From e6e4f6f6319b39ba3020f96d070b637054c04b6a Mon Sep 17 00:00:00 2001
From: nsfisis <nsfisis@gmail.com>
Date: Mon, 4 May 2026 13:59:49 +0900
Subject: feat(http): honor config.cafile and config.capath

Composer's config.cafile/config.capath were accepted by the config
command but ignored by every HTTP request. Centralize reqwest client
construction in mozart_core::http, pre-load the configured CA bundle
at startup, and route every callsite (registry, vcs drivers, diagnose,
self-update) through the shared builder so user-supplied roots are
actually used during HTTPS verification.
---
 Cargo.lock | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'Cargo.lock')

diff --git a/Cargo.lock b/Cargo.lock
index 5b06248..6fda00e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1166,9 +1166,11 @@ dependencies = [
  "mozart-console-macros",
  "mozart-spdx-licenses",
  "regex",
+ "reqwest",
  "serde",
  "serde_json",
  "tempfile",
+ "tracing",
 ]
 
 [[package]]
@@ -1200,7 +1202,6 @@ dependencies = [
  "mozart-test-harness",
  "mozart-vcs",
  "regex",
- "reqwest",
  "serde",
  "serde_json",
  "sha1",
-- 
cgit v1.3.1