Bump Rust dependencies and update cargo-deny exceptions

crates/cli/Cargo.toml

@@ -18,13 +18,13 @@ camino.workspace = true
 clap.workspace = true
 dotenvy = "0.15.7"
 httpdate = "1.0.3"
-hyper = { version = "0.14.27", features = ["full"] }
+hyper = { version = "0.14.28", features = ["full"] }
 ipnetwork = "0.20.0"
-itertools = "0.11.0"
+itertools = "0.12.1"
 listenfd = "1.0.1"
 rand.workspace = true
 rand_chacha = "0.3.1"
-rustls = "0.21.9"
+rustls = "0.22.2"
 serde_json.workspace = true
 serde_yaml = "0.9.27"
 sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres"] }

crates/config/Cargo.toml

@@ -32,7 +32,7 @@ serde_with = { version = "3.4.0", features = ["hex", "chrono"] }
 serde_json.workspace = true
 
 pem-rfc7468 = "0.7.0"
-rustls-pemfile = "1.0.4"
+rustls-pemfile = "2.0.0"
 rand.workspace = true
 rand_chacha = "0.3.1"
 

crates/http/Cargo.toml

@@ -19,10 +19,10 @@ headers = "0.3.9"
 http.workspace = true
 http-body = "0.4.5"
 hyper = "0.14.27"
-hyper-rustls = { version = "0.24.2", features = ["http1", "http2"], default-features = false, optional = true }
+hyper-rustls = { version = "0.25.0", features = ["http1", "http2"], default-features = false, optional = true }
 once_cell = "1.18.0"
 opentelemetry.workspace = true
-rustls = { version = "0.21.9", optional = true }
+rustls = { version = "0.22.2", optional = true }
 rustls-native-certs = { version = "0.6.3", optional = true }
 serde.workspace = true
 serde_json.workspace = true
@@ -33,7 +33,7 @@ tower = { version = "0.4.13", features = ["util"] }
 tower-http = { version = "0.4.4", features = ["cors"] }
 tracing.workspace = true
 tracing-opentelemetry.workspace = true
-webpki-roots = { version = "0.25.3", optional = true }
+webpki-roots = { version = "0.26.0", optional = true }
 
 mas-tower.workspace = true
 

crates/listener/Cargo.toml

@@ -22,14 +22,14 @@ pin-project-lite = "0.2.13"
 socket2 = "0.5.5"
 thiserror.workspace = true
 tokio = { version = "1.34.0", features = ["net", "rt", "macros", "signal", "time"] }
-tokio-rustls = "0.24.1"
+tokio-rustls = "0.25.0"
 tower-http = { version = "0.4.4", features = ["add-extension"] }
 tower-service = "0.3.2"
 tracing.workspace = true
 
 [dev-dependencies]
 anyhow.workspace = true
-rustls-pemfile = "1.0.4"
+rustls-pemfile = "2.0.0"
 tokio = { version = "1.34.0", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
 tokio-test = "0.4.3"
 tracing-subscriber.workspace = true

crates/oidc-client/Cargo.toml

@@ -53,9 +53,9 @@ oauth2-types.workspace = true
 
 # Default http service
 http-body = { version = "0.4.5", optional = true }
-rustls = {version = "0.21.9", optional = true }
+rustls = { version = "0.22.2", optional = true }
 [dependencies.hyper-rustls]
-version = "0.24.2"
+version = "0.25.0"
 features = ["http1", "http2", "rustls-native-certs"]
 default-features = false
 optional = true

deny.toml

@@ -60,7 +60,6 @@ deny = [
 multiple-versions = "deny"
 
 skip = [
-    { name = "memoffset", version = "0.7.1" }, # sqlx depends on this old version
     { name = "spin", version = "0.5.2" }, # lazy_static and ring depends on the old version
     { name = "event-listener", version = "2.5.3" }, # async-channel (wiremock) and sqlx-core depend on the old version
     { name = "regex-syntax", version = "0.6.29" }, # tracing-subscriber[env-filter] -> matchers depends on the old version
@@ -69,6 +68,11 @@ skip = [
     { name = "itertools", version = "0.10.5" }, # wasmtime & others depends on the old version
     { name = "bitflags", version = "1.3.2" }, # axum depends on an old version
     { name = "hashbrown" }, # Too many versions :(
+    # sqlx uses old versions of those:
+    { name = "rustls", version = "0.21.10" },
+    { name = "rustls-pemfile", version = "1.0.4" },
+    { name = "rustls-webpki", version = "0.101.7" },
+    { name = "webpki-roots", version = "0.25.3" },
 ]
 
 skip-tree = [