Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps third_party/libwebsockets/repo from 388b1d3 to edc6a44.

Commits
  • edc6a44 NN-2025-0105: UPNG out of bounds write
  • 47bdd0a NN-2025-0104: UPNG out of bounds read
  • 4006a2a NN-2025-0103: ADNS crafted response overflow
  • 5c504b6 NN-2025-0102: UAF depending on upgrade allowed
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [third_party/libwebsockets/repo](https://github.com/warmcat/libwebsockets) from `388b1d3` to `edc6a44`.
- [Commits](warmcat/libwebsockets@388b1d3...edc6a44)

---
updated-dependencies:
- dependency-name: third_party/libwebsockets/repo
  dependency-version: edc6a44ea2f779a7291b8b155a2152cfd05ba863
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file submodules Pull requests that update Submodules code labels Oct 13, 2025
Copy link

github-actions bot commented Oct 13, 2025

PR #41434: Size comparison from f902839 to 64c0e73

Full report (37 builds for bl602, bl702, bl702l, cc13x4_26x4, cc32xx, efr32, esp32, nrfconnect, nxp, psoc6, qpg, realtek, stm32, telink)
platform target config section f902839 64c0e73 change % change
bl602 lighting-app bl602+mfd+littlefs+rpc FLASH 1105406 1105406 0 0.0
RAM 178754 178754 0 0.0
bl702 lighting-app bl702+eth FLASH 659894 659894 0 0.0
RAM 134825 134825 0 0.0
bl702+wifi FLASH 835978 835978 0 0.0
RAM 124301 124301 0 0.0
bl706+mfd+rpc+littlefs FLASH 1069114 1069114 0 0.0
RAM 117141 117141 0 0.0
bl702l contact-sensor-app bl702l+mfd+littlefs FLASH 899328 899328 0 0.0
RAM 105476 105476 0 0.0
lighting-app bl702l+mfd+littlefs FLASH 981876 981876 0 0.0
RAM 109628 109628 0 0.0
cc13x4_26x4 lighting-app LP_EM_CC1354P10_6 FLASH 769432 769432 0 0.0
RAM 103208 103208 0 0.0
lock-ftd LP_EM_CC1354P10_6 FLASH 781076 781076 0 0.0
RAM 108360 108360 0 0.0
pump-app LP_EM_CC1354P10_6 FLASH 727072 727072 0 0.0
RAM 97276 97276 0 0.0
pump-controller-app LP_EM_CC1354P10_6 FLASH 711540 711540 0 0.0
RAM 97484 97484 0 0.0
cc32xx air-purifier CC3235SF_LAUNCHXL FLASH 554310 554310 0 0.0
RAM 205544 205544 0 0.0
lock CC3235SF_LAUNCHXL FLASH 587034 587034 0 0.0
RAM 205768 205768 0 0.0
efr32 lock-app BRD4187C FLASH 961168 961168 0 0.0
RAM 126228 126228 0 0.0
BRD4338a FLASH 755896 755888 -8 -0.0
RAM 255516 255516 0 0.0
window-app BRD4187C FLASH 1055508 1055508 0 0.0
RAM 122424 122424 0 0.0
esp32 all-clusters-app c3devkit DRAM 103016 103016 0 0.0
FLASH 1792516 1792516 0 0.0
IRAM 83862 83862 0 0.0
nrfconnect all-clusters-app nrf52840dk_nrf52840 FLASH 929968 929968 0 0.0
RAM 160987 160987 0 0.0
nxp contact mcxw71+release FLASH 691800 691800 0 0.0
RAM 61440 61440 0 0.0
lighting mcxw71+release FLASH 723368 723368 0 0.0
RAM 68100 68100 0 0.0
lock mcxw71+release FLASH 770592 770592 0 0.0
RAM 61804 61804 0 0.0
psoc6 all-clusters cy8ckit_062s2_43012 FLASH 1672460 1672460 0 0.0
RAM 213620 213620 0 0.0
all-clusters-minimal cy8ckit_062s2_43012 FLASH 1589940 1589940 0 0.0
RAM 210900 210900 0 0.0
light cy8ckit_062s2_43012 FLASH 1456772 1456772 0 0.0
RAM 197616 197616 0 0.0
lock cy8ckit_062s2_43012 FLASH 1489084 1489084 0 0.0
RAM 225328 225328 0 0.0
qpg lighting-app qpg6200+debug FLASH 835432 835432 0 0.0
RAM 127604 127604 0 0.0
lock-app qpg6200+debug FLASH 772180 772180 0 0.0
RAM 118580 118580 0 0.0
realtek light-switch-app rtl8777g FLASH 705368 705368 0 0.0
RAM 106784 106784 0 0.0
lighting-app rtl8777g FLASH 756568 756568 0 0.0
RAM 127132 127132 0 0.0
stm32 light STM32WB5MM-DK FLASH 469068 469068 0 0.0
RAM 141208 141208 0 0.0
telink bridge-app tl7218x FLASH 708408 708408 0 0.0
RAM 90356 90356 0 0.0
light-app-ota-compress-lzma-shell-factory-data tl3218x FLASH 795940 795940 0 0.0
RAM 40908 40908 0 0.0
light-app-ota-shell-factory-data tl7218x FLASH 787136 787136 0 0.0
RAM 93552 93552 0 0.0
light-switch-app-ota-compress-lzma-factory-data tl7218x_retention FLASH 713942 713942 0 0.0
RAM 51724 51724 0 0.0
light-switch-app-ota-compress-lzma-shell-factory-data tlsr9528a FLASH 747246 747246 0 0.0
RAM 70772 70772 0 0.0
light-switch-app-ota-factory-data tl3218x_retention FLASH 724098 724098 0 0.0
RAM 34472 34472 0 0.0
lighting-app-ota-factory-data tlsr9118bdk40d FLASH 601366 601366 0 0.0
RAM 108600 108600 0 0.0
lighting-app-ota-rpc-factory-data-4mb tlsr9518adk80d FLASH 819756 819760 4 0.0
RAM 91948 91948 0 0.0

@andy31415 andy31415 added the sdk-maintainer-approved PR marked by `matter-sdk-maintainers` as suitable for MERGE - meets guideline & sufficient reviews. label Oct 14, 2025
@mergify mergify bot merged commit fdd682e into master Oct 14, 2025
79 checks passed
@mergify mergify bot deleted the dependabot/submodules/third_party/libwebsockets/repo-edc6a44 branch October 14, 2025 13:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file review - pending sdk-maintainer-approved PR marked by `matter-sdk-maintainers` as suitable for MERGE - meets guideline & sufficient reviews. submodules Pull requests that update Submodules code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant