mward4/OpenMFA
Archived
1
0 Fork 0
Code Issues 1 Actions Packages Projects Releases 3 Wiki Activity

Dependency updates #1

New Issue
Open
opened 2026-09-20 02:56:23 -04:00 by mward4 · 0 comments
mward4 commented 2026-09-20 02:56:23 -04:00
Owner
Copy link
Copy source

7 routine bumps, 8 breaking changes, 2 base images, and a newer Rust.

A further 37 transitive crates have newer releases blocked behind a breaking boundary upstream has not crossed yet. They are omitted below because nothing here can move them.

Direct dependencies — cargo update covers these

Crate In use Latest
clap 4.6.6 4.6.7
rand 0.10.2 0.10.3
serde_json 1.0.151 1.0.154
thiserror 2.0.20 2.0.21
tokio 1.53.1 1.53.3
uuid 1.26.0 1.28.0
zeroize 1.9.0 1.9.1

Direct dependencies — breaking, a human has to decide

These cross a version boundary where semver allows anything to change. cargo update will not touch them: Cargo.toml needs editing and the changelog reading.

Crate In use Latest
argon2 0.5.3 0.6.0
chacha20poly1305 0.10.1 0.11.0
hmac 0.12.1 0.13.0
reqwest 0.12.28 0.13.5
rqrr 0.10.1 0.11.0
sha1 0.10.7 0.11.0
sha2 0.10.9 0.11.1
tower-http 0.6.11 0.7.1

Rust

What Declared Latest Note
Dockerfile RUST_VERSION 1.95 1.99.1 the shipped binary is built by an older compiler
rust-toolchain.toml channel stable 1.99.1 tracks stable, so it is already current

Minimum supported Rust version: 1.90.

Base images

Image In use Latest Note
rust 1.95-bookworm 1.99.1
alpine 3.21 3.24.2

Checked every 6 hours by .gitea/workflows/dependency-check.yml.

Rewritten by .gitea/workflows/dependency-check.yml every 6 hours, so this is always the latest report rather than a pile of comments.

7 routine bumps, 8 breaking changes, 2 base images, and a newer Rust. _A further 37 transitive crates have newer releases blocked behind a breaking boundary upstream has not crossed yet. They are omitted below because nothing here can move them._ ### Direct dependencies — `cargo update` covers these | Crate | In use | Latest | | --- | --- | --- | | `clap` | `4.6.6` | `4.6.7` | | `rand` | `0.10.2` | `0.10.3` | | `serde_json` | `1.0.151` | `1.0.154` | | `thiserror` | `2.0.20` | `2.0.21` | | `tokio` | `1.53.1` | `1.53.3` | | `uuid` | `1.26.0` | `1.28.0` | | `zeroize` | `1.9.0` | `1.9.1` | ### Direct dependencies — breaking, a human has to decide These cross a version boundary where semver allows anything to change. `cargo update` will not touch them: `Cargo.toml` needs editing and the changelog reading. | Crate | In use | Latest | | --- | --- | --- | | `argon2` | `0.5.3` | `0.6.0` | | `chacha20poly1305` | `0.10.1` | `0.11.0` | | `hmac` | `0.12.1` | `0.13.0` | | `reqwest` | `0.12.28` | `0.13.5` | | `rqrr` | `0.10.1` | `0.11.0` | | `sha1` | `0.10.7` | `0.11.0` | | `sha2` | `0.10.9` | `0.11.1` | | `tower-http` | `0.6.11` | `0.7.1` | ### Rust | What | Declared | Latest | Note | | --- | --- | --- | --- | | Dockerfile `RUST_VERSION` | `1.95` | `1.99.1` | **the shipped binary is built by an older compiler** | | `rust-toolchain.toml` channel | `stable` | `1.99.1` | tracks stable, so it is already current | Minimum supported Rust version: `1.90`. ### Base images | Image | In use | Latest | Note | | --- | --- | --- | --- | | `rust` | `1.95-bookworm` | `1.99.1` | | | `alpine` | `3.21` | `3.24.2` | | _Checked every 6 hours by `.gitea/workflows/dependency-check.yml`._ --- Rewritten by `.gitea/workflows/dependency-check.yml` every 6 hours, so this is always the latest report rather than a pile of comments.
This repo is archived. You cannot comment on issues.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
mward4 (Miles Ward)
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mward4/OpenMFA#1