From 64231ff403a4e4d61c416cfe1ca0be04bcbec00c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 12:05:00 +0800 Subject: [PATCH] chore(deps): bump the minor-and-patch group in /backend with 4 updates (#37) Bumps the minor-and-patch group in /backend with 4 updates: [base64](https://github.com/marshallpierce/rust-base64), [aws-sdk-s3](https://github.com/awslabs/aws-sdk-rust), [hyper-rustls](https://github.com/rustls/hyper-rustls) and [rustls](https://github.com/rustls/rustls). Updates `base64` from 0.23.0 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](https://github.com/marshallpierce/rust-base64/compare/v0.23.0...v0.23.1) Updates `aws-sdk-s3` from 1.140.0 to 1.141.0 - [Release notes](https://github.com/awslabs/aws-sdk-rust/releases) - [Commits](https://github.com/awslabs/aws-sdk-rust/commits) Updates `hyper-rustls` from 0.27.7 to 0.27.9 - [Release notes](https://github.com/rustls/hyper-rustls/releases) - [Commits](https://github.com/rustls/hyper-rustls/compare/v/0.27.7...v/0.27.9) Updates `rustls` from 0.23.36 to 0.23.43 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](https://github.com/rustls/rustls/compare/v/0.23.36...v/0.23.43) --- updated-dependencies: - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: aws-sdk-s3 dependency-version: 1.141.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: hyper-rustls dependency-version: 0.27.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: rustls dependency-version: 0.23.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Zyy <39424122+zyycn@users.noreply.github.com> --- backend/Cargo.lock | 25 +++++++++++----------- backend/crates/providers/openai/Cargo.toml | 4 ++-- 2 files changed, 14 insertions(+), 15 deletions(-) diff --git a/backend/Cargo.lock b/backend/Cargo.lock index 32f07685d..e1cbad52e 100644 --- a/backend/Cargo.lock +++ b/backend/Cargo.lock @@ -216,9 +216,9 @@ dependencies = [ [[package]] name = "aws-sdk-s3" -version = "1.140.0" +version = "1.141.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e9660cf991e512fbe6094f1041ff3d3282bc5aeeeb6184e8de437ec2de024a10" +checksum = "d9f9420d3a2467eed22ed3635ca653653162c386a0b0f65c78189f9bd3c1379e" dependencies = [ "arc-swap", "aws-credential-types", @@ -578,9 +578,9 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6" [[package]] name = "base64" -version = "0.23.0" +version = "0.23.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b25655df2c3cdd83c5e5b293b88acd880332b2ddadd7c30ac43144fdc0033da9" +checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5" [[package]] name = "base64-simd" @@ -1493,7 +1493,7 @@ version = "0.0.0" dependencies = [ "argon2", "async-trait", - "base64 0.23.0", + "base64 0.23.1", "chrono", "chrono-tz", "cron", @@ -1519,7 +1519,7 @@ version = "0.1.0" dependencies = [ "async-trait", "axum", - "base64 0.23.0", + "base64 0.23.1", "bytes", "chrono", "futures", @@ -1897,9 +1897,9 @@ dependencies = [ [[package]] name = "hyper-rustls" -version = "0.27.7" +version = "0.27.9" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58" +checksum = "33ca68d021ef39cf6463ab54c1d0f5daf03377b70561305bb89a8f83aab66e0f" dependencies = [ "http 1.4.2", "hyper", @@ -1907,7 +1907,6 @@ dependencies = [ "log", "rustls", "rustls-native-certs", - "rustls-pki-types", "tokio", "tokio-rustls", "tower-service", @@ -2575,7 +2574,7 @@ version = "0.0.0" dependencies = [ "async-stream", "async-trait", - "base64 0.23.0", + "base64 0.23.1", "bytes", "chrono", "cookie", @@ -2619,7 +2618,7 @@ version = "0.0.0" dependencies = [ "async-stream", "async-trait", - "base64 0.23.0", + "base64 0.23.1", "bytes", "chrono", "futures", @@ -2987,9 +2986,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.36" +version = "0.23.43" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c665f33d38cea657d9614f766881e4d510e0eda4239891eea56b4cadcf01801b" +checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06" dependencies = [ "aws-lc-rs", "log", diff --git a/backend/crates/providers/openai/Cargo.toml b/backend/crates/providers/openai/Cargo.toml index ef2cfba7b..dec5db52f 100644 --- a/backend/crates/providers/openai/Cargo.toml +++ b/backend/crates/providers/openai/Cargo.toml @@ -26,14 +26,14 @@ hex = "0.4.3" # ChatGPT.app Resources/codex 二进制内为 hyper-rustls 0.27.7 + rustls 0.23.36 + # reqwest 0.12.28 + ring）。rustls 0.23.37 起 ClientHello 扩展顺序变化，JA3 # 会偏离官方指纹；升级前必须重新抓握手对比扩展顺序。 -hyper-rustls = "=0.27.7" +hyper-rustls = "=0.27.9" # 与官方 Codex Desktop 一致：reqwest 不启用压缩特性，上游请求不带 accept-encoding。 reqwest = { version = "=0.12.28", default-features = false, features = ["json", "stream", "cookies", "rustls-tls-native-roots", "http2"] } roxmltree = "0.21.1" semver = "1.0.27" # 保持 ring provider：reqwest rustls-tls-native-roots 即 __rustls-ring，与官方一致； # 不要给 TLS 客户端路径启用 aws_lc_rs，否则密钥共享/扩展集可能变化。 -rustls = { version = "=0.23.36", default-features = false, features = ["ring", "std", "tls12"] } +rustls = { version = "=0.23.43", default-features = false, features = ["ring", "std", "tls12"] } rustls-native-certs = "0.8.4" rustls-pki-types = "1.14.1" secrecy = "0.10.3"