Skip to content

build(deps): bump postgres-protocol from 0.6.9 to 0.6.12 - #6716

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/postgres-protocol-0.6.12
Open

build(deps): bump postgres-protocol from 0.6.9 to 0.6.12#6716
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/postgres-protocol-0.6.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps postgres-protocol from 0.6.9 to 0.6.12.

Release notes

Sourced from postgres-protocol's releases.

postgres-protocol v0.6.12

Fixed

  • Bound SCRAM iteration count to 100,000 to prevent DoS.
  • Error instead of panicking on out-of-bounds hstore key/value length.
  • Fix inverted character match in SCRAM error value parser.

postgres-protocol v0.6.11

Changed

  • Upgraded hmac to 0.13.
  • Upgraded md-5 to 0.11.
  • Upgraded sha2 to 0.11.
  • Upgraded rand to 0.10.
  • Upgraded to Rust edition 2024, minimum Rust version 1.85.

postgres-protocol v0.6.10

Added

  • Implemented FallibleIterator::size_hint for Fields.

Fixed

  • Increased bind parameter limit from i16::MAX to u16::MAX.
Commits
  • 76062c9 Release postgres-protocol v0.6.12
  • b661993 fix(derive): error instead of panicking on incomplete composite values
  • d40097a fix(protocol): bound the SCRAM iteration count to prevent a DoS
  • 2af79a0 fix(types): avoid panic decoding out-of-range time 0.2 dates/timestamps
  • 7a00ffa fix(tokio): reject DataRow with a field count that differs from the columns
  • a7cf84b fix(protocol): avoid panic on out-of-bounds hstore key/value length
  • 7cf186f test(protocol): add test for SCRAM error value parsing
  • 4dd7e87 fix(protocol): inverted character match in SCRAM error value parser
  • a6507cc chore: renew expiring test SSL certificate
  • d13bb5e build(deps): upgrade semver compatible Rust dependencies
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 24, 2026
Bumps [postgres-protocol](https://github.com/rust-postgres/rust-postgres) from 0.6.9 to 0.6.12.
- [Release notes](https://github.com/rust-postgres/rust-postgres/releases)
- [Commits](rust-postgres/rust-postgres@postgres-protocol-v0.6.9...postgres-protocol-v0.6.12)

---
updated-dependencies:
- dependency-name: postgres-protocol
  dependency-version: 0.6.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/postgres-protocol-0.6.12 branch from 96622df to 4924bc6 Compare August 25, 2026 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants