build(deps): bump the rust-patch group with 6 updates by dependabot[bot] · Pull Request #370 · fstubner/netscli

dependabot · 2026-09-07T07:11:21Z

Bumps the rust-patch group with 6 updates:

Package	From	To
serde	`1.0.228`	`1.0.229`
hickory-resolver	`0.26.1`	`0.26.2`
mdns-sd	`0.21.0`	`0.21.1`
rcgen	`0.14.9`	`0.14.10`
tauri-plugin-opener	`2.5.4`	`2.5.5`
tauri-plugin-dialog	`2.7.2`	`2.7.3`

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates hickory-resolver from 0.26.1 to 0.26.2

Release notes

Sourced from hickory-resolver's releases.

v0.26.2

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in parsers. Other issues were related to UDP spoofing defenses, caching issues, and general DNS protocol correctness issues.

This is our first post-vulnpocalypse release, and most of these vulnerabilities were discovered through LLM-based workflows. The sheer volume of reports has been a challenge for our volunteer maintainers.

Resolved advisories:

GHSA-2vgh-3wfw-qj7c: RRSIG Signer's Name not checked against the RRset's zone

GHSA-57pw-897j-v4j6: Improper check of signature validity of NSEC and NSEC3 records

GHSA-wjgj-fvg9-65w9: DNSSEC validation ignores bogus records with a DNS class other than IN

GHSA-588m-chg6-8jqj: Inverted NSEC3 comparison allows forgery of proofs of nonexistence

GHSA-qw83-5pm2-ggp5: DNSSEC nonexistence forgery via incorrect handling of wraparound NSEC records

GHSA-3jvh-8vj5-65rq: NSEC3 apex NODATA accepted as secure with no QNAME-matching NSEC3

GHSA-3r6v-f3jh-vvqm: ancestor-delegation NSEC accepted as proof of nonexistence below the zone cut

GHSA-624w-vvww-xvpw: ancestor-delegation NSEC3 accepted as proof of nonexistence at and below the zone cut

GHSA-7php-9j59-g3ch: DNSSEC validation is missing RFC 6840 §4.4 checks

GHSA-vrv5-968r-5ggm: DNSSEC validation accepts bogus positive response with wildcard expansion

GHSA-p2jv-r3m3-7wf4: Nonexistence proof forgery due to insufficient checks on NSEC3 record names

GHSA-86vr-jm6c-7cpg: NSEC validator accepts NXDOMAIN for an empty non-terminal (ENT) that the covering NSEC proves exists

GHSA-8hq4-5836-w6q4: Server does not check validation status of SOA record in negative responses

GHSA-5j98-2g5x-46v6: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

GHSA-929p-gjf6-5hqj: DNSSEC validation accepts responses with the wrong RRset as a positive answer

GHSA-j2rc-wxwh-62g9: TrustAnchors does not check name of DNSKEY

GHSA-rx82-4p2j-j5cv: Name::hash discards label boundaries; ValidationCacheKey(u64) reuses the digest in Eq implementation, leaking an Insecure DNSSEC verdict across distinct owner names

GHSA-2hxp-x833-73f7: Hickory DNS recursor: ghost domain attack via child-side NS RRset queries

GHSA-x962-5xwx-fr8x: Unchecked subtraction in TSIG RDATA decoding panics when overflow checks are enabled

GHSA-wgfr-mphw-j5g4: Panic in zone file parser for SVCB and HTTPS

GHSA-hx8c-fjhc-hmf5: Panic in zone file parser for SVCB and HTTPS

GHSA-4rph-pmrw-mwpw: Zone file parser panics when parsing long lines

GHSA-3w89-7rx5-hpwx: Responses with QDCOUNT=0 bypass check for matching question section

GHSA-vcjp-57rr-mpfw: Out-of-bailiwick filtering is not applied to negative responses

GHSA-6w6g-hm98-mhgm: Unbounded TC-retry loop in NameServerPool::try_send (resource-exhaustion DoS)

GHSA-cx5j-p54p-q756: Cyclic sibling domain name server referrals without glue records cause exponential upstream query amplification in the recursor

GHSA-6h5c-jjg5-wj59: Glueless-NS referral fan-out without per-query work budget

GHSA-v44v-c8m4-gc43: Denial of service of client UDP connections via spoofed malformed responses

GHSA-67wc-6jq8-ghrc: Remote memory-amplification DoS via attacker-controlled RR counts in DNS message parsing

GHSA-2f4m-fq7w-mrgx: Remote memory exhaustion in Hickory DNS through incomplete DNS-over-QUIC request bodies

GHSA-g8wg-4mwh-fjfv: DoQ server has no timeout when reading request

GHSA-5r56-v84h-c3w5: DoH request body is buffered without a size limit

GHSA-6f2x-v7q7-m7m5: Resolver follows irrelevant CNAME records

GHSA-xv7c-h5g9-x25x: transient DS-fetch error inappropriately cached as BOGUS

GHSA-9px7-7m25-f6q2: Recursive resolver: Empty connection pool is cached after failed IP lookup

GHSA-29q9-p769-j8gq: Bogus answers cached for the attacker-supplied record TTL

GHSA-4jwp-xjwm-333g: Missing IPv4-Mapped IPv6 address canonicalization

Special thanks go out to @qifan-sailboat and Palo Alto Networks for their research and for reporting the bulk of these vulnerabilities. Thanks to @ATinyShoe, @kirk-baird, @thesmartshadow, @BeaCox, @jpds, @N0zoM1z0, and @JasonPap for reporting vulnerabilities as well.

If your organization is interested in coordinated disclosure of future security vulnerabilities, please contact @djc for commercial support.

What's Changed

... (truncated)

Commits

48323ef Bump version to 0.26.2
ccd6952 Only follow one CNAME record from each response
c04ad2b Better distinguish NODATA response and wildcards
64b4291 Add test for bogus wildcard expansion
478998b proto: constrain peer-controlled allocation sizes
8392769 resolver: avoid caching empty nameserver pools
e2d21d8 Replace use of SOA name with NSEC3 record parents
84fa8ab Check for correct zone name in covering NSEC3s too
09803ba Look for correct zone name in matching NSEC3s
26f45d3 Rename Nsec3RecordPair to Nsec3RecordInfo
Additional commits viewable in compare view

Updates mdns-sd from 0.21.0 to 0.21.1

Release notes

Sourced from mdns-sd's releases.

v0.21.1

This is a bugfix release.

Bug fixes / improvements

Send goodbye (TTL=0) packets under conflict-resolved names. When probing renames a record due to a name conflict (RFC 6762 section 9), now the goodbye carries the updated names peers actually observed. (#495, commit fe525a6)

Harden DNS name parsing (read_name) and name compression handling: skip only the malformed record instead of the whole packet. (#492, commit 5bf6b7c)

What's Changed

fix: send goodbye packets under conflict-resolved names by @dhavli in keepsimple1/mdns-sd#495

refactoring: read_name and name compression by @keepsimple1 in keepsimple1/mdns-sd#492

prepare for a new release 0.21.1 by @keepsimple1 in keepsimple1/mdns-sd#497

New Contributors

🚀 * @dhavli made their first contribution in keepsimple1/mdns-sd#495

Full Changelog: keepsimple1/mdns-sd@v0.21.0...v0.21.1

Changelog

Sourced from mdns-sd's changelog.

Version 0.21.1 (2026-08-30)

This is a bugfix release.

Bug fixes / improvements

Send goodbye (TTL=0) packets under conflict-resolved names. When probing renames a record due to a name conflict (RFC 6762 section 9), now the goodbye carries the updated names peers actually observed. (#495, commit fe525a6)

Harden DNS name parsing (read_name) and name compression handling: skip only the malformed record instead of the whole packet. (#492, commit 5bf6b7c)

All changes

5bf6b7c 2026-08-30 refactoring: read_name and name compression (#492) (keepsimple1)

fe525a6 2026-08-26 fix: send goodbye packets under conflict-resolved names (#495) (dhavli)

Thanks and welcome our new contributor @dhavli !

Commits

8616315 prepare for a new release 0.21.1 (#497)
5bf6b7c refactoring: read_name and name compression (#492)
fe525a6 fix: send goodbye packets under conflict-resolved names (#495)
See full diff in compare view

Updates rcgen from 0.14.9 to 0.14.10

Release notes

Sourced from rcgen's releases.

0.14.10

What's Changed

Spec compliance bug fixes by @cpu in rustls/rcgen#445

Take advantage of stable ML-DSA in aws-lc-rs by @djc in rustls/rcgen#447

Commits

f4a3b16 Bump version to 0.14.10
dea3d4d Upgrade to botan 0.13
788b093 Upgrade to pem 4
7ce21f4 Take advantage of stable ML-DSA in aws-lc-rs
e2dba45 Remove unused RSASSA-PSS signature algorithm
37070de Omit reasonCode unspecified(0) from CRL entry extensions
b247a87 Write extensions for certs that only set KeyUsage or CRLDP
85eafdd Reject empty CRL distribution point URIs
3a99b50 Encode CRL invalidityDate as GeneralizedTime
See full diff in compare view

Updates tauri-plugin-opener from 2.5.4 to 2.5.5

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.5.5

[2.5.5]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.5.5
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.5.5
npm notice filename: tauri-apps-plugin-opener-2.5.5.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: ef7b9aca07cb3416575e5024b996926c43276b69
npm notice integrity: sha512-xvzGai5aQds8j[...]Fh1MvmDp8QR0g==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662648628
+ @tauri-apps/plugin-opener@2.5.5

opener v2.5.5

[2.5.5]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.

... (truncated)

Commits

6e2e7e4 publish new versions (#3070)
9a2c98f temp: remove updater changefiles
4a2ecb6 chore(deps): update rkyv, closes #3196
31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.2 to 2.7.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.7.3

[2.7.3]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
cc9ec9b4 (#3519 by @purvsinojiya-inventyv) Fix Android save dialog MIME type when a single MIME type is provided.
f8053e65 (#3527 by @Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.

Dependencies

Upgraded to fs@2.5.2

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.3
npm notice filename: tauri-apps-plugin-dialog-2.7.3.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: 7e6d375fec8e39d2a90294604a9d77e66c39a072
npm notice integrity: sha512-CRgE+7TP4tvq9[...]oKbMwSI4IEcfA==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662645358
+ @tauri-apps/plugin-dialog@2.7.3

dialog v2.7.3

[2.7.3]

... (truncated)

Commits

6aa2854 publish new versions (#3509)
9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
98f8787 ci: fix typo in workflow permissions
1a7b12c ci: add explicit token permissions
2f4c85c chore(deps): bump serde_with (#3490)
c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
db9c599 fix(android): missing consumer-rules.pro (#3531)
9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
685610a fix(fs): default permissions (#3507)
f8053e6 docs: cargo features (#3527)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [hickory-resolver](https://github.com/hickory-dns/hickory-dns) | `0.26.1` | `0.26.2` | | [mdns-sd](https://github.com/keepsimple1/mdns-sd) | `0.21.0` | `0.21.1` | | [rcgen](https://github.com/rustls/rcgen) | `0.14.9` | `0.14.10` | | [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.4` | `2.5.5` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.2` | `2.7.3` | Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `hickory-resolver` from 0.26.1 to 0.26.2 - [Release notes](https://github.com/hickory-dns/hickory-dns/releases) - [Changelog](https://github.com/hickory-dns/hickory-dns/blob/main/CHANGELOG.md) - [Commits](hickory-dns/hickory-dns@v0.26.1...v0.26.2) Updates `mdns-sd` from 0.21.0 to 0.21.1 - [Release notes](https://github.com/keepsimple1/mdns-sd/releases) - [Changelog](https://github.com/keepsimple1/mdns-sd/blob/main/CHANGELOG.md) - [Commits](keepsimple1/mdns-sd@v0.21.0...v0.21.1) Updates `rcgen` from 0.14.9 to 0.14.10 - [Release notes](https://github.com/rustls/rcgen/releases) - [Commits](rustls/rcgen@v/0.14.9...v0.14.10) Updates `tauri-plugin-opener` from 2.5.4 to 2.5.5 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.4...http-v2.5.5) Updates `tauri-plugin-dialog` from 2.7.2 to 2.7.3 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@dialog-v2.7.2...dialog-v2.7.3) --- updated-dependencies: - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch - dependency-name: hickory-resolver dependency-version: 0.26.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch - dependency-name: mdns-sd dependency-version: 0.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch - dependency-name: rcgen dependency-version: 0.14.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch - dependency-name: tauri-plugin-opener dependency-version: 2.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch - dependency-name: tauri-plugin-dialog dependency-version: 2.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-07T07:11:22Z

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 7, 2026

Navigation Menu

build(deps): bump the rust-patch group with 6 updates - #370

build(deps): bump the rust-patch group with 6 updates#370
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-patch-bab40bf2fe

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026

v1.0.229

v0.26.2

What's Changed

v0.21.1

Bug fixes / improvements

What's Changed

New Contributors

Version 0.21.1 (2026-08-30)

Bug fixes / improvements

All changes

0.14.10

What's Changed

opener-js v2.5.5

[2.5.5]

opener v2.5.5

[2.5.5]

dialog-js v2.7.3

[2.7.3]

Dependencies

dialog v2.7.3

[2.7.3]

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants