[alangou]

Summary

Update ctutils to 0.4.4 to resolve RUSTSEC-2026-0385, which fails the pre-release Cargo Deny advisory check. This fixes the affected constant-time operations without adding an advisory exception.

Related Issue

Failing pre-release Cargo Deny job.

Changes

Update only the ctutils version and checksum in all seven affected lockfiles, including the isolated examples and test workspaces.

Release Notes

Testing

• Full cargo deny --locked check with cargo-deny 0.20.2: advisories, bans, licenses, and sources pass; duplicate-version warnings remain.
• bash tasks/scripts/check-cargo-lockfiles.sh: every tracked lockfile resolves with cargo metadata --locked.
• git diff --check.
• E2E coverage requested with test:e2e; not run locally.

Checklist

• Follows Conventional Commits.
• Commit is signed off (DCO).
• Architecture documentation and new unit tests are not applicable to this lockfile-only update.

[github-actions]

Label test:e2e applied for 8b56dac. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway, sandbox, and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

[alangou]

close for duplicate