Skip to content

build(deps): bump openssl from 0.10.79 to 0.10.80#610

Merged
ErikBjare merged 1 commit into
masterfrom
dependabot/cargo/openssl-0.10.80
May 23, 2026
Merged

build(deps): bump openssl from 0.10.79 to 0.10.80#610
ErikBjare merged 1 commit into
masterfrom
dependabot/cargo/openssl-0.10.80

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 21, 2026

Bumps openssl from 0.10.79 to 0.10.80.

Release notes

Sourced from openssl's releases.

openssl-v0.10.80

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

Commits
  • 35be7ae Release openssl 0.10.80 and openssl-sys 0.9.116 (#2639)
  • 19eceb2 Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-pad...
  • b460eb3 Prefer Homebrew openssl@4 and stop looking for openssl@1.1 (#2633)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 21, 2026
@greptile-apps
Copy link
Copy Markdown

greptile-apps Bot commented May 21, 2026

Greptile Summary

Routine dependency bump of openssl from 0.10.79 to 0.10.80 (and openssl-sys from 0.9.115 to 0.9.116), picking up a security-relevant buffer-overflow fix in cipher_update_inplace for AES key-wrap-with-padding.

  • aw-sync/Cargo.toml: exact pinned version updated from 0.10.79 to 0.10.80 for the Linux target dependency (the vendored feature flag is preserved).
  • Cargo.lock: checksums updated for both openssl and openssl-sys to match the new releases.

Confidence Score: 5/5

Safe to merge — this is a targeted dependency bump that brings in a security fix and no breaking API changes.

Both changed files are purely mechanical: the lock file records new checksums and the manifest updates the exact pinned version. The upstream release note describes only a buffer-overflow fix in an AES key-wrap code path and a build-system change (Homebrew path preference); no API removals or behavioral changes are noted.

No files require special attention.

Important Files Changed

Filename Overview
Cargo.lock Updated checksums and versions for openssl (0.10.79→0.10.80) and openssl-sys (0.9.115→0.9.116); lock file correctly reflects the new dependency versions.
aw-sync/Cargo.toml Pinned openssl version updated from 0.10.79 to 0.10.80 for Linux targets; consistent with the lock file bump and prior pinning approach.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[aw-sync/Cargo.toml\nLinux target dep] -->|version = 0.10.80, vendored| B[openssl 0.10.80]
    B --> C[openssl-sys 0.9.116]
    C --> D[libssl / libcrypto\nvendored build]
    B -->|security fix| E[cipher_update_inplace\nbuffer overflow patched]
Loading

Reviews (2): Last reviewed commit: "build(deps): bump openssl from 0.10.79 t..." | Re-trigger Greptile

Bumps [openssl](https://github.com/rust-openssl/rust-openssl) from 0.10.79 to 0.10.80.
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.80
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/openssl-0.10.80 branch from 20de2b0 to 07828ee Compare May 23, 2026 15:56
@ErikBjare ErikBjare merged commit a9d0fcf into master May 23, 2026
7 checks passed
@dependabot dependabot Bot deleted the dependabot/cargo/openssl-0.10.80 branch May 23, 2026 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant