Bump Rust dependencies

.github/workflows/ci.yaml

@@ -29,7 +29,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.0.1
         with:
-          version: 0.51.0
+          version: 0.53.1
 
       - name: Lint policies
         working-directory: ./policies
@@ -182,14 +182,14 @@ jobs:
 
       - name: Install toolchain
         run: |
-          rustup toolchain install 1.69.0
+          rustup toolchain install 1.70.0
-          rustup default 1.69.0
+          rustup default 1.70.0
           rustup component add clippy
 
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.0.1
         with:
-          version: 0.51.0
+          version: 0.53.1
 
       - name: Compile OPA policies
         working-directory: ./policies
@@ -246,7 +246,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.0.1
         with:
-          version: 0.51.0
+          version: 0.53.1
 
       - name: Compile OPA policies
         working-directory: ./policies
@@ -308,7 +308,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.0.1
         with:
-          version: 0.51.0
+          version: 0.53.1
 
       - name: Compile OPA policies
         working-directory: ./policies
@@ -320,7 +320,7 @@ jobs:
       - name: Download grcov
         run: |
           mkdir -p "${HOME}/.local/bin"
-          curl -sL https://github.com/mozilla/grcov/releases/download/v0.8.13/grcov-x86_64-unknown-linux-gnu.tar.bz2 | tar jxf - -C "${HOME}/.local/bin"
+          curl -sL https://github.com/mozilla/grcov/releases/download/v0.8.18/grcov-x86_64-unknown-linux-gnu.tar.bz2 | tar jxf - -C "${HOME}/.local/bin"
           echo "$HOME/.local/bin" >> $GITHUB_PATH
 
       - name: Run test suite with profiling enabled

Dockerfile

@@ -12,14 +12,14 @@
 # The Debian version and version name must be in sync
 ARG DEBIAN_VERSION=11
 ARG DEBIAN_VERSION_NAME=bullseye
-ARG RUSTC_VERSION=1.69.0
+ARG RUSTC_VERSION=1.70.0
 # XXX: Upgrade to 0.10.0 blocked by https://github.com/ziglang/zig/issues/10915#issuecomment-1354548110
 ARG ZIG_VERSION=0.9.1
 ARG NODEJS_VERSION=18.16.0
-ARG OPA_VERSION=0.51.0
+ARG OPA_VERSION=0.53.1
 ARG CARGO_AUDITABLE_VERSION=0.6.1
-ARG CARGO_CHEF_VERSION=0.1.59
+ARG CARGO_CHEF_VERSION=0.1.61
-ARG CARGO_ZIGBUILD_VERSION=0.16.7
+ARG CARGO_ZIGBUILD_VERSION=0.16.10
 
 ##########################################
 ## Build stage that builds the frontend ##

crates/axum-utils/Cargo.toml

@@ -9,7 +9,7 @@ license = "Apache-2.0"
 async-trait = "0.1.68"
 axum = { version = "0.6.18", features = ["headers"] }
 axum-extra = { version = "0.7.4", features = ["cookie-private"] }
-chrono = "0.4.24"
+chrono = "0.4.26"
 data-encoding = "2.4.0"
 futures-util = "0.3.28"
 headers = "0.3.8"
@@ -18,15 +18,15 @@ http-body = "0.4.5"
 mime = "0.3.17"
 rand = "0.8.5"
 sentry = { version = "0.31.3", default-features = false }
-serde = "1.0.163"
+serde = "1.0.164"
 serde_with = "3.0.0"
 serde_urlencoded = "0.7.1"
 serde_json = "1.0.96"
 thiserror = "1.0.40"
-tokio = "1.28.1"
+tokio = "1.28.2"
 tower = { version = "0.4.13", features = ["util"] }
 tracing = "0.1.37"
-url = "2.3.1"
+url = "2.4.0"
 ulid = { version = "1.0.0", features = ["serde"] }
 
 mas-data-model = { path = "../data-model" }

crates/cli/Cargo.toml

@@ -6,12 +6,12 @@ edition = "2021"
 license = "Apache-2.0"
 
 [dependencies]
-apalis-core = "=0.4.0"
+apalis-core = "0.4.2"
 anyhow = "1.0.71"
 atty = "0.2.14"
 axum = "0.6.18"
 camino = "1.1.4"
-clap = { version = "4.3.0", features = ["derive"] }
+clap = { version = "4.3.3", features = ["derive"] }
 dotenv = "0.15.0"
 hyper = { version = "0.14.26", features = ["full"] }
 itertools = "0.10.5"
@@ -22,10 +22,10 @@ rustls = "0.21.1"
 serde_json = "1.0.96"
 serde_yaml = "0.9.21"
 sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres"] }
-tokio = { version = "1.28.1", features = ["full"] }
+tokio = { version = "1.28.2", features = ["full"] }
 tower = { version = "0.4.13", features = ["full"] }
 tower-http = { version = "0.4.0", features = ["fs", "compression-full"] }
-url = "2.3.1"
+url = "2.4.0"
 watchman_client = "0.8.0"
 zeroize = "1.6.0"
 

crates/config/Cargo.toml

@@ -6,7 +6,7 @@ edition = "2021"
 license = "Apache-2.0"
 
 [dependencies]
-tokio = { version = "1.28.1", features = ["fs", "rt"] }
+tokio = { version = "1.28.2", features = ["fs", "rt"] }
 tracing = "0.1.37"
 async-trait = "0.1.68"
 
@@ -14,13 +14,13 @@ thiserror = "1.0.40"
 anyhow = "1.0.71"
 
 camino = { version = "1.1.4", features = ["serde1"] }
-chrono = { version = "0.4.24", features = ["serde"] }
+chrono = { version = "0.4.26", features = ["serde"] }
-figment = { version = "0.10.9", features = ["env", "yaml", "test"] }
+figment = { version = "0.10.10", features = ["env", "yaml", "test"] }
 schemars = { version = "0.8.12", features = ["url", "chrono"] }
 ulid = { version = "1.0.0", features = ["serde"] }
-url = { version = "2.3.1", features = ["serde"] }
+url = { version = "2.4.0", features = ["serde"] }
 
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_with = { version = "3.0.0", features = ["hex", "chrono"] }
 serde_json = "1.0.96"
 

crates/data-model/Cargo.toml

@@ -6,10 +6,10 @@ edition = "2021"
 license = "Apache-2.0"
 
 [dependencies]
-chrono = "0.4.24"
+chrono = "0.4.26"
 thiserror = "1.0.40"
-serde = "1.0.163"
+serde = "1.0.164"
-url = { version = "2.3.1", features = ["serde"] }
+url = { version = "2.4.0", features = ["serde"] }
 crc = "3.0.1"
 ulid = { version = "1.0.0", features = ["serde"] }
 rand = "0.8.5"

crates/email/Cargo.toml

@@ -11,7 +11,7 @@ tracing = "0.1.37"
 thiserror = "1.0.40"
 headers = "0.3.8"
 
-aws-sdk-sesv2 = { version = "0.27.0", default-features = false }
+aws-sdk-sesv2 = { version = "0.28.0", default-features = false }
 aws-config = { version = "0.55.3", default-features = false }
 aws-smithy-client = { version = "0.55.3", default-features = false, features = ["client-hyper"] }
 aws-smithy-async = { version = "0.55.3", default-features = false, features = ["rt-tokio"] }

crates/graphql/Cargo.toml

@@ -7,16 +7,16 @@ license = "Apache-2.0"
 
 [dependencies]
 anyhow = "1.0.71"
-async-graphql = { version = "5.0.9", features = ["chrono", "url"] }
+async-graphql = { version = "5.0.10", features = ["chrono", "url"] }
 async-trait = "0.1.68"
-chrono = "0.4.24"
+chrono = "0.4.26"
 lettre = { version = "0.10.4", default-features = false  }
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 thiserror = "1.0.40"
-tokio = { version = "1.28.1", features = ["sync"] }
+tokio = { version = "1.28.2", features = ["sync"] }
 tracing = "0.1.37"
 ulid = "1.0.0"
-url = "2.3.1"
+url = "2.4.0"
 
 oauth2-types = { path = "../oauth2-types" }
 mas-data-model = { path = "../data-model" }

crates/handlers/Cargo.toml

@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 # Async runtime
-tokio = { version = "1.28.1", features = ["macros"] }
+tokio = { version = "1.28.2", features = ["macros"] }
 futures-util = "0.3.28"
 
 # Logging and tracing
@@ -26,7 +26,7 @@ axum = "0.6.18"
 axum-macros = "0.3.7"
 axum-extra = { version = "0.7.4", features = ["cookie-private"] }
 
-async-graphql = { version = "5.0.9", features = ["tracing", "apollo_tracing"] }
+async-graphql = { version = "5.0.10", features = ["tracing", "apollo_tracing"] }
 
 # Emails
 lettre = { version = "0.10.4", default-features = false, features = ["builder"] }
@@ -35,7 +35,7 @@ lettre = { version = "0.10.4", default-features = false, features = ["builder"]
 sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres"] }
 
 # Various structure (de)serialization
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_with = { version = "3.0.0", features = ["hex", "chrono"] }
 serde_json = "1.0.96"
 serde_urlencoded = "0.7.1"
@@ -48,9 +48,9 @@ zeroize = "1.6.0"
 
 # Various data types and utilities
 camino = "1.1.4"
-chrono = { version = "0.4.24", features = ["serde"] }
+chrono = { version = "0.4.26", features = ["serde"] }
-time = "0.3.21"
+time = "0.3.22"
-url = { version = "2.3.1", features = ["serde"] }
+url = { version = "2.4.0", features = ["serde"] }
 mime = "0.3.17"
 rand = "0.8.5"
 rand_chacha = "0.3.1"

crates/handlers/src/lib.rs

@@ -1,4 +1,4 @@
-// Copyright 2021, 2022 The Matrix.org Foundation C.I.C.
+// Copyright 2021-2023 The Matrix.org Foundation C.I.C.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -25,6 +25,9 @@
     clippy::unused_async,
     // Because of how axum handlers work, we sometime have take many arguments
     clippy::too_many_arguments,
+    // Code generated by tracing::instrument trigger this when returning an `impl Trait`
+    // See https://github.com/tokio-rs/tracing/issues/2613
+    clippy::let_with_type_underscore,
 )]
 
 use std::{convert::Infallible, sync::Arc, time::Duration};

crates/http/Cargo.toml

@@ -16,28 +16,28 @@ http = "0.2.9"
 http-body = "0.4.5"
 hyper = "0.14.26"
 hyper-rustls = { version = "0.24.0", features = ["http1", "http2"], default-features = false, optional = true }
-once_cell = "1.17.1"
+once_cell = "1.18.0"
 opentelemetry = "0.19.0"
 rustls = { version = "0.21.1", optional = true }
 rustls-native-certs = { version = "0.6.2", optional = true }
-serde = "1.0.163"
+serde = "1.0.164"
 serde_json = "1.0.96"
 serde_urlencoded = "0.7.1"
 thiserror = "1.0.40"
-tokio = { version = "1.28.1", features = ["sync", "parking_lot"], optional = true }
+tokio = { version = "1.28.2", features = ["sync", "parking_lot"], optional = true }
 tower = { version = "0.4.13", features = [] }
 tower-http = { version = "0.4.0", features = ["cors"] }
 tracing = "0.1.37"
 tracing-opentelemetry = "0.19.0"
 webpki = { version = "0.22.0", optional = true }
-webpki-roots = { version = "0.23.0", optional = true }
+webpki-roots = { version = "0.23.1", optional = true }
 
 mas-tower = { path = "../tower" }
 
 [dev-dependencies]
 anyhow = "1.0.71"
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
-tokio = { version = "1.28.1", features = ["macros", "rt"] }
+tokio = { version = "1.28.2", features = ["macros", "rt"] }
 tower = { version = "0.4.13", features = ["util"] }
 
 [features]

crates/iana-codegen/Cargo.toml

@@ -10,10 +10,10 @@ anyhow = "1.0.71"
 async-trait = "0.1.68"
 camino = "1.1.4"
 convert_case = "0.6.0"
-csv = "1.2.1"
+csv = "1.2.2"
 futures-util = "0.3.28"
 hyper = { version = "0.14.26", features = ["tcp", "client", "http1"] }
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
-tokio = { version = "1.28.1", features = ["macros", "rt-multi-thread", "fs", "io-util"] }
+tokio = { version = "1.28.2", features = ["macros", "rt-multi-thread", "fs", "io-util"] }
 tracing = "0.1.37"
 tracing-subscriber = "0.3.17"

crates/iana/Cargo.toml

@@ -6,7 +6,7 @@ edition = "2021"
 license = "Apache-2.0"
 
 [dependencies]
-serde = { version = "1.0.163", optional = true }
+serde = { version = "1.0.164", optional = true }
 schemars = { version = "0.8.12", default-features = false, optional = true }
 
 [features]

crates/jose/Cargo.toml

@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 base64ct = { version = "1.6.0", features = ["std"] }
-chrono = { version = "0.4.24", features = ["serde"] }
+chrono = { version = "0.4.26", features = ["serde"] }
 digest = "0.10.7"
 ecdsa = { version = "0.16.7", features = ["signing", "verifying"] }
 elliptic-curve = "0.13.5"
@@ -20,14 +20,14 @@ rand = "0.8.5"
 rsa = "0.9.2"
 schemars = "0.8.12"
 sec1 = "0.7.2"
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_json = "1.0.96"
 serde_with = { version = "3.0.0", features = ["base64"] }
 sha2 = { version = "0.10.6", features = ["oid"] }
 signature = "2.1.0"
 thiserror = "1.0.40"
 tracing = "0.1.37"
-url = { version = "2.3.1", features = ["serde"] }
+url = { version = "2.4.0", features = ["serde"] }
 
 mas-iana = { path = "../iana" }
 

crates/listener/Cargo.toml

@@ -12,17 +12,17 @@ http-body = "0.4.5"
 hyper = { version = "0.14.26", features = ["server", "http1", "http2", "tcp"] }
 pin-project-lite = "0.2.9"
 thiserror = "1.0.40"
-tokio = { version = "1.28.1", features = ["net", "rt", "macros", "signal", "time"] }
+tokio = { version = "1.28.2", features = ["net", "rt", "macros", "signal", "time"] }
-tokio-rustls = "0.24.0"
+tokio-rustls = "0.24.1"
 tower-http = { version = "0.4.0", features = ["add-extension"] }
 tower-service = "0.3.2"
 tracing = "0.1.37"
-libc = "0.2.144"
+libc = "0.2.146"
 
 [dev-dependencies]
 anyhow = "1.0.71"
 rustls-pemfile = "1.0.2"
-tokio = { version = "1.28.1", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
+tokio = { version = "1.28.2", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
 tokio-test = "0.4.2"
 tracing-subscriber = "0.3.17"
 

crates/oauth2-types/Cargo.toml

@@ -7,14 +7,14 @@ license = "Apache-2.0"
 
 [dependencies]
 http = "0.2.9"
-serde = "1.0.163"
+serde = "1.0.164"
 serde_json = "1.0.96"
 language-tags = { version = "0.3.2", features = ["serde"] }
-url = { version = "2.3.1", features = ["serde"] }
+url = { version = "2.4.0", features = ["serde"] }
-parse-display = "0.8.0"
+parse-display = "0.8.1"
 indoc = "2.0.1"
 serde_with = { version = "3.0.0", features = ["chrono"] }
-chrono = "0.4.24"
+chrono = "0.4.26"
 sha2 = "0.10.6"
 data-encoding = "2.4.0"
 thiserror = "1.0.40"

crates/oidc-client/Cargo.toml

@@ -20,25 +20,25 @@ keystore = ["dep:mas-keystore"]
 [dependencies]
 base64ct = { version = "1.6.0", features = ["std"] }
 bytes = "1.4.0"
-chrono = "0.4.24"
+chrono = "0.4.26"
-form_urlencoded = "1.1.0"
+form_urlencoded = "1.2.0"
 futures = "0.3.28"
 futures-signals = "0.3.32"
 futures-util = "0.3.28"
 headers = "0.3.8"
 http = "0.2.9"
-once_cell = "1.17.1"
+once_cell = "1.18.0"
 mime = "0.3.17"
 rand = "0.8.5"
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_json = "1.0.96"
 serde_urlencoded = "0.7.1"
 serde_with = "3.0.0"
 thiserror = "1.0.40"
-tokio = { version = "1.28.1", features = ["rt", "macros", "rt-multi-thread"] }
+tokio = { version = "1.28.2", features = ["rt", "macros", "rt-multi-thread"] }
 tower = { version = "0.4.13", features = ["full"] }
 tracing = "0.1.37"
-url = { version = "2.3.1", features = ["serde"] }
+url = { version = "2.4.0", features = ["serde"] }
 
 mas-http = { path = "../http" }
 mas-iana = { path = "../iana" }
@@ -65,7 +65,7 @@ optional = true
 
 [dev-dependencies]
 assert_matches = "1.5.0"
-bitflags = "2.3.1"
+bitflags = "2.3.2"
 mas-keystore = { path = "../keystore" }
 rand_chacha = "0.3.1"
-wiremock = "0.5.18"
+wiremock = "0.5.19"

crates/policy/Cargo.toml

@@ -8,18 +8,18 @@ license = "Apache-2.0"
 [dependencies]
 anyhow = "1.0.71"
 opa-wasm = { git = "https://github.com/matrix-org/rust-opa-wasm.git" }
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_json = "1.0.96"
 thiserror = "1.0.40"
-tokio = { version = "1.28.1", features = ["io-util"] }
+tokio = { version = "1.28.2", features = ["io-util"] }
 tracing = "0.1.37"
-wasmtime = { version = "9.0.1", default-features = false, features = ["async", "cranelift"] }
+wasmtime = { version = "9.0.4", default-features = false, features = ["async", "cranelift"] }
 
 mas-data-model = { path = "../data-model" }
 oauth2-types = { path = "../oauth2-types" }
 
 [dev-dependencies]
-tokio = { version = "1.28.1", features = ["fs", "rt", "macros"] }
+tokio = { version = "1.28.2", features = ["fs", "rt", "macros"] }
 
 [features]
 cache = ["wasmtime/cache"]

crates/router/Cargo.toml

@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 axum = { version = "0.6.18", default-features = false }
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_urlencoded = "0.7.1"
-url = "2.3.1"
+url = "2.4.0"
 ulid = "1.0.0"

crates/spa/Cargo.toml

@@ -6,7 +6,7 @@ edition = "2021"
 license = "Apache-2.0"
 
 [dependencies]
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_json = "1.0.96"
 thiserror = "1.0.40"
 camino = { version = "1.1.4", features = ["serde1"] }
@@ -14,7 +14,7 @@ headers = "0.3.8"
 http = "0.2.9"
 tower-service = "0.3.2"
 tower-http = { version = "0.4.0", features = ["fs"] }
-tokio = { version = "1.28.1", features = ["fs"] }
+tokio = { version = "1.28.2", features = ["fs"] }
 
 [[bin]]
 name = "render"

crates/storage-pg/Cargo.toml

@@ -8,8 +8,8 @@ license = "Apache-2.0"
 [dependencies]
 async-trait = "0.1.68"
 sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres", "migrate", "chrono", "offline", "json", "uuid"] }
-chrono = { version = "0.4.24", features = ["serde"] }
+chrono = { version = "0.4.26", features = ["serde"] }
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_json = "1.0.96"
 thiserror = "1.0.40"
 tracing = "0.1.37"
@@ -17,8 +17,8 @@ futures-util = "0.3.28"
 
 rand = "0.8.5"
 rand_chacha = "0.3.1"
-url = { version = "2.3.1", features = ["serde"] }
+url = { version = "2.4.0", features = ["serde"] }
-uuid = "1.3.3"
+uuid = "1.3.4"
 ulid = { version = "1.0.0", features = ["uuid", "serde"] }
 
 oauth2-types = { path = "../oauth2-types" }

crates/storage/Cargo.toml

@@ -7,18 +7,18 @@ license = "Apache-2.0"
 
 [dependencies]
 async-trait = "0.1.68"
-chrono = "0.4.24"
+chrono = "0.4.26"
 thiserror = "1.0.40"
 futures-util = "0.3.28"
 
-apalis-core = { version = "=0.4.0", features = ["tokio-comp"] }
+apalis-core = { version = "0.4.2", features = ["tokio-comp"] }
 opentelemetry = "0.19.0"
 rand_core = "0.6.4"
-serde = "1.0.163"
+serde = "1.0.164"
 serde_json = "1.0.96"
 tracing = "0.1.37"
 tracing-opentelemetry = "0.19.0"
-url = "2.3.1"
+url = "2.4.0"
 ulid = "1.0.0"
 
 oauth2-types = { path = "../oauth2-types" }

crates/tasks/Cargo.toml

@@ -7,11 +7,11 @@ license = "apache-2.0"
 
 [dependencies]
 anyhow = "1.0.71"
-apalis-core = { version = "=0.4.0", features = ["extensions", "tokio-comp"] }
+apalis-core = { version = "0.4.2", features = ["extensions", "tokio-comp"] }
-apalis-cron = "=0.4.0"
+apalis-cron = "0.4.2"
-apalis-sql = { version = "=0.4.0", features = ["postgres", "tokio-comp"] }
+apalis-sql = { version = "0.4.2", features = ["postgres", "tokio-comp"] }
 async-trait = "0.1.68"
-chrono = "0.4.24"
+chrono = "0.4.26"
 rand = "0.8.5"
 rand_chacha = "0.3.1"
 sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres"] }
@@ -21,8 +21,8 @@ tracing = "0.1.37"
 tracing-opentelemetry = "0.19.0"
 opentelemetry = "0.19.0"
 ulid = "1.0.0"
-url = "2.3.1"
+url = "2.4.0"
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 
 mas-axum-utils = { path = "../axum-utils" }
 mas-data-model = { path = "../data-model" }

crates/templates/Cargo.toml

@@ -7,19 +7,19 @@ license = "Apache-2.0"
 
 [dependencies]
 tracing = "0.1.37"
-tokio = { version = "1.28.1", features = ["macros", "rt"] }
+tokio = { version = "1.28.2", features = ["macros", "rt"] }
 
 anyhow = "1.0.71"
 thiserror = "1.0.40"
 
-tera = "1.18.1"
+tera = "1.19.0"
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.164", features = ["derive"] }
 serde_json = "1.0.96"
 serde_urlencoded = "0.7.1"
 
 camino = "1.1.4"
-chrono = "0.4.24"
+chrono = "0.4.26"
-url = "2.3.1"
+url = "2.4.0"
 http = "0.2.9"
 ulid = { version = "1.0.0", features = ["serde"] }
 rand = "0.8.5"

crates/tower/Cargo.toml

@@ -11,7 +11,7 @@ http = "0.2.9"
 tracing = "0.1.37"
 tracing-opentelemetry = "0.19.0"
 tower = "0.4.13"
-tokio = { version = "1.28.1", features = ["time"] }
+tokio = { version = "1.28.2", features = ["time"] }
 opentelemetry = { version = "0.19.0", features = ["metrics"] }
 opentelemetry-http = "0.8.0"
 pin-project-lite = "0.2.9"

frontend/schema.graphql

@@ -108,14 +108,14 @@ type BrowserSessionConnection {
 An edge in a connection.
 """
 type BrowserSessionEdge {
-  """
-  A cursor for use in pagination
-  """
-  cursor: String!
   """
   The item at the end of the edge
   """
   node: BrowserSession!
+  """
+  A cursor for use in pagination
+  """
+  cursor: String!
 }
 
 """
@@ -196,14 +196,14 @@ type CompatSsoLoginConnection {
 An edge in a connection.
 """
 type CompatSsoLoginEdge {
-  """
-  A cursor for use in pagination
-  """
-  cursor: String!
   """
   The item at the end of the edge
   """
   node: CompatSsoLogin!
+  """
+  A cursor for use in pagination
+  """
+  cursor: String!
 }
 
 """
@@ -421,14 +421,14 @@ type Oauth2SessionConnection {
 An edge in a connection.
 """
 type Oauth2SessionEdge {
-  """
-  A cursor for use in pagination
-  """
-  cursor: String!
   """
   The item at the end of the edge
   """
   node: Oauth2Session!
+  """
+  A cursor for use in pagination
+  """
+  cursor: String!
 }
 
 """
@@ -682,14 +682,14 @@ type UpstreamOAuth2LinkConnection {
 An edge in a connection.
 """
 type UpstreamOAuth2LinkEdge {
-  """
-  A cursor for use in pagination
-  """
-  cursor: String!
   """
   The item at the end of the edge
   """
   node: UpstreamOAuth2Link!
+  """
+  A cursor for use in pagination
+  """
+  cursor: String!
 }
 
 type UpstreamOAuth2Provider implements Node & CreationEvent {
@@ -730,14 +730,14 @@ type UpstreamOAuth2ProviderConnection {
 An edge in a connection.
 """
 type UpstreamOAuth2ProviderEdge {
-  """
-  A cursor for use in pagination
-  """
-  cursor: String!
   """
   The item at the end of the edge
   """
   node: UpstreamOAuth2Provider!
+  """
+  A cursor for use in pagination
+  """
+  cursor: String!
 }
 
 """
@@ -854,14 +854,14 @@ type UserEmailConnection {
 An edge in a connection.
 """
 type UserEmailEdge {
-  """
-  A cursor for use in pagination
-  """
-  cursor: String!
   """
   The item at the end of the edge
   """
   node: UserEmail!
+  """
+  A cursor for use in pagination
+  """
+  cursor: String!
 }
 
 """

policies/Makefile

@@ -1,6 +1,6 @@
 # Set to 1 to run OPA through Docker
 DOCKER := 0
-OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:0.51.0
+OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:0.53.1
 
 ifeq ($(DOCKER), 0)
 	OPA := opa