Skip to content

chore(deps): bump Rust and JS dependencies#111

Merged
JanZachmann merged 1 commit intoomnect:mainfrom
JanZachmann:chore
Mar 2, 2026
Merged

chore(deps): bump Rust and JS dependencies#111
JanZachmann merged 1 commit intoomnect:mainfrom
JanZachmann:chore

Conversation

@JanZachmann
Copy link
Contributor

@JanZachmann JanZachmann commented Mar 2, 2026

Summary

  • Rust (cargo update): actix-web 4.12→4.13, futures 0.3.31→0.3.32, wasm-bindgen 0.2.108→0.2.114, env_logger, anyhow, rustls, uuid and ~50 transitive packages
  • Rust (breaking bumps): jsonwebtoken 9.3→10 (rust_crypto backend), rand_core 0.9→0.10 (removed now-invalid std feature)
  • JS: vue 3.5.29, vue-router 5.0.3, vuetify 3.12.1, axios 1.13.6, @vueuse/core 14.2.1, unocss 66.6.2, vue-tsc 3.2.5, @types/bun 1.3.9

getrandom remains on 0.3 in the app crate: crux_core/crux_http pull in getrandom 0.3.x transitively for the wasm32 target; the direct dep with wasm_js is required to enable that feature on the transitive copy.

Reason

Routine dependency maintenance to pick up bug fixes and security patches.

- jsonwebtoken 9.3 → 10 (rust_crypto backend, removes aws-lc dependency)
- rand_core 0.9 → 0.10 (no-op std feature removed in 0.10)
- cargo update: actix-web 4.12→4.13, futures 0.3.31→0.3.32,
  wasm-bindgen 0.2.108→0.2.114, env_logger, anyhow, rustls, uuid, et al.
- JS: vue 3.5.29, vue-router 5.0.3, vuetify 3.12.1, axios 1.13.6,
  @vueuse/core 14.2.1, unocss 66.6.2, vue-tsc 3.2.5, @types/bun 1.3.9

getrandom stays on 0.3 in the app crate: crux_core/crux_http still pull
in getrandom 0.3.x transitively for the wasm32 target; our direct dep
with wasm_js is what enables the feature on that transitive copy.

Signed-off-by: Jan Zachmann <50990105+JanZachmann@users.noreply.github.com>
@JanZachmann JanZachmann merged commit dd5653b into omnect:main Mar 2, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant