[wan9chi]

Motivation

Security Analysis (cargo deny) fails on every PR because two RustSec advisories now match crates in Cargo.lock:

• RUSTSEC-2026-0382: rustls-webpki 0.103.15 may accept certificate paths through distrusted emSign intermediates. Fixed in 0.103.16.
• RUSTSEC-2026-0383: webpki-root-certs 1.0.9 bundles the emSign root that allows those paths. Fixed in 1.0.10.

This bumps only those two crates in the lockfile.

🤖 Generated with Claude Code

[github-actions]

fspy benchmark

linux

dynamic/launch             change  +0.15%  [ -4.39% ..  +4.89%]  overhead   +51.34%
dynamic/access             change  +1.63%  [-11.94% .. +23.78%]  overhead   +17.35%
dynamic/access-relative    change  +1.40%  [ -4.60% .. +13.59%]  overhead   +68.18%
dynamic/access-contended   change  +3.45%  [ -9.32% .. +14.14%]  overhead    +8.37%
static/launch              change  +1.60%  [ -7.88% .. +12.28%]  overhead  +179.25%
static/access              change  -0.46%  [ -8.04% ..  +7.75%]  overhead +1422.30%
static/access-relative     change  -0.72%  [-16.96% ..  +3.30%]  overhead +1940.71%
static/access-contended    change  +0.11%  [ -6.37% ..  +5.83%]  overhead +1308.44%

macos

dynamic/launch             change  -0.05%  [ -2.75% ..  +2.61%]  overhead  +218.22%
dynamic/access             change  -1.02%  [ -2.90% ..  +1.82%]  overhead   +14.01%
dynamic/access-relative    change  -0.55%  [ -3.80% ..  +2.44%]  overhead  +243.08%
dynamic/access-contended   change  -0.19%  [ -3.66% ..  +4.49%]  overhead    +3.82%

windows

dynamic/launch             change  +0.30%  [ -3.12% ..  +4.15%]  overhead   +25.21%
dynamic/access             change  +0.00%  [ -0.57% ..  +0.75%]  overhead    +1.13%
dynamic/access-relative    change  +0.00%  [ -0.73% ..  +0.55%]  overhead    +1.12%
dynamic/access-contended   change  +0.18%  [ -0.36% ..  +0.54%]  overhead    +1.46%