Skip to content

Bump postgres-protocol from 0.6.8 to 0.6.12 in /examples/vault-variable-test - #3702

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/examples/vault-variable-test/postgres-protocol-0.6.12
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/examples/vault-variable-test/postgres-protocol-0.6.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •

Copy link
Copy Markdown
Contributor

Bumps postgres-protocol from 0.6.8 to 0.6.12.

Release notes

Sourced from postgres-protocol's releases.

postgres-protocol v0.6.12

Fixed

  • Bound SCRAM iteration count to 100,000 to prevent DoS.
  • Error instead of panicking on out-of-bounds hstore key/value length.
  • Fix inverted character match in SCRAM error value parser.

postgres-protocol v0.6.11

Changed

  • Upgraded hmac to 0.13.
  • Upgraded md-5 to 0.11.
  • Upgraded sha2 to 0.11.
  • Upgraded rand to 0.10.
  • Upgraded to Rust edition 2024, minimum Rust version 1.85.

postgres-protocol v0.6.10

Added

  • Implemented FallibleIterator::size_hint for Fields.

Fixed

  • Increased bind parameter limit from i16::MAX to u16::MAX.

postgres-protocol v0.6.9

Changed

  • Updated repository links to use rust-postgres organization.
  • Upgraded to Rust 2021 edition.
Commits
  • 76062c9 Release postgres-protocol v0.6.12
  • b661993 fix(derive): error instead of panicking on incomplete composite values
  • d40097a fix(protocol): bound the SCRAM iteration count to prevent a DoS
  • 2af79a0 fix(types): avoid panic decoding out-of-range time 0.2 dates/timestamps
  • 7a00ffa fix(tokio): reject DataRow with a field count that differs from the columns
  • a7cf84b fix(protocol): avoid panic on out-of-bounds hstore key/value length
  • 7cf186f test(protocol): add test for SCRAM error value parsing
  • 4dd7e87 fix(protocol): inverted character match in SCRAM error value parser
  • a6507cc chore: renew expiring test SSL certificate
  • d13bb5e build(deps): upgrade semver compatible Rust dependencies
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 31, 2026
Bumps [postgres-protocol](https://github.com/rust-postgres/rust-postgres) from 0.6.8 to 0.6.12.
- [Release notes](https://github.com/rust-postgres/rust-postgres/releases)
- [Commits](rust-postgres/rust-postgres@postgres-protocol-v0.6.8...postgres-protocol-v0.6.12)

---
updated-dependencies:
- dependency-name: postgres-protocol
  dependency-version: 0.6.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/examples/vault-variable-test/postgres-protocol-0.6.12 branch from 05176bf to 40a498c Compare September 29, 2026 23:13
@fibonacci1729 fibonacci1729 moved this to Triage Needed in Spin Triage Oct 26, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

Status: Triage Needed

Development

Successfully merging this pull request may close these issues.

0 participants