Bump rustls from 0.23.36 to 0.23.37 #515

Merged

dependabot[bot] merged 1 commit from dependabot/cargo/rustls-0.23.37 into main

2026-03-02 19:33:40 +00:00

dependabot[bot] commented

2026-03-02 06:40:28 +00:00

(Migrated from github.com)

Bumps rustls from 0.23.36 to 0.23.37.

Commits

4b455b8 Bump version of rustls
245963b Add ML-KEM-1024 key encapsulation mechanism
e1886fd Take semver-compatible updates
86ad94b Refresh verify-bench certificates
4df9216 Do not "warm up" aws-lc-rs RNG in other benchmarks
ff6f798 ci-bench: "pre-warm" per-thread entropy source
3c1841c chore(deps): update actions/cache action to v5
1735677 chore(deps): update actions/upload-artifact action to v6
c91fce0 chore(deps): update taiki-e/cache-cargo-install-action action to v3
c3a6a11 upgrade to zlib-rs 0.6.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rustls](https://github.com/rustls/rustls) from 0.23.36 to 0.23.37. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rustls/rustls/commit/4b455b819962978b4b6e009def15107ac5f4c5e8"><code>4b455b8</code></a> Bump version of rustls</li> <li><a href="https://github.com/rustls/rustls/commit/245963b1510fa2f42aaca217bba8d04393ab7fef"><code>245963b</code></a> Add ML-KEM-1024 key encapsulation mechanism</li> <li><a href="https://github.com/rustls/rustls/commit/e1886fd05a59c6df373f33508aa0136ce516e481"><code>e1886fd</code></a> Take semver-compatible updates</li> <li><a href="https://github.com/rustls/rustls/commit/86ad94b64bf0a87e103e5a79ffbec42b7c07bbef"><code>86ad94b</code></a> Refresh verify-bench certificates</li> <li><a href="https://github.com/rustls/rustls/commit/4df9216e57f2650f05f88e9dc826946fb848a5b6"><code>4df9216</code></a> Do not "warm up" aws-lc-rs RNG in other benchmarks</li> <li><a href="https://github.com/rustls/rustls/commit/ff6f7985aa89a67a7ac29e0a5663af7953af0c3b"><code>ff6f798</code></a> ci-bench: "pre-warm" per-thread entropy source</li> <li><a href="https://github.com/rustls/rustls/commit/3c1841c73263683a80c2eaa2f70754bbc44012df"><code>3c1841c</code></a> chore(deps): update actions/cache action to v5</li> <li><a href="https://github.com/rustls/rustls/commit/1735677c858e87a746e2a2a2928d7ec1b998d579"><code>1735677</code></a> chore(deps): update actions/upload-artifact action to v6</li> <li><a href="https://github.com/rustls/rustls/commit/c91fce039aa994a1fd0e946b147c3eca21b6e19e"><code>c91fce0</code></a> chore(deps): update taiki-e/cache-cargo-install-action action to v3</li> <li><a href="https://github.com/rustls/rustls/commit/c3a6a11a615a50f1ba3dfa8901d5d802263fd8c1"><code>c3a6a11</code></a> upgrade to zlib-rs 0.6.0</li> <li>Additional commits viewable in <a href="https://github.com/rustls/rustls/compare/v/0.23.36...v/0.23.37">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls&package-manager=cargo&previous-version=0.23.36&new-version=0.23.37)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>