Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• [deps]: Update gh minor (Swatinem/rust-cache, actions/download-artifact, actions/setup-java, actions/setup-node, actions/upload-artifact, checkmarx/ast-github-action, codecov/codecov-action, crazy-max/ghaction-import-gpg, github/codeql-action, gradle/actions, ncipollo/release-action)
• [deps]: Update Rust crate async-trait to v0.1.88
• [deps]: Update Rust crate clap to v4.5.37
• [deps]: Update Rust crate darling to v0.20.11
• [deps]: Update Rust crate env_logger to v0.11.8
• [deps]: Update Rust crate log to v0.4.27
• [deps]: Update Rust crate proc-macro2 to v1.0.95
• [deps]: Update Rust crate quote to v1.0.40
• [deps]: Update Rust crate rustls to v0.23.26
• [deps]: Update Rust crate rustls-platform-verifier to v0.5.1
• [deps]: Update Rust crate serde to v1.0.219
• [deps]: Update Rust crate syn to v2.0.100
• [deps]: Update Rust crate trybuild to v1.0.104
• [deps]: Update @openapitools/openapi-generator-cli to v2.19.1
• [deps]: Update prettier to v3.5.3
• [deps]: Update Rust crate android_logger to 0.15
• [deps]: Update Rust crate rand_chacha to v0.9.0
• [deps]: Update Rust crate serde_qs to >=0.12.0, <0.15
• [deps]: Update Rust crate tokio to v1.44.2
• [deps]: Update Rust crate uniffi to v0.29.1
• [deps]: Update Rust crate validator to >=0.18.1, <0.21
• [deps]: Update rust Docker tag to v1.86
• [deps]: Update Rust to v1.86.0
• [deps]: Update Rust to v2025-04-26
• [deps]: Update node to v22
• [deps]: Update sonarsource/sonarqube-scan-action action to v5

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [deps]: Lock file maintenance

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• [deps]: Update Rust crate getrandom to >=0.2.9, <0.4
• [deps]: Update Rust crate rand to >=0.8.5, <0.10
• [deps]: Update Rust crate generic-array to v1

Detected dependencies

cargo

Cargo.toml

• chrono >=0.4.26, <0.5
• log >=0.4.18, <0.5
• reqwest >=0.12.5, <0.13
• schemars >=0.8.9, <0.9
• serde >=1.0, <2.0
• serde_json >=1.0.96, <2.0
• serde_qs >=0.12.0, <0.14
• serde_repr >=0.1.12, <0.2
• thiserror >=1.0.40, <3
• tokio 1.36.0
• tsify-next >=0.5.4, <0.6
• uniffi =0.28.3
• uuid >=1.3.3, <2.0
• validator >=0.18.1, <0.20
• wasm-bindgen >=0.2.91, <0.3
• js-sys >=0.3.72, <0.4
• wasm-bindgen-futures 0.4.41

bitwarden_license/bitwarden-sm/Cargo.toml

crates/bitwarden-api-api/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-api-identity/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-cli/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• inquire 0.7.0
• supports-color 3.0.0

crates/bitwarden-core/Cargo.toml

• base64 >=0.22.1, <0.23
• getrandom >=0.2.9, <0.3
• rand >=0.8.5, <0.9
• zeroize >=1.7.0, <2.0
• zxcvbn >=3.0.1, <4.0
• rand_chacha 0.3.1
• wiremock 0.6.0
• zeroize >=1.7.0, <2.0
• rustls 0.23.19
• rustls-platform-verifier 0.5.0

crates/bitwarden-crypto/Cargo.toml

• aes >=0.8.2, <0.9
• argon2 >=0.5.0, <0.6
• base64 >=0.22.1, <0.23
• cbc >=0.1.2, <0.2
• chacha20poly1305 0.10.1
• generic-array >=0.14.7, <1.0
• hkdf >=0.12.3, <0.13
• hmac >=0.12.1, <0.13
• num-bigint >=0.4, <0.5
• num-traits >=0.2.15, <0.3
• pbkdf2 >=0.12.1, <0.13
• rand >=0.8.5, <0.9
• rand_chacha >=0.3.1, <0.4.0
• rayon >=1.8.1, <2.0
• rsa >=0.9.2, <0.10
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• subtle >=2.5.0, <3.0
• zeroize >=1.7.0, <2.0
• zeroizing-alloc >=0.1.0, <0.2
• criterion 0.5.1
• rand_chacha 0.3.1

crates/bitwarden-error-macro/Cargo.toml

• darling 0.20.10
• proc-macro2 1.0.89
• quote 1.0.37
• syn 2.0.87

crates/bitwarden-error/Cargo.toml

• trybuild 1.0.101
• wasm-bindgen-test 0.3.45

crates/bitwarden-exporters/Cargo.toml

• base64 >=0.22.1, <0.23
• credential-exchange-format >=0.1, <0.2
• csv 1.3.0
• num-traits >=0.2, <0.3
• rand >=0.8.5, <0.9

crates/bitwarden-fido/Cargo.toml

• async-trait >=0.1.80, <0.2
• base64 >=0.22.1, <0.23
• coset >=0.3.7, <0.4
• itertools >=0.13.0, <0.15
• p256 >=0.13.2, <0.14

crates/bitwarden-generators/Cargo.toml

• rand >=0.8.5, <0.9
• rand_chacha 0.3.1
• wiremock 0.6.0

crates/bitwarden-ipc/Cargo.toml

crates/bitwarden-send/Cargo.toml

• base64 >=0.22.1, <0.23
• zeroize >=1.7.0, <2.0

crates/bitwarden-ssh/Cargo.toml

• ed25519 >=2.2.3, <3.0
• pem-rfc7468 0.7.0
• pkcs8 >=0.10.2, <0.11
• rand >=0.8.5, <0.9
• rsa >=0.9.2, <0.10
• ssh-key >=0.6.7, <0.7
• rand_chacha 0.3.1

crates/bitwarden-uniffi/Cargo.toml

• async-trait 0.1.80
• env_logger 0.11.1
• android_logger 0.14
• jni >=0.21, <0.22
• libloading >=0.8.1, <0.9
• rustls-platform-verifier 0.5.0
• oslog 0.2.0

crates/bitwarden-vault/Cargo.toml

• base64 >=0.22.1, <0.23
• data-encoding >=2.0, <3
• hmac >=0.12.1, <0.13
• percent-encoding >=2.1, <3.0
• rand >=0.8.5, <0.9
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• uniffi =0.28.3

crates/bitwarden-wasm-internal/Cargo.toml

• console_error_panic_hook 0.1.7
• console_log 1.0.0
• js-sys 0.3.68
• log 0.4.20
• serde_json >=1.0.96, <2.0
• wasm-bindgen =0.2.100
• wasm-bindgen-futures 0.4.41

crates/bw/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• env_logger 0.11.1
• inquire 0.7.0
• log 0.4.20

crates/memory-testing/Cargo.toml

• comfy-table 7.1.1
• hex 0.4.3
• serde 1.0.196
• serde_json 1.0.113
• zeroize 1.7.0

crates/uniffi-bindgen/Cargo.toml

dockerfile

crates/memory-testing/Dockerfile

• rust 1.85

github-actions

.github/workflows/build-android.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b

.github/workflows/build-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/build-swift.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/build-wasm-internal.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/check-powerset.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/cloc.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/delete-old-packages.yml

• actions/delete-package-versions v5.0.0@e5bc658cc4c965c472efe991f8beea3981499c55

.github/workflows/direct-minimal-versions.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/enforce-labels.yml

• yogevbd/enforce-label-action 2.2.2@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024

.github/workflows/lint.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• github/codeql-action v3.28.8@dd746615b3b9d728a6a37ca2045b68ca76d4841a
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• node 16

.github/workflows/memory-testing.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/minimum-rust-version.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/publish-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• chrnorm/deployment-action v2.0.7@55729fcebec3d284f60f5bcabbd8376437d696b1
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806

.github/workflows/publish-wasm-internal.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf

.github/workflows/release-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ncipollo/release-action v1.15.0@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87

.github/workflows/release-swift.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• ncipollo/release-action v1.15.0@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87

.github/workflows/rust-test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• codecov/codecov-action v5.3.1@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3

.github/workflows/rustdoc.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• actions/upload-pages-artifact v3.0.1@56afc609e74202658d3ffba0e8f6dda462b719fa
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/scan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• checkmarx/ast-github-action 2.0.42@9fda4ab4c1b67c35de380552a972a82997d97731
• github/codeql-action v3.28.8@dd746615b3b9d728a6a37ca2045b68ca76d4841a
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• sonarsource/sonarqube-scan-action v4.2.1@bfd4e558cda28cda6b5defafb9232d191be8c203

.github/workflows/version-bump.yml

• dtolnay/rust-toolchain 56f84321dbccf38fb67ce29ab63e4754056677e0
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

npm

crates/bitwarden-wasm-internal/npm/package.json

package.json

• @openapitools/openapi-generator-cli 2.15.3
• prettier 3.4.2

regex

rust-toolchain.toml

• rust 1.85.0

rust-toolchain.toml

• rust-nightly 2025-01-01

---

• Check this box to trigger a request for Renovate to run again on this repository