Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Rust crate tls-listener to ^0.10.0 - autoclosed #194

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 4, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
tls-listener dependencies minor ^0.5.0 -> ^0.10.0

Release Notes

tmccombs/tls-listener (tls-listener)

v0.10.0

Compare Source

Security Advisory

Versions prior to this using the default configuration are vulnerable to a Slowloris attack.

This version mitigates the vulnerability.

Previous versions can mitigate the vulnerability by increasing the value passed to Builder::max_handshakes to a large
number (such as usize::MAX). Decreasing the handshake_timeout can also help, although it is still strongly recommended
to increase the max_handshakes more than the current default.

Changes
  • [breaking] Change poll_accept not to have a limit on the number of pending handshakes in the queue,
    so that connections that are not making progress towards completing the handshake will not block other
    connections from being accepted. This replaces Builder::max_handshakes with Builder::accept_batch_size.

v0.9.1

Compare Source

Miscellaneous Tasks
  • Update tokio-rustls

v0.9.0

Compare Source

Features
  • [breaking] Remove until & remove option from accept
    • BREAKING CHANGE: remove until from AsyncAccept trait. Use
      StreamExt.take_until on the TlsListener instead.
    • BREAKING CHANGE: accept fn on AsyncAccept trait no longer returns an
      Option
    • BREAKING CHANGE: accept fn on TlsListener no longer returns an Option
Upgrade
  • [breaking] Update to hyper 1.0
    • BREAKING CHANGE: Removed hyper-h1 and hyper-h2 features

v0.8.0

Compare Source

This is a backwards incompatible release. The main change is that accepting a new connection now returns a tuple of the new connection, and the peer
address. The AsyncAccept trait was also changed similarly. The Error enum was also changed to provide more details about the error. And if
the handshake times out, it now returns an error instead of silently waiting for the next connection.

Features
  • [breaking] Add a new error type for handshake timeouts

    • BREAKING CHANGE: Adds a new variant to the Error Enum
    • BREAKING CHANGE: The Error enum is now non_exhaustive
    • BREAKING CHANGE: Now returns an error if a handshake times out
  • [breaking] Yield remote address upon accepting a connection, and include it in errors.

    • BREAKING CHANGE: The enum variant Error::ListenerError is now struct-like instead of tuple-like, and is non_exhaustive like the enum itself.
    • BREAKING CHANGE: Error now has three type parameters, not two.
    • BREAKING CHANGE: TlsListener::accept and <TlsListener as Stream>::next yields a tuple of (connection, remote address), not just the connection.
    • BREAKING CHANGE: AsyncAccept now has an associated type Address, which poll_accept must now return along with the accepted connection.
  • [breaking] More changes for including peer address in response

    • BREAKING CHANGE: AsyncAccept::Error must implement std::error::Error
    • BREAKING CHANGE: TlsAcceptError is now a struct form variant.

v0.7.0

Compare Source

Changed
  • Increase tokio-rustls version to 0.24.0

v0.6.0

Compare Source

Added
  • Added additional tests and examples
  • Re-export tls engine crates as public modules.
Changed
  • Increased default handshake timeout to 10 seconds (technically a breaking change)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot changed the title Update Rust crate tls-listener to ^0.7.0 Update Rust crate tls-listener to ^0.8.0 Oct 19, 2023
@renovate renovate bot force-pushed the renovate/tls-listener-0.x branch from f2dbf06 to 1b19eb0 Compare October 19, 2023 09:05
@renovate renovate bot force-pushed the renovate/tls-listener-0.x branch 2 times, most recently from 7683e58 to 191db43 Compare December 5, 2023 11:25
@renovate renovate bot changed the title Update Rust crate tls-listener to ^0.8.0 Update Rust crate tls-listener to ^0.9.0 Dec 5, 2023
Copy link
Contributor Author

renovate bot commented Dec 5, 2023

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock
Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path sdp-injector/Cargo.toml --workspace
warning: virtual workspace defaulting to `resolver = "1"` despite one or more workspace members being on edition 2021 which implies `resolver = "2"`
note: to keep the current resolver, specify `workspace.resolver = "1"` in the workspace root's manifest
note: to use the edition 2021 resolver, specify `workspace.resolver = "2"` in the workspace root's manifest
note: for more details see https://doc.rust-lang.org/cargo/reference/resolver.html#resolver-versions
    Updating crates.io index
error: failed to select a version for `tls-listener`.
    ... required by package `sdp-injector v1.2.5 (/tmp/renovate/repos/github/appgate/sdp-k8s-injector/sdp-injector)`
versions that meet the requirements `^0.10.0` are: 0.10.0

the package `sdp-injector` depends on `tls-listener`, with features: `hyper-h1` but `tls-listener` does not have these features.


failed to select a version for `tls-listener` which could resolve this conflict

@renovate renovate bot force-pushed the renovate/tls-listener-0.x branch from 191db43 to 08e00ae Compare December 23, 2023 09:01
@renovate renovate bot changed the title Update Rust crate tls-listener to ^0.9.0 Update Rust crate tls-listener to ^0.9.1 Dec 23, 2023
@renovate renovate bot force-pushed the renovate/tls-listener-0.x branch from 08e00ae to 3bf5a80 Compare March 15, 2024 07:09
@renovate renovate bot changed the title Update Rust crate tls-listener to ^0.9.1 Update Rust crate tls-listener to ^0.10.0 Mar 15, 2024
@renovate renovate bot changed the title Update Rust crate tls-listener to ^0.10.0 Update Rust crate tls-listener to ^0.10.0 - autoclosed Mar 15, 2024
@renovate renovate bot closed this Mar 15, 2024
@renovate renovate bot deleted the renovate/tls-listener-0.x branch March 15, 2024 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

0 participants