From 3c92a5e61112cdf93dda1440e8f6e7a637267f0b Mon Sep 17 00:00:00 2001
From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Date: Tue, 16 Jun 2026 18:06:53 +0100
Subject: [PATCH] fix(deps): bump rustls-webpki 0.103.12 -> 0.103.13
 (GHSA-82j2-j2ch-gfr8)

Resolves the rustls-webpki CRL BIT STRING DoS (GHSA-82j2-j2ch-gfr8 /
RUSTSEC-2026-0104, CVSS 7.5 HIGH, fixed in 0.103.13). Transitive dep
via rustls; lockfile-only bump (cargo update -p rustls-webpki).

Closes Dependabot alert #4. Addresses issue #16 (the two findings in
#16, GHSA-82j2-j2ch-gfr8 and RUSTSEC-2026-0104, are the same advisory).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index ac86a25..35f93a6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1678,9 +1678,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.12"
+version = "0.103.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8279bb85272c9f10811ae6a6c547ff594d6a7f3c6c6b02ee9726d1d0dcfcdd06"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
 dependencies = [
  "ring",
  "rustls-pki-types",