Skip to content

chore(deps): bump russh from 0.61.1 to 0.61.2 in the cargo group across 1 directory - #37

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-9b5d0243ad
Closed

chore(deps): bump russh from 0.61.1 to 0.61.2 in the cargo group across 1 directory#37
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-9b5d0243ad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 1 update in the / directory: russh.

Updates russh from 0.61.1 to 0.61.2

Release notes

Sourced from russh's releases.

v0.61.2

Changes

  • f1a0f18: fixed #716 - ensure dynamic AgentClient refs are generally Send (#717) (Eugene) #717
  • 6dc4919: expose channel number from ChannelId (Eugene)

Fixes

  • support SEC1 EC keys with full domain parameters (#719) #719 (Moder Steven)
  • aa48fa7: make DhGroup fields public (Eugene)
  • ca8ae67: update auth_publickey_offered doc (Eugene)
  • 761483a: fixed #720 - bump deps (#721) (Eugene) #721
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 28, 2026
@github-actions

Copy link
Copy Markdown

Coverage report


Generated by cargo llvm-cov (workspace minus nexterm-client-gpu and nexterm-i18n).

@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-9b5d0243ad branch from eedbe4a to 4fa90b7 Compare July 29, 2026 12:58
@github-actions

Copy link
Copy Markdown

Coverage report


Generated by cargo llvm-cov (workspace minus nexterm-client-gpu and nexterm-i18n).

Bumps the cargo group with 1 update in the / directory: [russh](https://github.com/warp-tech/russh).


Updates `russh` from 0.61.1 to 0.61.2
- [Release notes](https://github.com/warp-tech/russh/releases)
- [Commits](Eugeny/russh@v0.61.1...v0.61.2)

---
updated-dependencies:
- dependency-name: russh
  dependency-version: 0.61.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-9b5d0243ad branch from 4fa90b7 to 4018a75 Compare July 30, 2026 16:01
@github-actions

Copy link
Copy Markdown

Coverage report


Generated by cargo llvm-cov (workspace minus nexterm-client-gpu and nexterm-i18n).

mizu-jun added a commit that referenced this pull request Aug 21, 2026
Replaces dependabot #37, which was opened against a 2026-07-28 lock file
and had drifted from master.

russh 0.61.1 -> 0.61.2 pulls a semver-compatible refresh of the crypto
crates it pins: curve25519-dalek 5.0.0-pre.6 -> rc.0, ed25519-dalek
3.0.0-pre.7 -> rc.0, elliptic-curve rc.32 -> rc.33, the p256/p384/p521
family rc.9 -> rc.10, md5 0.7 -> 0.8. RustCrypto's ff/group split lands as
the real ff 0.14 / group 0.14 crates, and the transitive windows-sys 0.60
tree drops out entirely: 157 lock lines removed against 65 added.

Cargo.toml is untouched — the constraint stays "0.61". russh 0.62.7 exists
but is a separate, API-breaking upgrade. pkg/flatpak/cargo-sources.json is
regenerated (the flatpak job diffs against it).

Upstream's fixes in this range are SEC1 EC keys with full domain parameters
and Send bounds on dynamic AgentClient refs. Neither has a Nexterm-side
test: nexterm-ssh's 15 tests never open a connection, so the crypto paths
ride on CI's three-OS build and upstream's own verification. A live SSH
session check is queued with the on-device backlog.
@mizu-jun mizu-jun closed this in #66 Aug 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-9b5d0243ad branch August 21, 2026 11:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants