Skip to content

chore(deps): update the dependencies - #25

Closed
d3vyce wants to merge 38 commits into
mainfrom
chore/deps-latest
Closed

chore(deps): update the dependencies#25
d3vyce wants to merge 38 commits into
mainfrom
chore/deps-latest

Conversation

@d3vyce

@d3vyce d3vyce commented Nov 13, 2026

Copy link
Copy Markdown
Contributor

Runs CI on the dependency updates before main is rewritten as one commit per type; this PR will be closed, not merged. Replaces #19, #20, #22, #23 and #24.

d3vyce and others added 30 commits November 13, 2026 00:18
@d3vyce
chore: add dependabot updates grouped per ecosystem
41a4764 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore: keep the fake test secrets out of secret scanners
09e2d15 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
fix: keep reviewed requests apart from waiting ones in your work
6c4dfff 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
docs: use conventional commit messages
97db465 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore: pin github actions to commit shas and update them
6e62a31 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore: publish the docker image and draft a release on version tags
149387f 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
fix: open hover cards after a scroll and make two e2e tests rerunnable
9a7f716 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
ci: check pull request titles and group the release notes by type
3617f38 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
ci: scan the code with codeql
33728f3 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore: add the script that takes the readme screenshots
bd3788b 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@dependabot @d3vyce
chore(deps): bump axllent/mailpit
0ab352a 
Bumps the docker group with 1 update: axllent/mailpit.


Updates `axllent/mailpit` from v1.33.0 to v1.33.1

---
updated-dependencies:
- dependency-name: axllent/mailpit
  dependency-version: v1.33.1
  dependency-type: direct:production
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @d3vyce
chore(deps): bump the backend group with 8 updates
551b568 
Bumps the backend group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [uuid](https://github.com/uuid-rs/uuid) | `1.29.1` | `1.29.2` |
| [arc-swap](https://github.com/vorner/arc-swap) | `1.9.3` | `1.9.5` |
| [crypto-bigint](https://github.com/RustCrypto/crypto-bigint) | `0.7.10` | `0.7.11` |
| [itoa](https://github.com/dtolnay/itoa) | `1.0.18` | `1.0.19` |
| [jiff](https://github.com/BurntSushi/jiff) | `0.2.39` | `0.2.41` |
| [jiff-core](https://github.com/BurntSushi/jiff) | `0.1.2` | `0.1.5` |
| [jiff-static](https://github.com/BurntSushi/jiff) | `0.2.39` | `0.2.43` |
| [syn](https://github.com/dtolnay/syn) | `3.0.9` | `3.0.10` |


Updates `uuid` from 1.29.1 to 1.29.2
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.29.1...v1.29.2)

Updates `arc-swap` from 1.9.3 to 1.9.5
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](vorner/arc-swap@v1.9.3...v1.9.5)

Updates `crypto-bigint` from 0.7.10 to 0.7.11
- [Changelog](https://github.com/RustCrypto/crypto-bigint/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/crypto-bigint@v0.7.10...v0.7.11)

Updates `itoa` from 1.0.18 to 1.0.19
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](dtolnay/itoa@1.0.18...1.0.19)

Updates `jiff` from 0.2.39 to 0.2.41
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-static-0.2.39...jiff-static-0.2.41)

Updates `jiff-core` from 0.1.2 to 0.1.5
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-core-0.1.2...jiff-core-0.1.5)

Updates `jiff-static` from 0.2.39 to 0.2.43
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-static-0.2.39...jiff-static-0.2.43)

Updates `syn` from 3.0.9 to 3.0.10
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.9...3.0.10)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 1.29.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: arc-swap
  dependency-version: 1.9.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: crypto-bigint
  dependency-version: 0.7.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: itoa
  dependency-version: 1.0.19
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: jiff
  dependency-version: 0.2.41
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: jiff-core
  dependency-version: 0.1.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: jiff-static
  dependency-version: 0.2.43
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: syn
  dependency-version: 3.0.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @d3vyce
chore(deps): bump libsqlite3-sys from 0.30.1 to 0.37.0
d201d01 
Bumps [libsqlite3-sys](https://github.com/rusqlite/rusqlite) from 0.30.1 to 0.37.0.
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](https://github.com/rusqlite/rusqlite/commits/v0.37.0)

---
updated-dependencies:
- dependency-name: libsqlite3-sys
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @d3vyce
chore(deps): bump lucide-react from 0.468.0 to 1.69.0 in /web
2b0a2c3 
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 0.468.0 to 1.69.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.69.0/packages/lucide-react)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @d3vyce
chore(deps): bump uuid from 11.1.1 to 14.0.3 in /web
af74f38 
Bumps [uuid](https://github.com/uuidjs/uuid) from 11.1.1 to 14.0.3.
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v11.1.1...v14.0.3)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @d3vyce
chore(deps): bump base64 from 0.22.1 to 0.23.1
652c8cb 
Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.22.1 to 0.23.1.
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@d3vyce
chore(deps): bump vite to 8 and @vitejs/plugin-react to 6
4232a4f 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump opentelemetry to 0.33 and tracing-opentelemetry to …
68204b3 
…0.34

Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump utoipa to 6 and openapi-typescript to 7.13
466f6de 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore: group the dependabot updates that must move together
9525f71 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump node to 26
cd9beb4 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
refactor: draw encryption nonces with aes-gcm's generate_nonce
8fe425a 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
fix: cap the length and compiled size of registry cleanup patterns
31e6bbd 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
ci: leave test code out of codeql
8d17ffc 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@dependabot @d3vyce
chore(deps-dev): bump the vite group in /web with 2 updates
ce8729a 
Bumps the vite group in /web with 2 updates: [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@vitejs/plugin-react` from 6.2.1 to 6.3.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.3.0/packages/plugin-react)

Updates `vite` from 8.3.6 to 8.3.7
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.7/packages/vite)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vite
- dependency-name: vite
  dependency-version: 8.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @d3vyce
chore(deps): bump the frontend group across 1 directory with 10 updates
57a5513 
Bumps the frontend group with 10 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.62.7` | `5.107.1` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.11.1` | `3.14.26` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.69.0` | `1.71.0` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `12.2.0` | `12.3.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |
| [@tanstack/query-core](https://github.com/TanStack/query/tree/HEAD/packages/query-core) | `5.62.7` | `5.107.1` |
| [@tanstack/virtual-core](https://github.com/TanStack/virtual/tree/HEAD/packages/virtual-core) | `3.10.9` | `3.19.11` |
| [elkjs](https://github.com/kieler/elkjs) | `0.9.3` | `0.12.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |
| [playwright-core](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |



Updates `@tanstack/react-query` from 5.62.7 to 5.107.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.107.1/packages/react-query)

Updates `@tanstack/react-virtual` from 3.11.1 to 3.14.26
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.26/packages/react-virtual)

Updates `lucide-react` from 1.69.0 to 1.71.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.71.0/packages/lucide-react)

Updates `mermaid` from 12.2.0 to 12.3.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.2.0...mermaid@12.3.0)

Updates `@playwright/test` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `@tanstack/query-core` from 5.62.7 to 5.107.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/query-core/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/query-core@5.107.1/packages/query-core)

Updates `@tanstack/virtual-core` from 3.10.9 to 3.19.11
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/virtual-core/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/virtual-core@3.19.11/packages/virtual-core)

Updates `elkjs` from 0.9.3 to 0.12.1
- [Release notes](https://github.com/kieler/elkjs/releases)
- [Commits](kieler/elkjs@0.9.3...0.12.1)

Updates `playwright` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `playwright-core` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.107.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.26
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: lucide-react
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: mermaid
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: "@playwright/test"
  dependency-version: 1.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: "@tanstack/query-core"
  dependency-version: 5.107.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: "@tanstack/virtual-core"
  dependency-version: 3.19.11
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: elkjs
  dependency-version: 0.12.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: playwright
  dependency-version: 1.65.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: playwright-core
  dependency-version: 1.65.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: frontend
...

Signed-off-by: dependabot[bot] <support@github.com>
@d3vyce
ci: give the bench workflow read-only permissions
072a0ec 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump crc32fast to 1.5.5 and email-encoding to 0.4.3
f620bd6 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump rand to 0.10, sha2 to 0.11, hmac to 0.13, aes-gcm t…
f383760 
…o 0.11 and argon2 to 0.6

Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump totp-rs to 6
c1fe9a0 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump comrak to 0.59
79b18e7 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump axum-extra to 0.12, tower-http to 0.7, reqwest to 0…
8ee57cc 
….13, lru to 0.19 and metrics-exporter-prometheus to 0.18

Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore: group every dependabot update per ecosystem, majors included
1cfac98 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump react and react-dom to 19.3
b9f09b8 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump typescript to 5.9
0571673 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump python to 3.15 in the compose file and the demo pip…
45caa50 
…eline

Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
fix(deps): bump ammonia to 4.2.5 for RUSTSEC-2026-0533
230acae 
Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
@d3vyce
chore(deps): bump typescript to 7, with openapi-typescript on typescr…
f5ee8b5 
…ipt 6 in its own install

Signed-off-by: d3vyce <44915747+d3vyce@users.noreply.github.com>
github-advanced-security[bot]
github-advanced-security Bot found potential problems Nov 13, 2026
View reviewed changes
Comment thread crates/forgust-server/src/crypto.rs Dismissed
Comment thread crates/forgust-server/src/crypto.rs Dismissed
Comment thread crates/forgust-server/src/crypto.rs Dismissed
@d3vyce

d3vyce commented Nov 13, 2026

Copy link
Copy Markdown
Contributor Author

Landed on main through the history rewrite.

@d3vyce d3vyce closed this Nov 13, 2026
@d3vyce
d3vyce deleted the chore/deps-latest branch November 13, 2026 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@github-advanced-security github-advanced-security[bot] github-advanced-security[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@d3vyce @github-advanced-security