Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [deps]: Update dtolnay/rust-toolchain digest to a54c7af
• [deps]: Update Rust crate env_logger to v0.11.6
• [deps]: Update Rust crate serde_json to v1.0.134
• [deps]: Update Rust crate syn to v2.0.91
• [deps]: Update gh minor (actions/setup-java, actions/upload-artifact, checkmarx/ast-github-action, codecov/codecov-action, github/codeql-action, gradle/actions)
• [deps]: Update Rust crate generic-array to v1
• [deps]: Update Rust crate thiserror to v2
• [deps]: Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

cargo

Cargo.toml

• chrono >=0.4.26, <0.5
• log 0.4.20
• reqwest >=0.12.5, <0.13
• schemars >=0.8.9, <0.9
• serde >=1.0, <2.0
• serde_json >=1.0.96, <2.0
• serde_qs >=0.12.0, <0.14
• serde_repr >=0.1.12, <0.2
• thiserror >=1.0.40, <2.0
• tokio 1.36.0
• tsify-next >=0.5.4, <0.6
• uniffi =0.28.3
• uuid >=1.3.3, <2.0
• validator >=0.18.1, <0.20
• wasm-bindgen >=0.2.91, <0.3
• js-sys >=0.3.72, <0.4
• wasm-bindgen-futures 0.4.41

bitwarden_license/bitwarden-sm/Cargo.toml

crates/bitwarden-api-api/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-api-identity/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-cli/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• inquire 0.7.0
• supports-color 3.0.0

crates/bitwarden-core/Cargo.toml

• base64 >=0.22.1, <0.23
• getrandom >=0.2.9, <0.3
• hmac >=0.12.1, <0.13
• log >=0.4.18, <0.5
• rand >=0.8.5, <0.9
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• zeroize >=1.7.0, <2.0
• zxcvbn >=3.0.1, <4.0
• rand_chacha 0.3.1
• wiremock 0.6.0
• zeroize >=1.7.0, <2.0
• rustls 0.23.19
• rustls-platform-verifier 0.5.0

crates/bitwarden-crypto/Cargo.toml

• aes >=0.8.2, <0.9
• argon2 >=0.5.0, <0.6
• base64 >=0.22.1, <0.23
• cbc >=0.1.2, <0.2
• generic-array >=0.14.7, <1.0
• hkdf >=0.12.3, <0.13
• hmac >=0.12.1, <0.13
• num-bigint >=0.4, <0.5
• num-traits >=0.2.15, <0.3
• pbkdf2 >=0.12.1, <0.13
• rand >=0.8.5, <0.9
• rayon >=1.8.1, <2.0
• rsa >=0.9.2, <0.10
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• subtle >=2.5.0, <3.0
• zeroize >=1.7.0, <2.0
• zeroizing-alloc >=0.1.0, <0.2
• criterion 0.5.1
• rand_chacha 0.3.1

crates/bitwarden-error-macro/Cargo.toml

• darling 0.20.10
• proc-macro2 1.0.89
• quote 1.0.37
• syn 2.0.87

crates/bitwarden-error/Cargo.toml

• trybuild 1.0.101
• wasm-bindgen-test 0.3.45

crates/bitwarden-exporters/Cargo.toml

• base64 >=0.22.1, <0.23
• csv 1.3.0
• rand >=0.8.5, <0.9

crates/bitwarden-fido/Cargo.toml

• async-trait >=0.1.80, <0.2
• base64 >=0.22.1, <0.23
• coset 0.3.7
• itertools 0.13.0
• log >=0.4.18, <0.5
• p256 >=0.13.2, <0.14

crates/bitwarden-generators/Cargo.toml

• rand >=0.8.5, <0.9
• rand_chacha 0.3.1
• wiremock 0.6.0

crates/bitwarden-send/Cargo.toml

• base64 >=0.22.1, <0.23
• zeroize >=1.7.0, <2.0

crates/bitwarden-ssh/Cargo.toml

• ed25519 >=2.2.3, <3.0
• pem-rfc7468 0.7.0
• pkcs8 >=0.10.2, <0.11
• rand >=0.8.5, <0.9
• rsa >=0.9.2, <0.10
• ssh-key >=0.6.7, <0.7
• rand_chacha 0.3.1

crates/bitwarden-uniffi/Cargo.toml

• async-trait 0.1.80
• env_logger 0.11.1
• android_logger 0.14
• jni >=0.21, <0.22
• libloading >=0.8.1, <0.9
• rustls-platform-verifier 0.5.0
• oslog 0.2.0

crates/bitwarden-vault/Cargo.toml

• base64 >=0.22.1, <0.23
• hmac >=0.12.1, <0.13
• rand >=0.8.5, <0.9
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• uniffi =0.28.3

crates/bitwarden-wasm-internal/Cargo.toml

• console_error_panic_hook 0.1.7
• console_log 1.0.0
• js-sys 0.3.68
• log 0.4.20
• serde_json >=1.0.96, <2.0
• wasm-bindgen =0.2.99
• wasm-bindgen-futures 0.4.41

crates/bw/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• env_logger 0.11.1
• inquire 0.7.0
• log 0.4.20
• tempfile 3.10.0

crates/memory-testing/Cargo.toml

• comfy-table 7.1.1
• hex 0.4.3
• serde 1.0.196
• serde_json 1.0.113
• zeroize 1.7.0

crates/uniffi-bindgen/Cargo.toml

dockerfile

crates/memory-testing/Dockerfile

• rust 1.83

github-actions

.github/workflows/build-android.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/setup-java v4.5.0@8df1039502a15bceb9433410b1a100fbe190c53b
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• gradle/actions v4.2.1@cc4fc85e6b35bafd578d5ffbc76a5518407e1af0

.github/workflows/build-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/build-swift.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/build-wasm-internal.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/check-powerset.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/cloc.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/delete-old-packages.yml

• actions/delete-package-versions v5.0.0@e5bc658cc4c965c472efe991f8beea3981499c55

.github/workflows/direct-minimal-versions.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/enforce-labels.yml

• yogevbd/enforce-label-action 2.2.2@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024

.github/workflows/lint.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• github/codeql-action v3.27.6@aa578102511db1f4524ed59b8cc2bae4f6e88195
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af

.github/workflows/memory-testing.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/minimum-rust-version.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/publish-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• chrnorm/deployment-action v2.0.7@55729fcebec3d284f60f5bcabbd8376437d696b1
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806

.github/workflows/publish-wasm-internal.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.1.0@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf

.github/workflows/release-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ncipollo/release-action v1.14.0@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5

.github/workflows/release-swift.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• ncipollo/release-action v1.14.0@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5

.github/workflows/rust-test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• codecov/codecov-action v5.1.1@7f8b4b4bde536c465e797be725718b88c5d95e0e

.github/workflows/rustdoc.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• actions/upload-pages-artifact v3.0.1@56afc609e74202658d3ffba0e8f6dda462b719fa
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/scan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• checkmarx/ast-github-action 2.0.39@b74e8d514feae4ad5ad2b43e72590935bd2daf5f
• github/codeql-action v3.27.6@aa578102511db1f4524ed59b8cc2bae4f6e88195
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• sonarsource/sonarcloud-github-action v4.0.0@02ef91109b2d589e757aefcfb2854c2783fd7b19

.github/workflows/version-bump.yml

• dtolnay/rust-toolchain 315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

npm

crates/bitwarden-wasm-internal/npm/package.json

package.json

• @openapitools/openapi-generator-cli 2.15.3
• prettier 3.4.2

---

• Check this box to trigger a request for Renovate to run again on this repository