From 22d72d8df81d3cb04e3a1e625e71d5fa732b259f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?C=C3=A9dric=20Halber?= Date: Thu, 14 May 2026 22:29:33 +0000 Subject: [PATCH] chore: bump rustls-webpki to 0.103.13 Resolves 4 RustSec advisories on rustls-webpki 0.103.9 surfaced by `cargo audit`: - RUSTSEC-2026-0049 (CRLs not authoritative by Distribution Point) - RUSTSEC-2026-0098 (URI name constraints incorrectly accepted) - RUSTSEC-2026-0099 (wildcard name constraints incorrectly accepted) - RUSTSEC-2026-0104 (reachable panic in CRL parsing) Lockfile-only change; verified with `cargo check`. Co-Authored-By: Claude Opus 4.7 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index ff239b8..a292e87 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2633,9 +2633,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.9" +version = "0.103.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d7df23109aa6c1567d1c575b9952556388da57401e4ace1d15f79eedad0d8f53" +checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e" dependencies = [ "ring", "rustls-pki-types",