Commit 9172e8b

committed

deps: bump rustls-webpki to 0.103.12 for RUSTSEC-2026-0098/0099

URI name constraint bypass — affects every HTTPS client in the tree (LLM providers via reqwest, wecom_ws WebSocket via tokio-tungstenite, email via lettre). Lockfile-only bump; no Cargo.toml change. Also shifts prost-build's transitive heck from 0.5.0 to 0.4.1 (both versions remain resolved for different consumers; benign resolver share-the-lock). Related upstream: 1f24cbd (zeroclaw-labs#5786) — we skip the rumqttc bump and audit.toml edits since master_wecom has no MQTT.

1 parent 245f558 commit 9172e8bCopy full SHA for 9172e8b

1 file changed

Cargo.lock

`‎Cargo.lock‎`

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Comments

(0)