Bump dependencies to address GHSA-q6cp-qfwq-4gcv

This aligns the dependencies to use a single version of rustls (v0.21.12) and tokio-rustls (v0.24.1).
edgebitio · May 13, 2024 · 143aaca · 143aaca
1 parent 856a99c
commit 143aaca
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 40 deletions.
diff --git a/enclaver/Cargo.lock b/enclaver/Cargo.lock
diff --git a/enclaver/Cargo.toml b/enclaver/Cargo.toml
@@ -25,10 +25,10 @@ regex = "1.6"
 tokio = { version = "1.24.1", features = ["full"] }
 tokio-pipe = "0.2"
 tokio-vsock = { version = "0.4", optional = true }
-tokio-rustls = { version = "0.23", features = ["dangerous_configuration"] }
+tokio-rustls = { version = "0.24", features = ["dangerous_configuration"] }
 tokio-util = { version = "0.7", features = ["codec"] }
 tokio-tar = "0.3"
-rustls = "0.20"
+rustls = "0.21"
 rustls-pemfile = "1.0"
 log = "0.4"
 pretty_env_logger = "0.5"
@@ -75,7 +75,7 @@ console-subscriber = { version = "0.1.10", optional = true }
 
 [dev-dependencies]
 assert2 = "0.3"
-tls-listener = { version = "0.5", features = ["rustls", "hyper-h1"] }
+tls-listener = { version = "0.7", features = ["rustls", "hyper-h1"] }
 reqwest = { version = "0.11.8", default-features = false, features = ["rustls-tls-webpki-roots"] }
 aws-credential-types = { version = "0.56.1", features = ["hardcoded-credentials"] }