[rblaine95]

Summary

• Update ctutils 0.4.3 → 0.4.4 to address RUSTSEC-2026-0385.
• Update rustls-webpki 0.103.15 → 0.103.16 to address RUSTSEC-2026-0382.
• Change only the two package versions and checksums in Cargo.lock; leave manifests and the audit gate unchanged.

Verification

• Confirmed digest 0.11.3 permits ctutils ^0.4, and rustls 0.23.46 permits rustls-webpki ^0.103.14.
• Verified replacement checksums against the crates.io registry index.
• Reapplied the previously prepared lockfile change onto current master (0b456783), avoiding unrelated dependency/workflow changes.
• Local Cargo/audit/tests were not run because this environment has no Rust toolchain. CI validation is pending.

The existing backoff, instant, paste, and rustls-pemfile unmaintained notices are separate informational findings, not these two vulnerabilities.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 90d2a2cd-fd88-48c2-a07e-5bdf9cf66c7e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn