Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(trigger-http): bump tls-listener #2409

Merged
merged 1 commit into from
Apr 2, 2024

Conversation

vdice
Copy link
Member

@vdice vdice commented Apr 1, 2024

It appears we only utilize the rust_tls feature of this crate and we don't invoke the TlsListener::new() method susceptible to the advisory, so open to discussion on if we want to take this opportunity to bump anyways -- or close this and mark the security warning as not applicable/won't fix.

Assuming we go ahead with the bump -- any special/additional testing we want to perform?

@vdice vdice added the http label Apr 1, 2024
Copy link
Collaborator

@rylev rylev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This seems fine for us to do IMO

@vdice vdice merged commit c12e6eb into fermyon:main Apr 2, 2024
14 checks passed
@vdice vdice deleted the chore/bump-tls-listener branch April 2, 2024 21:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants