From 8a61630f0bb665d95c3cfa41f15b01faf3b222c3 Mon Sep 17 00:00:00 2001 From: meetsu <96637888+klNuno@users.noreply.github.com> Date: Wed, 21 Oct 2026 13:12:24 +0200 Subject: [PATCH 1/2] chore(deps): run Dependabot monthly --- .github/dependabot.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 34065ef..b2ea9f8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,12 +1,12 @@ version: 2 updates: - # Grouped into one pull request per ecosystem. Ungrouped, a quiet week still opens five + # Grouped into one pull request per ecosystem. Ungrouped, a quiet month still opens five # of them, and the noise is what makes a security bump easy to miss. - package-ecosystem: cargo directory: "/" schedule: - interval: weekly + interval: monthly open-pull-requests-limit: 5 groups: cargo: @@ -21,7 +21,7 @@ updates: - package-ecosystem: github-actions directory: "/" schedule: - interval: weekly + interval: monthly open-pull-requests-limit: 5 groups: actions: From 9ebaaaaf0dbccf3cff597cbcdad54318509b929f Mon Sep 17 00:00:00 2001 From: meetsu <96637888+klNuno@users.noreply.github.com> Date: Wed, 21 Oct 2026 13:17:31 +0200 Subject: [PATCH 2/2] fix(deps): bump rustls-webpki and webpki-roots for RUSTSEC-2026-0381/0382 --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index c8283f4..18edf2b 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1478,9 +1478,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.15" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "ring", "rustls-pki-types", @@ -2119,9 +2119,9 @@ dependencies = [ [[package]] name = "webpki-roots" -version = "1.0.9" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a" +checksum = "1c1c8e20c8a38fc7d65abfe74eb7280e4aa667e8eec8bc84996d2874810748d9" dependencies = [ "rustls-pki-types", ]