From e90011c79e14597310a1539ab2d92126e4583f52 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 6 Aug 2026 09:33:36 +0000 Subject: [PATCH 1/2] chore: Bump the cargo group with 5 updates Bumps the cargo group with 5 updates: | Package | From | To | | --- | --- | --- | | [http](https://github.com/hyperium/http) | `1.4.2` | `1.5.0` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.4.0` | `11.0.0` | | [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.54.0` | `0.54.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` | Updates `http` from 1.4.2 to 1.5.0 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](https://github.com/hyperium/http/compare/v1.4.2...v1.5.0) Updates `jsonwebtoken` from 10.4.0 to 11.0.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](https://github.com/Keats/jsonwebtoken/compare/v10.4.0...v11.0.0) Updates `octocrab` from 0.54.0 to 0.54.1 - [Release notes](https://github.com/XAMPPRocky/octocrab/releases) - [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md) - [Commits](https://github.com/XAMPPRocky/octocrab/compare/v0.54.0...v0.54.1) Updates `tokio` from 1.52.3 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.52.3...tokio-1.53.1) Updates `serde_json` from 1.0.150 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](https://github.com/serde-rs/json/compare/v1.0.150...v1.0.151) --- updated-dependencies: - dependency-name: http dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: jsonwebtoken dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: octocrab dependency-version: 0.54.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-version: 1.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo ... Signed-off-by: dependabot[bot] --- Cargo.lock | 38 ++++++++++++++++++++++++++++---------- Cargo.toml | 2 +- 2 files changed, 29 insertions(+), 11 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 5704f0e..c6c860c 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -293,7 +293,7 @@ dependencies = [ "hmac-sha256", "http", "http-body-util", - "jsonwebtoken", + "jsonwebtoken 11.0.0", "libsystemd", "octocrab", "regex", @@ -1014,9 +1014,9 @@ checksum = "ec9d92d097f4749b64e8cc33d924d9f40a2d4eb91402b458014b781f5733d60f" [[package]] name = "http" -version = "1.4.2" +version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6970f50e31d6fc17d3fa27329444bfa74e196cf62e95052a3f6fee181dba6425" +checksum = "918d3568bebf352712bc2ef3d46a8bcf1a75b373be6539de198e9105cbbf9ce0" dependencies = [ "bytes", "itoa", @@ -1348,6 +1348,23 @@ dependencies = [ "zeroize", ] +[[package]] +name = "jsonwebtoken" +version = "11.0.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "881733cbc631fc9e472e24447ce32a64bedf2da498d6d8570b08edc87de71f65" +dependencies = [ + "base64", + "getrandom 0.2.16", + "js-sys", + "pem", + "serde", + "serde_json", + "signature", + "simple_asn1", + "zeroize", +] + [[package]] name = "lazy_static" version = "1.5.0" @@ -1592,9 +1609,9 @@ dependencies = [ [[package]] name = "octocrab" -version = "0.54.0" +version = "0.54.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "27be39870c558e1fbc5a5f8d4a29aa916268c1dbcb9d467f2a9bbab35598060e" +checksum = "432fad6f447c52acda76a7a0660f022b21f4c42f373bbdc29f04332ba19a89bf" dependencies = [ "arc-swap", "async-trait", @@ -1615,9 +1632,10 @@ dependencies = [ "hyper-rustls", "hyper-timeout", "hyper-util", - "jsonwebtoken", + "jsonwebtoken 10.4.0", "percent-encoding", "pin-project", + "rustls", "secrecy", "serde", "serde_json", @@ -2238,9 +2256,9 @@ dependencies = [ [[package]] name = "serde_json" -version = "1.0.150" +version = "1.0.151" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9" +checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14" dependencies = [ "itoa", "memchr", @@ -2578,9 +2596,9 @@ dependencies = [ [[package]] name = "tokio" -version = "1.52.3" +version = "1.53.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe" +checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed" dependencies = [ "bytes", "libc", diff --git a/Cargo.toml b/Cargo.toml index 125f60c..127a50e 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -14,7 +14,7 @@ directories = "6.0.0" futures = "0.3.32" git2 = "0.21.0" http = "1.4.2" -jsonwebtoken = "10.4.0" +jsonwebtoken = "11.0.0" octocrab = { version = "0.54.0", features = ["stream", "tracing"] } regex = "1.13.0" secrecy = "0.10.3" From a49826af86877148e6134885a40e77261b81601b Mon Sep 17 00:00:00 2001 From: Phil Schaf Date: Thu, 6 Aug 2026 11:49:13 +0200 Subject: [PATCH 2/2] there can be only one --- Cargo.lock | 21 ++------------------- Cargo.toml | 2 +- 2 files changed, 3 insertions(+), 20 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index c6c860c..85e62e0 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -293,7 +293,7 @@ dependencies = [ "hmac-sha256", "http", "http-body-util", - "jsonwebtoken 11.0.0", + "jsonwebtoken", "libsystemd", "octocrab", "regex", @@ -1348,23 +1348,6 @@ dependencies = [ "zeroize", ] -[[package]] -name = "jsonwebtoken" -version = "11.0.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "881733cbc631fc9e472e24447ce32a64bedf2da498d6d8570b08edc87de71f65" -dependencies = [ - "base64", - "getrandom 0.2.16", - "js-sys", - "pem", - "serde", - "serde_json", - "signature", - "simple_asn1", - "zeroize", -] - [[package]] name = "lazy_static" version = "1.5.0" @@ -1632,7 +1615,7 @@ dependencies = [ "hyper-rustls", "hyper-timeout", "hyper-util", - "jsonwebtoken 10.4.0", + "jsonwebtoken", "percent-encoding", "pin-project", "rustls", diff --git a/Cargo.toml b/Cargo.toml index 127a50e..125f60c 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -14,7 +14,7 @@ directories = "6.0.0" futures = "0.3.32" git2 = "0.21.0" http = "1.4.2" -jsonwebtoken = "11.0.0" +jsonwebtoken = "10.4.0" octocrab = { version = "0.54.0", features = ["stream", "tracing"] } regex = "1.13.0" secrecy = "0.10.3"