Update base64-ng to 1.3.5

Author: eldryoth

Cargo.lock

@@ -243,7 +243,7 @@ profile-iso19790-rustls = ["profile-fips-rustls", "tls-rustls-iso19790"]
 arc-swap = "1.9.1"
 async-trait = { version = "0.1.89", optional = true }
 aws-lc-rs = { version = "1.17.0", default-features = false, features = ["fips"], optional = true }
-base64-ng = { version = "1.2.3", optional = true }
+base64-ng = { version = "1.3.5", optional = true }
 bytes = { version = "1.11.1", optional = true }
 clap = { version = "4.6.1", features = ["derive", "env"] }
 env_logger = "0.11.10"

Cargo.toml

@@ -16,7 +16,7 @@ acme-client = [
 ]
 
 [dependencies]
-base64-ng = { version = "1.2.3", optional = true }
+base64-ng = { version = "1.3.5", optional = true }
 fluxheim-config = { path = "../fluxheim-config", features = ["acme"] }
 instant-acme = { version = "0.8.5", default-features = false, features = ["ring"] }
 log = "0.4.33"

crates/fluxheim-acme/Cargo.toml

@@ -17,7 +17,7 @@ tls-openssl-backend = ["dep:openssl", "dep:tokio-openssl"]
 [dependencies]
 arc-swap = "1.9.1"
 async-trait = "0.1.89"
-base64-ng = "1.2.3"
+base64-ng = "1.3.5"
 bytes = "1.11.1"
 crc32fast = "1.5.0"
 fluxheim-common = { path = "../fluxheim-common" }

crates/fluxheim-load-balancer/Cargo.toml

@@ -53,7 +53,7 @@ h2 = { version = "0.4.15", features = ["unstable"] }
 http = "1.4.2"
 httpdate = "1.0.3"
 log = "0.4.33"
-base64-ng = "1.2.3"
+base64-ng = "1.3.5"
 openssl = { version = "0.10.81", optional = true }
 percent-encoding = "2.3.2"
 regex = "1.12.4"

crates/fluxheim-server/Cargo.toml

@@ -65,6 +65,8 @@ mutate header state.
 - Refresh release tooling pins: Docker GitHub Actions move to current v4/v7
   patch tags, Prometheus observability smoke coverage uses `v3.13.0`, and the
   non-Pingora crate freshness gate remains clean.
+- Update `base64-ng` to `1.3.5` across the root, ACME, server, and
+  load-balancer crates.
 
 ## Operator Notes