Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• [deps]: Update dtolnay/rust-toolchain digest to 315e265
• [deps]: Update Rust crate clap to v4.5.21
• [deps]: Update Rust crate comfy-table to v7.1.3
• [deps]: Update Rust crate csv to v1.3.1
• [deps]: Update Rust crate proc-macro2 to v1.0.92
• [deps]: Update Rust crate serde to v1.0.215
• [deps]: Update Rust crate serde_json to v1.0.133
• [deps]: Update Rust crate syn to v2.0.89
• [deps]: Update Rust crate uniffi to v0.28.3
• [deps]: Update @openapitools/openapi-generator-cli to v2.15.3
• [deps]: Update Rust crate jni to >=0.19, <0.22
• [deps]: Update Rust crate rustls-platform-verifier to 0.4.0
• [deps]: Update Rust crate tempfile to v3.14.0
• [deps]: Update Rust crate tokio to v1.41.1
• [deps]: Update Rust crate validator to 0.19.0
• [deps]: Update rust Docker tag to v1.82
• [deps]: Update Rust crate generic-array to v1
• [deps]: Update Rust crate thiserror to v2
• [deps]: Update codecov/codecov-action action to v5
• [deps]: Lock file maintenance

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [deps]: Update gh minor (actions/checkout, actions/setup-java, actions/setup-node, checkmarx/ast-github-action, crazy-max/ghaction-import-gpg, github/codeql-action, gradle/actions)

Detected dependencies

cargo

Cargo.toml

• chrono >=0.4.26, <0.5
• log 0.4.20
• reqwest >=0.12.5, <0.13
• schemars >=0.8.9, <0.9
• serde >=1.0, <2.0
• serde_json >=1.0.96, <2.0
• serde_qs >=0.12.0, <0.14
• serde_repr >=0.1.12, <0.2
• thiserror >=1.0.40, <2.0
• tokio 1.36.0
• tsify-next >=0.5.4, <0.6
• uniffi =0.28.1
• uuid >=1.3.3, <2.0
• validator 0.18.1
• wasm-bindgen >=0.2.91, <0.3
• js-sys >=0.3.72, <0.4
• wasm-bindgen-futures 0.4.41

bitwarden_license/bitwarden-sm/Cargo.toml

crates/bitwarden-api-api/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-api-identity/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-cli/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• inquire 0.7.0
• supports-color 3.0.0

crates/bitwarden-core/Cargo.toml

• base64 >=0.22.1, <0.23
• getrandom >=0.2.9, <0.3
• hmac >=0.12.1, <0.13
• log >=0.4.18, <0.5
• rand >=0.8.5, <0.9
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• zeroize >=1.7.0, <2.0
• zxcvbn >=3.0.1, <4.0
• rand_chacha 0.3.1
• wiremock 0.6.0
• zeroize >=1.7.0, <2.0
• rustls-platform-verifier 0.3.4

crates/bitwarden-crypto/Cargo.toml

• aes >=0.8.2, <0.9
• argon2 >=0.5.0, <0.6
• base64 >=0.22.1, <0.23
• cbc >=0.1.2, <0.2
• generic-array >=0.14.7, <1.0
• hkdf >=0.12.3, <0.13
• hmac >=0.12.1, <0.13
• num-bigint >=0.4, <0.5
• num-traits >=0.2.15, <0.3
• pbkdf2 >=0.12.1, <0.13
• rand >=0.8.5, <0.9
• rayon >=1.8.1, <2.0
• rsa >=0.9.2, <0.10
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• subtle >=2.5.0, <3.0
• zeroize >=1.7.0, <2.0
• criterion 0.5.1
• rand_chacha 0.3.1

crates/bitwarden-error-macro/Cargo.toml

• darling 0.20.10
• proc-macro2 1.0.89
• quote 1.0.37
• syn 2.0.87

crates/bitwarden-error/Cargo.toml

• js-sys 0.3.72
• trybuild 1.0.101
• wasm-bindgen-test 0.3.45

crates/bitwarden-exporters/Cargo.toml

• base64 >=0.22.1, <0.23
• csv 1.3.0

crates/bitwarden-fido/Cargo.toml

• async-trait >=0.1.80, <0.2
• base64 >=0.22.1, <0.23
• coset 0.3.7
• itertools 0.13.0
• log >=0.4.18, <0.5
• p256 >=0.13.2, <0.14

crates/bitwarden-generators/Cargo.toml

• rand >=0.8.5, <0.9
• rand_chacha 0.3.1
• wiremock 0.6.0

crates/bitwarden-send/Cargo.toml

• base64 >=0.22.1, <0.23
• zeroize >=1.7.0, <2.0

crates/bitwarden-uniffi/Cargo.toml

• async-trait 0.1.80
• env_logger 0.11.1
• android_logger 0.14
• jni >=0.19, <0.20
• libloading >=0.8.1, <0.9
• rustls-platform-verifier 0.3.4
• oslog 0.2.0

crates/bitwarden-vault/Cargo.toml

• base64 >=0.22.1, <0.23
• rand >=0.8.5, <0.9
• hmac >=0.12.1, <0.13
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• uniffi =0.28.1

crates/bitwarden-wasm-internal/Cargo.toml

• console_error_panic_hook 0.1.7
• console_log 1.0.0
• js-sys 0.3.68
• log 0.4.20
• serde_json >=1.0.96, <2.0
• wasm-bindgen =0.2.95
• wasm-bindgen-futures 0.4.41

crates/bw/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• env_logger 0.11.1
• inquire 0.7.0
• log 0.4.20
• tempfile 3.10.0

crates/memory-testing/Cargo.toml

• comfy-table 7.1.1
• hex 0.4.3
• serde 1.0.196
• serde_json 1.0.113
• zeroize 1.7.0

crates/uniffi-bindgen/Cargo.toml

dockerfile

crates/memory-testing/Dockerfile

• rust 1.81

github-actions

.github/workflows/build-android.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/setup-java v4.4.0@b36c23c0d998641eff861008f374ee103c25ac73
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• gradle/actions v4.1.0@d156388eb19639ec20ade50009f3d199ce1e2808

.github/workflows/build-rust-crates.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/build-swift.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/build-wasm-internal.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/setup-node v4.0.4@0a44ba7841725637a19e28fa30b79a866c81b0a6
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/cloc.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871

.github/workflows/delete-old-packages.yml

• actions/delete-package-versions v5.0.0@e5bc658cc4c965c472efe991f8beea3981499c55

.github/workflows/direct-minimal-versions.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/enforce-labels.yml

• yogevbd/enforce-label-action 2.2.2@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024

.github/workflows/lint.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• github/codeql-action v3.26.13@f779452ac5af1c261dce0346a8f964149f49322b
• actions/setup-node v4.0.4@0a44ba7841725637a19e28fa30b79a866c81b0a6

.github/workflows/memory-testing.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/minimum-rust-version.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab

.github/workflows/publish-rust-crates.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• chrnorm/deployment-action v2.0.7@55729fcebec3d284f60f5bcabbd8376437d696b1
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806

.github/workflows/publish-wasm-internal.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/setup-node v4.0.4@0a44ba7841725637a19e28fa30b79a866c81b0a6
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf

.github/workflows/release-rust-crates.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• ncipollo/release-action v1.14.0@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5

.github/workflows/release-swift.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• crazy-max/ghaction-import-gpg v6.1.0@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• ncipollo/release-action v1.14.0@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5

.github/workflows/rust-test.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• codecov/codecov-action v4.6.0@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238

.github/workflows/rustdoc.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• actions/upload-pages-artifact v3.0.1@56afc609e74202658d3ffba0e8f6dda462b719fa
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/scan.yml

• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• checkmarx/ast-github-action 2.0.36@f0869bd1a37fddc06499a096101e6c900e815d81
• github/codeql-action v3.26.13@f779452ac5af1c261dce0346a8f964149f49322b
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• sonarsource/sonarcloud-github-action v3.1.0@383f7e52eae3ab0510c3cb0e7d9d150bbaeab838

.github/workflows/version-bump.yml

• dtolnay/rust-toolchain 7b1c307e0dcbda6122208f10795a713336a9b35a
• Swatinem/rust-cache v2.7.5@82a92a6e8fbeee089604da2575dc567ae9ddeaab
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• crazy-max/ghaction-import-gpg v6.1.0@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871

npm

crates/bitwarden-wasm-internal/npm/package.json

package.json

• @openapitools/openapi-generator-cli 2.13.4
• prettier 3.3.3

---

• Check this box to trigger a request for Renovate to run again on this repository