Skip to content

Ci/pins and rustls - #46

Merged
jaanisoe merged 2 commits into
mainfrom
ci/pins-and-rustls
Oct 19, 2026
Merged

jaanisoe merged 2 commits into
mainfrom
ci/pins-and-rustls

Conversation

@jaanisoe

Copy link
Copy Markdown
Collaborator

No description provided.

Clears RUSTSEC-2026-0346 to -0349, which fail cargo deny on every PR.
None of them reaches our build: no ECH, no brotli, and the ring
provider has no hybrid key exchange to downgrade.
Its profile code changes often for reasons that don't touch what this
node emits, so the weekly pins job kept going red for nothing. The
gdi-metadata shapes, the Beacon release and the action pins stay
watched; check_ckanext.py notes which fork versions its list was last
checked against.

Also drop the ckanext-dcat parser, which never loaded without CKAN,
keep the external pins out of `vendored.sh check` so one drift fails
one job, and trim pin tests that covered hypothetical inputs or
repeated stronger ones.
@jaanisoe
jaanisoe merged commit 1ae54b0 into main Oct 19, 2026
27 checks passed
@jaanisoe
jaanisoe deleted the ci/pins-and-rustls branch October 19, 2026 11:48
@jaanisoe jaanisoe linked an issue Oct 19, 2026 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

scheduled-failure: weekly maintenance run failed

1 participant