Skip to content

chore(deps): bump the cargo group across 2 directories with 30 updates#3992

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/parachain/cargo-390cd149f1
Closed

chore(deps): bump the cargo group across 2 directories with 30 updates#3992
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/parachain/cargo-390cd149f1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the cargo group with 11 updates in the /parachain directory:

Package From To
bitflags 2.11.0 2.11.1
clap 4.5.60 4.6.1
der 0.7.10 0.8.0
env_logger 0.11.9 0.11.10
similar-asserts 1.7.0 2.0.0
sha3 0.10.8 0.10.9
tokio 1.49.0 1.50.0
num_enum 0.7.5 0.7.6
tempfile 3.26.0 3.27.0
tracing-subscriber 0.3.22 0.3.23
uuid 1.21.0 1.23.1

Bumps the cargo group with 27 updates in the /tee-worker/omni-executor directory:

Package From To
bitflags 2.11.0 2.11.1
clap 4.5.60 4.6.1
der 0.7.10 0.8.0
env_logger 0.11.9 0.11.10
sha3 0.10.8 0.10.9
tokio 1.49.0 1.52.3
num_enum 0.7.5 0.7.6
alloy 1.7.3 2.0.5
alloy-rlp 0.3.13 0.3.15
alloy-signer 1.7.3 2.0.5
alloy-signer-local 1.7.3 2.0.5
anchor-client 0.32.1 1.0.2
bitcoin 0.32.8 0.32.9
hmac 0.12.1 0.13.0
jsonwebtoken 10.3.0 10.4.0
reqwest 0.13.2 0.13.3
ruint 1.17.2 1.18.0
rust_decimal 1.40.0 1.42.0
serde_with 3.16.1 3.20.0
tempfile 3.25.0 3.27.0
test-log 0.2.19 0.2.20
tower-http 0.6.8 0.6.11
tracing-subscriber 0.3.22 0.3.23
uuid 1.21.0 1.23.1
anyhow 1.0.101 1.0.102
sendgrid 0.27.0 0.27.1
warp 0.4.2 0.4.3

Updates bitflags from 2.11.0 to 2.11.1

Release notes

Sourced from bitflags's releases.

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Changelog

Sourced from bitflags's changelog.

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Commits
  • 4ed9ffa Merge pull request #482 from KodrAus/cargo/2.11.1
  • c53cd57 prepare for 2.11.1 release
  • a44410a Merge pull request #481 from KodrAus/docs/clarifications
  • 3d671b9 update more compile error messages
  • 5f3adad fix up compile error messages
  • 780765d fix up contains and intersection docs
  • 97b7607 clarify self and other in method docs
  • 88a7a18 Merge pull request #477 from DanielEScherzer/patch-1
  • f0e4646 example_generated.rs: add missing third slash for doc comment
  • a31c96f Merge pull request #478 from DanielEScherzer/beta-bless
  • Additional commits viewable in compare view

Updates clap from 4.5.60 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits
  • 1420275 chore: Release
  • d2c817d docs: Update changelog
  • f88c94e Merge pull request #6341 from epage/sep
  • acbb822 fix(complete): Reduce risk of conflict with actual subcommands
  • a49fadb refactor(complete): Pull out subcommand separator
  • ddc008b Merge pull request #6332 from epage/update
  • 497dc50 chore: Update compatible dependencies
  • dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
  • 54bdaa3 chore(deps): Update j178/prek-action action to v2
  • f0d30d9 chore: Release
  • Additional commits viewable in compare view

Updates der from 0.7.10 to 0.8.0

Commits

Updates env_logger from 0.11.9 to 0.11.10

Release notes

Sourced from env_logger's releases.

v0.11.10

[0.11.10] - 2026-03-23

Internal

  • Update dependencies
Changelog

Sourced from env_logger's changelog.

[0.11.10] - 2026-03-23

Internal

  • Update dependencies
Commits
  • 41320bf chore: Release
  • de8c74f docs: Update changelog
  • d550741 docs(gh): Add sponsor link
  • 458b075 chore(deps): Update Rust Stable to v1.94 (#401)
  • 8bc3fc3 Merge pull request #400 from epage/update
  • 143fa64 chore: Upgrade incompatible
  • b687a24 chore: Upgrade compatible
  • 8cf1ba9 Merge pull request #397 from rust-cli/renovate/crate-ci-typos-1.x
  • 094ecf7 Merge pull request #396 from rust-cli/renovate/crate-ci-committed-1.x
  • 34ad626 chore(deps): Update pre-commit hook crate-ci/typos to v1.44.0
  • Additional commits viewable in compare view

Updates quote from 1.0.44 to 1.0.45

Release notes

Sourced from quote's releases.

1.0.45

  • Add ToTokens impl for Arc<T> (#326)
Commits
  • 842ffde Release 1.0.45
  • 93d691c Merge pull request #326 from dtolnay/arc
  • d27d589 ToTokens for Arc
  • 24d1082 Update ui test suite to nightly-2026-02-18
  • 26b1276 Unpin CI miri toolchain
  • c5e1c9e Pin CI miri to nightly-2026-02-11
  • 58e2155 Remove compiler version support from readme
  • 1fc6b50 Raise required compiler to Rust 1.71
  • 515480a Update ui test suite to nightly-2026-02-01
  • 2c5e770 Update ui test suite to nightly-2026-01-30
  • See full diff in compare view

Updates similar-asserts from 1.7.0 to 2.0.0

Changelog

Sourced from similar-asserts's changelog.

2.0.0

  • Raised the crate edition to Rust 2024 and updated the MSRV to Rust 1.85.
  • Upgraded the similar dependency to 3.0.0.
  • Modernized CI workflows to current GitHub Actions and added PR runs.
  • Replaced atomic env-var caching with OnceLock.
  • Minor documentation and wording fixes.
Commits
  • 4eff50b chore(release): 2.0.0
  • 265c6e7 chore(ci): add trusted publishing workflow
  • 7700317 chore(rust): modernize toolchain, deps, and CI
  • See full diff in compare view

Updates sha3 from 0.10.8 to 0.10.9

Commits

Updates tokio from 1.49.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

Fixed

  • io: always cleanup AsyncFd registration list on deregister (#7773)
  • macros: remove (most) local use declarations in tokio::select! (#7929)
  • net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
  • runtime: avoid redundant unpark in current_thread scheduler (#7834)
  • runtime: don't park in current_thread if before_park defers waker (#7835)
  • io: fix write readiness on ESP32 on short writes (#7872)
  • runtime: wake deferred tasks before entering block_in_place (#7879)
  • sync: drop rx waker when oneshot receiver is dropped (#7886)
  • runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

  • fs: check for io-uring opcode support (#7815)
  • runtime: avoid lock acquisition after uring init (#7850)

Documented

  • docs: update outdated unstable features section (#7839)
  • io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
  • io: explain how to flush stdout/stderr (#7904)
  • io: fix incorrect and confusing AsyncWrite documentation (#7875)
  • rt: clarify the documentation of Runtime::spawn (#7803)
  • rt: fix missing quotation in docs (#7925)
  • runtime: correct the default thread name in docs (#7896)
  • runtime: fix event_interval doc (#7932)
  • sync: clarify RwLock fairness documentation (#7919)
  • sync: clarify that recv returns None once closed and no more messages (#7920)
  • task: clarify when to use spawn_blocking vs dedicated threads (#7923)
  • task: doc that task drops before JoinHandle completion (#7825)
  • signal: guarantee that listeners never return None (#7869)
  • task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

Updates num_enum from 0.7.5 to 0.7.6

Commits

Updates tempfile from 3.26.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

Commits
  • 5c8fa12 chore: release 3.27.0
  • e34e574 test: disable uds conflict test on redox
  • 772c795 test: add CWD guards
  • 2632fb9 fix: resolve relative paths when constructing TempPath
  • See full diff in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates uuid from 1.21.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

v1.23.0

What's Changed

New Contributors

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

  • Context: Renamed to ContextV1
  • Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to Version::Max

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to Uuid::get_version for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

v1.22.0

What's Changed

... (truncated)

Commits
  • ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
  • b4db015 prepare for 1.23.1 release
  • 771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
  • 80994a2 fix: Timestamp::from_gregorian deprecation note
  • 90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
  • 8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
  • 00ab922 Merge pull request #876 from uuid-rs/cargo/v1.23.0
  • 726ba45 prepare for 1.23.0 release
  • 996dade Merge pull request #875 from uuid-rs/fix/context-ordering
  • e140479 simplify a use stmt
  • Additional commits viewable in compare view

Updates bitflags from 2.11.0 to 2.11.1

Release notes

Sourced from bitflags's releases.

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Changelog

Sourced from bitflags's changelog.

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Commits
  • 4ed9ffa Merge pull request #482 from KodrAus/cargo/2.11.1
  • c53cd57 prepare for 2.11.1 release
  • a44410a Merge pull request #481 from KodrAus/docs/clarifications
  • 3d671b9 update more compile error messages
  • 5f3adad fix up compile error messages
  • 780765d fix up contains and intersection docs
  • 97b7607 clarify self and other in method docs
  • 88a7a18 Merge pull request #477 from DanielEScherzer/patch-1
  • f0e4646 example_generated.rs: add missing third slash for doc comment
  • a31c96f Merge pull request #478 from DanielEScherzer/beta-bless
  • Additional commits viewable in compare view

Updates clap from 4.5.60 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits
  • 1420275 chore: Release
  • d2c817d docs: Update changelog
  • f88c94e Merge pull request #6341 from epage/sep
  • acbb822 fix(complete): Reduce risk of conflict with actual subcommands
  • a49fadb refactor(complete): Pull out subcommand separator
  • ddc008b Merge pull request #6332 from epage/update
  • 497dc50 chore: Update compatible dependencies
  • dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
  • 54bdaa3 chore(deps): Update j178/prek-action action to v2
  • f0d30d9 chore: Release
  • Additional commits viewable in compare view

Updates der from 0.7.10 to 0.8.0

Commits

Updates env_logger from 0.11.9 to 0.11.10

Release notes

Sourced from env_logger's releases.

v0.11.10

[0.11.10] - 2026-03-23

Internal

  • Update dependencies
Changelog

Sourced from env_logger's changelog.

[0.11.10] - 2026-03-23

Internal

  • Update dependencies
Commits
  • 41320bf chore: Release
  • de8c74f docs: Update changelog
  • d550741 docs(gh): Add sponsor link
  • 458b075 chore(deps): Update Rust Stable to v1.94 (#401)
  • 8bc3fc3 Merge pull request #400 from epage/update
  • 143fa64 chore: Upgrade incompatible
  • b687a24 chore: Upgrade compatible
  • 8cf1ba9 Merge pull request #397 from rust-cli/renovate/crate-ci-typos-1.x
  • 094ecf7 Merge pull request #396 from rust-cli/renovate/crate-ci-committed-1.x
  • 34ad626 chore(deps): Update pre-commit hook crate-ci/typos to v1.44.0
  • Additional commits viewable in compare view

Updates quote from 1.0.44 to 1.0.45

Release notes

Sourced from quote's releases.

1.0.45

  • Add ToTokens impl for Arc<T> (#326)
Commits
  • 842ffde Release 1.0.45
  • 93d691c Merge pull request #326 from dtolnay/arc
  • d27d589 ToTokens for Arc
  • 24d1082 Update ui test suite to nightly-2026-02-18
  • 26b1276 Unpin CI miri toolchain
  • c5e1c9e Pin CI miri to nightly-2026-02-11
  • 58e2155 Remove compiler version support from readme
  • 1fc6b50 Raise required compiler to Rust 1.71
  • 515480a Update ui test suite to nightly-2026-02-01
  • 2c5e770 Update ui test suite to nightly-2026-01-30
  • See full diff in compare view

Updates syn from 1.0.109 to 2.0.117

Release notes

Sourced from syn's releases.

2.0.117

  • Fix parsing of self:: pattern in first function argument (#1970)

2.0.116

  • Optimize parse_fn_arg_or_variadic for less lookahead on erroneous receiver (#1968)

2.0.115

  • Enable GenericArgument::Constraint parsing in non-full mode (#1966)

2.0.114

  • Make std dependencies more easily discoverable in source code (#1956, thanks @​tamird)

2.0.113

  • Allow parsing TypeParam with colon not followed by any type param bounds (#1953, thanks @​wyfo)

2.0.112

2.0.111

  • Allow first argument of braced!, bracketed!, parenthesized! to be an otherwise unused variable (#1946)

2.0.110

  • Tweaks to improve build speed (#1939, thanks @​dishmaker)
  • Make syn::ext::IdentExt::unraw available without "parsing" feature (#1940)
  • Support parsing syn::Meta followed by => (#1944)

2.0.109

2.0.108

  • Parse unrecognized or invalid literals as Lit::Verbatim (#1925)

2.0.107

  • Improve panic message when constructing a LitInt, LitFloat, or Lit from invalid syntax (#1917)
  • Improve panic message on Punctuated index out of bounds (#1922)

2.0.106

  • Replace ~const syntax with [const] conditionally const syntax in trait bounds (#1896, rust-lang/rust#139858)
  • Support conditionally const impl Trait types (#1897)
  • Reject polarity modifier and lifetime binder used in the same trait bound (#1899, rust-lang/rust#127054)
  • Parse const trait bounds with bound lifetimes (#1902)
  • Parse bound lifetimes with lifetime bounds (#1903)
  • Allow type parameters and const parameters in trait bounds and generic closures (#1904,...

    Description has been truncated

Bumps the cargo group with 11 updates in the /parachain directory:

| Package | From | To |
| --- | --- | --- |
| [bitflags](https://github.com/bitflags/bitflags) | `2.11.0` | `2.11.1` |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.1` |
| [der](https://github.com/RustCrypto/formats) | `0.7.10` | `0.8.0` |
| [env_logger](https://github.com/rust-cli/env_logger) | `0.11.9` | `0.11.10` |
| [similar-asserts](https://github.com/mitsuhiko/similar-asserts) | `1.7.0` | `2.0.0` |
| [sha3](https://github.com/RustCrypto/hashes) | `0.10.8` | `0.10.9` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` |
| [num_enum](https://github.com/illicitonion/num_enum) | `0.7.5` | `0.7.6` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.26.0` | `3.27.0` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.23.1` |

Bumps the cargo group with 27 updates in the /tee-worker/omni-executor directory:

| Package | From | To |
| --- | --- | --- |
| [bitflags](https://github.com/bitflags/bitflags) | `2.11.0` | `2.11.1` |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.1` |
| [der](https://github.com/RustCrypto/formats) | `0.7.10` | `0.8.0` |
| [env_logger](https://github.com/rust-cli/env_logger) | `0.11.9` | `0.11.10` |
| [sha3](https://github.com/RustCrypto/hashes) | `0.10.8` | `0.10.9` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.52.3` |
| [num_enum](https://github.com/illicitonion/num_enum) | `0.7.5` | `0.7.6` |
| [alloy](https://github.com/alloy-rs/alloy) | `1.7.3` | `2.0.5` |
| [alloy-rlp](https://github.com/alloy-rs/rlp) | `0.3.13` | `0.3.15` |
| [alloy-signer](https://github.com/alloy-rs/alloy) | `1.7.3` | `2.0.5` |
| [alloy-signer-local](https://github.com/alloy-rs/alloy) | `1.7.3` | `2.0.5` |
| [anchor-client](https://github.com/solana-foundation/anchor) | `0.32.1` | `1.0.2` |
| [bitcoin](https://github.com/rust-bitcoin/rust-bitcoin) | `0.32.8` | `0.32.9` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.3.0` | `10.4.0` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.2` | `0.13.3` |
| [ruint](https://github.com/recmo/uint) | `1.17.2` | `1.18.0` |
| [rust_decimal](https://github.com/paupino/rust-decimal) | `1.40.0` | `1.42.0` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.16.1` | `3.20.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.25.0` | `3.27.0` |
| [test-log](https://github.com/d-e-s-o/test-log) | `0.2.19` | `0.2.20` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.11` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.23.1` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.101` | `1.0.102` |
| [sendgrid](https://github.com/gsquire/sendgrid-rs) | `0.27.0` | `0.27.1` |
| [warp](https://github.com/seanmonstar/warp) | `0.4.2` | `0.4.3` |



Updates `bitflags` from 2.11.0 to 2.11.1
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.11.0...2.11.1)

Updates `clap` from 4.5.60 to 4.6.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.1)

Updates `der` from 0.7.10 to 0.8.0
- [Commits](RustCrypto/formats@der/v0.7.10...der/v0.8.0)

Updates `env_logger` from 0.11.9 to 0.11.10
- [Release notes](https://github.com/rust-cli/env_logger/releases)
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)
- [Commits](rust-cli/env_logger@v0.11.9...v0.11.10)

Updates `quote` from 1.0.44 to 1.0.45
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.44...1.0.45)

Updates `similar-asserts` from 1.7.0 to 2.0.0
- [Changelog](https://github.com/mitsuhiko/similar-asserts/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/similar-asserts@1.7.0...2.0.0)

Updates `sha3` from 0.10.8 to 0.10.9
- [Commits](RustCrypto/hashes@sha3/v0.10.8...sha3-v0.10.9)

Updates `tokio` from 1.49.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0)

Updates `num_enum` from 0.7.5 to 0.7.6
- [Commits](illicitonion/num_enum@0.7.5...0.7.6)

Updates `tempfile` from 3.26.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.26.0...v3.27.0)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `uuid` from 1.21.0 to 1.23.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.21.0...v1.23.1)

Updates `bitflags` from 2.11.0 to 2.11.1
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.11.0...2.11.1)

Updates `clap` from 4.5.60 to 4.6.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.1)

Updates `der` from 0.7.10 to 0.8.0
- [Commits](RustCrypto/formats@der/v0.7.10...der/v0.8.0)

Updates `env_logger` from 0.11.9 to 0.11.10
- [Release notes](https://github.com/rust-cli/env_logger/releases)
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)
- [Commits](rust-cli/env_logger@v0.11.9...v0.11.10)

Updates `quote` from 1.0.44 to 1.0.45
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.44...1.0.45)

Updates `syn` from 1.0.109 to 2.0.117
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@1.0.109...2.0.117)

Updates `sha3` from 0.10.8 to 0.10.9
- [Commits](RustCrypto/hashes@sha3/v0.10.8...sha3-v0.10.9)

Updates `tokio` from 1.49.0 to 1.52.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0)

Updates `num_enum` from 0.7.5 to 0.7.6
- [Commits](illicitonion/num_enum@0.7.5...0.7.6)

Updates `alloy` from 1.7.3 to 2.0.5
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v1.7.3...v2.0.5)

Updates `alloy-rlp` from 0.3.13 to 0.3.15
- [Changelog](https://github.com/alloy-rs/rlp/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/rlp@v0.3.13...v0.3.15)

Updates `alloy-signer` from 1.7.3 to 2.0.5
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v1.7.3...v2.0.5)

Updates `alloy-signer-local` from 1.7.3 to 2.0.5
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v1.7.3...v2.0.5)

Updates `anchor-client` from 0.32.1 to 1.0.2
- [Release notes](https://github.com/solana-foundation/anchor/releases)
- [Changelog](https://github.com/otter-sec/anchor/blob/master/CHANGELOG.md)
- [Commits](otter-sec/anchor@v0.32.1...v1.0.2)

Updates `bitcoin` from 0.32.8 to 0.32.9
- [Release notes](https://github.com/rust-bitcoin/rust-bitcoin/releases)
- [Changelog](https://github.com/rust-bitcoin/rust-bitcoin/blob/master/CHANGELOG.md)
- [Commits](rust-bitcoin/rust-bitcoin@bitcoin-0.32.8...bitcoin-0.32.9)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

Updates `jsonwebtoken` from 10.3.0 to 10.4.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.3.0...v10.4.0)

Updates `reqwest` from 0.13.2 to 0.13.3
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.2...v0.13.3)

Updates `ruint` from 1.17.2 to 1.18.0
- [Release notes](https://github.com/recmo/uint/releases)
- [Changelog](https://github.com/alloy-rs/ruint/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/ruint@v1.17.2...v1.18.0)

Updates `rust_decimal` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/paupino/rust-decimal/releases)
- [Changelog](https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md)
- [Commits](paupino/rust-decimal@1.40.0...1.42.0)

Updates `serde_with` from 3.16.1 to 3.20.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.16.1...v3.20.0)

Updates `tempfile` from 3.25.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.26.0...v3.27.0)

Updates `test-log` from 0.2.19 to 0.2.20
- [Release notes](https://github.com/d-e-s-o/test-log/releases)
- [Changelog](https://github.com/d-e-s-o/test-log/blob/main/CHANGELOG.md)
- [Commits](d-e-s-o/test-log@v0.2.19...v0.2.20)

Updates `tower-http` from 0.6.8 to 0.6.11
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.11)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `uuid` from 1.21.0 to 1.23.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.21.0...v1.23.1)

Updates `anyhow` from 1.0.101 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.101...1.0.102)

Updates `sendgrid` from 0.27.0 to 0.27.1
- [Changelog](https://github.com/gsquire/sendgrid-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/gsquire/sendgrid-rs/commits)

Updates `warp` from 0.4.2 to 0.4.3
- [Release notes](https://github.com/seanmonstar/warp/releases)
- [Changelog](https://github.com/seanmonstar/warp/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/warp@v0.4.2...v0.4.3)

---
updated-dependencies:
- dependency-name: bitflags
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: der
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: env_logger
  dependency-version: 0.11.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: quote
  dependency-version: 1.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: similar-asserts
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: sha3
  dependency-version: 0.10.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: num_enum
  dependency-version: 0.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.23.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: bitflags
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: der
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: env_logger
  dependency-version: 0.11.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: quote
  dependency-version: 1.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: syn
  dependency-version: 2.0.117
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: sha3
  dependency-version: 0.10.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.52.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: num_enum
  dependency-version: 0.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: alloy
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: alloy-rlp
  dependency-version: 0.3.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: alloy-signer
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: alloy-signer-local
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: anchor-client
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: bitcoin
  dependency-version: 0.32.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: jsonwebtoken
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: reqwest
  dependency-version: 0.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: ruint
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rust_decimal
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde_with
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: test-log
  dependency-version: 0.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tower-http
  dependency-version: 0.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sendgrid
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: warp
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel
Copy link
Copy Markdown

vercel Bot commented May 19, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
heima-aa-demo-app Ignored Ignored May 19, 2026 6:18am

Request Review

BillyWooo pushed a commit that referenced this pull request May 22, 2026
Aggregated patch set, all under the rule "no polkadot-sdk, no
enclave/Rust under tee-worker/**/Cargo.*". Only JS/TS/Ruby tooling
touched.

- tee-worker/identity/scripts/changelog/Gemfile.lock
    faraday 2.14.1 -> 2.14.2, json 2.19.2 -> 2.19.5 (#3985)
- tee-worker/omni-executor/ts-tests/pnpm-lock.yaml + stress-tests/package.json
    systeminformation 5.31.5 -> 5.31.6 (#3984)
    fast-uri 3.1.0 -> 3.1.2 (#3987)
    brace-expansion 5.0.4/5.0.5 -> 5.0.6 (#3986)
- tee-worker/omni-executor/client-sdk/pnpm-lock.yaml
    metadata refresh: deprecated marker for @ungap/structured-clone@1.3.0
    (#3988 and #3989; follow-redirects 1.16.0 and brace-expansion 5.0.5
    are already present in the lockfile)
- tee-worker/client-api/pnpm-lock.yaml
    brace-expansion 5.0.5 -> 5.0.6 (subset of #3991)
- tee-worker/identity/ts-tests/pnpm-lock.yaml
    brace-expansion 1.1.12 -> 1.1.14, 2.0.2 -> 2.1.0
    fast-uri 3.1.0 -> 3.1.2 (subset of #3991)
- tee-worker/omni-executor/ts-tests/stress-tests/src/dashboard/package.json
    next 16.2.3 -> 16.2.6 (subset of #3991, lockfile-less subdir)

Not included:
- #3991's tee-worker/identity/client-sdk/pnpm-lock.yaml change: the
  dependabot patch also migrates the lockfile format from v6 to v9
  (a 12k-line diff), much bigger than the three packages it claims
  to bump. Left for a dedicated PR.
- #3991's tee-worker/omni-executor/contracts/aa/aa-demo-app change
  (next 16.2.3 -> 16.2.6): touching that path triggers contract-check,
  which fails on a pre-existing anchor-syn 0.32.1 incompatibility with
  the runner's rustc (unrelated to this PR; would be fixed by #3992's
  anchor-client 0.32 -> 1.0 bump). Left for that cargo bundle to land.

Out of scope: #3990 (older subset of #3991), #3992 (cargo bundle that
spans parachain + tee-worker/omni-executor Rust and includes risky
majors).

Each lockfile validated locally with `pnpm install --frozen-lockfile`.
Kailai-Wang added a commit that referenced this pull request May 22, 2026
* ci: pin pnpm to 9.15.2 in corepack steps

The fmt and ts-tests jobs run `corepack enable pnpm` at the repo root
where no packageManager field is declared. Corepack downloads the
latest pnpm (11.2.2), which requires Node >= 22.13 and imports
node:sqlite. The CI runner uses Node 20, so `pnpm --version` errors
with ERR_UNKNOWN_BUILTIN_MODULE: node:sqlite, fmt fails, and
andymckay's cancel-action wipes out the rest of the workflow.

Pin the root smoke-test pnpm to 9.15.2 (matches what most subprojects
already declare). Subdirectory commands continue to honor their own
packageManager pins.

* chore(deps): apply safe dependabot bumps

Aggregated patch set, all under the rule "no polkadot-sdk, no
enclave/Rust under tee-worker/**/Cargo.*". Only JS/TS/Ruby tooling
touched.

- tee-worker/identity/scripts/changelog/Gemfile.lock
    faraday 2.14.1 -> 2.14.2, json 2.19.2 -> 2.19.5 (#3985)
- tee-worker/omni-executor/ts-tests/pnpm-lock.yaml + stress-tests/package.json
    systeminformation 5.31.5 -> 5.31.6 (#3984)
    fast-uri 3.1.0 -> 3.1.2 (#3987)
    brace-expansion 5.0.4/5.0.5 -> 5.0.6 (#3986)
- tee-worker/omni-executor/client-sdk/pnpm-lock.yaml
    metadata refresh: deprecated marker for @ungap/structured-clone@1.3.0
    (#3988 and #3989; follow-redirects 1.16.0 and brace-expansion 5.0.5
    are already present in the lockfile)
- tee-worker/client-api/pnpm-lock.yaml
    brace-expansion 5.0.5 -> 5.0.6 (subset of #3991)
- tee-worker/identity/ts-tests/pnpm-lock.yaml
    brace-expansion 1.1.12 -> 1.1.14, 2.0.2 -> 2.1.0
    fast-uri 3.1.0 -> 3.1.2 (subset of #3991)
- tee-worker/omni-executor/ts-tests/stress-tests/src/dashboard/package.json
    next 16.2.3 -> 16.2.6 (subset of #3991, lockfile-less subdir)

Not included:
- #3991's tee-worker/identity/client-sdk/pnpm-lock.yaml change: the
  dependabot patch also migrates the lockfile format from v6 to v9
  (a 12k-line diff), much bigger than the three packages it claims
  to bump. Left for a dedicated PR.
- #3991's tee-worker/omni-executor/contracts/aa/aa-demo-app change
  (next 16.2.3 -> 16.2.6): touching that path triggers contract-check,
  which fails on a pre-existing anchor-syn 0.32.1 incompatibility with
  the runner's rustc (unrelated to this PR; would be fixed by #3992's
  anchor-client 0.32 -> 1.0 bump). Left for that cargo bundle to land.

Out of scope: #3990 (older subset of #3991), #3992 (cargo bundle that
spans parachain + tee-worker/omni-executor Rust and includes risky
majors).

Each lockfile validated locally with `pnpm install --frozen-lockfile`.
Kailai-Wang added a commit that referenced this pull request May 22, 2026
Aggregated patch set under the same rule as #3993: no polkadot-sdk, no
enclave/Rust under tee-worker/**/Cargo.*. Only JS/TS tooling touched.

- ws bumps (8.x patch, security fixes):
  - parachain/docker/pnpm-lock.yaml (8.18.2 -> 8.20.1)
  - parachain/ts-tests/pnpm-lock.yaml (8.20.0 -> 8.20.1) — #3997
  - tee-worker/client-api/pnpm-lock.yaml (8.18.2 -> 8.20.1)
  - tee-worker/identity/scripts/test_transfer/package-lock.json (8.18.2 -> 8.20.1)
  - tee-worker/identity/ts-tests/{pnpm-lock.yaml,integration-tests,
    post-checks,worker}/* (8.18.3 -> 8.20.1)
  - tee-worker/omni-executor/client-sdk/{package.json,pnpm-lock.yaml}
    (8.20.0 -> 8.20.1) — #3996
  - tee-worker/omni-executor/ts-tests/{pnpm-lock.yaml,
    integration-tests,stress-tests}/* (8.20.0 -> 8.20.1) — #3994
- brace-expansion bumps:
  - tee-worker/omni-executor/client-sdk: 5.0.5 -> 5.0.6 + balanced-match
    4.0.4 dropped (5.0.6 uses 4.0.3) — #3989
- @babel/plugin-transform-modules-systemjs bumps:
  - tee-worker/omni-executor/client-sdk: 7.29.0 -> 7.29.4 — #3995

Supersedes: #3989, #3994, #3995, #3996, #3997.

Partially absorbs #4001 (the npm 6-dir bundle): took its parachain/docker,
client-api, identity/scripts/test_transfer, and identity/ts-tests pieces.

Excluded on purpose:
- #3998 (ws in parachain/scripts/ts-utils): dependabot's patch also drifts
  lockfile specifiers for @polkadot/{api,util,util-crypto}, prettier,
  ethers, tsx etc. away from package.json, breaking --frozen-lockfile.
  Leave for a clean regenerated patch.
- #4001's tee-worker/identity/client-sdk/{package.json,pnpm-lock.yaml}:
  same v6 -> v9 lockfile-format migration as before (~12k-line diff).
- #4001's tee-worker/omni-executor/contracts/aa/aa-demo-app/**:
  triggers contract-check, which still fails on the pre-existing
  anchor-syn 0.32.1 / rustc incompat.
- #4003: both target dirs (identity/client-sdk + aa-demo-app) are
  off-limits for the above reasons.
- #3992, #3999, #4000: cargo bumps under tee-worker/omni-executor (Rust).
- #4001 (parent bundle): partially absorbed here; remaining bits left
  for follow-up.

Each lockfile validated locally with `pnpm install --frozen-lockfile`.
@Kailai-Wang
Copy link
Copy Markdown
Collaborator

@dependabot rebase

@Kailai-Wang
Copy link
Copy Markdown
Collaborator

Closing — this cargo bundle contains multiple known-breaking majors that won't compile against the current workspace:

  • alloy 1.7.3 → 2.0.5 (major API rewrite)
  • anchor-client 0.32.1 → 1.0.2 (major)
  • der 0.7.10 → 0.8.0 (0.x major; RustCrypto formats)
  • hmac 0.12.1 → 0.13.0 (0.x major; digest API change)
  • similar-asserts 1.7.0 → 2.0.0 (major)

Cargo bundle PRs are all-or-nothing, so even though most entries are safe patch/minor bumps (bitflags, clap, tokio, uuid, reqwest, tower-http, etc.), the bundle as a whole can't land. Please regenerate as separate PRs or with the breaking-major crates in a dedicated group so the safe bumps can be reviewed independently.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 22, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/cargo/parachain/cargo-390cd149f1 branch May 22, 2026 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant