From 88b07d4798c9ef1447fa187212da6b3f3c82068c Mon Sep 17 00:00:00 2001
From: 1e1 <1e1@users.noreply.github.com>
Date: Wed, 1 Jul 2026 00:08:16 +0200
Subject: [PATCH] Dependencies: bump OpenSSL/curl for security and refresh
 low-risk submodules

Add targeted vcpkg overrides for openssl (3.5.0 -> 3.6.2) and curl (8.14.1 -> 8.20.0) to pick up security fixes, while leaving the builtin-baseline untouched to avoid a broad, risky version sweep (a full baseline bump pulled libusb 1.0.30, which needs autoreconf tooling not present on the Linux CI images).

Also bump the header-only Vulkan-Headers and the small ZArchive submodule to their latest upstream commits.
---
 dependencies/Vulkan-Headers | 2 +-
 dependencies/ZArchive       | 2 +-
 vcpkg.json                  | 8 ++++++++
 3 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/dependencies/Vulkan-Headers b/dependencies/Vulkan-Headers
index 01393c3d..8c268339 160000
--- a/dependencies/Vulkan-Headers
+++ b/dependencies/Vulkan-Headers
@@ -1 +1 @@
-Subproject commit 01393c3df0e5285b54ee6527466513f9e614be94
+Subproject commit 8c2683390a4b10c0483e3b531555dfb841e2cd84
diff --git a/dependencies/ZArchive b/dependencies/ZArchive
index d2c71773..965b66c8 160000
--- a/dependencies/ZArchive
+++ b/dependencies/ZArchive
@@ -1 +1 @@
-Subproject commit d2c717730092c7bf8cbb033b12fd4001b7c4d932
+Subproject commit 965b66c8d67b6b7e30fd63b3b75aa91a99ff303b
diff --git a/vcpkg.json b/vcpkg.json
index 3687d2b3..76c7f16a 100644
--- a/vcpkg.json
+++ b/vcpkg.json
@@ -81,6 +81,14 @@
     {
       "name": "wxwidgets",
       "version": "3.3.1"
+    },
+    {
+      "name": "openssl",
+      "version": "3.6.2"
+    },
+    {
+      "name": "curl",
+      "version": "8.20.0"
     }
   ]
 }