chore(deps): bump uuid from 1.23.1 to 1.23.4

Cargo.toml

@@ -182,7 +182,7 @@ toml = "=1.1.2"
 tokio = { version = "=1.52.1", features = ["rt", "rt-multi-thread", "process", "io-util", "time", "net", "macros", "sync"] }
 axum = { version = "=0.8.9", features = ["ws"] }
 tower-http = { version = "=0.6.8", features = ["cors", "auth"] }
-uuid = { version = "=1.23.1", features = ["v4", "v7"] }
+uuid = { version = "=1.23.4", features = ["v4", "v7"] }
 chrono = "=0.4.44"
 # Issue #2727: the dashboard header renders the deployment/build timestamp in
 # US Pacific time with the date-correct PST/PDT abbreviation. chrono-tz is the

docs/atlas/compile-deps/README.md

@@ -45,7 +45,7 @@ This layer maps Simard's direct Cargo dependencies and a one-hop view of the lar
 | `tokio` | `=1.52.1`, features `rt`, `rt-multi-thread`, `process`, `io-util`, `time`, `net`, `macros`, `sync` | Async runtime, subprocess, networking, and synchronization foundation. |
 | `axum` | `=0.8.9`, feature `ws` | HTTP and websocket dashboard or operator services. |
 | `tower-http` | `=0.6.8`, features `cors`, `auth` | HTTP middleware for CORS and auth layers. |
-| `uuid` | `=1.23.1`, features `v4`, `v7` | Stable identifiers for sessions, facts, and domain records. |
+| `uuid` | `=1.23.4`, features `v4`, `v7` | Stable identifiers for sessions, facts, and domain records. |
 | `chrono` | `=0.4.44` | Date and time handling in runtime code. |
 | `chrono-tz` | `=0.10.4` | Time-zone aware dashboard timestamp formatting. |
 | `dirs` | `=6.0.0` | User directory discovery for state and configuration paths. |
@@ -67,7 +67,7 @@ This layer maps Simard's direct Cargo dependencies and a one-hop view of the lar
 | `url` | `=2.5.8`, optional | URL parsing behind `dashboard-audit`. |
 | `base64` | `=0.22.1` | SMTP AUTH LOGIN payload encoding. |
 | `rustls` | `=0.23.38`, feature `ring` | TLS for authenticated SMTP relay and network clients. |
-| `rustls-native-certs` | `=0.8.3` | Native trust roots for TLS. |
+| `rustls-native-certs` | `=0.8.4` | Native trust roots for TLS. |
 | `webpki-roots` | `=1.0.7` | WebPKI trust roots for TLS fallback. |
 | `libc` | `=0.2.185`, Unix target dependency | Unix FFI bindings. |
 | `chrono` build dependency | `=0.4.44` | Build-time timestamp formatting in `build.rs`. |

docs/atlas/compile-deps/compile-deps-external-runtime.dot

@@ -20,7 +20,7 @@ digraph compile_deps_external_runtime {
     tokio [label="tokio =1.52.1\nrt process net macros sync"];
     axum [label="axum =0.8.9\nws"];
     tower_http [label="tower-http =0.6.8\ncors auth"];
-    uuid [label="uuid =1.23.1\nv4 v7"];
+    uuid [label="uuid =1.23.4\nv4 v7"];
     chrono [label="chrono =0.4.44"];
     chrono_tz [label="chrono-tz =0.10.4"];
     dirs [label="dirs =6.0.0"];
@@ -42,7 +42,7 @@ digraph compile_deps_external_runtime {
     url [label="url =2.5.8\noptional"];
     base64 [label="base64 =0.22.1"];
     rustls [label="rustls =0.23.38\nring"];
-    rustls_native_certs [label="rustls-native-certs =0.8.3"];
+    rustls_native_certs [label="rustls-native-certs =0.8.4"];
     webpki_roots [label="webpki-roots =1.0.7"];
     libc [label="libc =0.2.185\nunix target"];
 

docs/atlas/compile-deps/compile-deps-external-runtime.mmd

@@ -13,7 +13,7 @@ flowchart LR
     simard --> tokio["tokio =1.52.1 rt process net macros sync"]
     simard --> axum["axum =0.8.9 ws"]
     simard --> tower_http["tower-http =0.6.8 cors auth"]
-    simard --> uuid["uuid =1.23.1 v4 v7"]
+    simard --> uuid["uuid =1.23.4 v4 v7"]
     simard --> chrono["chrono =0.4.44"]
     simard --> chrono_tz["chrono-tz =0.10.4"]
     simard --> dirs["dirs =6.0.0"]
@@ -35,7 +35,7 @@ flowchart LR
     simard --> url["url =2.5.8 optional"]
     simard --> base64["base64 =0.22.1"]
     simard --> rustls["rustls =0.23.38 ring"]
-    simard --> rustls_native_certs["rustls-native-certs =0.8.3"]
+    simard --> rustls_native_certs["rustls-native-certs =0.8.4"]
     simard --> webpki_roots["webpki-roots =1.0.7"]
     simard --> libc["libc =0.2.185 unix target"]
     amplihack_memory --> lbug

docs/reference/overseer-operator-notifications.md

@@ -461,7 +461,7 @@ The STARTTLS sender promotes these to direct dependencies, pinned to `Cargo.lock
 `--no-default-features` still building:
 
 - `rustls` `0.23.38` (with the `ring` crypto provider enabled explicitly)
-- `rustls-native-certs` `0.8.3` (OS trust store)
+- `rustls-native-certs` `0.8.4` (OS trust store)
 - `webpki-roots` `1.0.7` (compiled root fallback when the OS store is empty)
 - `base64` `0.22.1` (AUTH LOGIN payload encoding, inside TLS only)
 

supply-chain/audits.toml

@@ -12,3 +12,9 @@ who = "Simard operator (rysweet)"
 criteria = "safe-to-deploy"
 delta = "0.8.3 -> 0.8.4"
 notes = "Reviewed 0.8.3 -> 0.8.4: filters empty certificate-directory paths; no new unsafe code, process execution, network behavior, or dependencies."
+
+[[audits.uuid]]
+who = "Simard operator (rysweet)"
+criteria = "safe-to-deploy"
+delta = "1.23.1 -> 1.23.4"
+notes = "Reviewed 1.23.1 -> 1.23.4: parser diagnostics and empty-input panic fix; no new unsafe code, build scripts, process execution, network behavior, or dependencies."