[smarkows]

Bumps webpki-roots 1.0.3 → 1.0.11 in Cargo.lock (lockfile-only; resolved via cargo update -p webpki-roots@1.0.3 --precise 1.0.11).

1.0.3 is affected by RUSTSEC-2026-0381 (CVE-2026-111943): it still trusts eMudhra/emSign roots distrusted by Mozilla CCADB.

The crate is pulled in via mongodb 3.3.0 → webpki-roots 0.26.11 (shim) → 1.x, so it ends up in the native schema-engine binary used by Prisma 7.

Tested: cargo check --locked -p schema-engine-cli (Rust 1.97.1).

🤖 Generated with Claude Code

[CLAassistant]

All committers have signed the CLA.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 2f7f4b43-9455-4f83-aa7f-66fcfba6a9c7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

CodeRabbit Verify

• Run CodeRabbit Verify to test the changes in this pull request.