build(deps): bump the crates-io group with 5 updates

[dependabot]

Bumps the crates-io group with 5 updates:

Package	From	To
schannel	0.1.27	0.1.28
rustls	0.23.31	0.23.34
rustls-webpki	0.103.4	0.103.8
tempfile	3.21.0	3.23.0
webpki-roots	1.0.2	1.0.4

Updates schannel from 0.1.27 to 0.1.28

Commits

• e3ed535 chore: update MSRV to 1.71
• 9841f88 chore: given need for 1 minor build fix, use that chance to also update to 0....
• ea1d1d1 Merge pull request #114 from dpaoliello/windowssys
• acc6204 chore: no reason to track self-signed.badssl.com.cer in repo, since they freq...
• 8b31aec Add the missing sha1 file
• 141dab0 Bump windows-sys to 0.60
• See full diff in compare view

Updates rustls from 0.23.31 to 0.23.34

Commits

• 4cee226 Cargo: rustls v0.23.33 -> v0.23.34
• 278391e Remove use of doc_auto_cfg
• 31ca6af Avoid use of docsrs cfg
• b4597ca Prepare 0.23.33
• 667a71d Reset KeyUpdate counter on AppData
• 48b2fd9 Support encryption for QUIC multipath
• 6a188a7 Take semver-compatible updates
• 5abe33e Prepare 0.23.32
• d3c502e Improve compatibility of TLS1.2 with ECDSA+SHA512
• ef7063d take webpki 0.103.5
• Additional commits viewable in compare view

Updates rustls-webpki from 0.103.4 to 0.103.8

Release notes

Sourced from rustls-webpki's releases.

0.103.8

What's Changed

• backport valid_uri_names (#404) to rel-0.103 by @​alex in rustls/webpki#408

Full Changelog: rustls/webpki@v/0.103.7...v/0.103.8

0.103.7

• New feature: Add KeyPurposeId::to_decoded_oid() to help external ExtendedKeyUsageValidators fill RequiredEkuNotFoundContext::present.

What's Changed

• Warn on unnameable types by @​djc in rustls/webpki#387
• Expose KeyPurposeId::to_decoded_oid() by @​djc in rustls/webpki#385
• Fix --cfg docsrs uses by @​ctz in rustls/webpki#390

Full Changelog: rustls/webpki@v/0.103.6...v/0.103.7

0.103.6

The extensible EKU validation released as part of 0.103.5 was actually not usable due to missing type exports, and contained a regression where empty ExtendedKeyUsage extensions would not trigger an error. Both issues are fixed in this release.

What's Changed

• Export more types to enable ExtendedKeyUsageValidator implementations by @​djc in rustls/webpki#381
• Error on empty EKU extensions by @​djc in rustls/webpki#382

0.103.5

• New feature: support verification of P256+SHA512 and P384-SHA512 ECDSA signatures with aws-lc-rs. This is not a recommended combination, but such signatures exist in the wild.

What's Changed

• Leverage extended API from rcgen 0.14.2 by @​djc in rustls/webpki#366
• Update semver-compatible dependencies by @​djc in rustls/webpki#369
• ci: take updated nightly for cargo-check-external-types by @​cpu in rustls/webpki#370
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in rustls/webpki#371
• build(deps): bump serde_json from 1.0.142 to 1.0.143 in the crates-io group by @​dependabot[bot] in rustls/webpki#374
• Clarify docs on Cert methods by @​ctz in rustls/webpki#375
• Extract trait for ExtendedKeyUsage validation by @​djc in rustls/webpki#376
• build(deps): bump actions/setup-python from 5 to 6 by @​dependabot[bot] in rustls/webpki#378
• 0.103.5: support P256+SHA512 and P384+SHA512 by @​ctz in rustls/webpki#379

Full Changelog: rustls/webpki@v/0.103.4...v/0.103.5

Commits

• a1cb6cd Bump version to 0.103.8
• 38ce939 Add valid_uri_names() method to Cert
• 94d957c Bump version to 0.103.7
• 33ae0f4 Update semver-compatible dependencies
• d65302e Expose KeyPurposeId::to_decoded_oid()
• 79679a0 Remove use of doc_auto_cfg
• 785edcc Avoid use of docsrs cfg
• 4e836cf Warn on unnameable types
• b88328a Bump version to 0.103.6
• 54f896f Error on empty EKU extensions
• Additional commits viewable in compare view

Updates tempfile from 3.21.0 to 3.23.0

Changelog

Sourced from tempfile's changelog.

3.23.0

• Remove need for the "nightly" feature to compile with "wasip2".

3.22.0

• Updated windows-sys requirement to allow version 0.61.x
• Remove unstable-windows-keep-open-tempfile feature.

Commits

• fe9f4a3 chore: release v3.23.0 (#381)
• 006c3fd fix: use std::os::fd instead of std::os::wasi (#380)
• b0e6309 doc: Update COPYRIGHT link (#377)
• 2d6fc3f Fix formatting in Builder::disable_cleanup documentation (#375)
• f720dbe chore: release 3.22.0
• 55d742c chore: remove deprecated unstable feature flag
• bc41a0b build(deps): update windows-sys requirement from >=0.52, <0.61 to >=0.52, <0....
• 3c55387 test: make sure we don't drop tempdirs early (#373)
• 17bf644 doc(builder): clarify permissions (#372)
• c7423f1 doc(env): document the alternative to setting the tempdir (#371)
• Additional commits viewable in compare view

Updates webpki-roots from 1.0.2 to 1.0.4

Release notes

Sourced from webpki-roots's releases.

1.0.4

CommScope removal

https://bugzilla.mozilla.org/show_bug.cgi?id=1994866 tracks the voluntary removal of:

• CommScope Public Trust ECC Root-01
• CommScope Public Trust ECC Root-02
• CommScope Public Trust RSA Root-01
• CommScope Public Trust RSA Root-02

What's Changed

• 1.0.4: track removal of CommScope by @​ctz in rustls/webpki-roots#109

Full Changelog: rustls/webpki-roots@v/1.0.3...v/1.0.4

1.0.3

Addition of "OISTE Server Root RSA G1" & "OISTE Server Root ECC G1": https://bugzilla.mozilla.org/show_bug.cgi?id=1988913.

What's Changed

• 1.0.3: track October 2025 additions by @​ctz in rustls/webpki-roots#108

Commits

• 28ead9c 1.0.4: track removal of CommScope
• 1a48d15 1.0.3: track October 2025 additions
• 5bde205 ci: explicitly install extra components
• d2c04f3 tests: take advantage of newer rcgen API
• fa754f4 Update semver-compatible dependencies
• 66b99f2 Address clippy::non_canonical_partial_ord_impl
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml