From b9302cdc2af570b80cb9ccf7fca01d7c17dde241 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Jul 2025 05:27:44 +0000
Subject: [PATCH] build(deps): bump rustls from 0.23.28 to 0.23.29 in /rust
 (#9860)

Bumps [rustls](https://github.com/rustls/rustls) from 0.23.28 to
0.23.29.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rustls/rustls/commit/4e0b5fed1731d70447baecb14e87412dc5286078"><code>4e0b5fe</code></a>
Bump version to 0.23.29</li>
<li><a
href="https://github.com/rustls/rustls/commit/b8540790dcca01b22dccb9f504c72801842c155c"><code>b854079</code></a>
Propagate context for webpki signature algorithm errors</li>
<li><a
href="https://github.com/rustls/rustls/commit/c84675e34b525b7597c5632202e483c0b68f7e1c"><code>c84675e</code></a>
key_schedule: minimise lifetime of resumption secret</li>
<li><a
href="https://github.com/rustls/rustls/commit/788b0df12216aab37117d227f141c59c28514aea"><code>788b0df</code></a>
key_schedule: erase master secret in traffic state</li>
<li><a
href="https://github.com/rustls/rustls/commit/d2c64f0416b3f6a5e6f74bee9f553a65c146395c"><code>d2c64f0</code></a>
key_schedule: separate ops not using current secret</li>
<li><a
href="https://github.com/rustls/rustls/commit/e5998cd100b832a769d79273f0e69fd127cf7dd0"><code>e5998cd</code></a>
key_schedule: add state for derivations before finish</li>
<li><a
href="https://github.com/rustls/rustls/commit/9620bec130da2426e29b0fbb7d2969d728f7badd"><code>9620bec</code></a>
tls13::key_schedule: move <code>KeySchedule</code> struct down</li>
<li><a
href="https://github.com/rustls/rustls/commit/373ad888e2dfbaaab39be36496849eb3cc54cff1"><code>373ad88</code></a>
tls13::key_schedule: move <code>SecretKind</code> down</li>
<li><a
href="https://github.com/rustls/rustls/commit/efa2066469ba715979827d180bead43000b75d10"><code>efa2066</code></a>
Improve compactness of Debug impl for extensions</li>
<li><a
href="https://github.com/rustls/rustls/commit/a5433a154b8eb24afbd11162b9ab93fb0aa365dc"><code>a5433a1</code></a>
Correct calculation of ServerHello ECH confirmation</li>
<li>Additional commits viewable in <a
href="https://github.com/rustls/rustls/compare/v/0.23.28...v/0.23.29">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls&package-manager=cargo&previous-version=0.23.28&new-version=0.23.29)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 rust/Cargo.lock | 8 ++++----
 rust/Cargo.toml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 8e8ec17b6..e649eed7e 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -6110,9 +6110,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.28"
+version = "0.23.29"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7160e3e10bf4535308537f3c4e1641468cd0e485175d6163087c0393c7d46643"
+checksum = "2491382039b29b9b11ff08b76ff6c97cf287671dbb74f0be44bda389fffe9bd1"
 dependencies = [
  "log",
  "once_cell",
@@ -6156,9 +6156,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.3"
+version = "0.103.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e4a72fe2bcf7a6ac6fd7d0b9e5cb68aeb7d4c0a0271730218b3e92d43b4eb435"
+checksum = "0a17884ae0c1b773f1ccd2bd4a8c72f16da897310a98b0e84bf349ad5ead92fc"
 dependencies = [
  "ring",
  "rustls-pki-types",
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index db76e9454..9261a729e 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -135,7 +135,7 @@ resolv-conf = "0.7.3"
 ringbuffer = "0.15.0"
 roxmltree = "0.20"
 rtnetlink = { version = "0.17.0", default-features = false, features = ["tokio_socket"] }
-rustls = { version = "0.23.28", default-features = false, features = ["ring"] }
+rustls = { version = "0.23.29", default-features = false, features = ["ring"] }
 sadness-generator = "0.6.0"
 sd-notify = "0.4.5" # This is a pure Rust re-implementation, so it isn't vulnerable to CVE-2024-3094
 secrecy = "0.8"