fix: resolve Dependabot security vulnerabilities

- bytes 1.11.0 → 1.11.1 (integer overflow in BytesMut::reserve, RUSTSEC-2026-0007)
- ring 0.17.8 → 0.17.12 (AES panic with overflow checking, RUSTSEC-2025-0009)
- time 0.3.36 → 0.3.47 (DoS via stack exhaustion, RUSTSEC-2026-0009)
- Remove unused direct dep rustls-pemfile (unmaintained, RUSTSEC-2025-0134)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: zdz

Cargo.lock

@@ -38,7 +38,6 @@ prost = "0.14.3"
 regex = "1.12.2"
 reqwest = {version = "0.13.1", features = ["json", "rustls", "brotli", "gzip", "deflate", "stream", "socks"], default-features = false}
 rustls = { version = "0.23.36", default-features = false }
-rustls-pemfile = { version = "2.2.0" }
 serde = {version = "1.0.228", default-features = false, features = ["derive", "alloc"]}
 serde_json = {version = "1.0.149", default-features = false, features = ["alloc"]}
 stat_common = {path = "../common", version = "1.1.4"}

client/Cargo.toml

@@ -38,14 +38,13 @@ md5 = "0.8.0"
 minijinja = {version = "2.15.1", features = ["json", "loader"]}
 mime_guess = { version = "2.0.5" }
 once_cell = "1.21.3"
-pki-types = { package = "rustls-pki-types", version = "1.14.0" }
+rustls-pki-types = { package = "rustls-pki-types", version = "1.14.0" }
 pretty_env_logger = "0.5.0"
 prettytable-rs = "^0.10.0"
 prost = "0.14.3"
 reqwest = {version = "0.13.1", features = ["json", "rustls"], default-features = false}
 rhai = {version = "1.24.0", features = ["sync", "metadata", "decimal", "no_function", "no_module", "no_closure", "unchecked"]}
 rust-embed = {version = "8.11.0", features = ["mime-guess"]}
-rustls-pemfile = { version = "2.2.0" }
 serde = {version = "1.0.228", default-features = false, features = ["derive", "alloc"]}
 serde_json = {version = "1.0.149", default-features = false, features = ["alloc"]}
 stat_common = {path = "../common", version = "1.1.4"}