- Update rustls-webpki 0.103.10 → 0.103.13 (fixes RUSTSEC-2026-0098,
RUSTSEC-2026-0099, RUSTSEC-2026-0104)
- Update mongodb 3.5.1 → 3.6.0 (latest compatible 3.x)
- Add .cargo/audit.toml ignoring two hickory-proto advisories that cannot
be fixed: mongodb 3.x pins hickory-resolver 0.25.x which pins
hickory-proto 0.25.x; RUSTSEC-2026-0118 has no upstream fix at all,
RUSTSEC-2026-0119 requires hickory-proto >=0.26.1 which mongodb does
not yet support. Both are DNS-layer DoS vectors requiring control of
the DNS server responding to MongoDB's hostname resolution.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>