From 2ff8dcb840cb02556743f6754eb0677d540cce1e Mon Sep 17 00:00:00 2001 From: Giles Knap Date: Fri, 6 Nov 2026 12:38:55 +0000 Subject: [PATCH] fix: bump rustls to close Dependabot alerts Lockfile-only bump in bundler/Cargo.lock: - rustls 0.23.40 -> 0.23.46 - rustls-webpki 0.103.13 -> 0.103.16 (dragged in) Fixes GHSA-h2v8-394m-p7vv, GHSA-w44r-93j7-qv28, GHSA-c8m5-c952-6cm4, GHSA-2mjx-qc3c-rqvc. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_01Uybqz7SRaVuiGbQ8Kv6ZHL --- bundler/Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/bundler/Cargo.lock b/bundler/Cargo.lock index 3d87946b..6558225d 100644 --- a/bundler/Cargo.lock +++ b/bundler/Cargo.lock @@ -1822,9 +1822,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.40" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ef86cd5876211988985292b91c96a8f2d298df24e75989a43a3c73f2d4d8168b" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "once_cell", "ring", @@ -1845,9 +1845,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.13" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "ring", "rustls-pki-types",