From 4f96a9bc8adc7bbc3185ead99b16fd3161fdccb8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Sep 2026 08:34:00 +0000
Subject: [PATCH 1/4] build(deps): bump reqwest from 0.13.4 to 0.13.5

Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.13.4 to 0.13.5.
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/seanmonstar/reqwest/compare/v0.13.4...v0.13.5)

---
updated-dependencies:
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index f626f5d..1b74f83 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1658,11 +1658,11 @@ dependencies = [
 
 [[package]]
 name = "reqwest"
-version = "0.13.4"
+version = "0.13.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "219c5811de6525e5416c7d5d53bb656d3afdbc6c5af816e0802bcfa42dbdc1c3"
+checksum = "16a1cfa75cc186dd73d5818e510e042e40927bccc9c236b061cea97e1eb08029"
 dependencies = [
- "base64 0.22.1",
+ "base64 0.23.1",
  "bytes",
  "encoding_rs",
  "futures-channel",

From 27059557f2da95370a2750e5cc7782c0d9c4763d Mon Sep 17 00:00:00 2001
From: Mike Bryant <mike@urbanhamster.net>
Date: Wed, 16 Sep 2026 14:57:54 +0800
Subject: [PATCH 2/4] Update rustls dependency due to RUSTSEC-2026-0285

Cargo Audit Details:
--------------------
Crate:     rustls
Version:   0.23.43
Title:     TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
Date:      2026-09-14
ID:        RUSTSEC-2026-0285
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0285
Severity:  5.3 (medium)
Solution:  Upgrade to >=0.23.45
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 1b74f83..f975e68 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1792,9 +1792,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.43"
+version = "0.23.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06"
+checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
 dependencies = [
  "aws-lc-rs",
  "once_cell",

From 54d0232a5f2293e2a586f7773540bf84232957ca Mon Sep 17 00:00:00 2001
From: Mike Bryant <mike@urbanhamster.net>
Date: Wed, 16 Sep 2026 15:03:54 +0800
Subject: [PATCH 3/4] serialport 4.10.0 yanked (Linux build issue?)

---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index f975e68..1c3be74 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1993,9 +1993,9 @@ dependencies = [
 
 [[package]]
 name = "serialport"
-version = "4.10.0"
+version = "4.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6a2f4ac56b5d3af3c40fbbee17be96d532cba02fa5853926aacdb77d926272ab"
+checksum = "6ba5f8f29aa20853c4e3e85a33ec580eb66be1f057142e77a333834a318bacf2"
 dependencies = [
  "bitflags 2.13.1",
  "cfg-if",

From be4ea39f47a0a0bd96e101c0eb61d0d4e68c9a2a Mon Sep 17 00:00:00 2001
From: Mike Bryant <mike@urbanhamster.net>
Date: Wed, 16 Sep 2026 15:06:33 +0800
Subject: [PATCH 4/4] wnaf 0.14.0 yanked (endianness issue?)

wnaf/v0.14.1 release note:
This release contains a breaking change (#1913) to use `primefield`
traits for determining endianness. The original hope was that the
existing `ff` traits could be used instead (zkcrypto/ff#158), but we
ended up having to ship our own traits (#1809) due to inaction from
upstream.

This is a release blocker for `bignp256` which needs little endian
support, so we're making this change hoping that despite being breaking
it should be compatible with all existing usages. We can re-evaluate if
that winds up not being the case.

The `wnaf` v0.14.0 release will be yanked accordingly to mandate the new
bounds.
---
 Cargo.lock | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 1c3be74..3b4cc99 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2722,13 +2722,14 @@ checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
 
 [[package]]
 name = "wnaf"
-version = "0.14.0"
+version = "0.14.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ab12e7090f27e2ffd9322651492942d50c2926094af30601e1964337db39daf1"
+checksum = "795ca18b3fdb5e62bf982199278341ddcf7ebf7d32e25e212ad05d496e95f6fa"
 dependencies = [
  "ff",
  "group",
  "hybrid-array",
+ "primefield",
 ]
 
 [[package]]