v0.5.3

Maintenance release with no new scanner features or detection changes.

Security

• Upgrade Rustls from 0.23.40 to 0.23.45 to address RUSTSEC-2026-0285 (TLS 1.3 handshake encryption-level validation).

Dependencies

• Refresh outdated direct dependencies and compatible transitive dependencies, including Tokio, Futures, Serde, Serde JSON, Clap, Anyhow, Reqwest, Base64, Dirs, SWC AST/parser, and TOML.
• Refresh the SHA-pinned Rust toolchain action in CI and release workflows.
• Keep the Rust 1.97.1 baseline and JSON schema 0.5.

Corrode remains passive and evidence-driven. New enhancements are on hold while the project is in maintenance mode.

Validation: 383 local tests, all-target/all-feature Clippy with warnings denied, formatting, and cargo audit passed.

Install: cargo install corrode-scanner --version 0.5.3 --locked