 updates Mar 27, 2026
@dependabot dependabot bot force-pushed the dependabot/cargo/rust-dependencies-545898c81d branch from fc28164 to 04d3688 Compare March 27, 2026 20:56
@morgaesis
feat: add improved LLM prompts, better arg parsing, and identity key …
d340eaf 
…support

- Rewrite evaluate.rs prompts to prefer ALLOW with clear DENY cases
- Add -V short flag for version
- Fix argument parsing for ssh-guard host cmd style
- Add identity_key support in server client for per-request key selection
@morgaesis
test: add policy integration tests and lib crate
66f2a77 
- Add src/lib.rs to expose modules for integration testing
- Add tests/policy_tests.rs with policy engine tests
- Add [lib] and [[bin]] sections to Cargo.toml
- Tests verify safe commands are allowed and dangerous ones denied
@morgaesis
fix: clarify sudo handling in LLM prompts
a8a4c77 
- Allow sudo for safe commands (sudo id, sudo systemctl status, etc.)
- Only block sudo that leads to root shell (sudo su, sudo -i, sudo -s)
- Block sudo -u root <cmd> but not sudo <safe-cmd>
- Add examples showing sudo systemctl restart is OK
- Fix message about privilege escalation being about shells, not sudo itself
@morgaesis
refactor: simplify LLM prompt to principle-based guidance
bcc5917 
Replace prescriptive allow/deny lists with general evaluation framework:
- Focus on WHAT/WHERE/HOW/WHO analysis
- Deny only clear risks: destruction, compromise, RCE, fork bombs
- Allow routine admin: reads, monitoring, service management
- Remove specific command examples - trust the model to evaluate
@morgaesis
fix: clarify root shell vs sudo command distinction in prompt
a040a94 
Better guidance on privilege escalation:
- Get root SHELL (sudo su, sudo -i) = DENY
- Run sudo for legitimate tasks (sudo apt, sudo systemctl) = ALLOW
- Flush security controls (iptables -F) = DENY
- Flushing iptables was incorrectly allowed before
@morgaesis
style: fmt
6b3774f
@morgaesis
fix: remove unused header imports
dca4c07
@morgaesis
fix: clippy needless_borrow in server.rs
1f85526
@dependabot dependabot bot force-pushed the dependabot/cargo/rust-dependencies-545898c81d branch from 04d3688 to 51ae53e Compare March 30, 2026 17:03
morgaesis and others added 4 commits March 30, 2026 18:02
@morgaesis
ci: temporarily disable macOS builds to fix release
c649ebd
@morgaesis
ci: remove target-cpu=native to fix CI build
b45b8ab
@morgaesis
chore: bump version to v0.0.2
bce801b
@dependabot
chore(deps): bump the rust-dependencies group with 3 updates
9d350c6 
Bumps the rust-dependencies group with 3 updates: [clap](https://github.com/clap-rs/clap), [reqwest](https://github.com/seanmonstar/reqwest) and [dirs](https://github.com/soc/dirs-rs).


Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `reqwest` from 0.11.27 to 0.12.28
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.11.27...v0.12.28)

Updates `dirs` from 5.0.1 to 6.0.0
- [Commits](https://github.com/soc/dirs-rs/commits)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: reqwest
  dependency-version: 0.12.28
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: dirs
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/rust-dependencies-545898c81d branch from 51ae53e to 9d350c6 Compare March 30, 2026 21:52
@morgaesis morgaesis closed this Mar 31, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 31, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/cargo/rust-dependencies-545898c81d branch March 31, 2026 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@morgaesis