Skip to content

fix: update openssl to resolve CVEs#2

Open
dannyneira wants to merge 1 commit into
mainfrom
independabot/openssl-cves
Open

fix: update openssl to resolve CVEs#2
dannyneira wants to merge 1 commit into
mainfrom
independabot/openssl-cves

Conversation

@dannyneira
Copy link
Copy Markdown
Member

Summary

  • Updated transitive Rust openssl from 0.10.75 to 0.10.80 in Cargo.lock.
  • Updated openssl-sys from 0.9.111 to 0.9.116 as part of the targeted cargo update.
  • This is a transitive runtime dependency update pulled through native-tls -> hyper-tls -> reqwest / async-openai.
  • No workaround directives were added.

Dependabot alerts resolved

Advisory references

Verification

  • cargo audit --json reports no remaining openssl findings. The audit still reports unrelated non-OpenSSL advisories.
  • cargo fmt
  • cargo check
  • cargo clippy --all-targets --all-features
  • cargo test

Conversation: https://staging.warp.dev/conversation/f8588ab1-fd15-4f48-964e-a92bcce132c3
Run: https://oz.staging.warp.dev/runs/019e7476-c6a0-7e9e-9f4c-b79014c4572b

Co-Authored-By: Oz oz-agent@warp.dev

This PR was generated with Oz.

Co-Authored-By: Oz <oz-agent@warp.dev>
@dannyneira dannyneira requested a review from bholmesdev May 29, 2026 16:07
@dannyneira dannyneira marked this pull request as ready for review May 29, 2026 17:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants