fix: resolve remaining rust CI failures

Signed-off-by: lucarlig <luca.carlig@ibm.com>

Author: lucarlig

Containerfile.lite

@@ -68,10 +68,11 @@ COPY crates/ /build/crates/
 # Build local native extensions from maturin crates under crates/
 RUN if [ "$ENABLE_RUST" = "true" ]; then \
         mkdir -p /build/native-extension-wheels && \
-        python3 -m pip install --no-cache-dir --upgrade pip "maturin==1.12.6" && \
+        python3.12 -m pip install --no-cache-dir --upgrade pip "maturin==1.12.6" && \
         printf '%s\n' \
             'import pathlib' \
             'import subprocess' \
+            'import sys' \
             'import tomllib' \
             '' \
             'crates_root = pathlib.Path("/build/crates")' \
@@ -88,10 +89,10 @@ RUN if [ "$ENABLE_RUST" = "true" ]; then \
             '        continue' \
             '    crate_dir = cargo_toml.parent' \
             '    print(f"🦀 Building local native extension: {crate_dir.name}")' \
-            '    subprocess.run(["maturin", "build", "--release", "--manifest-path", str(cargo_toml), "--out", str(wheel_dir)], check=True)' \
+            '    subprocess.run([sys.executable, "-m", "maturin", "build", "--release", "--manifest-path", str(cargo_toml), "--out", str(wheel_dir)], check=True)' \
             'print("✅ Local native extensions built successfully")' \
             > /tmp/build_local_native_extensions.py && \
-        python3 /tmp/build_local_native_extensions.py && \
+        python3.12 /tmp/build_local_native_extensions.py && \
         rm -f /tmp/build_local_native_extensions.py \
     else \
         echo "⏭️  Skipping local native extension build"; \

supply-chain/audits.toml

@@ -1,7 +1,11 @@
 
 # cargo-vet audits file
 
-[audits]
+[[audits.rustls-webpki]]
+who = "lucarlig <luca.carlig@ibm.com>"
+criteria = "safe-to-deploy"
+delta = "0.103.11 -> 0.103.12"
+notes = "Security patch update for RUSTSEC-2026-0098; reviewed upstream diff for URI name-constraint handling change."
 
 [[trusted.aho-corasick]]
 criteria = "safe-to-deploy"