Bump rustls to 0.23.46 for RUSTSEC-2026-0346..0349

[M3gA-Mind]

Summary

Bump rustls from 0.23.45 to 0.23.46 in Cargo.lock, which fixes RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348 and RUSTSEC-2026-0349. These advisories fail module-ci / supply-chain (cargo-deny) on main (for example run 38598670406 at 7bdc741) and on every open PR, including #105.

Related issue

None.

API or behavior changes

None. The change is lockfile-only: a patch release of a transitive TLS dependency, with no manifest change.

Validation

• Ran cargo update -p rustls --precise 0.23.46 (Updating rustls v0.23.45 -> v0.23.46).
• Checked every changed Cargo.lock line by hand. There are exactly four: rustls's version and checksum, old and new. Its dependency list is unchanged, so nothing else had to move.
• cargo deny check advisories was not run locally because cargo-deny is not installed here. module-ci / supply-chain on this PR is the check.
• Not run locally: cargo fmt --all -- --check, cargo clippy --all-targets --all-features -- -D warnings, cargo build --all-targets --all-features and cargo test --all-features. No source file changes, and CI runs all four.

Tests

None added: no code changes.

Documentation

Not needed, since no behaviour or API changes.

Checklist

• The change is focused on one logical change
• No new #[allow(...)], #[ignore], or relaxed lints
• No secrets, tokens, or .env contents in the diff or the description

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 239dd23e-561e-4889-9bce-0a01e153b756

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}