From e5a1ef6a153172bc51ab2585047d75abdf52d668 Mon Sep 17 00:00:00 2001
From: Anton-4 <17049058+Anton-4@users.noreply.github.com>
Date: Sat, 1 Aug 2026 18:49:42 +0200
Subject: [PATCH] update bytes for dependebot security alert

basic-cli never actually triggered the vulnerable rust code path, so kind of a false positive.
---
 Cargo.lock                     | 4 ++--
 Cargo.toml                     | 2 +-
 ci/rust_http_server/Cargo.lock | 4 ++--
 ci/rust_http_server/Cargo.toml | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index a2ddf1e4..84f4ab17 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -40,9 +40,9 @@ checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"
 
 [[package]]
 name = "bytes"
-version = "1.10.1"
+version = "1.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
+checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
 
 [[package]]
 name = "cc"
diff --git a/Cargo.toml b/Cargo.toml
index 4221fcac..daba8882 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -27,7 +27,7 @@ hyper-util = { version = "=0.1.12", default-features = false, features = ["clien
 hyper-rustls = { version = "=0.27.6", default-features = false, features = ["http1", "tls12", "webpki-tokio", "ring"] }
 http-body-util = "=0.1.3"
 tokio = { version = "=1.45.0", default-features = false, features = ["rt", "net", "time"] }
-bytes = "=1.10.1"
+bytes = "=1.12.1"
 
 [target.'cfg(not(target_os = "macos"))'.dependencies]
 sys-locale = "=0.3.2"
diff --git a/ci/rust_http_server/Cargo.lock b/ci/rust_http_server/Cargo.lock
index 13e18d28..549d1859 100644
--- a/ci/rust_http_server/Cargo.lock
+++ b/ci/rust_http_server/Cargo.lock
@@ -34,9 +34,9 @@ dependencies = [
 
 [[package]]
 name = "bytes"
-version = "1.10.1"
+version = "1.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
+checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
 
 [[package]]
 name = "cc"
diff --git a/ci/rust_http_server/Cargo.toml b/ci/rust_http_server/Cargo.toml
index 28edb946..4c71f603 100644
--- a/ci/rust_http_server/Cargo.toml
+++ b/ci/rust_http_server/Cargo.toml
@@ -11,6 +11,6 @@ hyper = { version = "=1.6.0", default-features = false, features = ["server", "h
 tokio = { version = "=1.45.0", default-features = false, features = ["macros", "rt", "rt-multi-thread"] }
 hyper-util = { version = "=0.1.12", features = ["tokio"] }
 http-body-util = "=0.1.3"
-bytes = "=1.10.1"
+bytes = "=1.12.1"
 
 [workspace]