From d457ffc296cedd51f332fc98264ad528e1d50f78 Mon Sep 17 00:00:00 2001
From: Razvan Dimescu <ssaricu@gmail.com>
Date: Sat, 21 Mar 2026 12:03:13 +0200
Subject: [PATCH] remove unused rustls-pemfile dependency
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Dead code — certs are generated at startup, not loaded from PEM files.
Removes RUSTSEC-2025-0134 warning. Audit now passes clean.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/ci.yml |  2 +-
 Cargo.lock               | 10 ----------
 Cargo.toml               |  1 -
 3 files changed, 1 insertion(+), 12 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ae24f86..d792c84 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,4 +25,4 @@ jobs:
       - name: test
         run: cargo test
       - name: audit
-        run: cargo install cargo-audit && cargo audit --ignore RUSTSEC-2025-0134
+        run: cargo install cargo-audit && cargo audit
diff --git a/Cargo.lock b/Cargo.lock
index 86e7e2a..be1edf2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -944,7 +944,6 @@ dependencies = [
  "rcgen",
  "reqwest",
  "rustls",
- "rustls-pemfile",
  "serde",
  "serde_json",
  "time",
@@ -1275,15 +1274,6 @@ dependencies = [
  "zeroize",
 ]
 
-[[package]]
-name = "rustls-pemfile"
-version = "2.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50"
-dependencies = [
- "rustls-pki-types",
-]
-
 [[package]]
 name = "rustls-pki-types"
 version = "1.14.0"
diff --git a/Cargo.toml b/Cargo.toml
index e88dfdb..990a6b6 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -26,4 +26,3 @@ rcgen = { version = "0.13", features = ["pem", "x509-parser"] }
 time = "0.3"
 rustls = "0.23"
 tokio-rustls = "0.26"
-rustls-pemfile = "2"