chore(deps): bump openssl from 3.3.0 to 4.0.2

[dependabot]

Bumps openssl from 3.3.0 to 4.0.2.

Release notes

Sourced from openssl's releases.

v4.0.2

Merged Pull Requests

• Fix missing error check on BIO_get_mem_ptr() by @​ndossche in ruby/openssl#1013
• Fix memory leak if sk_push fails by @​ndossche in ruby/openssl#1009
• Fix memory leak if ossl_bn_new() fails by @​ndossche in ruby/openssl#1010
• Fix UAF in OpenSSL.fixed_length_secure_compare by @​apocalypse9949 in ruby/openssl#1016
• Fix test failures with OpenSSL 4.0. by @​junaruga in ruby/openssl#1019
• Fix CI in 3.2 branch by @​rhenium in ruby/openssl#1049
• Backport OpenSSL 4.0 support by @​rhenium in ruby/openssl#1051

New Contributors

• @​apocalypse9949 made their first contribution in ruby/openssl#1016

Full Changelog: ruby/openssl@v4.0.1...v4.0.2

v4.0.1

What's Changed

• cipher: remove incorrect assertion in Cipher#update by @​rhenium in ruby/openssl#991
• Improve Argument Error Message in EC:Group.new by @​aguspe in ruby/openssl#992
• Fix test_cipher.rb in FIPS. by @​junaruga in ruby/openssl#994
• Fix test_digest.rb in FIPS. by @​junaruga in ruby/openssl#995
• Use assert_ruby_status if no assertion by @​hsbt in ruby/openssl#999
• CI: Upgrade LibreSSL versions by @​junaruga in ruby/openssl#998
• Add sync_close kwarg to SSLSocket.new by @​noteflakes in ruby/openssl#996
• ssl: refactor errno access by @​rhenium in ruby/openssl#980
• ssl: update tests for SSLContext#servername_cb callback by @​rhenium in ruby/openssl#1001
• Fix test_pkcs12.rb in FIPS. by @​junaruga in ruby/openssl#997
• ocsp: fix uninitialized variables in BasicResponse#status by @​swhitt in ruby/openssl#1004
• Ruby/OpenSSL 4.0.1 by @​rhenium in ruby/openssl#1006

New Contributors

• @​aguspe made their first contribution in ruby/openssl#992
• @​noteflakes made their first contribution in ruby/openssl#996
• @​swhitt made their first contribution in ruby/openssl#1004

Full Changelog: ruby/openssl@v4.0.0...v4.0.1

v4.0.0

A high-level overview is available in History.md: https://github.com/ruby/openssl/blob/master/History.md#version-400

Merged Pull Requests

• pkey: Use openssl generated pkcs8 key instead by @​samuel40791765 in ruby/openssl#830
• Various cleanups in pkey tests by @​rhenium in ruby/openssl#834
• Reduce OpenSSL::Buffering#do_write overhead by @​byroot in ruby/openssl#831
• Require LibreSSL 3.9 or later (Drop support for 3.1-3.8) by @​rhenium in ruby/openssl#836
• Require OpenSSL 1.1.0 or later (Drop support for 1.0.2) by @​rhenium in ruby/openssl#839
• Require OpenSSL 1.1.1 or later (Drop support for 1.1.0) by @​rhenium in ruby/openssl#841
• Use X509_ALGOR_get0() accessor for X509_ALGOR by @​botovq in ruby/openssl#687
• pkey: change PKey::{RSA,DSA,DH}#params to use nil for missing parameters by @​rhenium in ruby/openssl#774
• ts: use TS_VERIFY_CTX_set0_{store,certs}() on OpenSSL 3.4 by @​rhenium in ruby/openssl#842

... (truncated)

Changelog

Sourced from openssl's changelog.

Version 4.0.2

Merged changes in 3.2.4 and 3.3.3.

Version 4.0.1

Notable changes

• Add sync_close keyword argument to OpenSSL::SSL::SSLSocket.new as a short-hand for setting sync_close attribute on the created SSLSocket instance. [[GitHub #955]](ruby/openssl#955) [[GitHub #996]](ruby/openssl#996)

Bug fixes

• Fix uninitialized variables in OpenSSL::OCSP::BasicResponse#status. [[GitHub #1004]](ruby/openssl#1004)

Version 4.0.0

Compatibility

• Ruby >= 2.7
• OpenSSL >= 1.1.1, LibreSSL >= 3.9, and AWS-LC 1.66.0
  • Removed support for OpenSSL 1.0.2-1.1.0 and LibreSSL 3.1-3.8. [[GitHub #835]](ruby/openssl#835)
  • Added support for AWS-LC. [[GitHub #833]](ruby/openssl#833)

Notable changes

• OpenSSL::SSL
  • Reduce overhead when writing to OpenSSL::SSL::SSLSocket. #syswrite no longer creates a temporary String object. [[GitHub #831]](ruby/openssl#831)
  • Make OpenSSL::SSL::SSLContext#min_version= and #max_version= wrap the corresponding OpenSSL APIs directly, and remove the fallback to SSL options. [[GitHub #849]](ruby/openssl#849)

... (truncated)

Commits

• 6e410b8 Ruby/OpenSSL 4.0.2
• 4d6d068 Merge branch 'maint-3.3' into maint-4.0
• 9720a76 Ruby/OpenSSL 3.3.3
• 6062da0 Merge branch 'maint-3.2' into maint-3.3
• d1fb31b Ruby/OpenSSL 3.2.4
• 4bae03b Merge branch 'maint-3.3' into maint-4.0
• b7f2b7e test_pkey_rsa.rb: Fix test_private_encoding_encrypted in OpenSSL 4.0 FIPS
• 1c29d55 Merge branch 'maint-3.2' into maint-3.3
• c37f74f Merge pull request #1051 from rhenium/ky/openssl-4.0-backport
• 3ef34d7 Merge branch 'maint-3.3' into maint-4.0
• Additional commits viewable in compare view

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.83%. Comparing base (9a8efb8) to head (30eef35).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1051   +/-   ##
=======================================
  Coverage   99.83%   99.83%           
=======================================
  Files          26       26           
  Lines         608      608           
=======================================
  Hits          607      607           
  Misses          1        1           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.