chore(deps): bump rustls from 0.23.40 to 0.23.41 - #19
Closed
dependabot[bot] wants to merge 5 commits into
Closed
dependabot[bot] wants to merge 5 commits into
dependabot[bot] wants to merge 5 commits into
Conversation
added 2 commits
June 28, 2026 12:54
- Shared: RunCommandResponse fields for truncated/timed_out/duration_ms - Agent: bounded capture with PGID tracking and output limit - Server: RunCommand-based API exec with output collection
bump server: sanitize command string before writing to audit log. Strip control characters, truncate to 512 chars to prevent log injection.
dependabot
Bot
added
dependencies
Require explicit trusted-proxy configuration, remove the example administrator login, and build the Kubernetes agent from the committed workspace lock. Helm now refuses implicit default service accounts and drops unused ConfigMap privileges. Update component pointers and prune vulnerable or unmaintained dependency paths.
dependabot
Bot
force-pushed
the
dependabot/cargo/rustls-0.23.41
branch
from
June 30, 2026 18:13
fd868fd to
ee4d55e
Compare
Use the default GitHub token for public recursive submodules so Dependabot pull requests can run without repository secrets. Include the server workspace member in the Kubernetes agent image checkout and trigger paths because its manifest is required by the hardened Docker build.
Bumps [rustls](https://github.com/rustls/rustls) from 0.23.40 to 0.23.41. - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.40...v/0.23.41) --- updated-dependencies: - dependency-name: rustls dependency-version: 0.23.41 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
sppidy
force-pushed
the
dependabot/cargo/rustls-0.23.41
branch
from
June 30, 2026 23:44
ee4d55e to
b268964
Compare
sppidy
force-pushed
the
main
branch
2 times, most recently
from
July 3, 2026 18:28
5c59612 to
ef35864
Compare
sppidy
added a commit
that referenced
this pull request
Jul 16, 2026
REST module + two SQLite tables (fan_out_runs + fan_out_results) that broadcast a kind-specific Message to a list of agent_ids, mark offline targets up-front, and attribute responses back to the oldest pending row for that (agent_id, kind) pair. v1 kinds: apt-status, apt-upgrade, docker-list. The attribution hook lives next to the existing scheduled_apt_runs intercept, so a single AptUpgradeResponse can satisfy both a fan-out and a scheduled run if they happen to overlap.
sppidy
added a commit
that referenced
this pull request
Jul 16, 2026
New /fan-out route with kind selector, multi-host checkbox grid
(seeded to all online agents), and a live results table that polls
/api/fan-out/{id} every 2s. Sidebar gets a Fan-out shortcut.
Destructive apt-upgrade fan-outs route through the confirm modal.
sppidy
added a commit
that referenced
this pull request
Jul 16, 2026
REST module + two SQLite tables (fan_out_runs + fan_out_results) that broadcast a kind-specific Message to a list of agent_ids, mark offline targets up-front, and attribute responses back to the oldest pending row for that (agent_id, kind) pair. v1 kinds: apt-status, apt-upgrade, docker-list. The attribution hook lives next to the existing scheduled_apt_runs intercept, so a single AptUpgradeResponse can satisfy both a fan-out and a scheduled run if they happen to overlap.
sppidy
added a commit
that referenced
this pull request
Jul 16, 2026
New /fan-out route with kind selector, multi-host checkbox grid
(seeded to all online agents), and a live results table that polls
/api/fan-out/{id} every 2s. Sidebar gets a Fan-out shortcut.
Destructive apt-upgrade fan-outs route through the confirm modal.
sppidy
added a commit
that referenced
this pull request
Jul 16, 2026
REST module + two SQLite tables (fan_out_runs + fan_out_results) that broadcast a kind-specific Message to a list of agent_ids, mark offline targets up-front, and attribute responses back to the oldest pending row for that (agent_id, kind) pair. v1 kinds: apt-status, apt-upgrade, docker-list. The attribution hook lives next to the existing scheduled_apt_runs intercept, so a single AptUpgradeResponse can satisfy both a fan-out and a scheduled run if they happen to overlap.
sppidy
added a commit
that referenced
this pull request
Jul 16, 2026
New /fan-out route with kind selector, multi-host checkbox grid
(seeded to all online agents), and a live results table that polls
/api/fan-out/{id} every 2s. Sidebar gets a Fan-out shortcut.
Destructive apt-upgrade fan-outs route through the confirm modal.
Contributor
Author
|
A newer version of rustls exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
Owner
|
Superseded by #38, which includes this update and passed the consolidated validation suite. |
Contributor
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps rustls from 0.23.40 to 0.23.41.
Commits
642a103ci: drop Taplo job752c144Drop nightly clippy tests8d8611aFix newclippy::useless-borrows-in-formattingebf3297Fix newclippy::manual_clear46808e7ci: sync cargo-check-external-types nightly041a8d2Cargo deny: allow RUSTSEC-2026-017362e220eTake semver-compatible dependency updates3c14696Upgrade to hickory-resolver 0.26848a2ccconnect-tests: delete ech.rs5ce9cacBump version to 0.23.41