From 845d8989cbd2fb1913ea0d62618591298a181495 Mon Sep 17 00:00:00 2001
From: Tony <68118705+Legend-Master@users.noreply.github.com>
Date: Tue, 1 Sep 2026 17:38:21 +0800
Subject: [PATCH] fix: ignore and fix audits (#3564)

* fix: ignore and fix audits

* openssl-sys 0.9.114
---
 .cargo/audit.toml |  3 +++
 Cargo.lock        | 16 +++++++++-------
 2 files changed, 12 insertions(+), 7 deletions(-)

diff --git a/.cargo/audit.toml b/.cargo/audit.toml
index 9316268d7..de84e84c5 100644
--- a/.cargo/audit.toml
+++ b/.cargo/audit.toml
@@ -14,4 +14,7 @@ ignore = [
   "RUSTSEC-2026-0195",
   # quinn-proto, can't be updated in the repo because of MSRV, users are unaffected
   "RUSTSEC-2026-0185",
+  # rkyv is not used, it's brought in by `rust_decimal`'s `rkyv` feature to the lockfile,
+  # but that feature is not enabled by anything
+  "RUSTSEC-2026-0235",
 ]
diff --git a/Cargo.lock b/Cargo.lock
index f6a8926b8..22fbc476f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3826,7 +3826,7 @@ version = "0.7.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "af1844ef2428cc3e1cb900be36181049ef3d3193c63e43026cfe202983b27a56"
 dependencies = [
- "proc-macro-crate 3.3.0",
+ "proc-macro-crate 1.3.1",
  "proc-macro2",
  "quote",
  "syn 2.0.100",
@@ -4123,9 +4123,9 @@ dependencies = [
 
 [[package]]
 name = "openssl"
-version = "0.10.72"
+version = "0.10.78"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fedfea7d58a1f73118430a55da6a286e7b044961736ce96a16a17068ea25e5da"
+checksum = "f38c4372413cdaaf3cc79dd92d29d7d9f5ab09b51b10dded508fb90bb70b9222"
 dependencies = [
  "bitflags 2.9.0",
  "cfg-if",
@@ -4164,9 +4164,9 @@ dependencies = [
 
 [[package]]
 name = "openssl-sys"
-version = "0.9.107"
+version = "0.9.114"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8288979acd84749c744a9014b4382d42b8f7b2592847b5afb2ed29e5d16ede07"
+checksum = "13ce1245cd07fcc4cfdb438f7507b0c7e4f3849a69fd84d52374c66d83741bb6"
 dependencies = [
  "cc",
  "libc",
@@ -5122,9 +5122,9 @@ dependencies = [
 
 [[package]]
 name = "rust_decimal"
-version = "1.37.1"
+version = "1.42.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "faa7de2ba56ac291bd90c6b9bece784a52ae1411f9506544b3eae36dd2356d50"
+checksum = "be2a24f50780bc85f09cc6ac299bdf1424302742d77221106859c9d8b102126a"
 dependencies = [
  "arrayvec",
  "borsh",
@@ -5134,6 +5134,7 @@ dependencies = [
  "rkyv",
  "serde",
  "serde_json",
+ "wasm-bindgen",
 ]
 
 [[package]]
@@ -7837,6 +7838,7 @@ dependencies = [
  "cfg-if",
  "once_cell",
  "rustversion",
+ "serde",
  "wasm-bindgen-macro",
 ]