Skip to content

chore(deps): bump spiffe-rustls from 0.5.0 to 0.6.0#708

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/spiffe-rustls-0.6.0
Closed

chore(deps): bump spiffe-rustls from 0.5.0 to 0.6.0#708
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/spiffe-rustls-0.6.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Bumps spiffe-rustls from 0.5.0 to 0.6.0.

Release notes

Sourced from spiffe-rustls's releases.

spiffe-rustls v0.6.0

What's Changed

Changed

  • Bumped the spiffe dependency from 0.14 to 0.15.
  • Clarified documentation around the default SPIFFE verification posture and the risks of advanced rustls configuration customization.

Compatibility

  • Because spiffe-rustls exposes spiffe types in its public API, downstream users must use compatible spiffe 0.15 types.
Commits
  • fbef520 chore(release): prepare rust-spiffe 0.15 releases (#344)
  • c83592a feat(spiffe): add per-RPC metadata interceptor to WorkloadApiClient
  • 93df995 chore(ci): bump taiki-e/install-action in the github-actions group
  • 68c9b9e docs(spiffe-rustls): clarify default posture and config customizer risks
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 11, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/spiffe-rustls-0.6.0 branch from fb4348c to 7f1b7d1 Compare May 11, 2026 12:07
Bumps [spiffe-rustls](https://github.com/maxlambrecht/rust-spiffe) from 0.5.0 to 0.6.0.
- [Release notes](https://github.com/maxlambrecht/rust-spiffe/releases)
- [Commits](maxlambrecht/rust-spiffe@spiffe-rustls-0.5.0...spiffe-rustls-0.6.0)

---
updated-dependencies:
- dependency-name: spiffe-rustls
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/spiffe-rustls-0.6.0 branch from 7f1b7d1 to 9be6eb4 Compare May 11, 2026 13:14
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 11, 2026

Looks like spiffe-rustls is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this May 11, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/spiffe-rustls-0.6.0 branch May 11, 2026 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants