Skip to content

build(deps): update boring requirement from 4.3 to 5.1 in /fuzz#2461

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/fuzz/boring-5.1
Open

build(deps): update boring requirement from 4.3 to 5.1 in /fuzz#2461
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/fuzz/boring-5.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Updates the requirements on boring to permit the latest version.

Release notes

Sourced from boring's releases.

5.1.0

What's Changed

New Contributors

Full Changelog: cloudflare/boring@v5.0.2...v5.1.0

Changelog

Sourced from boring's changelog.

5.1.0

  • 2026-04-13 Add EVP_AEAD-based detached AEAD module
  • 2026-04-13 Add generic PKey private key generation API
  • 2026-04-13 Add TLS 1.2 PRF module and bindings
  • 2026-03-25 Add used_hello_retry_request
  • 2026-03-28 Prebuilt lib export option
  • 2026-03-27 Display sys crate errors using cargo::error

5.0.2

  • 2026-02-13 Re-add fips-precompiled for v4 compat
  • 2026-02-12 Don't add build/ to non-FIPS pre-built path
  • 2026-02-13 Expose load_verify_locations like rust-openssl
  • 2026-02-12 Support static MSVC runtime

5.0.1

  • 2026-02-03 Make SslCredential optional
  • 2026-02-10 Make ML-KEM optional
  • 2026-02-10 Don't always require all headers from all versions of BoringSSL
  • 2026-02-10 Ensure we don't leave unit memory if generate_key fails

5.0.0

  • 2025-12-19 Update vendored boring to a newer version (2023.11 to 2025.11)
  • 2025-12-20 Rework RPK/SslMethod (c2f063cf4711f15b8b417b6926496fbf1c2a03ac)
  • 2025-09-29 Remove SslCurve API
  • 2025-09-30 Remove the "kx-*" features
  • 2025-09-25 Remove legacy FIPS options (they're controlled via BORING_BSSL_ env vars instead)
  • 2026-01-05 Remove deprecated X509CheckFlags flag
  • 2025-09-30 Remove "pq-experimental" Cargo feature, apply PQ patch by default + P256Kyber768Draft00
  • 2026-01-05 Safe clone for X509Store
  • 2025-03-08 Add set_ticket_key_callback (SSL_CTX_set_tlsext_ticket_key_cb)
  • 2025-09-30 Add SslRef::curve_name()
  • 2025-09-30 Expose a safe Rust interface for the session resumption callback
  • 2026-01-05 Fix leaky set_ex_data() API
  • 2025-12-12 Add boring specific api set_strict_cipher_list to SslContextBuilder
  • 2025-11-20 Introduce SslCipherRef::protocol_id
  • 2023-05-11 fix: BIO_set_retry_write when BIO_CTRL_FLUSH to allow writer returns WouldBlock on flush
  • 2025-11-14 Remove blanket Eq from FFI types
  • 2025-12-20 Never use the debug CRT on Windows
  • 2025-02-19 X509Builder::append_extension2 -> X509Builder::append_extension
  • 2025-02-19 Ssl::new_from_ref -> Ssl::new()
  • 2025-02-19 Align SslStream APIs with upstream
  • 2025-09-26 Remove support for Hyper v0

4.21.0

  • 2026-01-05 Warn about set_curves() removal
  • 2026-01-05 Deprecate set_ex_data()
  • 2026-01-05 Fix build with --no-default-features
  • 2026-01-05 Make set_curves_list always available
  • 2026-01-19 Use fips-build-compatible ERR_add_error_data

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 6, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 6, 2026 13:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 6, 2026
Updates the requirements on [boring](https://github.com/cloudflare/boring) to permit the latest version.
- [Release notes](https://github.com/cloudflare/boring/releases)
- [Changelog](https://github.com/cloudflare/boring/blob/master/RELEASE_NOTES)
- [Commits](cloudflare/boring@v4.3.0...v5.1.0)

---
updated-dependencies:
- dependency-name: boring
  dependency-version: 5.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/fuzz/boring-5.1 branch from 72a66dc to 421f929 Compare May 13, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants