fix(deps): bump rustls, quinn-proto and webpki crates past RustSec advisories
Closed
TJ
17h ago+18+18+01234567890123456789-18-18-01234567890123456789
What
The required Security Audit check fails on main (and so on every open PR) because new RustSec advisories hit four transitive dependencies. This is a lockfile-only cargo update -p quinn-proto -p rustls -p rustls-webpki -p webpki-root-certs; no Cargo.toml or code changes.
| Crate | From | To | Advisories |
|---|---|---|---|
| quinn-proto | 0.11.16 | 0.11.19 | RUSTSEC-2026-0338, -0339, -0340, -0341, -0342 |
| rustls | 0.23.42 | 0.23.46 | RUSTSEC-2026-0285, -0346, -0348, -0349 |
| rustls-webpki | 0.103.13 | 0.103.16 | RUSTSEC-2026-0382 |
| webpki-root-certs | 1.0.9 | 1.0.11 | RUSTSEC-2026-0383 |
aws-lc-rs / aws-lc-sys move along with rustls (1.17.3 ā 1.19.0, 0.43.0 ā 0.47.0).
Testing
cargo test and cargo clippy -- -D warnings pass locally; CI's Security Audit is the real check.
Unblocks #339.
š¤ Generated with Claude Code