Repin workspace dependencies to their published revs

The pinned revs only affect builds outside this workspace, where an app is
cloned on its own, so a stale pin never fails a build here. Bumped by
bump-revs.sh after the dependency was pushed; Cargo.lock (when committed)
is re-resolved to match.

 Cargo.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Cargo.toml b/Cargo.toml
index 319ee05..79b6cc0 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -16,7 +16,7 @@ serde_json = "1"
 reqwest = { version = "0.12", features = ["blocking", "json"] }
 roxmltree = "0.20"
 chrono = "0.4"
-cce-vault = { git = "https://github.com/lsgalante/cce-vault.git", rev = "11a26a5f8e1ff1ac55a951d88afc751ab68a5aba" }
+cce-vault = { git = "https://github.com/lsgalante/cce-vault.git", rev = "252827c1f6033514fbed46d1c7c1632241344fce" }
 keyring = { version = "3", features = ["sync-secret-service"] }
 
 # The desktop checklist app; src/bin/sync.rs adds the cce-list-sync helper,