From 8677a6cf17ec3e706913e2dd876f5e85cfd051ad Mon Sep 17 00:00:00 2001
From: Michael Pursifull <mike@arcaven.com>
Date: Wed, 22 Apr 2026 12:47:55 -0500
Subject: [PATCH] =?UTF-8?q?fix(deps):=20bump=20rustls-webpki=200.103.12=20?=
 =?UTF-8?q?=E2=86=92=200.103.13?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

RUSTSEC-2026-0104: reachable panic parsing empty BIT STRING in
onlySomeReasons of IssuingDistributionPoint CRL extension.

kos does not use CRLs, so the bug is not exploitable here, but
cargo-deny fails CI on any advisory. Patch bump only, no code change.
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index cb22644..c14a81d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1159,9 +1159,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.12"
+version = "0.103.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8279bb85272c9f10811ae6a6c547ff594d6a7f3c6c6b02ee9726d1d0dcfcdd06"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
 dependencies = [
  "ring",
  "rustls-pki-types",