Skip to content

deps: bump thirtyfour from 0.37.8 to 0.38.1 - #6719

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/cargo/thirtyfour-0.38.1
Open

dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/cargo/thirtyfour-0.38.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps thirtyfour from 0.37.8 to 0.38.1.

Release notes

Sourced from thirtyfour's releases.

v0.38.1

Security fix for RUSTSEC-2026-0381 (CVE-2026-111943): the cdp-events / bidi WebSocket connections now use webpki-roots >= 1.0.10, which removes the distrusted emSign ECC Root CA - G3.

Full Changelog: stevepryde/thirtyfour@v0.38.0...v0.38.1

v0.38.0

Breaking: CdpError::data is now Option<Box<serde_json::Value>>. See MIGRATION.md.

What's Changed

Full Changelog: stevepryde/thirtyfour@v0.37.8...v0.38.0

v0.37.10

Security fix for RUSTSEC-2026-0381 (CVE-2026-111943): the cdp-events / bidi WebSocket connections now use webpki-roots >= 1.0.10, which removes the distrusted emSign ECC Root CA - G3.

Full Changelog: stevepryde/thirtyfour@v0.37.9...v0.37.10

v0.37.9

Bumped dependencies Full Changelog: stevepryde/thirtyfour@v0.37.8...v0.37.9

Commits
  • 24f9114 Merge pull request #378 from stevepryde/fix/webpki-roots-1.0.10
  • 5b168db Supply webpki-roots 1.x to tokio-tungstenite directly
  • 0f2701a Require webpki-roots >= 1.0.10 to drop distrusted emSign root
  • 67abad5 Bump thirtyfour to 0.38.0
  • 4c6c2cb Merge pull request #377 from bjones1/update-deps
  • 898bd7c Bump base64 to 0.23, zip to 9, and rstest to 0.28
  • 674c7f9 Use as_chunks instead of chunks_exact for fixed-size chunks
  • 4019eef Box CdpError::data to fix clippy result_large_err
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [thirtyfour](https://github.com/stevepryde/thirtyfour) from 0.37.8 to 0.38.1.
- [Release notes](https://github.com/stevepryde/thirtyfour/releases)
- [Commits](stevepryde/thirtyfour@v0.37.8...v0.38.1)

---
updated-dependencies:
- dependency-name: thirtyfour
  dependency-version: 0.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@ackintosh

Copy link
Copy Markdown
Collaborator

The transport interoperability tests (native) failure should be resolved by #6733.

@ackintosh

Copy link
Copy Markdown
Collaborator

The hole-punch interoperability tests error should be resolved by libp2p/test-plans#873.

@ackintosh

Copy link
Copy Markdown
Collaborator

The transport interoperability tests (chromium) error should be resolved by #6736.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants