chore(deps): bump mint from 1.10.0 to 1.10.1 in the prod group across 1 directory

[dependabot]

Bumps the prod group with 1 update in the / directory: mint.

Updates mint from 1.10.0 to 1.10.1

Changelog

Sourced from mint's changelog.

v1.10.1

Security

• Validate chunk extensions in HTTP/1 chunked responses in Mint.HTTP1. Previously, any bytes between the chunk size and the CRLF were accepted, letting a malicious server frame a chunked response differently from a strict intermediary on a shared connection. This is a fix for CVE-2026-82672 (GitHub advisory GHSA-rj5m-69wp-cxq9).

Bug Fixes and Improvements

• Close TCP sockets on errors in HTTP/1.
• Keep HTTP/1.0 CONNECT tunnel sockets open.

Commits

• 9e9ae10 Release v1.10.1
• c823778 Merge commit from fork
• bfc6454 Close TCP sockets on errors in HTTP/1 (#502)
• 2ed27ca Keep HTTP/1.0 CONNECT tunnel sockets open (#503)
• f930742 Fix tests (ops!)
• See full diff in compare view

[cursor]

PR Summary

Low Risk
Lockfile-only dependency bump with a targeted HTTP/1 security fix; low integration risk but affects outbound HTTP parsing for Mint-based adapters.

Overview
Updates locked dependencies so mint moves from 1.10.0 to 1.10.1 and its transitive hpax dependency from 1.0.4 to 1.1.0 in mix.lock. No application code changes.

The mint release addresses CVE-2026-82672 by tightening validation of HTTP/1 chunked response extensions in Mint.HTTP1, plus minor HTTP/1 behavior fixes (closing TCP sockets on errors, keeping HTTP/1.0 CONNECT tunnel sockets open). For Tesla users on the Mint adapter (via Finch/Mint), this is primarily a security and HTTP client stack update.

^{Reviewed by Cursor Bugbot for commit da54f7f. Bugbot is set up for automated code reviews on this repo. Configure here.}

[yordis]

@dependabot rebase