From aea3467781c23c468d699c3059e4b047228e73a3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 01:17:04 +0000
Subject: [PATCH] build(deps): bump aws-lc-rs from 1.13.3 to 1.14.0 (#39238)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [aws-lc-rs](https://github.com/aws/aws-lc-rs) from 1.13.3 to
1.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-lc-rs/releases">aws-lc-rs's
releases</a>.</em></p>
<blockquote>
<h2>aws-lc-rs v1.14.0</h2>
<h2>What's Changed</h2>
<ul>
<li>MSRV bumped to 1.70.0 by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/822">aws/aws-lc-rs#822</a></li>
<li>aws-lc-sys v0.31.0 aligned with <a
href="https://github.com/aws/aws-lc/releases/tag/v1.59.0">AWS-LC
v1.59.0</a> by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/867">aws/aws-lc-rs#867</a>
<ul>
<li>Performance improvements for ML-KEM:
<ul>
<li>x86-64: <a
href="https://redirect.github.com/aws/aws-lc/pull/2631">aws/aws-lc#2631</a></li>
<li>arm64: <a
href="https://redirect.github.com/aws/aws-lc/pull/2498">aws/aws-lc#2498</a></li>
</ul>
</li>
</ul>
</li>
<li>Support for <a
href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/signature/struct.EcdsaKeyPair.html#method.sign_digest">sign</a>/<a
href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/signature/trait.VerificationAlgorithm.html#tymethod.verify_digest_sig">verify</a>
on digests by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/826">aws/aws-lc-rs#826</a></li>
<li>Support for <a
href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/cipher/struct.PaddedBlockDecryptingKey.html#method.cbc_iso10126">decrypting
ANSI X9.23 / ISO 10126-padded</a> AES by <a
href="https://github.com/tstenner"><code>@​tstenner</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/847">aws/aws-lc-rs#847</a></li>
<li>Support <a
href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/aead/struct.RandomizedNonceKey.html">SIV
in RandomizedNonceKey</a> by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/846">aws/aws-lc-rs#846</a></li>
<li>Support verification of <a
href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/signature/index.html">P256/P384+SHA512
signatures</a> by <a
href="https://github.com/ctz"><code>@​ctz</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/857">aws/aws-lc-rs#857</a></li>
<li><a
href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/signature/struct.RsaSignatureEncoding.html"><code>RsaSignatureEncoding</code></a>
type is public by <a
href="https://github.com/soundofspace"><code>@​soundofspace</code></a>
in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/864">aws/aws-lc-rs#864</a></li>
<li><a
href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/signature/struct.ParsedPublicKey.html"><code>ParsedPublicKey</code></a>
for signature operations by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/863">aws/aws-lc-rs#863</a></li>
<li><a
href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/agreement/struct.ParsedPublicKey.html"><code>ParsedPublicKey</code></a>
for agreement operations by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/862">aws/aws-lc-rs#862</a></li>
</ul>
<h3>Build Improvements</h3>
<ul>
<li>Allow prebuilt-NASM w/ Cmake toolchain by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/852">aws/aws-lc-rs#852</a></li>
<li>Add support for Apple tvOS builds by <a
href="https://github.com/matszczygiel"><code>@​matszczygiel</code></a>
in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/848">aws/aws-lc-rs#848</a></li>
</ul>
<h3>Issues Being Resolved</h3>
<ul>
<li>Feature Request: RandomizedNonceKey for AES-GCM-SIV -- <a
href="https://redirect.github.com/aws/aws-lc-rs/issues/842">aws/aws-lc-rs#842</a></li>
<li>Add way to pre-parse signature keys (i.e. turn
<code>signature::UnparsedPublicKey</code> to <code>PublicKey</code>) --
<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/849">aws/aws-lc-rs#849</a></li>
<li>Build failed for x86_64-pc-windows-gnu target regardless of
AWS_LC_SYS_PREBUILT_NASM=1 -- <a
href="https://redirect.github.com/aws/aws-lc-rs/issues/850">aws/aws-lc-rs#850</a></li>
</ul>
<h2>Other Merged PRs</h2>
<ul>
<li>Exclude CI jobs for invalid param combinations by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/866">aws/aws-lc-rs#866</a></li>
<li>Prepare aws-lc-rs v1.14.0 by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/876">aws/aws-lc-rs#876</a></li>
<li>Fix + refactor &quot;ios-simulator-runner.sh&quot; by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/868">aws/aws-lc-rs#868</a></li>
<li>Support CPU Jitter Entropy from upstream RAGDOLL by <a
href="https://github.com/torben-hansen"><code>@​torben-hansen</code></a>
in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/865">aws/aws-lc-rs#865</a></li>
<li>Avoid doctests in cross-compile CI by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/855">aws/aws-lc-rs#855</a></li>
<li>Consolidate agreement functions into LcPtr&lt;EVP_PKEY&gt; by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/854">aws/aws-lc-rs#854</a></li>
<li>Fix unexpected +1.70.0 compiler error by <a
href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/861">aws/aws-lc-rs#861</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/tstenner"><code>@​tstenner</code></a>
made their first contribution in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/847">aws/aws-lc-rs#847</a></li>
<li><a
href="https://github.com/matszczygiel"><code>@​matszczygiel</code></a>
made their first contribution in <a
href="https://redirect.github.com/aws/aws-lc-rs/pull/848">aws/aws-lc-rs#848</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/aws/aws-lc-rs/compare/v1.13.3...v1.14.0">https://github.com/aws/aws-lc-rs/compare/v1.13.3...v1.14.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/18bd3cb7156ae4a78d9a7e310eaca38ec714db1f"><code>18bd3cb</code></a>
Prepare aws-lc-rs v1.14.0 (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/876">#876</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/9a2b0ccd7b529342c8c369c8d5467877f6608bf0"><code>9a2b0cc</code></a>
ParsedPublicKey for agreement (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/862">#862</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/f139e68a2fe4e4c476da2051f8a183a5b1b4f6d3"><code>f139e68</code></a>
Allow prebuilt-NASM w/ Cmake toolchain (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/852">#852</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/6aaec4a76a2265b387a27d7166724cfc5d0b0ed8"><code>6aaec4a</code></a>
Fix unexpected +1.70.0 compiler error (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/861">#861</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/beef8151aefd1ebc18816315953dae40bb86f147"><code>beef815</code></a>
ParsedPublicKey for signature (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/863">#863</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/124f67495d2bef852aa6fe29db18336f117ae68c"><code>124f674</code></a>
Expose RsaSignatureEncoding (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/864">#864</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/86de8dfe9f15c4dda0951aa8c4c819fdced92b9c"><code>86de8df</code></a>
Add support for Apple tvOS builds (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/848">#848</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/8e8b95703207a55c2fe22ec573bcf7e0bfc87147"><code>8e8b957</code></a>
Fix + refactor &quot;ios-simulator-runner.sh&quot; (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/868">#868</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/f0125037370ee9adfecb650a6ff32a18f57089e7"><code>f012503</code></a>
Exclude jobs w/ invalid params (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/866">#866</a>)</li>
<li><a
href="https://github.com/aws/aws-lc-rs/commit/2630afad94b3d8d419fb278041cdbcd5c1cfba35"><code>2630afa</code></a>
Prepare aws-lc-sys v0.31.0 (<a
href="https://redirect.github.com/aws/aws-lc-rs/issues/867">#867</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-lc-rs/compare/v1.13.3...v1.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aws-lc-rs&package-manager=cargo&previous-version=1.13.3&new-version=1.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 Cargo.lock | 82 +++++++++++++++++-------------------------------------
 Cargo.toml |  2 +-
 2 files changed, 27 insertions(+), 57 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 33462feb251..f546df77532 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -697,9 +697,9 @@ dependencies = [
 
 [[package]]
 name = "aws-lc-rs"
-version = "1.13.3"
+version = "1.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c953fe1ba023e6b7730c0d4b031d06f267f23a46167dcbd40316644b10a17ba"
+checksum = "94b8ff6c09cd57b16da53641caa860168b88c172a5ee163b0288d3d6eea12786"
 dependencies = [
  "aws-lc-sys",
  "zeroize",
@@ -707,11 +707,11 @@ dependencies = [
 
 [[package]]
 name = "aws-lc-sys"
-version = "0.30.0"
+version = "0.31.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dbfd150b5dbdb988bcc8fb1fe787eb6b7ee6180ca24da683b61ea5405f3d43ff"
+checksum = "0e44d16778acaf6a9ec9899b92cebd65580b83f685446bf2e1f5d3d732f99dcd"
 dependencies = [
- "bindgen 0.69.5",
+ "bindgen 0.72.1",
  "cc",
  "cmake",
  "dunce",
@@ -799,29 +799,6 @@ dependencies = [
  "serde",
 ]
 
-[[package]]
-name = "bindgen"
-version = "0.69.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "271383c67ccabffb7381723dea0672a673f292304fcb45c01cc648c7a8d58088"
-dependencies = [
- "bitflags 2.9.4",
- "cexpr",
- "clang-sys",
- "itertools 0.12.1",
- "lazy_static",
- "lazycell",
- "log",
- "prettyplease",
- "proc-macro2",
- "quote",
- "regex",
- "rustc-hash 1.1.0",
- "shlex",
- "syn",
- "which",
-]
-
 [[package]]
 name = "bindgen"
 version = "0.71.1"
@@ -840,6 +817,26 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "bindgen"
+version = "0.72.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895"
+dependencies = [
+ "bitflags 2.9.4",
+ "cexpr",
+ "clang-sys",
+ "itertools 0.12.1",
+ "log",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash 2.1.1",
+ "shlex",
+ "syn",
+]
+
 [[package]]
 name = "bit-set"
 version = "0.8.0"
@@ -3860,15 +3857,6 @@ version = "0.1.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "164f0e3568306af8b47c191406743476d9383e49d717960288cdb3469f9b7f54"
 
-[[package]]
-name = "home"
-version = "0.5.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "589533453244b0995c858700322199b2becb13b627df2851f64a2775d024abcf"
-dependencies = [
- "windows-sys 0.59.0",
-]
-
 [[package]]
 name = "html5ever"
 version = "0.35.0"
@@ -4060,7 +4048,7 @@ dependencies = [
  "js-sys",
  "log",
  "wasm-bindgen",
- "windows-core 0.58.0",
+ "windows-core 0.61.2",
 ]
 
 [[package]]
@@ -4934,12 +4922,6 @@ version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
 
-[[package]]
-name = "lazycell"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55"
-
 [[package]]
 name = "lebe"
 version = "0.5.3"
@@ -10147,18 +10129,6 @@ dependencies = [
  "web-sys",
 ]
 
-[[package]]
-name = "which"
-version = "4.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "87ba24419a2078cd2b0f2ede2691b6c66d8e47836da3b6db8265ebad47afbfc7"
-dependencies = [
- "either",
- "home",
- "once_cell",
- "rustix 0.38.44",
-]
-
 [[package]]
 name = "winapi"
 version = "0.3.9"
diff --git a/Cargo.toml b/Cargo.toml
index 6910e512ddb..bcd6234f44b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -30,7 +30,7 @@ arboard = "3"
 arrayvec = "0.7"
 async-tungstenite = { version = "0.29", features = ["tokio-rustls-webpki-roots"] }
 atomic_refcell = "0.1.13"
-aws-lc-rs = { version = "1.13", default-features = false, features = ["aws-lc-sys"] }
+aws-lc-rs = { version = "1.14", default-features = false, features = ["aws-lc-sys"] }
 background_hang_monitor_api = { path = "components/shared/background_hang_monitor" }
 backtrace = "0.3"
 base = { path = "components/shared/base" }