build(deps): bump asn1-rs from 0.7.1 to 0.7.2 in the asn1 group

[dependabot]

Bumps the asn1 group with 1 update: asn1-rs.

Updates asn1-rs from 0.7.1 to 0.7.2

Changelog

Sourced from asn1-rs's changelog.

0.7.2

Changed/Fixed

• Fix potential denial of service when REAL from NaN

Encoding of "Real" type does not handle NaN (Not a Number) special case, and attempting to call Real::new(f64::NaN) will:

• on a release build, enter an infinite loop (due to an underflow in exponent encoding)
• on a debug build, trigger a panic

This is considered as low-severity.

Thanks to Domen Puncer Kugler domen.puncerkugler@nccgroup.com for the report.

• Bump dependency on time, and update Cargo.lock to use 0.3.47 Previous versions of time are affected by 'RUSTSEC-2026-0009' and cause cargo audit to fail

  Note: features from this advisory are not used in asn1-rs, which is not affected. This changed is only required because it causes failures in CI runs of dependant software.

  As a side-effect, time requires an update of the MSRV, which is now 1.68

Commits

• e9ea89e Update CHANGELOG to explain MSRV change
• d99157c Bump time to 0.3.47
• 3d2a0ae Set MSRV to 1.68 (required by time-core)
• 9b1a5d2 Fix clippy warnings (hiding an elided lifetime)
• baadcdb Prepare release 0.7.2
• 47b2bf3 Fix encoding of NaN value for REAL (possible denial of service)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions