Take the rustls 0.23.45 patch release

[ColtenOuO]

The check job currently fails on every branch at the cargo-audit gate, e.g. run 34874694806 on fix-grounding-stale-read, which had passed the same morning. The only failing gate is:

Crate: rustls 0.23.43
ID: RUSTSEC-2026-0285, published 2026-09-14
TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
Solution: Upgrade to >=0.23.45

This bumps rustls 0.23.43 → 0.23.45 and rustls-webpki 0.103.14 → 0.103.15.

Note

cargo update -p rustls also re-pointed tempfile from getrandom 0.4.3 to 0.3.4. That edge is restored to 0.4.3 to keep the change scoped; cargo metadata --locked accepts the result.

---

Summary by cubic

Updates the locked rustls patch release to 0.23.45 so the cargo-audit gate stops failing on RUSTSEC-2026-0285. This also bumps rustls-webpki to 0.103.15. Only Cargo.lock changes; the transitive tempfile → getrandom edge is pinned back to 0.4.3 to keep the diff scoped.

^{Written for commit 2f6854e. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 1 file

_{Re-trigger cubic}