summaryrefslogtreecommitdiff
path: root/Cargo.toml
diff options
context:
space:
mode:
authorMatt Mastracci <matthew@mastracci.com>2023-08-25 15:40:25 -0600
committerGitHub <noreply@github.com>2023-08-25 23:40:25 +0200
commit8bb4e10881730576bbb82e54ede1ebf5931194c3 (patch)
tree39e093f85237557be498efad55bfc3af922c274a /Cargo.toml
parent907d9bb4d720a7b01bffb098c72c789665f2415b (diff)
fix(ext/tls): upgrade webpki version (#20285)
This removes a webpki version that was showing up as vulnerable to https://github.com/briansmith/webpki/issues/69. Needed to upgrade `reqwest` as part of this.
Diffstat (limited to 'Cargo.toml')
-rw-r--r--Cargo.toml5
1 files changed, 4 insertions, 1 deletions
diff --git a/Cargo.toml b/Cargo.toml
index bc43c9fcd..287d808bb 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -115,11 +115,14 @@ prost-build = "0.11"
rand = "=0.8.5"
regex = "^1.7.0"
lazy-regex = "2.5.0"
-reqwest = { version = "0.11.18", default-features = false, features = ["rustls-tls", "stream", "gzip", "brotli", "socks", "json"] }
+reqwest = { version = "0.11.20", default-features = false, features = ["rustls-tls", "stream", "gzip", "brotli", "socks", "json"] }
ring = "=0.16.20"
rusqlite = { version = "=0.29.0", features = ["unlock_notify", "bundled"] }
rustls = "0.21.0"
rustls-pemfile = "1.0.0"
+rustls-webpki = "0.101.4"
+rustls-native-certs = "0.6.2"
+webpki-roots = "0.25.2"
serde = { version = "1.0.149", features = ["derive"] }
serde_bytes = "0.11"
serde_json = "1.0.85"