What
cargo audit (rustsec/audit-check CI job) is red on develop: RUSTSEC-2026-0285 (rustls TLS 1.3 handshake-message plaintext issue) — rustls 0.23.42 in Cargo.lock, advisory published after the last lock update (2026-08-31).
Suggested fix
Pin rustls to 0.23.45 (same remediation as codecoradev/gaira on 2026-10-03): cargo update -p rustls --precise 0.23.45 — also pulls rustls-webpki 0.103.15. Lockfile-only; no API change at our usage.
What
cargo audit(rustsec/audit-check CI job) is red on develop: RUSTSEC-2026-0285 (rustls TLS 1.3 handshake-message plaintext issue) —rustls 0.23.42in Cargo.lock, advisory published after the last lock update (2026-08-31).Suggested fix
Pin
rustlsto0.23.45(same remediation as codecoradev/gaira on 2026-10-03):cargo update -p rustls --precise 0.23.45— also pullsrustls-webpki 0.103.15. Lockfile-only; no API change at our usage.