From d30b5e66ae6e74f9557e42601a63eea5e2aecbaa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 5 Aug 2025 07:47:12 +0000
Subject: [PATCH] build(deps): bump rustls from 0.23.29 to 0.23.31 in /rust
 (#10120)

Bumps [rustls](https://github.com/rustls/rustls) from 0.23.29 to
0.23.31.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rustls/rustls/commit/647ece13463bbb6eaf756146596fe182644424b1"><code>647ece1</code></a>
Prepare 0.23.31</li>
<li><a
href="https://github.com/rustls/rustls/commit/b2831e7490b82a944a43e60379e1b34165637efc"><code>b2831e7</code></a>
rustls-bench: short circuit single threaded tests</li>
<li><a
href="https://github.com/rustls/rustls/commit/668231f57373f4c6ad502d0091d240beaf878649"><code>668231f</code></a>
Improve testing of non-blocking <code>complete_io()</code></li>
<li><a
href="https://github.com/rustls/rustls/commit/5e5d6296118e2f007be1affe0e64b2b0f847f05d"><code>5e5d629</code></a>
<code>complete_io</code>: make non-blocking error return reachable</li>
<li><a
href="https://github.com/rustls/rustls/commit/2a852c0244d9e235886c2e5e05b0c36d83b050ac"><code>2a852c0</code></a>
Exit <code>complete_io</code> loop as soon as no progress is made</li>
<li><a
href="https://github.com/rustls/rustls/commit/2f487cfc5ac4a73847524ef3b319e08db96c6530"><code>2f487cf</code></a>
rustls-test: withdraw <code>FailsReads</code> helper</li>
<li><a
href="https://github.com/rustls/rustls/commit/41bfb22d5b2f0d6178107c9e426394f186623709"><code>41bfb22</code></a>
rustls-test: add helper for non-blocking IO tests</li>
<li><a
href="https://github.com/rustls/rustls/commit/0ccbc63df37c846691d87670c412decb3c4f23a1"><code>0ccbc63</code></a>
Cargo: rustls version 0.23.29 -&gt; 0.23.30</li>
<li><a
href="https://github.com/rustls/rustls/commit/4c16f034435c52e16bf576a244111d4ede552378"><code>4c16f03</code></a>
Fix: Do not try to call deframer on junk data</li>
<li><a
href="https://github.com/rustls/rustls/commit/6b9df65bb927dac726e28a66eb0cd1a5d3fc0988"><code>6b9df65</code></a>
sign: make public_key_to_spki() public</li>
<li>Additional commits viewable in <a
href="https://github.com/rustls/rustls/compare/v/0.23.29...v/0.23.31">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls&package-manager=cargo&previous-version=0.23.29&new-version=0.23.31)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 rust/Cargo.lock | 4 ++--
 rust/Cargo.toml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 6a01e970d..3cbc1355c 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -6176,9 +6176,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.29"
+version = "0.23.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2491382039b29b9b11ff08b76ff6c97cf287671dbb74f0be44bda389fffe9bd1"
+checksum = "c0ebcbd2f03de0fc1122ad9bb24b127a5a6cd51d72604a3f3c50ac459762b6cc"
 dependencies = [
  "log",
  "once_cell",
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index c32105f05..10296c4d1 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -139,7 +139,7 @@ resolv-conf = "0.7.3"
 ringbuffer = "0.15.0"
 roxmltree = "0.20"
 rtnetlink = { version = "0.17.0", default-features = false, features = ["tokio_socket"] }
-rustls = { version = "0.23.29", default-features = false, features = ["ring"] }
+rustls = { version = "0.23.31", default-features = false, features = ["ring"] }
 sadness-generator = "0.6.0"
 sd-notify = "0.4.5" # This is a pure Rust re-implementation, so it isn't vulnerable to CVE-2024-3094
 secrecy = "0.8"