chore(deps): qualified ureq 3.4.2 pinned network adapter update
Draft
TH
6d ago+5+5+0123456789-5-5-0123456789
Scope\nSigned+DCO successor to stale/conflicting Dependabot PR #95. Updates only the workspace pinned ureq 3.4.0 to 3.4.2 and Cargo.lock ureq-proto 0.6.1 to 0.6.4. No registry endpoint, fallback, identity, protected AF-02, workflow or policy changes.\n\n## Actual authorized Mac qualification (Rust 1.97.1)\n- cargo test --locked -p commandf-pkg --lib registry::tests: 14 PASS, 2 ignored\n- cargo test --locked -p commandf-pkg --test resolution: 9/9 PASS\n- cargo check --locked --workspace: PASS\n- cargo clippy --locked -p commandf-pkg --all-targets -- -D warnings: PASS\n- cargo fmt --all -- --check: PASS\n- git diff --check: PASS\n- Signed SSH signature validated locally against the registered signing key; DCO Signed-off-by recorded.\n\n## Boundaries\nThis dependency update is not a proved fix for unresolved CF11 registry dual-origin digest drift #214, DNS #221, AF-02 macOS #215/#227 or durable authority #100. CI at this new exact head must be fully green; a normal guarded merge only. No human approval requirement under G53. Optional Jev/Alibaba reviews are NOT_RUN unless genuinely executed.\n\nSupersedes the desired bump in #95 once qualified and merged. Do not close #95 prematurely.
Summary by cubic
Updates the workspace pinned ureq from 3.4.0 to 3.4.2 and the lockfile's ureq-proto from 0.6.1 to 0.6.4. This is the successor to the stale Dependabot PR #95 and changes only the pinned dependency versions — no registry endpoints, workflows, or policy changes.
Qualified on macOS with Rust 1.97.1: cargo test, cargo check, clippy, and fmt all pass. This bump is not a fix for the open registry digest drift (#214), DNS (#221), AF-02 macOS (#215/#227), or durable authority (#100) issues; CI must be fully green for a normal guarded merge.