Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• [deps]: Update lint-staged to v16.1.6
• [deps]: Update Rust crate android_logger to v0.15.1
• [deps]: Update Rust crate clap to v4.5.47
• [deps]: Update Rust crate rustls to v0.23.31
• [deps]: Update Rust crate rustls-platform-verifier to v0.6.1
• [deps]: Update Rust crate serde_json to v1.0.143
• [deps]: Update Rust crate tokio-util to v0.7.16
• [deps]: Update Rust crate trybuild to v1.0.110
• [deps]: Update gh minor (Swatinem/rust-cache, actions/checkout, actions/download-artifact, actions/github-script, actions/setup-java, actions/setup-node, actions/upload-artifact, codecov/codecov-action, crazy-max/ghaction-import-gpg, github/codeql-action, gradle/actions, ncipollo/release-action)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• [deps]: Update actions/create-github-app-token digest to a8d6161
• [deps]: Update dtolnay/rust-toolchain digest to e97e2d8
• [deps]: Update Rust crate comfy-table to v7.2.0
• [deps]: Update Rust to v2025-09-09
• [deps]: Update actions/checkout action to v5
• [deps]: Update actions/setup-java action to v5
• [deps]: Update actions/upload-pages-artifact action to v4

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• [deps]: Update Rust crate uniffi to v0.29.4
• [deps]: Update Rust crate criterion to 0.7.0
• [deps]: Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• [deps]: Update Rust crate log to v0.4.28
• [deps]: Update Rust crate wasm-bindgen to v0.2.101
• [deps]: Update Rust crate wasm-bindgen-futures to v0.4.51
• [deps]: Update Rust crate wasm-bindgen-test to v0.3.51
• [deps]: Update actions/github-script action to v8
• [deps]: Update actions/setup-node action to v5

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [deps]: Update @openapitools/openapi-generator-cli to v2.23.1
• [deps]: Update prettier to v3.6.2
• [deps]: Update Rust crate darling to 0.21.0
• [deps]: Update Rust crate tokio to v1.47.1
• [deps]: Update rust Docker tag to v1.89
• [deps]: Update Rust to v1.89.0
• [deps]: Update actions/download-artifact action to v5
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• [deps]: Update Rust crate getrandom to >=0.2.9, <0.4
• [deps]: Update Rust crate rand to >=0.8.5, <0.10
• [deps]: Update Rust crate rand_chacha to v0.9.0
• [deps]: Update Rust crate generic-array to v1

Detected dependencies

cargo

bitwarden_license/bitwarden-sm/Cargo.toml

Cargo.toml

• async-trait >=0.1.80, <0.2
• chrono >=0.4.26, <0.5
• data-encoding >=2.0, <3
• ed25519-dalek >=2.1.1, <=2.2.0
• js-sys >=0.3.72, <0.4
• log >=0.4.18, <0.5
• proc-macro2 >=1.0.89, <2
• quote >=1.0.37, <2
• reqwest >=0.12.5, <0.13
• schemars >=1.0.0, <2.0
• serde >=1.0, <2.0
• serde_bytes >=0.11.17, <0.12.0
• serde_json >=1.0.96, <2.0
• serde_qs >=0.12.0, <0.16
• serde_repr >=0.1.12, <0.2
• serde-wasm-bindgen >=0.6.0, <0.7
• syn >=2.0.87, <3
• thiserror >=1.0.40, <3
• tokio 1.36.0
• tsify >=0.5.5, <0.6
• uniffi =0.29.1
• uuid >=1.3.3, <2.0
• validator >=0.18.1, <0.21
• wasm-bindgen >=0.2.91, <0.3
• wasm-bindgen-futures 0.4.41
• wasm-bindgen-test 0.3.45
• wiremock >=0.6.0, <0.7

crates/bitwarden-api-api/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-api-identity/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-auth/Cargo.toml

crates/bitwarden-cli/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• inquire 0.7.0
• supports-color 3.0.0

crates/bitwarden-collections/Cargo.toml

crates/bitwarden-core/Cargo.toml

• getrandom >=0.2.9, <0.3
• rand >=0.8.5, <0.9
• zeroize >=1.7.0, <2.0
• zxcvbn >=3.0.1, <4.0
• rand_chacha 0.3.1
• zeroize >=1.7.0, <2.0
• rustls 0.23.19
• rustls-platform-verifier 0.6.0

crates/bitwarden-crypto/Cargo.toml

• aes >=0.8.2, <0.9
• argon2 >=0.5.0, <0.6
• cbc >=0.1.2, <0.2
• chacha20poly1305 0.10.1
• ciborium >=0.2.2, <0.3
• coset >=0.3.8, <0.4
• generic-array >=0.14.7, <1.0
• hkdf >=0.12.3, <0.13
• hmac >=0.12.1, <0.13
• num-bigint >=0.4, <0.5
• num-traits >=0.2.15, <0.3
• pbkdf2 >=0.12.1, <0.13
• rand >=0.8.5, <0.9
• rand_chacha >=0.3.1, <0.4.0
• rayon >=1.8.1, <2.0
• rsa >=0.9.2, <0.10
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• subtle >=2.5.0, <3.0
• typenum >=1.18.0, <1.19.0
• zeroize >=1.7.0, <2.0
• zeroizing-alloc >=0.1.0, <0.2
• criterion 0.6.0
• rand_chacha 0.3.1

crates/bitwarden-encoding/Cargo.toml

• data-encoding-macro 0.1.18

crates/bitwarden-error-macro/Cargo.toml

• darling 0.20.10

crates/bitwarden-error/Cargo.toml

• trybuild 1.0.101

crates/bitwarden-exporters/Cargo.toml

• base64 >=0.22.1, <0.23
• credential-exchange-format >=0.3, <0.4
• csv 1.3.0
• num-traits >=0.2, <0.3

crates/bitwarden-fido/Cargo.toml

• base64 >=0.22.1, <0.23
• coset >=0.3.7, <0.4
• itertools >=0.13.0, <0.15
• p256 >=0.13.2, <0.14

crates/bitwarden-generators/Cargo.toml

• rand >=0.8.5, <0.9
• rand_chacha 0.3.1

crates/bitwarden-ipc/Cargo.toml

• erased-serde >=0.4.6, <0.5

crates/bitwarden-send/Cargo.toml

• base64 >=0.22.1, <0.23
• zeroize >=1.7.0, <2.0

crates/bitwarden-ssh/Cargo.toml

• ed25519 >=2.2.3, <3.0
• pem-rfc7468 0.7.0
• pkcs8 >=0.10.2, <0.11
• rand >=0.8.5, <0.9
• rsa >=0.9.2, <0.10
• ssh-key >=0.6.7, <0.7
• rand_chacha 0.3.1

crates/bitwarden-state/Cargo.toml

• indexed-db >=0.4.2, <0.5
• rusqlite >=0.37.0, <0.38

crates/bitwarden-test/Cargo.toml

crates/bitwarden-threading/Cargo.toml

• tokio-util 0.7.15
• console_error_panic_hook 0.1.7
• tokio-test 0.4.4
• gloo-timers 0.3.0

crates/bitwarden-uniffi-error/Cargo.toml

• anyhow >=1.0, <2.0

crates/bitwarden-uniffi/Cargo.toml

• env_logger 0.11.1
• android_logger 0.15
• jni >=0.21, <0.22
• libloading >=0.8.1, <0.9
• rustls-platform-verifier 0.6.0
• oslog 0.2.0

crates/bitwarden-uuid-macro/Cargo.toml

crates/bitwarden-uuid/Cargo.toml

crates/bitwarden-vault/Cargo.toml

• base64 >=0.22.1, <0.23
• hmac >=0.12.1, <0.13
• percent-encoding >=2.1, <3.0
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11

crates/bitwarden-wasm-internal/Cargo.toml

• console_error_panic_hook 0.1.7
• console_log 1.0.0
• log 0.4.20
• wasm-bindgen =0.2.100
• wasm-bindgen-futures 0.4.41

crates/bw/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• env_logger 0.11.1
• inquire 0.7.0
• log 0.4.20

crates/memory-testing/Cargo.toml

• comfy-table 7.1.1
• hex 0.4.3
• serde 1.0.196
• serde_json 1.0.113
• zeroize 1.7.0

crates/uniffi-bindgen/Cargo.toml

dockerfile

crates/memory-testing/Dockerfile

• rust 1.85-alpine
• alpine 3.22

github-actions

.github/workflows/build-android.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b
• actions/create-github-app-token v2.1.1@0f859bf9e69e887678d5bbfbee594437cb440ffe

.github/workflows/build-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/build-swift.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/build-wasm-internal.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/check-powerset.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/cloc.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/delete-old-packages.yml

• actions/delete-package-versions v5.0.0@e5bc658cc4c965c472efe991f8beea3981499c55

.github/workflows/direct-minimal-versions.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/enforce-labels.yml

• yogevbd/enforce-label-action 2.2.2@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024

.github/workflows/lint.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• github/codeql-action v3.28.8@dd746615b3b9d728a6a37ca2045b68ca76d4841a
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a

.github/workflows/memory-testing.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/minimum-rust-version.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/publish-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• chrnorm/deployment-action v2.0.7@55729fcebec3d284f60f5bcabbd8376437d696b1
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806

.github/workflows/publish-wasm-internal.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a

.github/workflows/release-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ncipollo/release-action v1.15.0@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87

.github/workflows/release-swift.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• ncipollo/release-action v1.15.0@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87

.github/workflows/rust-test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• codecov/codecov-action v5.3.1@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3

.github/workflows/rustdoc.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• actions/upload-pages-artifact v3.0.1@56afc609e74202658d3ffba0e8f6dda462b719fa
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/scan.yml

.github/workflows/version-bump.yml

• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

npm

crates/bitwarden-wasm-internal/npm/package.json

• type-fest ^4.41.0
• typescript 5.9.2

package.json

• @openapitools/openapi-generator-cli 2.20.2
• husky 9.1.7
• lint-staged 16.1.5
• prettier 3.5.3

regex

rust-toolchain.toml

• rust 1.87.0

rust-toolchain.toml

• rust-nightly 2025-08-18

---

• Check this box to trigger a request for Renovate to run again on this repository