From 501f2cf0723ed219a4b0eb65fe149ca108b54a69 Mon Sep 17 00:00:00 2001
From: Jan Zachmann <50990105+JanZachmann@users.noreply.github.com>
Date: Fri, 16 Oct 2026 11:35:03 +0200
Subject: [PATCH] fix(deps): bump rustls to 0.23.46

Fixes the cargo audit advisories for rustls 0.23.45:
- RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets
- RUSTSEC-2026-0347: buffered application data sent to outer server after ECH rejection
- RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication
- RUSTSEC-2026-0349: unauthenticated ServerHello can downgrade later connections to classical key exchange

Signed-off-by: Jan Zachmann <50990105+JanZachmann@users.noreply.github.com>
---
 Cargo.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 215fc35..777948b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2928,9 +2928,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.45"
+version = "0.23.46"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
+checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf"
 dependencies = [
  "aws-lc-rs",
  "once_cell",
@@ -3465,7 +3465,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
  "fastrand",
- "getrandom 0.4.3",
+ "getrandom 0.3.4",
  "once_cell",
  "rustix",
  "windows-sys 0.61.2",