Bump Rust dependencies

Cargo.toml

@@ -5,6 +5,7 @@ resolver = "2"
 
 # Updated in the CI with a `sed` command
 package.version = "0.6.1"
+
 package.license = "Apache-2.0"
 package.authors = ["Quentin Gliech <quenting@element.io>"]
 package.edition = "2021"
@@ -46,7 +47,7 @@ version = "0.8.5"
 
 # Serialization and deserialization
 [workspace.dependencies.serde]
-version = "1.0.192"
+version = "1.0.193"
 features = ["derive"] # Most of the time, if we need serde, we need derive
 
 # JSON serialization and deserialization
@@ -75,7 +76,7 @@ default-features = false
 
 # URL manipulation
 [workspace.dependencies.url]
-version = "2.4.1"
+version = "2.5.0"
 features = ["serde"]
 
 # ULID support

crates/axum-utils/Cargo.toml

@@ -12,12 +12,12 @@ async-trait = "0.1.74"
 axum = { version = "0.6.20", features = ["headers"] }
 axum-extra = { version = "0.8.0", features = ["cookie-private", "cookie-key-expansion"] }
 chrono.workspace = true
-data-encoding = "2.4.0"
-futures-util = "0.3.28"
+data-encoding = "2.5.0"
+futures-util = "0.3.29"
 headers = "0.3.9"
 http.workspace = true
 http-body = "0.4.5"
-icu_locid = "1.3.2"
+icu_locid = "1.4.0"
 mime = "0.3.17"
 rand.workspace = true
 sentry = { version = "0.31.8", default-features = false }

crates/cli/Cargo.toml

@@ -20,10 +20,10 @@ itertools = "0.11.0"
 listenfd = "1.0.1"
 rand.workspace = true
 rand_chacha = "0.3.1"
-rustls = "0.21.8"
+rustls = "0.21.9"
 serde_json.workspace = true
-serde_yaml = "0.9.25"
-sqlx = { version = "0.7.2", features = ["runtime-tokio-rustls", "postgres"] }
+serde_yaml = "0.9.27"
+sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres"] }
 tokio = { version = "1.34.0", features = ["full"] }
 tower = "0.4.13"
 tower-http = { version = "0.4.4", features = ["fs"] }
@@ -45,8 +45,8 @@ opentelemetry_sdk = { version = "0.21.1", features = ["trace", "metrics", "rt-to
 opentelemetry-zipkin = { version = "0.19.0", default-features = false }
 prometheus = "0.13.3"
 sentry = { version = "0.31.8", default-features = false, features = ["backtrace", "contexts", "panic", "tower"] }
-sentry-tracing = "0.31.7"
-sentry-tower = { version = "0.31.7", features = ["http"] }
+sentry-tracing = "0.31.8"
+sentry-tower = { version = "0.31.8", features = ["http"] }
 
 mas-config = { path = "../config" }
 mas-data-model = { path = "../data-model" }

crates/config/Cargo.toml

@@ -17,7 +17,7 @@ anyhow.workspace = true
 
 camino = { workspace = true, features = ["serde1"] }
 chrono.workspace = true
-figment = { version = "0.10.11", features = ["env", "yaml", "test"] }
+figment = { version = "0.10.12", features = ["env", "yaml", "test"] }
 ipnetwork = { version = "0.20.0", features = ["serde", "schemars"] }
 schemars = { version = "0.8.16", features = ["url", "chrono"] }
 ulid.workspace = true

crates/email/Cargo.toml

@@ -16,6 +16,6 @@ headers = "0.3.9"
 mas-templates = { path = "../templates" }
 
 [dependencies.lettre]
-version = "0.11.1"
+version = "0.11.2"
 default-features = false
 features = ["tokio1-rustls-tls", "hostname", "builder", "tracing", "pool", "smtp-transport", "sendmail-transport"]

crates/graphql/Cargo.toml

@@ -9,10 +9,10 @@ repository.workspace = true
 
 [dependencies]
 anyhow.workspace = true
-async-graphql = { version = "6.0.10", features = ["chrono", "url"] }
+async-graphql = { version = "6.0.11", features = ["chrono", "url"] }
 async-trait = "0.1.74"
 chrono.workspace = true
-lettre = { version = "0.11.1", default-features = false  }
+lettre = { version = "0.11.2", default-features = false  }
 serde.workspace = true
 thiserror.workspace = true
 tokio = { version = "1.34.0", features = ["sync"] }

crates/handlers/Cargo.toml

@@ -10,7 +10,7 @@ repository.workspace = true
 [dependencies]
 # Async runtime
 tokio = { version = "1.34.0", features = ["macros"] }
-futures-util = "0.3.28"
+futures-util = "0.3.29"
 
 # Logging and tracing
 tracing.workspace = true
@@ -30,13 +30,13 @@ axum = "0.6.20"
 axum-macros = "0.3.8"
 axum-extra = { version = "0.8.0", features = ["cookie-private"] }
 
-async-graphql = { version = "6.0.10", features = ["tracing", "apollo_tracing"] }
+async-graphql = { version = "6.0.11", features = ["tracing", "apollo_tracing"] }
 
 # Emails
-lettre = { version = "0.11.1", default-features = false, features = ["builder"] }
+lettre = { version = "0.11.2", default-features = false, features = ["builder"] }
 
 # Database access
-sqlx = { version = "0.7.2", features = ["runtime-tokio-rustls", "postgres"] }
+sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres"] }
 
 # Various structure (de)serialization
 serde.workspace = true
@@ -54,7 +54,7 @@ zeroize = "1.7.0"
 base64ct = "1.6.0"
 camino.workspace = true
 chrono.workspace = true
-psl = "2.1.4"
+psl = "2.1.12"
 time = "0.3.30"
 url.workspace = true
 mime = "0.3.17"

crates/http/Cargo.toml

@@ -10,15 +10,15 @@ repository.workspace = true
 [dependencies]
 axum = { version = "0.6.20", optional = true }
 bytes = "1.5.0"
-futures-util = "0.3.28"
+futures-util = "0.3.29"
 headers = "0.3.9"
 http.workspace = true
 http-body = "0.4.5"
 hyper = "0.14.27"
-hyper-rustls = { version = "0.24.1", features = ["http1", "http2"], default-features = false, optional = true }
+hyper-rustls = { version = "0.24.2", features = ["http1", "http2"], default-features = false, optional = true }
 once_cell = "1.18.0"
 opentelemetry.workspace = true
-rustls = { version = "0.21.8", optional = true }
+rustls = { version = "0.21.9", optional = true }
 rustls-native-certs = { version = "0.6.3", optional = true }
 serde.workspace = true
 serde_json.workspace = true
@@ -29,7 +29,7 @@ tower = { version = "0.4.13", features = [] }
 tower-http = { version = "0.4.4", features = ["cors"] }
 tracing.workspace = true
 tracing-opentelemetry.workspace = true
-webpki-roots = { version = "0.25.2", optional = true }
+webpki-roots = { version = "0.25.3", optional = true }
 
 mas-tower = { path = "../tower" }
 

crates/i18n/Cargo.toml

@@ -9,16 +9,16 @@ repository.workspace = true
 
 [dependencies]
 camino.workspace = true
-icu_list = { version = "1.3.2", features = ["compiled_data", "std"] }
-icu_locid = { version = "1.3.2", features = ["std",] }
-icu_locid_transform = { version = "1.3.2", features = ["compiled_data", "std"] }
-icu_plurals = { version = "1.3.2", features = ["compiled_data", "std"] }
-icu_provider = { version = "1.3.2", features = ["std", "sync"] }
-icu_provider_adapters = { version = "1.3.2", features = ["std"] }
+icu_list = { version = "1.4.0", features = ["compiled_data", "std"] }
+icu_locid = { version = "1.4.0", features = ["std",] }
+icu_locid_transform = { version = "1.4.0", features = ["compiled_data", "std"] }
+icu_plurals = { version = "1.4.0", features = ["compiled_data", "std"] }
+icu_provider = { version = "1.4.0", features = ["std", "sync"] }
+icu_provider_adapters = { version = "1.4.0", features = ["std"] }
 pad = "0.1.6"
 pest = "2.7.5"
-pest_derive = "2.7.4"
+pest_derive = "2.7.5"
 serde.workspace = true
 serde_json.workspace = true
 thiserror.workspace = true
-writeable = "0.5.3"
+writeable = "0.5.4"

crates/iana-codegen/Cargo.toml

@@ -13,7 +13,7 @@ async-trait = "0.1.74"
 camino.workspace = true
 convert_case = "0.6.0"
 csv = "1.3.0"
-futures-util = "0.3.28"
+futures-util = "0.3.29"
 hyper = { version = "0.14.27", features = ["tcp", "client", "http1"] }
 serde.workspace = true
 tokio = { version = "1.34.0", features = ["macros", "rt-multi-thread", "fs", "io-util"] }

crates/jose/Cargo.toml

@@ -12,21 +12,21 @@ base64ct = { version = "1.6.0", features = ["std"] }
 chrono.workspace = true
 digest = "0.10.7"
 ecdsa = { version = "0.16.9", features = ["signing", "verifying"] }
-elliptic-curve = "0.13.6"
+elliptic-curve = "0.13.8"
 generic-array = "0.14.7"
 hmac = "0.12.1"
-k256 = { version = "0.13.1", features = ["ecdsa"] }
+k256 = { version = "0.13.2", features = ["ecdsa"] }
 p256 = { version = "0.13.2", features = ["ecdsa"] }
 p384 = { version = "0.13.0", features = ["ecdsa"] }
 rand.workspace = true
-rsa = "0.9.2"
+rsa = "0.9.4"
 schemars = "0.8.16"
 sec1 = "0.7.3"
 serde.workspace = true
 serde_json.workspace = true
 serde_with = "3.4.0"
 sha2 = { version = "0.10.8", features = ["oid"] }
-signature = "2.1.0"
+signature = "2.2.0"
 thiserror.workspace = true
 tracing.workspace = true
 url.workspace = true

crates/keystore/Cargo.toml

@@ -12,15 +12,15 @@ aead = { version = "0.5.2", features = ["std"] }
 const-oid = { version = "0.9.5", features = ["std"] }
 der = { version = "0.7.8", features = ["std"] }
 ecdsa = { version = "0.16.9", features = ["std"] }
-elliptic-curve = { version = "0.13.6", features = ["std", "pem", "sec1"] }
-k256 = { version = "0.13.1", features = ["std"] }
+elliptic-curve = { version = "0.13.8", features = ["std", "pem", "sec1"] }
+k256 = { version = "0.13.2", features = ["std"] }
 p256 = { version = "0.13.2", features = ["std"] }
 p384 = { version = "0.13.0", features = ["std"] }
 pem-rfc7468 = { version = "0.7.0", features = ["std"] }
 pkcs1 = { version = "0.7.5", features = ["std"] }
 pkcs8 = { version = "0.10.2", features = ["std", "pkcs5", "encryption"] }
 rand.workspace = true
-rsa = { version = "0.9.2", features = ["std", "pem"] }
+rsa = { version = "0.9.4", features = ["std", "pem"] }
 sec1 = { version = "0.7.3", features = ["std"] }
 spki = { version = "0.7.2", features = ["std"] }
 thiserror.workspace = true

crates/listener/Cargo.toml

@@ -9,7 +9,7 @@ repository.workspace = true
 
 [dependencies]
 bytes = "1.5.0"
-futures-util = "0.3.28"
+futures-util = "0.3.29"
 http-body = "0.4.5"
 hyper = { version = "0.14.27", features = ["server", "http1", "http2", "tcp"] }
 pin-project-lite = "0.2.13"

crates/oauth2-types/Cargo.toml

@@ -17,7 +17,7 @@ parse-display = "0.8.2"
 serde_with = { version = "3.4.0", features = ["chrono"] }
 chrono.workspace = true
 sha2 = "0.10.8"
-data-encoding = "2.4.0"
+data-encoding = "2.5.0"
 thiserror.workspace = true
 
 mas-iana = { path = "../iana" }

crates/oidc-client/Cargo.toml

@@ -23,9 +23,9 @@ keystore = ["dep:mas-keystore"]
 base64ct = { version = "1.6.0", features = ["std"] }
 bytes = "1.5.0"
 chrono.workspace = true
-form_urlencoded = "1.2.0"
-futures = "0.3.28"
-futures-util = "0.3.28"
+form_urlencoded = "1.2.1"
+futures = "0.3.29"
+futures-util = "0.3.29"
 headers = "0.3.9"
 http.workspace = true
 language-tags = "0.3.2"
@@ -50,9 +50,9 @@ oauth2-types = { path = "../oauth2-types" }
 
 # Default http service
 http-body = { version = "0.4.5", optional = true }
-rustls = {version = "0.21.8", optional = true }
+rustls = {version = "0.21.9", optional = true }
 [dependencies.hyper-rustls]
-version = "0.24.1"
+version = "0.24.2"
 features = ["http1", "http2", "rustls-native-certs"]
 default-features = false
 optional = true
@@ -70,4 +70,4 @@ assert_matches = "1.5.0"
 bitflags = "2.4.1"
 mas-keystore = { path = "../keystore" }
 rand_chacha = "0.3.1"
-wiremock = "0.5.19"
+wiremock = "0.5.21"

crates/policy/Cargo.toml

@@ -16,7 +16,7 @@ schemars = {version = "0.8.16", optional = true }
 thiserror.workspace = true
 tokio = { version = "1.34.0", features = ["io-util", "rt"] }
 tracing.workspace = true
-wasmtime = { version = "14.0.1", default-features = false, features = ["async", "cranelift"] }
+wasmtime = { version = "15.0.0", default-features = false, features = ["async", "cranelift"] }
 
 mas-data-model = { path = "../data-model" }
 oauth2-types = { path = "../oauth2-types" }

crates/storage-pg/Cargo.toml

@@ -9,20 +9,20 @@ repository.workspace = true
 
 [dependencies]
 async-trait = "0.1.74"
-sqlx = { version = "0.7.2", features = ["runtime-tokio-rustls", "postgres", "migrate", "chrono", "json", "uuid", "ipnetwork"] }
-sea-query = { version = "0.30.2", features = ["derive", "attr", "with-uuid", "with-chrono", "postgres-array"] }
+sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres", "migrate", "chrono", "json", "uuid", "ipnetwork"] }
+sea-query = { version = "0.30.3", features = ["derive", "attr", "with-uuid", "with-chrono", "postgres-array"] }
 sea-query-binder = { version = "0.5.0", features = ["sqlx-postgres", "with-uuid", "with-chrono", "postgres-array"] }
 chrono.workspace = true
 serde.workspace = true
 serde_json.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
-futures-util = "0.3.28"
+futures-util = "0.3.29"
 
 rand.workspace = true
 rand_chacha = "0.3.1"
 url.workspace = true
-uuid = "1.5.0"
+uuid = "1.6.1"
 ulid = { workspace = true, features = ["uuid"] }
 
 oauth2-types = { path = "../oauth2-types" }

crates/storage/Cargo.toml

@@ -11,9 +11,9 @@ repository.workspace = true
 async-trait = "0.1.74"
 chrono.workspace = true
 thiserror.workspace = true
-futures-util = "0.3.28"
+futures-util = "0.3.29"
 
-apalis-core = { version = "0.4.6", features = ["tokio-comp"] }
+apalis-core = { version = "0.4.7", features = ["tokio-comp"] }
 opentelemetry.workspace = true
 rand_core = "0.6.4"
 serde.workspace = true

crates/tasks/Cargo.toml

@@ -9,8 +9,8 @@ repository.workspace = true
 
 [dependencies]
 anyhow.workspace = true
-apalis-core = { version = "0.4.6", features = ["extensions", "tokio-comp", "storage"] }
-apalis-cron = "0.4.6"
+apalis-core = { version = "0.4.7", features = ["extensions", "tokio-comp", "storage"] }
+apalis-cron = "0.4.7"
 async-stream = "0.3.5"
 async-trait = "0.1.74"
 chrono.workspace = true
@@ -18,7 +18,7 @@ event-listener = "3.1.0"
 futures-lite = "2.0.1"
 rand.workspace = true
 rand_chacha = "0.3.1"
-sqlx = { version = "0.7.2", features = ["runtime-tokio-rustls", "postgres"] }
+sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres"] }
 thiserror.workspace = true
 tokio = { version = "1.34.0", features = ["rt"] }
 tower = "0.4.13"

deny.toml

@@ -56,7 +56,7 @@ deny = [
 multiple-versions = "deny"
 
 skip = [
-    { name = "webpki-roots", version = "0.24.0" }, # sqlx depends on an old version
+    { name = "memoffset", version = "0.7.1" }, # sqlx depends on this old version
     { name = "spin", version = "0.5.2" }, # lazy_static and ring depends on the old version
     { name = "event-listener", version = "2.5.3" }, # async-channel (wiremock) and sqlx-core depend on the old version
     { name = "regex-syntax", version = "0.6.29" }, # tracing-subscriber[env-filter] -> matchers depends on the old version
@@ -64,10 +64,10 @@ skip = [
     { name = "ordered-float", version = "2.10.0" }, # opentelemetry-jaeger -> thrift depends on the old version
     { name = "itertools", version = "0.10.5" }, # wasmtime & others depends on the old version
     { name = "bitflags", version = "1.3.2" }, # axum depends on an old version
+    { name = "hashbrown" }, # Too many versions :(
 ]
 
 skip-tree = [
-    { name = "hashbrown", depth = 2 }, # Too many versions :(
     # Let's ignore wiremock for now, we want to get rid of it
     { name = "wiremock", depth = 3 },
     { name = "darling", version = "0.14.4", depth = 2 }, # sea-query-attr depends on an old version