mward4/Discord-Authenticator
1
0 Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

Dependency updates #1

New Issue
Open
opened 2026-09-20 02:56:23 -04:00 by mward4 · 0 comments
mward4 commented 2026-09-20 02:56:23 -04:00
Owner
Copy link
Copy source

7 routine bumps, 11 breaking changes, 2 base images, and a newer Rust.

A further 39 transitive crates have newer releases blocked behind a breaking boundary upstream has not crossed yet. They are omitted below because nothing here can move them.

Direct dependencies — cargo update covers these

Crate In use Latest
clap 4.6.6 4.6.7
rand 0.10.2 0.10.3
serde_json 1.0.151 1.0.154
thiserror 2.0.20 2.0.21
tokio 1.53.1 1.54.1
uuid 1.26.0 1.29.0
zeroize 1.9.0 1.9.1

Direct dependencies — breaking, a human has to decide

These cross a version boundary where semver allows anything to change. cargo update will not touch them: Cargo.toml needs editing and the changelog reading.

Crate In use Latest
argon2 0.5.3 0.6.0
chacha20poly1305 0.10.1 0.11.0
hmac 0.12.1 0.13.0
parking_lot 0.12.5 0.13.0
reqwest 0.12.28 0.13.5
resvg 0.48.1 0.49.0
rqrr 0.10.1 0.11.0
sha1 0.10.7 0.11.0
sha2 0.10.9 0.11.1
tower-http 0.6.11 0.7.1
usvg 0.48.1 0.49.0

Rust

What Declared Latest Note
Dockerfile RUST_VERSION 1.95 1.99.1 the shipped binary is built by an older compiler
rust-toolchain.toml channel stable 1.99.1 tracks stable, so it is already current

Minimum supported Rust version: 1.90.

Base images

Image In use Latest Note
rust 1.95-bookworm 1.99.1
alpine 3.21 3.24.3

Checked every 6 hours by .gitea/workflows/dependency-check.yml.

Rewritten by .gitea/workflows/dependency-check.yml every 6 hours, so this is always the latest report rather than a pile of comments.

7 routine bumps, 11 breaking changes, 2 base images, and a newer Rust. _A further 39 transitive crates have newer releases blocked behind a breaking boundary upstream has not crossed yet. They are omitted below because nothing here can move them._ ### Direct dependencies — `cargo update` covers these | Crate | In use | Latest | | --- | --- | --- | | `clap` | `4.6.6` | `4.6.7` | | `rand` | `0.10.2` | `0.10.3` | | `serde_json` | `1.0.151` | `1.0.154` | | `thiserror` | `2.0.20` | `2.0.21` | | `tokio` | `1.53.1` | `1.54.1` | | `uuid` | `1.26.0` | `1.29.0` | | `zeroize` | `1.9.0` | `1.9.1` | ### Direct dependencies — breaking, a human has to decide These cross a version boundary where semver allows anything to change. `cargo update` will not touch them: `Cargo.toml` needs editing and the changelog reading. | Crate | In use | Latest | | --- | --- | --- | | `argon2` | `0.5.3` | `0.6.0` | | `chacha20poly1305` | `0.10.1` | `0.11.0` | | `hmac` | `0.12.1` | `0.13.0` | | `parking_lot` | `0.12.5` | `0.13.0` | | `reqwest` | `0.12.28` | `0.13.5` | | `resvg` | `0.48.1` | `0.49.0` | | `rqrr` | `0.10.1` | `0.11.0` | | `sha1` | `0.10.7` | `0.11.0` | | `sha2` | `0.10.9` | `0.11.1` | | `tower-http` | `0.6.11` | `0.7.1` | | `usvg` | `0.48.1` | `0.49.0` | ### Rust | What | Declared | Latest | Note | | --- | --- | --- | --- | | Dockerfile `RUST_VERSION` | `1.95` | `1.99.1` | **the shipped binary is built by an older compiler** | | `rust-toolchain.toml` channel | `stable` | `1.99.1` | tracks stable, so it is already current | Minimum supported Rust version: `1.90`. ### Base images | Image | In use | Latest | Note | | --- | --- | --- | --- | | `rust` | `1.95-bookworm` | `1.99.1` | | | `alpine` | `3.21` | `3.24.3` | | _Checked every 6 hours by `.gitea/workflows/dependency-check.yml`._ --- Rewritten by `.gitea/workflows/dependency-check.yml` every 6 hours, so this is always the latest report rather than a pile of comments.
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
mward4 (Miles Ward)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mward4/Discord-Authenticator#1