chore(deps): refresh workspace dependencies

[houseme]

Related Issues

N/A

Summary of Changes

• Refresh workspace dependency resolution with cargo update --verbose and cargo upgrade --exclude ratelimit --verbose.
• Update the workspace base64 dependency requirement from 0.22.1 to 0.23.0.
• Update rustls-pki-types from 1.15.0 to 1.15.1 as selected by the dependency refresh.
• Preserve the explicit ratelimit exclusion; ratelimit remains at 0.10.1.

Verification

Not run locally per maintainer request; validation is deferred to CI.

Commands executed for the dependency refresh:

• cargo update --verbose
• cargo upgrade --exclude ratelimit --verbose
• cargo update --verbose after setting base64 = "0.23.0" to refresh the lockfile with the incompatible direct dependency update.

Impact

RustFS workspace crates that use the shared base64 dependency now resolve to base64 0.23.0. Transitive dependencies that still require base64 0.22.x, such as reqwest, continue to resolve their compatible version separately. There are no intended RustFS configuration, S3 API, on-wire, or storage-format changes.

Additional Notes

• CI is expected to provide the validation signal for this dependency refresh.
• The branch was created from the latest origin/main.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

Cargo.lock

Package	Version	License	Issue Type
base64	0.23.0	Null	Unknown License

Excluded from license check:

pkg:cargo/rustfs-uring@0.1.0

OpenSSF Scorecard

Package	Version	Score	Details
cargo/base64	0.23.0	🟢 5.3	Details Check Score Reason Dangerous-Workflow ⚠️ -1 no workflows found Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ -1 No tokens found Code-Review 🟢 5 Found 8/15 approved changesets -- score normalized to 5 Maintained 🟢 5 4 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 5 Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ -1 no dependencies found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
cargo/rustls-pki-types	1.15.1	Unknown	Unknown

Scanned Files

• Cargo.lock

[github-actions]

CLA requirements are satisfied for this pull request.