fix(deps): bump rustls ≥0.23.45 (RUSTSEC-2026-0285)

[echobt]

Summary

Bumps rustls from 0.23.43 → 0.23.45 in Cargo.lock to address RUSTSEC-2026-0285 (Security Audit FAIL after #73). This mirrors backend #319.

• rustls is reachable transitively via reqwest (rustls feature) → hyper-rustls → tokio-rustls.
• No direct rustls requirement in any Cargo.toml, so the only change is the lockfile pin.
• No deny.toml / release_age exception exists in this repo (cargo audit's .cargo/audit.toml ignore list is already empty); no exception update was needed.

Verification

• cargo audit audit: 0 vulnerabilities — RUSTSEC-2026-0285 no longer present with rustls 0.23.45.
• cargo metadata: rustls resolves to 0.23.45.

Test plan

• cargo audit
• CI (cargo fmt, clippy, cargo test --workspace, TUI job, version check)

[echobt]

@greptileai

[greptile-apps]

Greptile Summary

Updates the locked rustls dependency from 0.23.43 to 0.23.45 for the RUSTSEC-2026-0285 remediation. The locked dependency graph resolves the patched version, and the primary HTTP-client consumer’s library tests pass.

Confidence Score: 5/5

Safe to merge.

No actionable issues were found. Locked dependency resolution selected rustls 0.23.45, and the cortex-app-server library test suite completed successfully with 82 passing tests.

Files Needing Attention: None.

T-Rex Logs

What T-Rex did

• Ran the exact contract-validation commands: cargo metadata --locked --format-version 1, a Python assertion over its JSON resolution, and cargo test --locked -p cortex-app-server --lib.
• Captured the command evidence artifacts, including the before-state script and the complete post-run output log, to support review.
• Verified that no repository source files were modified; only the requested evidence artifacts were authored.
• Created two evidence artifacts to document the validation: a shell script artifact and a log artifact.

_{Ran code and verified through T-Rex}

_{Reviews (1): Last reviewed commit: "fix(deps): bump rustls ≥0.23.45 (RUSTSEC..." | Re-trigger Greptile}