fix(deps): bump cipherstash-client, cipherstash-config, and cts-common to 0.42.2 - #456
Conversation
…n to 0.42.2 Pulls in stack-auth 0.42.2, which bumps jsonwebtoken from 9.3.1 to 10.4.0. Signed-off-by: Toby Hede <toby@cipherstash.com>
freshtonic
left a comment
freshtonic
left a comment
There was a problem hiding this comment.
Approving.
Cargo.toml and Cargo.lock are consistent, and the full test matrix (PostgreSQL 14–17) plus the performance regression check are green.
The part of this worth stating explicitly, since the PR body describes it only as a version bump: jsonwebtoken 9.3.1 → 10.4.0 swaps the crypto backend from ring to aws-lc-rs (stack-auth 0.42.2 requests default-features = false, features = ["aws_lc_rs", "use_pem"]). For a service that builds release/Docker images this is the kind of change that can break a build without touching a test — but it's safe here: aws-lc-rs/aws-lc-sys are already in the lock on main via rustls, so the build environment already carries the C/CMake toolchain and nothing new is introduced.
Also carried along, both consistent with the 0.42.2 line: zeroize 1.8.1 → 1.9.0 (plus zeroize_derive 1.4.2 → 1.5.0) and zerokms-protocol 0.12.26 → 0.12.28.
2 participants
Pulls in stack-auth 0.42.2, which bumps jsonwebtoken from 9.3.1 to 10.4.0.