From 99b6a0d6904386c1fcf784dc08b3475ae190b130 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 17 Oct 2026 05:22:45 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/create-github-app-token Bumps the github-actions group with 1 update: [actions/create-github-app-token](https://github.com/actions/create-github-app-token). Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/create-github-app-token/compare/bcd2ba49218906704ab6c1aa796996da409d3eb1...64ab729a6294000f5aa4a4bc0b73d1f32bc45510) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/released-dependencies.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/released-dependencies.yml b/.github/workflows/released-dependencies.yml index 0f5cb6d..c053882 100644 --- a/.github/workflows/released-dependencies.yml +++ b/.github/workflows/released-dependencies.yml @@ -153,7 +153,7 @@ jobs: with: name: released-dependency-candidate path: ${{ runner.temp }}/dependency-candidate - - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app with: app-id: ${{ vars.CRATE_DEPENDENCY_UPDATE_APP_ID }} From 990109995b5f1db0ec964e881ae21cebf8a49354 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 17 Oct 2026 14:10:42 +0000 Subject: [PATCH 2/2] fix(deps): bump rustls to 0.23.46 Clears RUSTSEC-2026-0346 through RUSTSEC-2026-0349, which fail the cargo-deny advisories check on every pull request against main. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_016FyuSKkineBeVKbubYFsqd --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 0cb014c..94bfd74 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -553,9 +553,9 @@ checksum = "5a2d2f3481209a6b42eec2fbb49063fb4e8d35b57023401495d4fe0f85c817f0" [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "log", "once_cell",