Cargo.lock moves rustls from 0.23.43 to 0.23.45, which fixes RUSTSEC-2026-0285, and chacha20 from the yanked 0.10.1 to 0.10.2. Nothing else in the lockfile changes.
A new deny.toml denies yanked crates and accepts two unmaintained advisories, each with a reason: RUSTSEC-2025-0119 (number_prefix) and RUSTSEC-2024-0436 (paste). Both come in through model2vec-rs and have no upgrade path. prek runs cargo deny check advisories when Cargo.lock or deny.toml changes, and scripts/ci.sh runs it through prek run --all-files. Against the old lockfile it reports both findings; against this one it passes. Fixes 3mwixdi33pl25 (https://tangled.org/permadeath.com/vibescrobble.com/issues).
🤖 Generated with Claude Code