Bump most Rust dependencies

Cargo.toml

@@ -93,7 +93,7 @@ version = "1.6.0"
 
 # Packed bitfields
 [workspace.dependencies.bitflags]
-version = "2.6.0"
+version = "2.8.0"
 
 # Bytes
 [workspace.dependencies.bytes]
@@ -187,7 +187,7 @@ features = ["yaml", "json"]
 
 # Email sending
 [workspace.dependencies.lettre]
-version = "0.11.13"
+version = "0.11.14"
 default-features = false
 features = [
     "tokio1-rustls-tls",
@@ -246,6 +246,10 @@ features = ["std", "pkcs5", "encryption"]
 # Random values
 [workspace.dependencies.rand]
 version = "0.8.5"
+[workspace.dependencies.rand_chacha]
+version = "0.3.1"
+[workspace.dependencies.rand_core]
+version = "0.6.4"
 
 # High-level HTTP client
 [workspace.dependencies.reqwest]
@@ -414,7 +418,7 @@ features = ["serde"]
 
 # ULID support
 [workspace.dependencies.ulid]
-version = "1.1.4"
+version = "=1.1.4"   # Pinned to the latest version which used rand 0.8
 features = ["serde"]
 
 # HTTP mock server

crates/cli/Cargo.toml

@@ -20,17 +20,20 @@ bytes.workspace = true
 camino.workspace = true
 clap.workspace = true
 console = "0.15.10"
-dialoguer = { version = "0.11.0", default-features = false, features = ["fuzzy-select", "password"] }
+dialoguer = { version = "0.11.0", default-features = false, features = [
+    "fuzzy-select",
+    "password",
+] }
 dotenvy = "0.15.7"
 figment.workspace = true
 futures-util.workspace = true
 http-body-util.workspace = true
 hyper.workspace = true
 ipnetwork = "0.20.0"
-itertools = "0.13.0"
+itertools = "0.14.0"
 listenfd = "1.0.2"
 rand.workspace = true
-rand_chacha = "0.3.1"
+rand_chacha.workspace = true
 reqwest.workspace = true
 rustls.workspace = true
 sd-notify = "0.4.5"

crates/config/Cargo.toml

@@ -33,7 +33,7 @@ pem-rfc7468 = "0.7.0"
 rustls-pki-types = "1.11.0"
 rustls-pemfile = "2.2.0"
 rand.workspace = true
-rand_chacha = "0.3.1"
+rand_chacha.workspace = true
 
 indoc = "2.0.5"
 

crates/handlers/Cargo.toml

@@ -82,7 +82,7 @@ mime = "0.3.17"
 minijinja.workspace = true
 minijinja-contrib.workspace = true
 rand.workspace = true
-rand_chacha = "0.3.1"
+rand_chacha.workspace = true
 headers.workspace = true
 ulid.workspace = true
 

crates/jose/Cargo.toml

@@ -38,4 +38,4 @@ mas-iana.workspace = true
 
 [dev-dependencies]
 insta.workspace = true
-rand_chacha = "0.3.1"
+rand_chacha.workspace = true

crates/keystore/Cargo.toml

@@ -36,4 +36,4 @@ mas-jose.workspace = true
 
 [dev-dependencies]
 insta.workspace = true
-rand_chacha = "0.3.1"
+rand_chacha.workspace = true

crates/oidc-client/Cargo.toml

@@ -40,7 +40,7 @@ oauth2-types.workspace = true
 [dev-dependencies]
 assert_matches = "1.5.0"
 bitflags.workspace = true
-rand_chacha = "0.3.1"
+rand_chacha.workspace = true
 tokio.workspace = true
 wiremock.workspace = true
 http-body-util.workspace = true

crates/policy/Cargo.toml

@@ -13,7 +13,7 @@ workspace = true
 
 [dependencies]
 anyhow.workspace = true
-opa-wasm = "0.1.3"
+opa-wasm = "0.1.4"
 serde.workspace = true
 serde_json.workspace = true
 schemars = { workspace = true, optional = true }

crates/storage-pg/Cargo.toml

@@ -24,7 +24,7 @@ futures-util.workspace = true
 opentelemetry-semantic-conventions.workspace = true
 
 rand.workspace = true
-rand_chacha = "0.3.1"
+rand_chacha.workspace = true
 url.workspace = true
 uuid = "1.14.0"
 ulid = { workspace = true, features = ["uuid"] }

crates/storage/Cargo.toml

@@ -16,7 +16,7 @@ async-trait.workspace = true
 chrono.workspace = true
 futures-util.workspace = true
 opentelemetry.workspace = true
-rand_core = "0.6.4"
+rand_core.workspace = true
 serde.workspace = true
 serde_json.workspace = true
 thiserror.workspace = true

crates/syn2mas/Cargo.toml

@@ -22,7 +22,7 @@ sqlx.workspace = true
 chrono.workspace = true
 compact_str.workspace = true
 tracing.workspace = true
-futures-util = "0.3.30"
+futures-util = "0.3.31"
 
 rand.workspace = true
 uuid = "1.14.0"

crates/tasks/Cargo.toml

@@ -17,7 +17,7 @@ async-trait.workspace = true
 cron.workspace = true
 chrono.workspace = true
 rand.workspace = true
-rand_chacha = "0.3.1"
+rand_chacha.workspace = true
 sqlx.workspace = true
 thiserror.workspace = true
 tokio.workspace = true

deny.toml

@@ -56,7 +56,7 @@ skip = [
     { name = "base64", version = "0.21.7" },         # many dependencies depends on this old version
     { name = "regex-syntax", version = "0.6.29" },   # tracing-subscriber[env-filter] -> matchers depends on the old version
     { name = "regex-automata", version = "0.1.10" }, # ^
-    { name = "regex-automata", version = "0.2.0" },  # icu_list depends on this old version
+    { name = "itertools", version = "0.13.0" },      # zxcvbn depends on this old version
     { name = "indexmap", version = "1.9.3" },        # schemars depends on this old version
     { name = "hashbrown", version = "0.12.3" },      # schemars -> indexmap depends on this old version
     { name = "hashbrown", version = "0.14.5" },      # a few crates depend on this old version