From 9145ea0a58bfe5082fccda212850f86af133086b Mon Sep 17 00:00:00 2001
From: Ilya Bogin <ilya.bogin@gmail.com>
Date: Tue, 30 Jun 2026 12:22:16 +0300
Subject: [PATCH] fix(deps): bump quinn-proto to 0.11.15 (RUSTSEC-2026-0185)

cargo audit fails on RUSTSEC-2026-0185: remote memory exhaustion in
quinn-proto 0.11.14 via unbounded out-of-order stream reassembly (high,
7.5). Bump the transitive dependency to 0.11.15, which carries the fix.
Lockfile-only change; cargo audit now exits 0.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 658bcf0..813379e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -870,9 +870,9 @@ dependencies = [
 
 [[package]]
 name = "quinn-proto"
-version = "0.11.14"
+version = "0.11.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+checksum = "4fcb935c5bec503c2f0e306bdd3e58bb9029dcb14fa8d9ac76e3a5256ac0763e"
 dependencies = [
  "bytes",
  "getrandom 0.3.4",