Bump cargo-audit to 0.22.2 (CVSS 4.0 support)

RUSTSEC-2026-0035 (pingora-cache) uses CVSS 4.0; cargo-audit 0.21.0

fails to parse the advisory database with 'unsupported CVSS version: 4.0'.

0.22.2 (released 2026-06-05) adds CVSS 4.0 support.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: martin-kolinek

.ox-check.lock

@@ -75,7 +75,7 @@ checksum = "sha256:20bc3323fc897e5e970b347b5ccae1411c1d629cca4da62e612d995b94e3d
 
 [[file]]
 path = "justfiles/ox-check/versions.just"
-checksum = "sha256:7242f84538c108948a049cc14e01b6c15422d0af2d22aa5e3c35020f9d991e3a"
+checksum = "sha256:942a3230e71473497c1dd1f672cdc1d42af37494f73d58d745f5b5d5e4a3c893"
 
 [[region]]
 host = ".delta.toml"

crates/cargo-ox-check-update/templates/justfiles/ox-check/versions.just

@@ -49,7 +49,7 @@ rust_nightly_external_types := "nightly-2025-10-18"
 # ============================================================================
 
 cargo_aprz_version := "1.0.0"
-cargo_audit_version := "0.21.0"
+cargo_audit_version := "0.22.2"
 cargo_careful_version := "0.4.9"
 cargo_check_external_types_version := "0.4.0"
 cargo_delta_version := "0.3.1"

justfiles/ox-check/versions.just

@@ -49,7 +49,7 @@ rust_nightly_external_types := "nightly-2025-10-18"
 # ============================================================================
 
 cargo_aprz_version := "1.0.0"
-cargo_audit_version := "0.21.0"
+cargo_audit_version := "0.22.2"
 cargo_careful_version := "0.4.9"
 cargo_check_external_types_version := "0.4.0"
 cargo_delta_version := "0.3.1"