From 125f80d03bb9f530b39f5f378c2ce834de4aa8c7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 17:22:19 +0000
Subject: [PATCH] chore(deps): bump security-framework from 2.11.1 to 3.7.0

Bumps [security-framework](https://github.com/kornelski/rust-security-framework) from 2.11.1 to 3.7.0.
- [Commits](https://github.com/kornelski/rust-security-framework/compare/v2.11.1...v3.7.0)

---
updated-dependencies:
- dependency-name: security-framework
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                 | 2 +-
 crates/clx-core/Cargo.toml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 326626c..595fa5a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -930,7 +930,7 @@ dependencies = [
  "rstest",
  "rusqlite",
  "secrecy",
- "security-framework 2.11.1",
+ "security-framework 3.7.0",
  "serde",
  "serde_json",
  "serde_yaml_ng",
diff --git a/crates/clx-core/Cargo.toml b/crates/clx-core/Cargo.toml
index c8437a0..2366068 100644
--- a/crates/clx-core/Cargo.toml
+++ b/crates/clx-core/Cargo.toml
@@ -64,7 +64,7 @@ fastembed = "5"
 # dependency tree, no duplicate Security.framework binding). macOS-gated so
 # non-macOS builds never pull these.
 [target.'cfg(target_os = "macos")'.dependencies]
-security-framework = "2.11"
+security-framework = "3.7"
 core-foundation = "0.9"
 
 # `bounded_read` opens untrusted-path files with O_NONBLOCK on Unix so the