Skip to content

Bump the rust-deps group across 1 directory with 16 updates - #102

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-deps-7c3ba01b5f
Closed

Bump the rust-deps group across 1 directory with 16 updates#102
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-deps-7c3ba01b5f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown

Bumps the rust-deps group with 16 updates in the / directory:

Package From To
handlebars 6.4.3 6.4.4
toml 1.1.4+spec-1.1.0 1.1.5+spec-1.1.0
uuid 1.24.0 1.26.0
dirs 6.0.0 7.0.0
which 8.0.5 8.0.6
futures-util 0.3.33 0.3.34
tower-http 0.7.0 0.7.1
http-body-util 0.1.4 0.1.5
agent-client-protocol 2.0.0 2.1.0
rusqlite 0.37.0 0.40.2
argon2 0.5.3 0.6.0
password-hash 0.5.0 0.6.1
jsonwebtoken 9.3.1 11.0.0
rand 0.9.5 0.10.2
base64 0.22.1 0.23.1
flate2 1.1.9 1.1.10

Updates handlebars from 6.4.3 to 6.4.4

Release notes

Sourced from handlebars's releases.

v6.4.4

What's Changed

Full Changelog: sunng87/handlebars-rust@v6.4.3...v6.4.4

Changelog

Sourced from handlebars's changelog.

[6.4.4] - 2026-08-12

  • [Changed] We have to revert preserve_json_order as a default feature. Users who need this can still enable it for handlebars-rust, or enable preserve_order for you serde_json.
Commits
  • ddcc332 chore: Release handlebars version 6.4.4
  • f768dab chore: update changelog
  • fade238 chore: disable preseve order feature by default (#783)
  • 9748144 fix: lint fix
  • 613dc6d chore(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /playground/www (#780)
  • d702a10 chore(deps-dev): bump webpack-dev-server in /playground/www (#779)
  • 434291c chore(deps-dev): bump webpack-dev-server in /playground/www (#776)
  • 71aaca9 chore(deps-dev): bump shell-quote in /playground/www (#777)
  • a429337 chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 in /playground/www (#774)
  • 2802ada chore(deps-dev): bump websocket-driver in /playground/www (#772)
  • Additional commits viewable in compare view

Updates toml from 1.1.4+spec-1.1.0 to 1.1.5+spec-1.1.0

Commits
  • e93ed4e chore: Release
  • d23436d docs: Update changelog
  • 151afcd fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat (#1211)
  • 26a4050 fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat
  • 232f136 chore(deps): Update Prek to v0.5.1 (#1209)
  • 9ee4b4e chore(deps): Update crate-ci/typos digest to 4d9c206 (#1208)
  • 525f352 chore(deps): Update crate-ci/committed digest to 800a04e (#1207)
  • 46043ed chore(deps): Update crate-ci/typos digest to 4d9c206
  • c00e894 chore(deps): Update crate-ci/committed digest to 800a04e
  • 1ae0158 chore(deps): Update Prek to v0.5.0 (#1205)
  • Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits
  • cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
  • 34e4f49 don't test macros under miri
  • d9e7242 update nightly used for miri
  • ec16819 prepare for 1.26.0 release
  • 162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
  • 97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
  • 302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
  • b7ccde8 prepare for 1.25.0 release
  • c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
  • 8c198b2 Add a serde::bytes module that encodes as a byte string
  • Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

  • Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @​RSS1102 for your contribution to which!
Commits

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates tower-http from 0.7.0 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

  • fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)
  • fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)
  • request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

  • fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

  • behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)
  • decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)
  • decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)
  • fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)
  • fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)
  • set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

... (truncated)

Commits
  • c941451 chore(release): prepare 0.7.1 (#729)
  • 9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
  • e2582e2 Allow ignoring multi-range requests (#727)
  • 888f7fe feat(services): configure directory redirects (#728)
  • 5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
  • d154adb fix: reject multipart ranges before validation (#661)
  • d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
  • 90c072b Propagate ServeDir::try_call I/O errors (#718)
  • 860922e fix(decompression): don't end the body on an empty data frame (#722)
  • 8532252 docs(example)/custom future with multiple bodies (#711)
  • Additional commits viewable in compare view

Updates http-body-util from 0.1.4 to 0.1.5

Commits

Updates agent-client-protocol from 2.0.0 to 2.1.0

Release notes

Sourced from agent-client-protocol's releases.

agent-client-protocol-conductor-v2.1.0

Added

  • (unstable-v2) Add runnable v2 quickstart examples (#330)
  • (unstable-v2) add v2 resume session builder (#329)
  • (acp) add proxy protocol router for v2 (#324)
  • (acp) Add v2 proxy MCP attachment (#314)
  • (polyfill) Support v2 MCP-over-ACP bridge (#305)
  • (conductor) add v2 proxy initialization (#302)

Added

  • Add opt-in protocol-v2 initialization for agent and nested proxy chains through unstable_protocol_v2, including version-aware custom instantiator methods, raw v2 session creation routing, and the conductor binary.

agent-client-protocol-cookbook-v2.1.0

Added

  • (acp) add stable session restore builders (#347)
  • (unstable-v2) Add runnable v2 quickstart examples (#330)
  • (unstable-v2) add v2 resume session builder (#329)
  • (acp) add proxy protocol router for v2 (#324)
  • (acp) Add v2 proxy MCP attachment (#314)

Added

  • Add a compiled draft-v2 one-shot prompt recipe that handles initialization, permissions, message patch projection, prompt acceptance, idle completion, and session close.

agent-client-protocol-derive-v2.1.0

Breaking changes

  • Generated implementations now target agent-client-protocol 2.x and must not be mixed with core SDK 1.x types.

Added

  • Support generic request, notification, and response types in the JSON-RPC derive macros, and accept any Rust type expression—including generic types such as Option<Response>—in a request's response attribute. (#267)

Changed

  • Harden macro expansion with collision-resistant identifiers and fully qualified SDK paths. (#267)

agent-client-protocol-http-v2.1.0

Added

... (truncated)

Commits
  • 726c503 chore: release (#346)
  • a013d4f feat(acp): add stable session restore builders (#347)
  • c63610f build(deps): bump the minor group with 10 updates (#345)
  • 6c63cba build(deps): bump crate-ci/typos from 1.49.0 to 1.50.0 (#343)
  • 1f6dc09 build(deps): bump taiki-e/install-action from 2.86.5 to 2.87.0 (#344)
  • 754d5aa build(deps): bump taiki-e/install-action from 2.85.13 to 2.86.5 (#334)
  • bb13786 build(deps): bump the minor group with 9 updates (#335)
  • 0541b81 fix(acp): Preserve session config options (#332)
  • 832dbec fix(acp): box handler chain links to bound dispatch stack use (#306)
  • 40058b7 feat(acp): update schema to 1.7 (#331)
  • Additional commits viewable in compare view

Updates rusqlite from 0.37.0 to 0.40.2

Release notes

Sourced from rusqlite's releases.

0.40.2

What's Changed

  • Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

0.40.1

What's Changed

  • Fix clippy warnings #1852
  • Bump bundled SQLite version to 3.53.2 #1853
  • Bump hashlink version #1855
  • Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

  • Breaking changes: Replace VTab macros by constructors #1823
  • Breaking changes: Fix VTab::best_index #1824
  • Asserts on VTab::connect aux and args #1825
  • Breaking changes: Fix VTab::connect / create #1826
  • Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829
  • Derive Default for SeriesTabCursor/ArrayTabCursor #1830
  • Update link to pre-update hook #1831
  • Breaking changes: Fix VTab::connect #1832
  • impl From for FromSqlError #1833
  • Breaking changes: Fix vtab::dequote #1835
  • Bump bundled SQLCipher to version 4.14.0 #1837
  • sqlite3_set_errmsg #1752
  • Bump sqlite3-parser version #1838
  • Fix UB in ToSqlOutput::from_rc #1839
  • Ensure miri doesn't complain #1840
  • Bump to actions/checkout@v6 #1842
  • Add support to UtcDateTime #1843, #1844
  • Bump bundled SQLite version to 3.53.1 #1848
  • Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

  • Fix constraints on VTab Aux data #1778, #1771
  • Fix docs.rs generation #1779
  • Fix a small typo in rollback_hook docstring #1780
  • Fix some warnings from Intellij #1781
  • Minimal doc for features #1783
  • Clear hooks only for owning connections #1785, #1784
  • Fix link to SQLite C Interface, Prepare Flags #1787
  • Comment functions which are not usable from a loadable extension #1789
  • Factorize code #1792

... (truncated)

Commits

Updates argon2 from 0.5.3 to 0.6.0

Commits
  • b1e0ad6 argon2 v0.6.0 (#931)
  • c0d2aca argon2: bump blake2 to v0.11 (#929)
  • d9c628b Cargo.lock: bump dependencies (#930)
  • 0b31c1c Cargo.toml: use password-hash crate release (#920)
  • 420cbc9 build(deps): bump rust-lang/crates-io-auth-action from 1.0.4 to 1.0.5 (#912)
  • 3a88540 build(deps): bump actions/checkout from 6 to 7 (#913)
  • 90b974f build(deps): bump the all-deps group with 5 updates (#914)
  • 82c688f build(deps): bump the all-deps group across 1 directory with 18 updates (#911)
  • b2cef17 build(deps): bump the all-deps group with 6 updates (#902)
  • 2c16e5a build(deps): bump the all-deps group with 7 updates (#901)
  • Additional commits viewable in compare view

Updates password-hash from 0.5.0 to 0.6.1

Commits

Updates jsonwebtoken from 9.3.1 to 11.0.0

Changelog

Sourced from jsonwebtoken's changelog.

11.0.0 (2026-07-24)

  • Add conversions between Algorithm and KeyAlgorithm
  • JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
  • JWKs with unknown key types are now deserializable
  • BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
  • BREAKING: Jwk.thumbprint now returns a Result<_>
  • BREAKING: Header.extras is now a struct that allows for deserialization to any T
  • BREAKING: Implicit features resulting from optional crates have been removed
  • BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
  • BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
  • BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead

Changes for CryptoProviders

  • When constructing HMAC signers, the algorithm family must now be verified on construction
  • JwkUtils has been renamed to KeyUtils
    • compute_digest now returns a Result<_>
    • extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
    • rsa_pub_components_from_public_key has been added
    • extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
    • ed_pub_components_from_private_key has been added

10.4.0 (2026-05-11)

  • Fix incorrect encoding for Ed25519 JWK thumbprints
  • Make Algorithm.family public and add Validation.new_for_family
  • EncodingKey and DecodingKey are now partially zeroized on drop (the intermediate PemEncodedKey isn't so far)

10.3.0 (2026-01-27)

  • Export everything needed to define your own CryptoProvider
  • Fix type confusion with exp/nbf when not required

10.2.0 (2025-11-06)

  • Remove Clone bound from decode functions

10.1.0 (2025-10-18)

  • add dangerous::insecure_decode
  • Implement TryFrom &Jwk for DecodingKey

10.0.0 (2025-09-29)

  • BREAKING: now using traits for crypto backends, you have to choose between aws_lc_rs and rust_crypto
  • Add Clone bound to decode
  • Support decoding byte slices
  • Support JWS
Commits

Updates rand from 0.9.5 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

... (truncated)

Commits

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 10, 2026
Bumps the rust-deps group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [handlebars](https://github.com/sunng87/handlebars-rust) | `6.4.3` | `6.4.4` |
| [toml](https://github.com/toml-rs/toml) | `1.1.4+spec-1.1.0` | `1.1.5+spec-1.1.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.0` |
| dirs | `6.0.0` | `7.0.0` |
| [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.7.0` | `0.7.1` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.4` | `0.1.5` |
| [agent-client-protocol](https://github.com/agentclientprotocol/rust-sdk) | `2.0.0` | `2.1.0` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.37.0` | `0.40.2` |
| [argon2](https://github.com/RustCrypto/password-hashes) | `0.5.3` | `0.6.0` |
| [password-hash](https://github.com/RustCrypto/traits) | `0.5.0` | `0.6.1` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `9.3.1` | `11.0.0` |
| [rand](https://github.com/rust-random/rand) | `0.9.5` | `0.10.2` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |



Updates `handlebars` from 6.4.3 to 6.4.4
- [Release notes](https://github.com/sunng87/handlebars-rust/releases)
- [Changelog](https://github.com/sunng87/handlebars-rust/blob/master/CHANGELOG.md)
- [Commits](sunng87/handlebars-rust@v6.4.3...v6.4.4)

Updates `toml` from 1.1.4+spec-1.1.0 to 1.1.5+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.4...toml-v1.1.5)

Updates `uuid` from 1.24.0 to 1.26.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...v1.26.0)

Updates `dirs` from 6.0.0 to 7.0.0

Updates `which` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.5...8.0.6)

Updates `futures-util` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `tower-http` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1)

Updates `http-body-util` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.4...http-body-util-v0.1.5)

Updates `agent-client-protocol` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/agentclientprotocol/rust-sdk/releases)
- [Commits](agentclientprotocol/rust-sdk@agent-client-protocol-http-v2.0.0...agent-client-protocol-http-v2.1.0)

Updates `rusqlite` from 0.37.0 to 0.40.2
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.37.0...v0.40.2)

Updates `argon2` from 0.5.3 to 0.6.0
- [Commits](RustCrypto/password-hashes@argon2-v0.5.3...argon2-v0.6.0)

Updates `password-hash` from 0.5.0 to 0.6.1
- [Commits](RustCrypto/traits@password-hash-v0.5.0...password-hash-v0.6.1)

Updates `jsonwebtoken` from 9.3.1 to 11.0.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v9.3.1...v11.0.0)

Updates `rand` from 0.9.5 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.9.5...0.10.2)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

---
updated-dependencies:
- dependency-name: agent-client-protocol
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: argon2
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: dirs
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-deps
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: handlebars
  dependency-version: 6.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: http-body-util
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: jsonwebtoken
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-deps
- dependency-name: password-hash
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: rusqlite
  dependency-version: 0.40.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: toml
  dependency-version: 1.1.5+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: uuid
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: which
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-deps-7c3ba01b5f branch from 5f19db6 to d878640 Compare September 10, 2026 19:40
@dependabot @github

dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 12, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-deps-7c3ba01b5f branch September 12, 2026 15:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants