From 0d06d4d31bf0d45481696751ef0e979982a442cd Mon Sep 17 00:00:00 2001
From: YoursFunny <admin@yoursfunny.top>
Date: Wed, 14 Oct 2026 23:42:32 +0800
Subject: [PATCH] fix(deps): bump rustls to 0.23.46 for RUSTSEC-2026-0346..0349

Four advisories dated 2026-10-14 hit rustls 0.23.45 (a brotli
certificate-decompression allocation, a ServerHello key-exchange
downgrade, and two more), all fixed in 0.23.46, and cargo audit fails the
CI gate on them. Only rustls changes in the lock (version + checksum).
The remaining audit findings (dotenv/proc-macro-error2 unmaintained,
yoke-derive yanked) are warnings the action leaves non-fatal.
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 5c0e58c..ccf5a43 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1897,9 +1897,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.45"
+version = "0.23.46"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
+checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf"
 dependencies = [
  "once_cell",
  "ring",