Skip to content

build(deps): bump hmac and crypto deps to clean up advisory on block-buffer - #1971

Open
rhammonds-teleport wants to merge 1 commit into
Devolutions:masterfrom
rhammonds-teleport:upgrade-blockbuffer-dep
Open

rhammonds-teleport wants to merge 1 commit into
Devolutions:masterfrom
rhammonds-teleport:upgrade-blockbuffer-dep

Conversation

@rhammonds-teleport

Copy link
Copy Markdown
Contributor

The PR bumps a handful of dependencies to upgrade past a vulnerable release of the transitive dependency block-buffer.

@github-actions github-actions Bot added kind/protocol Affects RDP or related protocol behavior risk/medium Behavioral change that does not substantially alter a core public API scope/core Touches the core architectural tier scope/ffi Affects native or .NET bindings size/L Size: up to 899 counted lines and 20 files; exceeds M in either measure triage/overlap This issue or pull request already exists or overlaps labels Sep 16, 2026
@github-actions

Copy link
Copy Markdown
Contributor

This pull request may overlap with #1967.

PR #1967 bumps md-5 from 0.10.6 to 0.11.0, and this PR raises md-5 to 0.11 in the ironrdp-pdu and ironrdp-agent manifests plus the lockfile, so both currently share the same md-5 0.10-to-0.11 upgrade scope and the associated digest-trait adaptations in ironrdp-pdu.

This notice is advisory only. Automated review continues as usual, and how these pull requests relate is for maintainers and authors to decide.

Note

LLM-assisted content (no human feedback).

This branch was successfully deployed

1 active deployment
llm-providers — ff0a9d89 Deployed Sep 16, 2026 by rhammonds-teleport via Classify pull request #429
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/protocol Affects RDP or related protocol behavior risk/medium Behavioral change that does not substantially alter a core public API scope/core Touches the core architectural tier scope/ffi Affects native or .NET bindings size/L Size: up to 899 counted lines and 20 files; exceeds M in either measure triage/overlap This issue or pull request already exists or overlaps

Development

Successfully merging this pull request may close these issues.

1 participant