Skip to content

Update dependencies with cargo update - #68

Merged
InboundFrog merged 1 commit into
mainfrom
owner/update-dependencies
Oct 4, 2026
Merged

InboundFrog merged 1 commit into
mainfrom
owner/update-dependencies

Conversation

@InboundFrog

Copy link
Copy Markdown
Owner

Transitive dependency yoke-derive version 0.8.3 was yanked as it broke compilation on older Rust compilers (< 1.87): unicode-org/icu4x#8506

Updated all transitives instead:

$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1290 security advisories (from /Users/mike/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (301 crate dependencies)
Crate:     yoke-derive
Version:   0.8.3
Warning:   yanked

warning: 1 allowed warning found

Update with cargo update:

$ cargo update
    Updating crates.io index
     Locking 29 packages to highest compatible versions
    Removing base64 v0.22.1
    Updating cc v1.4.6 -> v1.6.0
    Updating cfg-if v1.0.4 -> v1.0.5
    Updating encoding_rs v0.8.41 -> v0.8.42
    Updating find-msvc-tools v0.1.12 -> v0.1.14
    Updating hyper-rustls v0.27.9 -> v0.27.10
    Updating hyper-util v0.1.20 -> v0.1.21
    Updating js-sys v0.3.105 -> v0.3.106
    Updating lazy_static v1.5.0 -> v1.5.1
    Updating libc v0.2.189 -> v0.2.190
    Updating mio v1.2.3 -> v1.2.4
    Removing multiversion v0.9.0
    Removing multiversion-macros v0.9.0
    Updating quinn-proto v0.11.18 -> v0.11.19
    Updating quinn-udp v0.5.15 -> v0.5.16
    Updating rustix v1.1.4 -> v1.1.5
    Updating rustls-platform-verifier v0.7.0 -> v0.7.1
    Updating rustls-platform-verifier-android v0.1.1 -> v0.2.0
    Updating smallvec v1.16.1 -> v1.16.2
    Updating syn v3.0.5 -> v3.0.6
    Updating tokio v1.53.1 -> v1.53.2
    Updating tokio-rustls v0.26.5 -> v0.26.6
    Updating unicode-ident v1.0.24 -> v1.0.26
    Updating wasm-bindgen v0.2.128 -> v0.2.129
    Updating wasm-bindgen-futures v0.4.78 -> v0.4.79
    Updating wasm-bindgen-macro v0.2.128 -> v0.2.129
    Updating wasm-bindgen-macro-support v0.2.128 -> v0.2.129
    Updating wasm-bindgen-shared v0.2.128 -> v0.2.129
    Updating web-sys v0.3.105 -> v0.3.106
    Updating yoke-derive v0.8.3 -> v0.8.4
    Updating zerocopy v0.8.57 -> v0.8.59
    Updating zerocopy-derive v0.8.57 -> v0.8.59

All tests still pass:

$ cargo test
  Downloaded hyper-rustls v0.27.10
  Downloaded lazy_static v1.5.1
  Downloaded yoke-derive v0.8.4
  Downloaded tokio-rustls v0.26.6
  Downloaded hyper-util v0.1.21
  Downloaded quinn-udp v0.5.16
  Downloaded rustls-platform-verifier v0.7.1
  Downloaded smallvec v1.16.2
  Downloaded mio v1.2.4
  Downloaded zerocopy-derive v0.8.59
  Downloaded quinn-proto v0.11.19
  Downloaded zerocopy v0.8.59
  Downloaded rustix v1.1.5
  Downloaded encoding_rs v0.8.42
  Downloaded tokio v1.53.2
  Downloaded 15 crates (2.9MiB) in 1.46s
   Compiling libc v0.2.190
   Compiling unicode-ident v1.0.26
   Compiling cfg-if v1.0.5
   Compiling find-msvc-tools v0.1.14
   Compiling smallvec v1.16.2
   Compiling zerocopy v0.8.59
   Compiling encoding_rs v0.8.42
   Compiling rustix v1.1.5
   Compiling chacha20 v0.10.2
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling jobserver v0.1.35
   Compiling cc v1.6.0
   Compiling getrandom v0.4.3
   Compiling socket2 v0.6.5
   Compiling mio v1.2.4
   Compiling core-foundation v0.10.1
   Compiling system-configuration-sys v0.6.0
   Compiling core-foundation v0.9.4
   Compiling cpufeatures v0.3.1
   Compiling security-framework-sys v2.17.0
   Compiling mach2 v0.4.3
   Compiling nix v0.31.3
   Compiling console v0.16.6
   Compiling nix v0.26.4
   Compiling crypto-common v0.2.2
   Compiling crypto-bigint v0.7.5
   Compiling system-configuration v0.7.0
   Compiling security-framework v3.7.0
   Compiling tokio v1.53.2
   Compiling io-kit-sys v0.4.1
   Compiling dispatch2 v0.3.1
   Compiling rtoolbox v0.0.6
   Compiling indicatif v0.18.6
   Compiling rpassword v7.5.4
   Compiling rand v0.10.3
   Compiling errno v0.3.14
   Compiling ctrlc v3.5.2
   Compiling getrandom v0.2.17
   Compiling digest v0.11.3
   Compiling cipher v0.5.2
   Compiling synstructure v0.14.0
   Compiling cmake v0.1.58
   Compiling hmac v0.13.0
   Compiling hkdf v0.13.0
   Compiling signature v3.0.0
   Compiling sha2 v0.11.0
   Compiling serialport v4.10.1
   Compiling aes v0.9.3
   Compiling cbc v0.2.1
   Compiling der_derive v0.8.0
   Compiling zerocopy-derive v0.8.59
   Compiling tempfile v3.27.0
   Compiling aws-lc-sys v0.45.0
   Compiling libusb1-sys v0.7.0
   Compiling hidapi v2.6.7
   Compiling ring v0.17.14
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling zerovec-derive v0.11.6
   Compiling displaydoc v0.2.7
   Compiling serde_derive v1.0.229
   Compiling clap_derive v4.6.7
   Compiling primefield v0.14.0
   Compiling der v0.8.2
   Compiling wnaf v0.14.1
   Compiling rfc6979 v0.6.0
   Compiling thiserror-impl v2.0.21
   Compiling rusb v0.9.4
   Compiling zerofrom v0.1.8
   Compiling tokio-util v0.7.19
   Compiling tower v0.5.3
   Compiling clap v4.6.7
   Compiling thiserror v2.0.21
   Compiling h2 v0.4.19
   Compiling yoke v0.8.3
   Compiling spki v0.8.0
   Compiling sec1 v0.8.1
   Compiling pkcs8 v0.11.0
   Compiling x509-cert v0.3.0
   Compiling serde v1.0.229
   Compiling elliptic-curve v0.14.1
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling ecdsa v0.17.0
   Compiling primeorder v0.14.0
   Compiling p256 v0.14.0
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling hyper v1.11.1
   Compiling icu_collections v2.3.0
   Compiling icu_locale_core v2.3.0
   Compiling rcgen v0.14.10
   Compiling icu_provider v2.3.1
   Compiling hyper-util v0.1.21
   Compiling half v2.7.1
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling ciborium-ll v0.2.2
   Compiling ciborium v0.2.2
   Compiling idna_adapter v1.2.2
   Compiling idna v1.1.0
   Compiling url v2.5.8
   Compiling tower-http v0.6.11
   Compiling aws-lc-rs v1.18.1
   Compiling rustls v0.23.45
   Compiling rustls-webpki v0.103.15
   Compiling tokio-rustls v0.26.6
   Compiling rustls-platform-verifier v0.7.1
   Compiling hyper-rustls v0.27.10
   Compiling reqwest v0.13.5
   Compiling solo1 v0.2.1 (/Users/mike/work/InboundFrog/authnz/solo1-cli-rs)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 17.13s
     Running unittests src/lib.rs (target/debug/deps/solo1-1b24f4b18813b7b6)

running 145 tests
test cbor::tests::test_expect_map_ok ... ok
test cbor::tests::test_expect_map_err ... ok
test cbor::tests::test_require_int_key_ok ... ok
test cbor::tests::test_require_bytes_wrong_type ... ok
test cbor::tests::test_cbor_helpers ... ok
test cbor::tests::test_find_text_key ... ok
test cbor::tests::test_find_uint ... ok
test cbor::tests::test_find_int_key ... ok
test commands::aux::tests::test_format_bootloader_version_extra_bytes_ignored ... ok
test commands::aux::tests::test_format_bootloader_version_large_values ... ok
test commands::aux::tests::test_format_bootloader_version_empty_falls_back_to_hex ... ok
test cbor::tests::test_require_bytes_ok ... ok
test cbor::tests::test_int_map_roundtrip ... ok
test commands::aux::tests::test_format_bootloader_version_one_byte_falls_back_to_hex ... ok
test commands::aux::tests::test_format_bootloader_version_three_bytes ... ok
test cbor::tests::test_require_int_key_err ... ok
test commands::aux::tests::test_format_bootloader_version_three_bytes_new ... ok
test commands::aux::tests::test_format_bootloader_version_two_bytes_falls_back_to_hex ... ok
test commands::aux::tests::test_format_bootloader_version_zero_fields ... ok
test commands::key::common::tests::test_is_confirmed_accepts_trimmed_yes ... ok
test commands::key::common::tests::test_is_confirmed_rejects_everything_else ... ok
test commands::key::credential::tests::credential_id_decodes_from_base64 ... ok
test commands::key::credential::tests::delete_sub_command_params_uses_key_0x02 ... ok
test commands::key::ops::tests::test_cmd_key_version_parses_bytes ... ok
test commands::key::ops::tests::test_cmd_key_version_too_short ... ok
test commands::key::ops::tests::test_cmd_key_version_timeout ... ok
test commands::key::ops::tests::test_cmd_key_version_zero ... ok
test commands::key::ops::tests::test_cmd_key_version_extra_bytes_ignored ... ok
test commands::key::ops::tests::test_cmd_ping_count_zero ... ok
test commands::key::ops::tests::test_cmd_ping_data_mismatch ... ok
test commands::key::ops::tests::test_cmd_ping_success_echo ... ok
test commands::key::ops::tests::test_cmd_ping_timeout ... ok
test commands::key::ops::tests::test_cmd_wink_success ... ok
test commands::key::ops::tests::test_cmd_wink_timeout ... ok
test commands::key::probe::tests::test_cmd_probe_rejects_unknown_hash_type ... ok
test commands::key::probe::tests::test_normalize_hash_type_known_types ... ok
test commands::key::probe::tests::test_normalize_hash_type_unknown_types ... ok
test commands::key::rng::tests::test_cmd_rng_hexbytes_boundary_255_accepted ... ok
test commands::key::rng::tests::test_cmd_rng_hexbytes_count_zero ... ok
test commands::key::rng::tests::test_cmd_rng_hexbytes_hex_is_lowercase ... ok
test commands::key::rng::tests::test_cmd_rng_hexbytes_n_too_large ... ok
test commands::key::rng::tests::test_cmd_rng_hexbytes_timeout ... ok
test commands::key::rng::tests::test_cmd_rng_hexbytes_truncates_to_n ... ok
test commands::key::rng::tests::test_cmd_rng_hexbytes_valid_response ... ok
test commands::key::probe::tests::test_check_ga_response_error_status ... ok
test commands::key::verify::tests::extract_attestation_rejects_missing_x5c ... ok
test commands::key::verify::tests::extract_attestation_rejects_missing_alg ... ok
test commands::key::verify::tests::extract_attestation_rejects_wrong_alg ... ok
test commands::key::verify::tests::extract_attestation_tolerates_missing_sig_and_auth_data ... ok
test commands::key::probe::tests::test_check_ga_response_ok ... ok
test commands::program::tests::test_addresses_coverage_sums_to_firmware_len ... ok
test commands::program::tests::test_addresses_empty_firmware ... ok
test commands::program::tests::test_addresses_exact_two_chunks ... ok
test commands::program::tests::test_addresses_partial_last_chunk ... ok
test commands::program::tests::test_addresses_single_byte_firmware ... ok
test commands::program::tests::test_addresses_stride_is_always_256 ... ok
test commands::program::tests::test_chunk_count_exact_multiple ... ok
test commands::program::tests::test_chunk_count_large ... ok
test commands::program::tests::test_chunk_count_partial_last_chunk ... ok
test commands::program::tests::test_chunk_count_single_chunk ... ok
test commands::program::tests::test_chunk_count_zero ... ok
test commands::top::tests::test_write_private_key_overwrites_existing_file ... ok
test commands::top::tests::test_write_private_key_sets_owner_only_permissions ... ok
test crypto::tests::check_cert_validity_expired ... ok
test crypto::tests::check_cert_validity_not_yet_valid ... ok
test crypto::tests::check_cert_validity_rejects_garbage ... ok
test crypto::tests::check_cert_validity_valid ... ok
test crypto::tests::extract_spki_fingerprint_is_stable ... ok
test crypto::tests::extract_spki_fingerprint_rejects_garbage ... ok
test crypto::tests::spki_fingerprint_differs_from_der_fingerprint ... ok
test crypto::tests::test_attestation_fingerprint_constants_valid_hex ... ok
test crypto::tests::test_attestation_fingerprint_match ... ok
test crypto::tests::test_attestation_fingerprint_no_match ... ok
test commands::key::verify::tests::signature_valid_rejects_missing_sig ... ok
test commands::key::verify::tests::extract_attestation_full_response ... ok
test commands::key::verify::tests::cmd_verify_errors_on_unsupported_alg ... ok
test crypto::tests::test_sha256_hex ... ok
test crypto::tests::test_websafe_b64_known ... ok
test crypto::tests::test_websafe_b64_roundtrip ... ok
test crypto::tests::test_websafe_b64_with_special_chars ... ok
test commands::key::verify::tests::signature_valid_rejects_missing_auth_data ... ok
test commands::key::fido2::tests::ecdh_key_agreement_cose_key_is_correct ... ok
test commands::key::verify::tests::signature_valid_rejects_tampered_sig ... ok
test commands::key::verify::tests::cmd_verify_succeeds_with_valid_attestation ... ok
test commands::key::verify::tests::cmd_verify_succeeds_with_invalid_signature ... ok
test commands::key::fido2::tests::prepare_hmac_secret_input_output_is_correct ... ok
test crypto::tests::test_generate_keypair ... ok
test ctap2::tests::test_check_ctap_status ... ok
test crypto::tests::test_sign_and_verify_firmware ... ok
test ctap2::tests::test_extract_cbor_text_responses ... ok
test crypto::tests::verify_attestation_signature_rejects_garbage_sig ... ok
test ctap2::tests::test_extract_cose_coord ... ok
test commands::key::verify::tests::signature_valid_rejects_replayed_cert ... ok
test device::frame::tests::test_bootloader_packet ... ok
test device::frame::tests::test_bootloader_packet_max_data_ok ... ok
test device::frame::tests::test_bootloader_packet_oversized_data_err ... ok
test device::frame::tests::test_build_frames_max_payload_ok ... ok
test device::frame::tests::test_build_frames_multi ... ok
test device::frame::tests::test_build_frames_oversized_payload_err ... ok
test device::frame::tests::test_build_frames_single ... ok
test commands::key::fido2::tests::ecdh_key_agreement_both_sides_agree ... ok
test device::frame::tests::test_ctaphid_frame_cont_encode_decode ... ok
test crypto::tests::verify_attestation_signature_accepts_valid ... ok
test device::frame::tests::test_ctaphid_frame_init_encode_decode ... ok
test dfu::tests::test_dfu_status_error ... ok
test dfu::tests::test_dfu_status_parse ... ok
test dfu::tests::test_dfu_status_parse_short ... ok
test firmware::tests::test_auth_word_addr ... ok
test firmware::tests::test_firmware_bytes_to_sign_for_version_sizes_differ ... ok
test firmware::tests::test_create_firmware_json ... ok
test firmware::tests::test_firmware_version_ordering ... ok
test firmware::tests::test_firmware_json_version_selection ... ok
test firmware::tests::test_firmware_json_parse ... ok
test firmware::tests::test_firmware_version_parse ... ok
test firmware::tests::test_firmware_version_parse_v_prefix ... ok
test firmware::tests::test_flash_addr ... ok
test firmware::tests::test_hacker_attestation_cert_is_valid ... ok
test ctap2::tests::test_client_pin_session_crypto_roundtrip ... ok
test firmware::tests::test_hacker_attestation_key_is_valid ... ok
test firmware::tests::test_hex_records_address_overflow_rejected ... ok
test firmware::tests::test_hex_records_to_binary ... ok
test firmware::tests::test_hex_records_span_cap_rejected ... ok
test firmware::tests::test_hex_small_file_still_parses ... ok
test firmware::tests::test_version_constraint_all_operators ... ok
test firmware::tests::test_version_constraint_equals ... ok
test firmware::tests::test_version_constraint_gt ... ok
test firmware::tests::test_version_constraint_lte ... ok
test crypto::tests::verify_attestation_signature_rejects_tampered_auth_data ... ok
test crypto::tests::verify_attestation_signature_rejects_garbage_cert ... ok
test output::tests::cli_version_output_serializes ... ok
test output::tests::challenge_response_output_serializes ... ok
test output::tests::credential_list_output_serializes ... ok
test output::tests::gen_key_output_serializes ... ok
test output::tests::list_output_empty_serializes ... ok
test commands::key::verify::tests::signature_valid_accepts_genuine_attestation ... ok
test output::tests::list_output_non_empty_serializes ... ok
test output::tests::make_credential_output_serializes ... ok
test output::tests::verify_output_genuine_serializes ... ok
test output::tests::verify_output_expired_cert_serializes ... ok
test crypto::tests::verify_attestation_signature_rejects_tampered_client_data_hash ... ok
test output::tests::verify_output_invalid_signature_serializes ... ok
test output::tests::version_output_serializes ... ok
test crypto::tests::verify_attestation_signature_rejects_wrong_key_cert ... ok
test commands::key::fido2::tests::prepare_hmac_secret_input_shared_secret_matches_device ... ok
test crypto::tests::verify_attestation_signature_rejects_tampered_sig ... ok

test result: ok. 145 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/main.rs (target/debug/deps/solo1-f4c545e914691959)

running 1 test
test tests::cli_timeout_default_is_30 ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/integration.rs (target/debug/deps/integration-0db4bf4e1b8bfb60)

running 13 tests
test test_ping_hardware ... ignored, requires connected hardware
test test_version_hardware ... ignored, requires connected hardware
test test_flash_addr_calculation ... ok
test test_mergehex_auth_word_address ... ok
test test_reassemble_frames_truncation ... ok
test test_mergehex_default_attestation_constants ... ok
test test_version_constraint_equals ... ok
test test_known_fingerprints_validity ... ok
test test_firmware_sign_versioned_regions_differ ... ok
test test_mergehex_key_cert_must_both_be_provided ... ok
test test_firmware_sign_versioned_json_structure ... ok
test test_mergehex_default_attestation ... ok
test test_list_devices_no_hardware ... ok

test result: ok. 11 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.04s

   Doc-tests solo1

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

@InboundFrog
InboundFrog merged commit 941ac7f into main Oct 4, 2026
5 checks passed
@InboundFrog
InboundFrog deleted the owner/update-dependencies branch October 4, 2026 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant