Jagoda Estera Ślązak
cac8c06c78
fix: RUSTSEC-2026-0204 ( #8403 )
...
https://github.com/crossbeam-rs/crossbeam/pull/1276
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-07-07 17:13:25 +02:00
dependabot[bot]
446cdabd21
chore(cargo): bump smallvec from 1.15.1 to 1.15.2
...
Bumps [smallvec](https://github.com/servo/rust-smallvec ) from 1.15.1 to 1.15.2.
- [Release notes](https://github.com/servo/rust-smallvec/releases )
- [Commits](https://github.com/servo/rust-smallvec/compare/v1.15.1...v1.15.2 )
---
updated-dependencies:
- dependency-name: smallvec
dependency-version: 1.15.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-04 15:12:57 +00:00
dependabot[bot]
e5d56a3b70
chore(cargo): bump brotli from 8.0.2 to 8.0.4
...
Bumps [brotli](https://github.com/dropbox/rust-brotli ) from 8.0.2 to 8.0.4.
- [Release notes](https://github.com/dropbox/rust-brotli/releases )
- [Commits](https://github.com/dropbox/rust-brotli/compare/8.0.2...8.0.4 )
---
updated-dependencies:
- dependency-name: brotli
dependency-version: 8.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-04 01:21:00 +00:00
link2xt
ee1095be9d
chore: update quick-xml to 0.41.0
...
Fixes cargo-deny complaining about https://rustsec.org/advisories/RUSTSEC-2026-0194
2026-07-03 16:21:02 +00:00
dependabot[bot]
520ede1fa5
chore(cargo): bump chrono from 0.4.44 to 0.4.45
...
Bumps [chrono](https://github.com/chronotope/chrono ) from 0.4.44 to 0.4.45.
- [Release notes](https://github.com/chronotope/chrono/releases )
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md )
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.44...v0.4.45 )
---
updated-dependencies:
- dependency-name: chrono
dependency-version: 0.4.45
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 11:53:04 +00:00
dependabot[bot]
093ebe537f
chore(cargo): bump hyper from 1.9.0 to 1.10.1
...
Bumps [hyper](https://github.com/hyperium/hyper ) from 1.9.0 to 1.10.1.
- [Release notes](https://github.com/hyperium/hyper/releases )
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md )
- [Commits](https://github.com/hyperium/hyper/compare/v1.9.0...v1.10.1 )
---
updated-dependencies:
- dependency-name: hyper
dependency-version: 1.10.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 04:54:50 +00:00
dependabot[bot]
fa91b168a9
chore(cargo): bump log from 0.4.31 to 0.4.33
...
Bumps [log](https://github.com/rust-lang/log ) from 0.4.31 to 0.4.33.
- [Release notes](https://github.com/rust-lang/log/releases )
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/log/compare/0.4.31...0.4.33 )
---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.33
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 04:54:27 +00:00
dependabot[bot]
8c12804257
chore(cargo): bump regex from 1.12.3 to 1.12.4
...
Bumps [regex](https://github.com/rust-lang/regex ) from 1.12.3 to 1.12.4.
- [Release notes](https://github.com/rust-lang/regex/releases )
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/regex/compare/1.12.3...1.12.4 )
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.12.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 04:54:06 +00:00
dependabot[bot]
5beef1a2d0
chore(cargo): bump bytes from 1.11.1 to 1.12.0
...
Bumps [bytes](https://github.com/tokio-rs/bytes ) from 1.11.1 to 1.12.0.
- [Release notes](https://github.com/tokio-rs/bytes/releases )
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/bytes/compare/v1.11.1...v1.12.0 )
---
updated-dependencies:
- dependency-name: bytes
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 04:53:40 +00:00
dependabot[bot]
cc08d5de81
chore(cargo): bump quote from 1.0.45 to 1.0.46
...
Bumps [quote](https://github.com/dtolnay/quote ) from 1.0.45 to 1.0.46.
- [Release notes](https://github.com/dtolnay/quote/releases )
- [Commits](https://github.com/dtolnay/quote/compare/1.0.45...1.0.46 )
---
updated-dependencies:
- dependency-name: quote
dependency-version: 1.0.46
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 04:53:21 +00:00
dependabot[bot]
ba1063ad0f
chore(cargo): bump syn from 2.0.117 to 2.0.118
...
Bumps [syn](https://github.com/dtolnay/syn ) from 2.0.117 to 2.0.118.
- [Release notes](https://github.com/dtolnay/syn/releases )
- [Commits](https://github.com/dtolnay/syn/compare/2.0.117...2.0.118 )
---
updated-dependencies:
- dependency-name: syn
dependency-version: 2.0.118
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 04:53:00 +00:00
iequidoo
6e633eebe1
chore(deps): bump anyhow to 1.0.103
2026-06-29 19:08:41 -03:00
link2xt
1b2ec2e88c
chore: update astral-tokio-tar from 0.6.2 to 0.6.3
2026-06-27 06:04:18 +00:00
link2xt
09d5d0bddf
chore: update rPGP from 0.19.0 to 0.20.0
2026-06-25 16:17:24 +00:00
link2xt
44bdd5ef0c
chore: bump version to 2.54.0-dev
2026-06-15 21:38:38 +02:00
link2xt
d844f29c68
chore(release): prepare for 2.53.0
2026-06-15 21:26:11 +02:00
link2xt
07d6b89b85
chore: bump version to 2.53.0-dev
...
Fixup for 93bf3d6ebb
which should have bumped the version to 2.53.0-dev
but bumped to 2.52.0-dev.
2026-06-15 18:29:14 +02:00
link2xt
93bf3d6ebb
chore: bump version to 2.52.0-dev
2026-06-09 02:18:40 +02:00
link2xt
f05336f793
chore(release): prepare for 2.52.0
2026-06-09 00:40:07 +02:00
link2xt
207c2e6e4c
feat: switch to aws-lc-rs cryptography provider for Rustls
...
aws-lc-rs is the default provider for Rustls.
We have been using ring as the default provider
to avoid duplicate dependency
because iroh supports only ring in 0.35.0,
but with version 1.0 it will be possible
to select other crypto providers
and we can switch to using more common default.
This change also enables "tls12" feature explicitly,
otherwise if there is no other dependency
requiring it, only TLS 1.3 will be supported
and we want to keep supporting TLS 1.2.
2026-06-06 09:56:31 +00:00
dependabot[bot]
e87e269f98
chore(cargo): bump serde_json from 1.0.149 to 1.0.150
...
Bumps [serde_json](https://github.com/serde-rs/json ) from 1.0.149 to 1.0.150.
- [Release notes](https://github.com/serde-rs/json/releases )
- [Commits](https://github.com/serde-rs/json/compare/v1.0.149...v1.0.150 )
---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.150
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-03 19:54:21 +00:00
dependabot[bot]
4bb557cf53
chore(cargo): bump log from 0.4.29 to 0.4.30
...
Bumps [log](https://github.com/rust-lang/log ) from 0.4.29 to 0.4.30.
- [Release notes](https://github.com/rust-lang/log/releases )
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/log/compare/0.4.29...0.4.30 )
---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.30
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-03 19:54:02 +00:00
dependabot[bot]
9b4503e3f5
chore(cargo): bump tokio from 1.52.1 to 1.52.3
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.52.1 to 1.52.3.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.52.1...tokio-1.52.3 )
---
updated-dependencies:
- dependency-name: tokio
dependency-version: 1.52.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-03 19:53:16 +00:00
dependabot[bot]
4428382433
chore(cargo): bump pin-project from 1.1.11 to 1.1.13
...
Bumps [pin-project](https://github.com/taiki-e/pin-project ) from 1.1.11 to 1.1.13.
- [Release notes](https://github.com/taiki-e/pin-project/releases )
- [Changelog](https://github.com/taiki-e/pin-project/blob/main/CHANGELOG.md )
- [Commits](https://github.com/taiki-e/pin-project/compare/v1.1.11...v1.1.13 )
---
updated-dependencies:
- dependency-name: pin-project
dependency-version: 1.1.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-03 15:24:20 +00:00
link2xt
7ea637c930
chore: bump version to 2.51.0-dev
2026-05-29 18:32:58 +02:00
link2xt
3a1b0d4679
chore(release): prepare for 2.51.0
2026-05-29 18:05:43 +02:00
link2xt
bafb5f71ad
chore: bump version to 2.51.0-dev
2026-05-22 21:41:03 +02:00
link2xt
784a6abb3b
chore(release): prepare for 2.50.0
2026-05-22 20:16:32 +02:00
dependabot[bot]
b8bce444ec
chore(cargo): bump openssl from 0.10.79 to 0.10.80
...
Bumps [openssl](https://github.com/rust-openssl/rust-openssl ) from 0.10.79 to 0.10.80.
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases )
- [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.79...openssl-v0.10.80 )
---
updated-dependencies:
- dependency-name: openssl
dependency-version: 0.10.80
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-20 15:59:24 +00:00
l
ac3c5c55e4
chore: upgrade astral-tokio-tar to 0.6.2 ( #8255 )
...
Closes https://rustsec.org/advisories/RUSTSEC-2026-0145
2026-05-19 17:21:55 +00:00
link2xt
0bb4c3d073
feat: enable draft-pqc feature on pgp crate
...
This is needed to have support of v6 PQC keys
by the time users start generating profiles
using such keys.
Test key was generated with rsop/v0.10.0-16-gd98265f
(commit d98265f821e7bb181d06da1d634c5c4668d89e83)
using the command
cargo run --features draft-pqc generate-key \
--profile draft-ietf-openpgp-pqc-14-v6-ed25519-mlkem768x25519
2026-05-12 21:56:05 +00:00
link2xt
64f65886f6
chore: update zerocopy from 0.7.32 to 0.7.35
...
Otherwise dependency resolver fails
if you enable "draft-pqc" feature on "pgp" crate.
2026-05-12 21:56:05 +00:00
dependabot[bot]
9ebd4769f5
chore(cargo): bump openssl from 0.10.78 to 0.10.79
...
Bumps [openssl](https://github.com/rust-openssl/rust-openssl ) from 0.10.78 to 0.10.79.
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases )
- [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.78...openssl-v0.10.79 )
---
updated-dependencies:
- dependency-name: openssl
dependency-version: 0.10.79
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-07 09:13:45 -03:00
dependabot[bot]
741d1beed8
chore(cargo): bump data-encoding from 2.10.0 to 2.11.0
...
Bumps [data-encoding](https://github.com/ia0/data-encoding ) from 2.10.0 to 2.11.0.
- [Commits](https://github.com/ia0/data-encoding/compare/v2.10.0...v2.11.0 )
---
updated-dependencies:
- dependency-name: data-encoding
dependency-version: 2.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-04 14:10:58 -03:00
dependabot[bot]
ac8b2d2fca
chore(cargo): bump colorutils-rs from 0.7.6 to 0.8.0
...
Bumps [colorutils-rs](https://github.com/awxkee/colorutils-rs ) from 0.7.6 to 0.8.0.
- [Release notes](https://github.com/awxkee/colorutils-rs/releases )
- [Commits](https://github.com/awxkee/colorutils-rs/compare/0.7.6...0.8.0 )
2026-05-04 13:42:52 -03:00
dependabot[bot]
35ceb51ffc
chore(cargo): bump libc from 0.2.184 to 0.2.186
...
Bumps [libc](https://github.com/rust-lang/libc ) from 0.2.184 to 0.2.186.
- [Release notes](https://github.com/rust-lang/libc/releases )
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/libc/compare/0.2.184...0.2.186 )
---
updated-dependencies:
- dependency-name: libc
dependency-version: 0.2.186
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-04 04:16:07 +00:00
dependabot[bot]
e713c231eb
chore(cargo): bump tokio from 1.50.0 to 1.52.1
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.50.0 to 1.52.1.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.50.0...tokio-1.52.1 )
---
updated-dependencies:
- dependency-name: tokio
dependency-version: 1.52.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-04 00:06:32 +00:00
dependabot[bot]
80c9ca44ca
chore(cargo): bump hyper from 1.8.1 to 1.9.0
...
Bumps [hyper](https://github.com/hyperium/hyper ) from 1.8.1 to 1.9.0.
- [Release notes](https://github.com/hyperium/hyper/releases )
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md )
- [Commits](https://github.com/hyperium/hyper/compare/v1.8.1...v1.9.0 )
---
updated-dependencies:
- dependency-name: hyper
dependency-version: 1.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-03 21:46:04 +00:00
dependabot[bot]
4529ed2240
chore(cargo): bump blake3 from 1.8.3 to 1.8.5
...
Bumps [blake3](https://github.com/BLAKE3-team/BLAKE3 ) from 1.8.3 to 1.8.5.
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases )
- [Commits](https://github.com/BLAKE3-team/BLAKE3/compare/1.8.3...1.8.5 )
---
updated-dependencies:
- dependency-name: blake3
dependency-version: 1.8.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-03 18:22:54 +00:00
link2xt
0598fdcab3
chore: update astral-tokio-tar from 0.6.0 to 0.6.1
...
Fixes https://rustsec.org/advisories/RUSTSEC-2026-0112
2026-04-29 17:05:38 +00:00
dependabot[bot]
d069e75cd8
chore(cargo): bump openssl from 0.10.72 to 0.10.78
...
Bumps [openssl](https://github.com/rust-openssl/rust-openssl ) from 0.10.72 to 0.10.78.
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases )
- [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.72...openssl-v0.10.78 )
---
updated-dependencies:
- dependency-name: openssl
dependency-version: 0.10.78
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-23 05:08:01 -03:00
link2xt
ad5e904d1c
chore(cargo): update rustls-webpki to 0.103.13
...
Also ignore RUSTSEC-2026-0104 because iroh 0.35.0
pulls in rustls-webpki that cannot be updated.
2026-04-22 18:10:40 +00:00
link2xt
9fcb26c849
chore(cargo): upgrade rand 0.8.5 to rand 0.8.6
...
This upgrade resolves RUSTSEC-2026-0097
2026-04-19 09:00:00 +00:00
link2xt
418fd92d6d
build: upgrade rustls-webpki to 0.103.12
...
Ignore <https://rustsec.org/advisories/RUSTSEC-2026-0098 >
and <https://rustsec.org/advisories/RUSTSEC-2026-0099 >
for rustls-webpki 0.102.8 that is an iroh dependency.
2026-04-16 16:14:12 +02:00
dependabot[bot]
b8a0c37efe
chore(cargo): bump rand from 0.9.2 to 0.9.3
...
Bumps [rand](https://github.com/rust-random/rand ) from 0.9.2 to 0.9.3.
- [Release notes](https://github.com/rust-random/rand/releases )
- [Changelog](https://github.com/rust-random/rand/blob/0.9.3/CHANGELOG.md )
- [Commits](https://github.com/rust-random/rand/compare/rand_core-0.9.2...0.9.3 )
---
updated-dependencies:
- dependency-name: rand
dependency-version: 0.9.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-14 03:36:12 +00:00
link2xt
3236c8bbf4
chore: bump version to 2.50.0-dev
2026-04-13 10:14:01 +02:00
link2xt
dab7ca19fe
chore(release): prepare for 2.49.0
2026-04-13 10:10:07 +02:00
link2xt
795fe9a38b
chore: bump version to 2.49.0-dev
2026-04-08 22:27:29 +02:00
dependabot[bot]
a5e41b0b49
chore(cargo): bump proptest from 1.10.0 to 1.11.0
...
Bumps [proptest](https://github.com/proptest-rs/proptest ) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/proptest-rs/proptest/releases )
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/proptest-rs/proptest/compare/v1.10.0...v1.11.0 )
---
updated-dependencies:
- dependency-name: proptest
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-05 17:03:06 -03:00
dependabot[bot]
6235f2a01a
chore(cargo): bump image from 0.25.9 to 0.25.10
...
Bumps [image](https://github.com/image-rs/image ) from 0.25.9 to 0.25.10.
- [Changelog](https://github.com/image-rs/image/blob/v0.25.10/CHANGES.md )
- [Commits](https://github.com/image-rs/image/compare/v0.25.9...v0.25.10 )
---
updated-dependencies:
- dependency-name: image
dependency-version: 0.25.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-05 05:50:41 +00:00