chore(deps): refresh compatible Cargo dependencies

Refresh the workspace lockfile within existing compatible version ranges and
raise the nostr-sdk minimum to 0.45.4 in both crates. This picks up explicit
CLOSED notifications after embedded-relay live-buffer overflow and connection
admission before the WebSocket handshake. Negentropy 0.5.1 reduces allocation
costs during reconciliation. Document these changes in the changelog.

Keep application code, the release version, Nix inputs and incompatible major
upgrades outside this commit. All dependencies remain registry packages, so
no Git dependency output hashes are needed.

Validation: cargo test --workspace --locked passed (3,566 tests, 16 ignored)
and workspace all-target Clippy with warnings denied passed in nix develop.
Formatting and diff checks passed. Build output used the VM-local volume
after the shared-filesystem linker failed to read generated object files.

Assisted-by: GPT-6

CHANGELOG.md

@@ -14,6 +14,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   when sync event processing is blocked, and repeated signals no longer flood
   warning logs.
 
+### Dependencies
+
+- Update compatible Cargo dependencies, including `nostr-sdk` 0.45.4. The
+  embedded relay now closes affected live subscriptions when their event buffer
+  overflows, allowing clients to detect gaps and resubscribe for stored events.
+  It also checks the connection limit before the WebSocket handshake.
+- Update `negentropy` to 0.5.1, reducing allocations during reconciliation.
+
 ## [3.0.3] - 2026-09-18
 
 This patch improves repository-state correctness, startup recovery, and relay

Cargo.toml

@@ -18,7 +18,7 @@ http-body-util = "0.1"
 
 # Nostr
 nostr = "0.45.5"
-nostr-sdk = { version = "0.45.3", features = ["local-relay"] }
+nostr-sdk = { version = "0.45.4", features = ["local-relay"] }
 nostr-lmdb = "0.45.3"
 nostr-memory = "0.45.2"
 

grasp-audit/Cargo.toml

@@ -13,7 +13,7 @@ path = "src/bin/grasp-audit.rs"
 
 [dependencies]
 # Nostr
-nostr-sdk = "0.45.3"
+nostr-sdk = "0.45.4"
 
 # Async
 tokio = { version = "1", features = ["full"] }