Skip to content

chore(deps)(deps): update rcgen requirement from 0.13 to 0.14 - #62

Closed
dependabot[bot] wants to merge 1 commit into
nextfrom
dependabot/cargo/next/rcgen-0.14
Closed

chore(deps)(deps): update rcgen requirement from 0.13 to 0.14#62
dependabot[bot] wants to merge 1 commit into
nextfrom
dependabot/cargo/next/rcgen-0.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on rcgen to permit the latest version.

Release notes

Sourced from rcgen's releases.

0.14.8

What's Changed

Commits
  • a70f083 Bump version to 0.14.8
  • a32fdb1 Fix encoding of directoryName constraints
  • 7111a79 update key_pair to signing_key
  • 10664c9 Take semver-compatible dependency updates
  • 0ec4d09 Add testing of CSR serializing basic constraints
  • 5f94ef9 Add support for serializing BasicConstraints in CSR's
  • fb835c1 Add writing basic constraints logic
  • 0cf161d Bump codecov/codecov-action from 5 to 6
  • 4909041 Add testing of CSR Params parsing Basic Constraints variants
  • 6675a94 Add support for is_ca in CSR Params
  • Additional commits viewable in compare view

mmacedoeu added a commit that referenced this pull request Jul 17, 2026
Unblocks 6+ Dependabot cargo PRs (#57 #58 #59 #60 #62 #65) stuck on
'build-test (20, 3.11, stable)' due to libdbus-sys build.rs panic.

octo-cable -> bluer -> dbus -> libdbus-sys chain needs pkg-config and
libdbus-1-dev headers. ci.yml + coverage.yml already install these;
quota-router.yml lacked the install. Dependabot cargo lockfile bumps
invalidate the cache, exposing the gap.

Same install line as ci.yml + coverage.yml for parity. Both jobs
(test, clippy-stable) get the step.
@mmacedoeu

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/cargo/next/rcgen-0.14 branch from 1730602 to e5ec2ae Compare July 17, 2026 23:59
@mmacedoeu

Copy link
Copy Markdown
Contributor

@dependabot rebase

Updates the requirements on [rcgen](https://github.com/rustls/rcgen) to permit the latest version.
- [Release notes](https://github.com/rustls/rcgen/releases)
- [Commits](rustls/rcgen@v0.13.0...v0.14.8)

---
updated-dependencies:
- dependency-name: rcgen
  dependency-version: 0.14.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/next/rcgen-0.14 branch from e5ec2ae to 10a7b56 Compare July 18, 2026 01:05
@mmacedoeu

Copy link
Copy Markdown
Contributor

Closed: blocked upstream.

rcgen 0.13 -> 0.14 bump is incompatible with libp2p-tls 0.6.2 which pins rcgen ^0.13 (cargo refuses to unify 0.14 across the libp2p dep graph). When libp2p-tls bumps to support rcgen 0.14, Dependabot will re-open this automatically. The key_pair field removal (rcgen 0.14 change) is real and would need a follow-up migration in crates/octo-adapter-quic/src/lib.rs:435 if/when the constraint lifts.

@mmacedoeu mmacedoeu closed this Jul 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/next/rcgen-0.14 branch July 18, 2026 02:34
mmacedoeu added a commit that referenced this pull request Jul 18, 2026
13 Dependabot PRs reviewed for impact + feasibility.
6 merged (#54 #55 #56 #61 #64 #66), 7 closed (#57 #58 #59 #60 #62
#63 #65). Analysis covers each PR's CI status, dep ownership,
bump rationale, breaking-change audit, merge sequencing, and
infra fixes landed (libdbus install + hmac-sha256 + std lock +
stoolap parser catch-all).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant