fix(deps): upgrade rumqttc 0.24->0.25 and allow RUSTSEC-2026-0049

randavidovitz · randavidovitz · commit a87bf485dcc0 · 2026-04-10T18:39:14.000+02:00
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -31,4 +31,5 @@ ignore = [
     "RUSTSEC-2025-0100",  # gio-sys unmaintained
     "RUSTSEC-2026-0002",  # serde_cbor unmaintained
     "RUSTSEC-2023-0086",  # lexopt unmaintained (if present)
+    "RUSTSEC-2026-0049",  # rustls-webpki CRL matching — rumqttc 0.25.1 depends on vulnerable version, awaiting upstream fix
 ]
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -147,7 +147,7 @@ native-tls = { version = "0.2", features = ["vendored"] }
 mailparse = "0.16"
 
 # MQTT client
-rumqttc = "0.24"
+rumqttc = "0.25"
 
 # OpenSSL (vendored = statically compiled, no runtime libssl dependency on Linux)
 openssl = { version = "0.10", features = ["vendored"] }

Original file line number	Diff line number	Diff line change
`@@ -31,4 +31,5 @@ ignore = [`
`31`	`31`	`"RUSTSEC-2025-0100", # gio-sys unmaintained`
`32`	`32`	`"RUSTSEC-2026-0002", # serde_cbor unmaintained`
`33`	`33`	`"RUSTSEC-2023-0086", # lexopt unmaintained (if present)`
	`34`	`+ "RUSTSEC-2026-0049", # rustls-webpki CRL matching — rumqttc 0.25.1 depends on vulnerable version, awaiting upstream fix`
`34`	`35`	`]`