Release v1.4.5

Bump tar crate from 0.4.43 to 0.4.45 to address two vulnerabilities in
the bundled tar archive library:

- CVE-2026-33055 / RUSTSEC-2026-0068: conditional PAX size header
  handling inconsistent with other tar parsers
- CVE-2026-33056 / RUSTSEC-2026-0067: symlink-based chmod escape
  outside the extraction root in unpack_dir()

Also picks up the five commits that have landed on main since v1.4.4
(Rust 1.92 bump, Dockerfile cleanups, enclave_build error reporting).

sim: https://t.corp.amazon.com/P403754724
Signed-off-by: Mushahid Hussain <hmushi@amazon.co.uk>

Author: hmushi

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "nitro-cli"
-version = "1.4.4"
+version = "1.4.5"
 authors = ["The AWS Nitro Enclaves Team <aws-nitro-enclaves-devel@amazon.com>"]
 edition = "2018"
 license = "Apache-2.0"

Cargo.toml

@@ -20,7 +20,7 @@
 
 Summary:    AWS Nitro Enclaves tools for managing enclaves
 Name:       aws-nitro-enclaves-cli
-Version:    1.4.4
+Version:    1.4.5
 Release:    0%{?dist}
 
 License:    Apache 2.0
@@ -195,6 +195,14 @@ fi
 %{ne_include_dir}/*
 
 %changelog
+* Fri May 01 2026 Mushahid Hussain <hmushi@amazon.co.uk> - 1.4.5-0
+- Bump tar crate to 0.4.45 to address CVE-2026-33055 and CVE-2026-33056
+- Fix Clippy warnings for Rust 1.92
+- Bump Rust version to 1.92
+- scripts/bump-rust-version.sh: Switch to two-part versioning
+- tools/Dockerfile: Build openssl silently
+- enclave_build: Always print errors when handling builder streams
+
 * Mon Jan 12 2026 Leonard Foerster <foersleo@amazon.com> - 1.4.4-0"
 - vsock-proxy: configs: Add missing regions
 - vsock-proxy: configs: Reorder regions aligned with kms docs

SPECS/aws-nitro-enclaves-cli.spec

@@ -22,5 +22,5 @@ sha2 = "0.9.5"
 futures = "0.3.28"
 
 aws-nitro-enclaves-image-format = "0.5"
-tar = "0.4.40"
+tar = "0.4.45"
 flate2 = "1.1.1"

THIRD_PARTY_LICENSES_RUST_CRATES.html

@@ -1 +1 @@
-da158a79f419a3b41f774c6abeffb68751f3b886  nitro-cli-dependencies.tar.gz
+2f692712602fc0f74d0294adedda832bafb67b53  nitro-cli-dependencies.tar.gz