From 6e03682813bcc7ae161287d3911f1a215715cc71 Mon Sep 17 00:00:00 2001 From: Amir Khakshour Date: Fri, 23 Oct 2026 08:41:04 +0200 Subject: [PATCH] fix(deps): patch RUSTSEC-2026-0382 and RUSTSEC-2026-0383 rustls-webpki 0.103.15 -> 0.103.16 (distrusted intermediates accepted) and webpki-root-certs 1.0.7 -> 1.0.10 (bundled distrusted emSign roots). Both are semver-compatible lockfile bumps. The advisories were published after main's last green Security Audit, so every open PR now fails that gate. --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 2f7c46d..41e60ac 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -3599,9 +3599,9 @@ checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f" [[package]] name = "rustls-webpki" -version = "0.103.15" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "aws-lc-rs", "ring", @@ -4968,9 +4968,9 @@ dependencies = [ [[package]] name = "webpki-root-certs" -version = "1.0.7" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f31141ce3fc3e300ae89b78c0dd67f9708061d1d2eda54b8209346fd6be9a92c" +checksum = "58ec80e73fd8baf57bf0d9615554c75348bda990d6d5bbeab964dd068319fecb" dependencies = [ "rustls-pki-types", ]