From dda0abf03569d2f89fa1259a2464f1fd31f7fb19 Mon Sep 17 00:00:00 2001
From: Vyncint Ng <115854244+vyncint@users.noreply.github.com>
Date: Sat, 19 Sep 2026 20:18:39 +0700
Subject: [PATCH] security(deps): rustls 0.23.45 for RUSTSEC-2026-0285
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

rustls accepted TLS 1.3 handshake messages sent at the wrong encryption
level when they followed a key-changing message in the same record, so a
plaintext message packed into the same record as an encrypted one was
taken as legitimate. Advisory published 2026-09-14; patched in 0.23.45,
and the lock was at 0.23.43.

A lock-only bump inside 0.23, so nothing is rewritten: `cargo check
--workspace --all-targets --locked` passes, and `cargo deny check` returns
advisories/bans/licenses/sources all ok.

rustls is not a direct dependency: it arrives through reqwest,
hyper-rustls, tokio-rustls and aws-smithy-http-client, so there is no
manifest to edit.

Separate from the termlens bump on purpose — that one moves a test harness
and this one closes a TLS hole; they should be revertible apart.

Signed-off-by: Vyncint Ng <115854244+vyncint@users.noreply.github.com>
---
 Cargo.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index a0bc0db..68e8e46 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5198,9 +5198,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.43"
+version = "0.23.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06"
+checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
 dependencies = [
  "aws-lc-rs",
  "once_cell",
@@ -5732,7 +5732,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
  "fastrand",
- "getrandom 0.4.3",
+ "getrandom 0.3.4",
  "once_cell",
  "rustix",
  "windows-sys 0.61.2",