[Pouyanpi]

Description

Update rustls from 0.23.45 to 0.23.46 to address all four current rustls alerts. Generated with Cargo using the repository's pinned Rust 1.96.1 toolchain. Cargo also normalizes tempfile's existing getrandom dependency reference from 0.4.3 to 0.3.4; no other package versions change.

Related Issue(s)

Maintainer-directed remediation for Dependabot alerts 470–473. No separate issue was opened. The existing Cargo update PR #2554 does not update rustls; this PR is independent of it.

Verification

• cargo test --workspace --locked: all 40 tests passed with Rust 1.96.1, in an isolated copy of the unchanged Cargo workspace plus this lockfile.
• cargo clippy --workspace --all-targets --locked -- -D warnings: passed with the same pinned toolchain.
• uv run --locked pre-commit run --files Cargo.lock: passed.
• Structured dependency/security review: inspected the full generated diff and confirmed the rustls checksum comes from the package registry. No changes to HTTP behavior, TLS configuration, credentials, retry policy, or source code.

AI Assistance

Codex prepared the dependency update, ran validation, and drafted this description. Human review and accountability remain with the maintainer.

Checklist

• Followed contribution guidance and Conventional Commit title convention.
• Commits include DCO sign-off.
• Validation and generated dependency-reference normalization are documented above.
• Generated changelog files were not edited.
• Human review of the prepared changes is complete.