Skip to content

build(deps): bump postgres-protocol from 0.6.9 to 0.6.12 - #6716

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/postgres-protocol-0.6.12
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/postgres-protocol-0.6.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps postgres-protocol from 0.6.9 to 0.6.12.

Release notes

Sourced from postgres-protocol's releases.

postgres-protocol v0.6.12

Fixed

  • Bound SCRAM iteration count to 100,000 to prevent DoS.
  • Error instead of panicking on out-of-bounds hstore key/value length.
  • Fix inverted character match in SCRAM error value parser.

postgres-protocol v0.6.11

Changed

  • Upgraded hmac to 0.13.
  • Upgraded md-5 to 0.11.
  • Upgraded sha2 to 0.11.
  • Upgraded rand to 0.10.
  • Upgraded to Rust edition 2024, minimum Rust version 1.85.

postgres-protocol v0.6.10

Added

  • Implemented FallibleIterator::size_hint for Fields.

Fixed

  • Increased bind parameter limit from i16::MAX to u16::MAX.
Commits
  • 76062c9 Release postgres-protocol v0.6.12
  • b661993 fix(derive): error instead of panicking on incomplete composite values
  • d40097a fix(protocol): bound the SCRAM iteration count to prevent a DoS
  • 2af79a0 fix(types): avoid panic decoding out-of-range time 0.2 dates/timestamps
  • 7a00ffa fix(tokio): reject DataRow with a field count that differs from the columns
  • a7cf84b fix(protocol): avoid panic on out-of-bounds hstore key/value length
  • 7cf186f test(protocol): add test for SCRAM error value parsing
  • 4dd7e87 fix(protocol): inverted character match in SCRAM error value parser
  • a6507cc chore: renew expiring test SSL certificate
  • d13bb5e build(deps): upgrade semver compatible Rust dependencies
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 24, 2026
Bumps [postgres-protocol](https://github.com/rust-postgres/rust-postgres) from 0.6.9 to 0.6.12.
- [Release notes](https://github.com/rust-postgres/rust-postgres/releases)
- [Commits](rust-postgres/rust-postgres@postgres-protocol-v0.6.9...postgres-protocol-v0.6.12)

---
updated-dependencies:
- dependency-name: postgres-protocol
  dependency-version: 0.6.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/postgres-protocol-0.6.12 branch from 96622df to 4924bc6 Compare August 25, 2026 16:03

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants