Chore(deps): bump the crates-io group across 1 directory with 3 updates

[dependabot]

Bumps the crates-io group with 3 updates in the / directory: rustls, rustls-pemfile and rustls-pki-types.

Updates rustls from 0.23.13 to 0.23.14

Commits

• cf736e3 Prepare 0.23.14
• 262ae99 Accept kyber deprecation
• c9f5734 Take aws-lc-rs 1.10
• 0560938 Take latest bogo release
• 7bf82dc Send illegal_parameter alert on illegal group
• d752eb2 Send illegal_parameter alert on invalid key share
• 2d3b7ab default crypto provider improvements
• bcc295d Fix new cargo doc warnings in examples
• e7dd2fd fips.rs: reflect certificate issuance for aws-lc 2.0.0
• 58a5891 fix(deps): update rust crate brotli to v7
• Additional commits viewable in compare view

Updates rustls-pemfile from 2.1.3 to 2.2.0

Release notes

Sourced from rustls-pemfile's releases.

2.2.0

Release notes

The main function of this crate has been incorporated into rustls-pki-types. 2.2.0 maintains the existing public API for this crate, on top of this new implementation. This drops the dependency on the base64 crate, and allows for constant-time decoding of private keys.

This crate will continue to exist in its current form, but it is somewhat unlikely that the API will be extended from its current state.

Should you wish to migrate to using the new rustls-pki-types PEM APIs directly, here is a rough cheat-sheet:

Use case	Replace
File stream to CertificateDer iterator	rustls_pemfile::certs(io::BufRead) ➡️ CertificateDer::pem_reader_iter(io::Read)
File stream to one PrivateKeyDer	rustls_pemfile::private_key(io::BufRead) ➡️ PrivateKeyDer::from_pem_reader(io::Read)
File stream to one CertificateSigningRequestDer	rustls_pemfile::csr(io::BufRead) ➡️ CertificateSigningRequestDer::from_pem_reader(io::Read)
File stream to CertificateRevocationListDer iterator	rustls_pemfile::crls(io::BufRead) ➡️ CertificateRevocationListDer::pem_reader_iter(io::Read)
File stream to PrivatePkcs1KeyDer iterator	rustls_pemfile::rsa_private_keys(io::BufRead) ➡️ PrivatePkcs1KeyDer::pem_reader_iter(io::Read)
File stream to PrivatePkcs8KeyDer iterator	rustls_pemfile::pkcs8_private_keys(io::BufRead) ➡️ PrivatePkcs8KeyDer::pem_reader_iter(io::Read)
File stream to PrivateSec1KeyDer iterator	rustls_pemfile::ec_private_keys(io::BufRead) ➡️ PrivateSec1KeyDer::pem_reader_iter(io::Read)
File stream to SubjectPublicKeyInfoDer iterator	rustls_pemfile::public_keys(io::BufRead) ➡️ SubjectPublicKeyInfoDer::pem_reader_iter(io::Read)

What's Changed

• Add semver checks action by @​ctz in rustls/pemfile#54
• Use pki-types pem decoding by @​ctz in rustls/pemfile#55
• Prepare 2.2.0 by @​ctz in rustls/pemfile#56

Full Changelog: rustls/pemfile@v/2.1.3...v/2.2.0

Commits

• 0f37efe Prepare 2.2.0
• f5d49b2 rustfmt to reformat imports
• 7bbc08e Use pki-types 1.9 for PEM decoding
• b2104d8 Add semver checks action
• See full diff in compare view

Updates rustls-pki-types from 1.9.0 to 1.10.0

Release notes

Sourced from rustls-pki-types's releases.

1.10.0

In 1.9.0 we forgot to implement std::error::Error for the new pem::Error type. Add it.

What's Changed

• Implement std::error::Error for pem::Error by @​djc in rustls/pki-types#63

Commits

• 05ca122 Bump version to 1.10.0
• 20a5f66 Implement std::error::Error for pem::Error
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
rustls	[>= 0.23.14.a, < 0.23.15]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Taowyoo]

@dependabot show rustls ignore conditions

[dependabot]

Ignore Conditions

Dependency	Ignore Condition
rustls	[>= 0.23.14.a, < 0.23.15]

[Taowyoo]

@dependabot unignore rustls

[dependabot]

OK, I will stop ignoring the rustls dependency.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[Taowyoo]

@dependabot ignore rustls minor version

[dependabot]

OK, I won't notify you about version 0.23.x of rustls again, unless you unignore it.

[dependabot]

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

[Taowyoo]

https://github.com/dependabot show rustls ignore conditions

[dependabot]

Ignore Conditions

Dependency	Ignore Condition
rustls	[< 0.24, > 0.23.13]