Skip to content

Commit a3a1c4d

Browse files
committed
fix(security): update rustls-webpki for dependabot alert
1 parent e6616de commit a3a1c4d

2 files changed

Lines changed: 3 additions & 2 deletions

File tree

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@
2727
- **Hermes Gateway 启动自修复** — 启动前自动检查并修复 `platforms.api_server.enabled`,避免升级或手动编辑配置后 Gateway 缺失 `/v1/runs` 能力
2828
- **Web/桌面下载行为分流**`hermes_logs_download` 根据运行时区分桌面真实落盘与 Web Blob 下载,避免 Web 模式误保存到服务端目录
2929
- **普通记忆文件下载提示** — Blob 下载提示改为说明浏览器默认下载目录,减少“下载没落点”的误解
30+
- **Dependabot #11** — 升级 `rustls-webpki``0.103.13`,修复畸形 CRL BIT STRING 触发 panic 的拒绝服务风险
3031

3132
## [0.13.4] - 2026-04-20
3233

src-tauri/Cargo.lock

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)