From ad6be08547849835d1d463bb2065068734b364a8 Mon Sep 17 00:00:00 2001 From: jadamcrain Date: Thu, 7 May 2026 06:50:24 -0700 Subject: [PATCH] update rustls-webpki to 0.103.13 to resolve RUSTSEC-2026-0104 Reachable panic in CRL parsing. The vulnerable path is not reached by this codebase (no CRLs are constructed or passed to webpki), but the lockfile bump clears the scheduled security audit. --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index e9e20ca8..79fffc1a 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1171,9 +1171,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.12" +version = "0.103.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8279bb85272c9f10811ae6a6c547ff594d6a7f3c6c6b02ee9726d1d0dcfcdd06" +checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e" dependencies = [ "aws-lc-rs", "ring",