From 8bb4e10881730576bbb82e54ede1ebf5931194c3 Mon Sep 17 00:00:00 2001 From: Matt Mastracci Date: Fri, 25 Aug 2023 15:40:25 -0600 Subject: fix(ext/tls): upgrade webpki version (#20285) This removes a webpki version that was showing up as vulnerable to https://github.com/briansmith/webpki/issues/69. Needed to upgrade `reqwest` as part of this. --- Cargo.toml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'Cargo.toml') diff --git a/Cargo.toml b/Cargo.toml index bc43c9fcd..287d808bb 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -115,11 +115,14 @@ prost-build = "0.11" rand = "=0.8.5" regex = "^1.7.0" lazy-regex = "2.5.0" -reqwest = { version = "0.11.18", default-features = false, features = ["rustls-tls", "stream", "gzip", "brotli", "socks", "json"] } +reqwest = { version = "0.11.20", default-features = false, features = ["rustls-tls", "stream", "gzip", "brotli", "socks", "json"] } ring = "=0.16.20" rusqlite = { version = "=0.29.0", features = ["unlock_notify", "bundled"] } rustls = "0.21.0" rustls-pemfile = "1.0.0" +rustls-webpki = "0.101.4" +rustls-native-certs = "0.6.2" +webpki-roots = "0.25.2" serde = { version = "1.0.149", features = ["derive"] } serde_bytes = "0.11" serde_json = "1.0.85" -- cgit v1.2.3