From a185de602a33091e869ee1d487a59415a092db32 Mon Sep 17 00:00:00 2001
From: "apify-deps[bot]" <4649591+apify-deps[bot]@users.noreply.github.com>
Date: Wed, 7 Oct 2026 01:28:18 +0000
Subject: [PATCH 1/3] chore(deps): bump hickory-resolver to patched 0.26.2

Security: GHSA-5j98-2g5x-46v6, GHSA-6w6g-hm98-mhgm, GHSA-6f2x-v7q7-m7m5.
Pulls in hickory-proto/hickory-net 0.26.3 for API compat. Lockfile-only,
within existing in-range requirement (impit/Cargo.toml: hickory-resolver = "0.26.1").
---
 Cargo.lock | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 1fca162c..2f41768b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -699,7 +699,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -1018,9 +1018,9 @@ checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
 
 [[package]]
 name = "hickory-net"
-version = "0.26.1"
+version = "0.26.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e2295ed2f9c31e471e1428a8f88a3f0e1f4b27c15049592138d1eebe9c35b183"
+checksum = "c480823ed7c2c5d0f09c41020cb6b7c28029ce60ec42dc942158dcf22f8e0a4d"
 dependencies = [
  "async-trait",
  "cfg-if",
@@ -1042,9 +1042,9 @@ dependencies = [
 
 [[package]]
 name = "hickory-proto"
-version = "0.26.1"
+version = "0.26.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bab31817bfb44672a252e97fe81cd0c18d1b2cf892108922f6818820df8c643"
+checksum = "12b92608f679a6fa515dd1d15c1ff89443026e391200a2c840c7afcba482893d"
 dependencies = [
  "data-encoding",
  "idna",
@@ -1062,9 +1062,9 @@ dependencies = [
 
 [[package]]
 name = "hickory-resolver"
-version = "0.26.1"
+version = "0.26.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0d58d28879ceecde6607729660c2667a081ccdc082e082675042793960f178c"
+checksum = "0e4f9f4603319422d482738f3f6fe5aac03157fdbfed1cd85a3ff45adb09072f"
 dependencies = [
  "cfg-if",
  "futures-util",
@@ -2266,7 +2266,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -2327,7 +2327,7 @@ dependencies = [
  "security-framework",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -2541,7 +2541,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
 dependencies = [
  "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -3113,7 +3113,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]

From d31de2f569c32e551871fec0569c122011ca8fa8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jind=C5=99ich=20B=C3=A4r?= <jindrichbar@gmail.com>
Date: Wed, 7 Oct 2026 13:36:51 +0200
Subject: [PATCH 2/3] ci: remove the PR autotriage workflow

---
 .github/workflows/pr-autotriage.yaml | 33 ----------------------------
 1 file changed, 33 deletions(-)
 delete mode 100644 .github/workflows/pr-autotriage.yaml

diff --git a/.github/workflows/pr-autotriage.yaml b/.github/workflows/pr-autotriage.yaml
deleted file mode 100644
index ba90a422..00000000
--- a/.github/workflows/pr-autotriage.yaml
+++ /dev/null
@@ -1,33 +0,0 @@
-name: PR autotriage
-
-on:
-  pull_request:
-    types:
-      - opened
-      - ready_for_review
-  workflow_dispatch:
-    inputs:
-      pr_url:
-        description: URL of the pull request to review
-        required: true
-        type: string
-
-permissions: {}
-
-jobs:
-  fire:
-    name: Fire routine
-    runs-on: ubuntu-latest
-    # `opened` fires for draft PRs too, but those get their own `ready_for_review` event later
-    if: github.event_name == 'workflow_dispatch' || github.event.pull_request.draft == false
-    steps:
-      - env:
-          TOKEN: ${{ secrets.AUTOREVIEW_CLAUDE_CODE_TOKEN }}
-          PR_URL: ${{ github.event.pull_request.html_url || inputs.pr_url }}
-        run: |
-          curl --fail-with-body -X POST https://api.anthropic.com/v1/claude_code/routines/trig_01DYGd61hv2gZAmR2NFPETof/fire \
-            -H "Authorization: Bearer $TOKEN" \
-            -H "anthropic-version: 2023-06-01" \
-            -H "anthropic-beta: experimental-cc-routine-2026-04-01" \
-            -H "Content-Type: application/json" \
-            -d "$(jq -n --arg url "$PR_URL" '{ text: "Review the pull request at \($url)" }')"

From 355d6890740cfead6759d1531348e31759bfc163 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jind=C5=99ich=20B=C3=A4r?= <jindrichbar@gmail.com>
Date: Wed, 7 Oct 2026 13:53:08 +0200
Subject: [PATCH 3/3] fix(deps): bump the rustls fork to 0.23.45 for
 GHSA-2mjx-qc3c-rqvc

---
 Cargo.lock | 17 +++++++++--------
 Cargo.toml |  2 +-
 2 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 2f41768b..110ae5c1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -222,9 +222,9 @@ checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
 
 [[package]]
 name = "aws-lc-rs"
-version = "1.16.2"
+version = "1.18.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a054912289d18629dc78375ba2c3726a3afe3ff71b4edba9dedfca0e3446d1fc"
+checksum = "b281d307588d634de920874890732659e2e7672f72b5e10e81badc1a8a83621e"
 dependencies = [
  "aws-lc-sys",
  "zeroize",
@@ -232,14 +232,15 @@ dependencies = [
 
 [[package]]
 name = "aws-lc-sys"
-version = "0.39.0"
+version = "0.45.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fa7e52a4c5c547c741610a2c6f123f3881e409b714cd27e6798ef020c514f0a"
+checksum = "9bff6c3b54fad79a2e60b8102caf565819711497c1f5f092f49508e2f5c31b27"
 dependencies = [
  "cc",
  "cmake",
  "dunce",
  "fs_extra",
+ "pkg-config",
 ]
 
 [[package]]
@@ -2271,8 +2272,8 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.43"
-source = "git+https://github.com/apify/rustls?rev=23b2c17427c095b768e22ccf0dadb97266860cf1#23b2c17427c095b768e22ccf0dadb97266860cf1"
+version = "0.23.45"
+source = "git+https://github.com/apify/rustls?rev=b158c57cf02dcae81c11a73389c599269bb74621#b158c57cf02dcae81c11a73389c599269bb74621"
 dependencies = [
  "aws-lc-rs",
  "brotli",
@@ -2338,9 +2339,9 @@ checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.13"
+version = "0.103.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2"
 dependencies = [
  "aws-lc-rs",
  "ring",
diff --git a/Cargo.toml b/Cargo.toml
index d8ee6645..05970f7c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -9,7 +9,7 @@ members = [
 
 [patch.crates-io]
 h2 = { git = "https://github.com/apify/h2", rev = "7f393a728a8db07cabb1b78d2094772b33943b9a" }
-rustls = { git = "https://github.com/apify/rustls", rev="23b2c17427c095b768e22ccf0dadb97266860cf1" }
+rustls = { git = "https://github.com/apify/rustls", rev="b158c57cf02dcae81c11a73389c599269bb74621" }
 tower-http = { git = "https://github.com/apify/tower-http", rev="f9efc0d9193e774d33aedc1022b922efefc22052" }
 hyper-util = { git = "https://github.com/apify/hyper-util", rev="9b7795dfd7158fc55e7c84b65bf1dae1d2dea67d" }