build(deps): bump openssl from 0.10.73 to 0.10.78#591
build(deps): bump openssl from 0.10.73 to 0.10.78#591dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps [openssl](https://github.com/rust-openssl/rust-openssl) from 0.10.73 to 0.10.78. - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.73...openssl-v0.10.78) --- updated-dependencies: - dependency-name: openssl dependency-version: 0.10.78 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Greptile SummaryThis PR bumps Confidence Score: 5/5Safe to merge — straightforward security dependency bump with no logic changes Both changed files contain only version and checksum updates consistent with the upstream release. No application logic is modified and all security-relevant fixes in this release range are improvements. No files require special attention Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A["aw-sync (Linux target)"] -->|"openssl 0.10.78 vendored"| B["openssl crate 0.10.78"]
B --> C["openssl-sys 0.9.114"]
C --> D["libssl / libcrypto (vendored)"]
Reviews (1): Last reviewed commit: "build(deps): bump openssl from 0.10.73 t..." | Re-trigger Greptile |
|
Master is red because the scheduled Dependabot security update keeps failing while this PR is still open. The failing runs on 2026-04-23 (24811552283, 24811619259, 24811776424) all report pull_request_exists_for_latest_version for openssl 0.10.78, not a test/build regression. I checked this PR: it is CLEAN, MERGEABLE, and all checks are passing. I tried to merge it directly, but TimeToBuildBob does not have MergePullRequest permission in this repo. A maintainer with merge rights should merge this PR (or enable automerge) to clear the repeated master CI failures. |
1 participant
Bumps openssl from 0.10.73 to 0.10.78.
Release notes
Sourced from openssl's releases.
... (truncated)
Commits
a6debf5Release openssl v0.10.78 and openssl-sys v0.9.114 (#2609)09b425eCheck derive output buffer length on OpenSSL 1.1.x (#2606)826c388Error for short out in MdCtxRef::digest_final() (#2608)1d10902Validate callback-returned lengths in PSK and cookie trampolines (#2607)5af6895Reject oversized length returns from password callback trampoline (#2605)718d07ffix inverted bounds assertion in AES key unwrap (#2604)53cc69dAdd support for LibreSSL 4.3.x (#2603)0b41e79Fix dangling stack pointer in custom extension add callback (#2599)cbdedf8Avoid panic for overlong OIDs (#2598)1fc51efopenssl 4 support (#2591)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.