mirror of
https://github.com/greenart7c3/Amber.git
synced 2026-10-29 22:37:34 +00:00
Clears all four open Dependabot alerts against rustls 0.23.45 in tools/arti (ECH rejection leaking buffered application data, unauthenticated ServerHello key-exchange poisoning, session Debug formatting exposing master secrets and resumption PSKs, and unbounded Brotli certificate-decompression memory before authentication). The lock also re-wires tempfile and the strum-dependent crate to the syn 3 and getrandom 0.3 versions cargo kept when pruning. All nine native libraries are rebuilt from this one source and lock: four Android ABIs, desktop Linux x64/arm64, Windows x64, and both macOS flavors (the macOS dylibs came out of the amber-macos VM, rustup and the pinned 1.98.1 toolchain installed there).