deps(cargo): bump keyring from 2.3.3 to 4.2.0 #438

2026-09-02T04:13:41Z

dependabot[bot] commented

2026-09-02 04:13:41 +00:00

(Migrated from github.com)

Bumps keyring from 2.3.3 to 4.2.0.

Release notes

v4.2.0: update the CLI dependencies

This release updates the dependencies of the CLI feature so that it builds appropriate credential stores on each platform. In particular, the db-keystore requires 64-bit platforms and the Android keystore is included on Android.

What's Changed

Bump base64 from 0.23.0 to 0.23.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#346

Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#349

Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#348

Remove mimalloc feature from db-keystore. by @brotskydotcom in open-source-cooperative/keyring-rs#350

Restore the android-native-keyring-store dependency for the cli. by @brotskydotcom in open-source-cooperative/keyring-rs#351

Full Changelog: https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.6...v4.2.0

v4.1.6: fix concurrent initialization bug

This release fixes #343, a bug in concurrent initialization of the v1 default credential store (thanks @bbmediaco for reporting this). As part of this fix, there's an added feature: you can now query the exact result of the default credential store creation, as well as force it to happen without creating an entry.

What's Changed

Bump dependencies by @stevelr in open-source-cooperative/keyring-rs#344

Prepare the release of v4.1.6 by @brotskydotcom in open-source-cooperative/keyring-rs#345

Full Changelog: https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.5...v4.1.6

v4.1.5: Compatibility release

Rust 1.97 introduced a new clippy lint that fired on the CLI example. This release fixes that problem.

This release also takes the recent bug fix to the Apple native credential store.

There are no functional changes in this release.

What's Changed

Fix new clippy warnings introduced in Rust 1.97 by @brotskydotcom in open-source-cooperative/keyring-rs#338

Full Changelog: https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.4...v4.1.5

v4.1.4: fix yanked version v4.1.3

This is an emergency release fixing the DOA bug #335 reported by @raph-ADF (thanks!).

What's Changed

Fix Entry::new and add test. by @brotskydotcom in open-source-cooperative/keyring-rs#336

Full Changelog: https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.3...v4.1.4

v4.1.3 (YANKED): better error reporting

The only functional change is better error reporting on the first call to Entry::new if the default store fails to instantiate (thanks @eirnym).

NOTE: This release has been yanked because of #335. It has been replaced by v4.1.4.

... (truncated)

Commits

d18b5c8 Restore the android-native-keyring-store dependency for the cli. (#351)
ef30fb8 Restore the android-native-keyring-store dependency for the cli.
a0a5a7f Remove mimalloc feature from db-keystore. (#350)
36981e5 Remove mimalloc feature from db-keystore.
6db16c4 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#348)
19d5b62 Merge branch 'main' into dependabot/cargo/dbus-secret-service-keyring-store-1...
6ea8273 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#349)
6a3ac80 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1
659caf5 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1
ce7fee7 Bump base64 from 0.23.0 to 0.23.1 (#346)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [keyring](https://github.com/open-source-cooperative/keyring-rs) from 2.3.3 to 4.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/open-source-cooperative/keyring-rs/releases">keyring's releases</a>.</em></p> <blockquote> <h2>v4.2.0: update the CLI dependencies</h2> <p>This release updates the dependencies of the CLI feature so that it builds appropriate credential stores on each platform. In particular, the db-keystore requires 64-bit platforms and the Android keystore is included on Android.</p> <h2>What's Changed</h2> <ul> <li>Bump base64 from 0.23.0 to 0.23.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/346">open-source-cooperative/keyring-rs#346</a></li> <li>Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/349">open-source-cooperative/keyring-rs#349</a></li> <li>Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/348">open-source-cooperative/keyring-rs#348</a></li> <li>Remove mimalloc feature from db-keystore. by <a href="https://github.com/brotskydotcom"><code>@brotskydotcom</code></a> in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/350">open-source-cooperative/keyring-rs#350</a></li> <li>Restore the android-native-keyring-store dependency for the cli. by <a href="https://github.com/brotskydotcom"><code>@brotskydotcom</code></a> in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/351">open-source-cooperative/keyring-rs#351</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.6...v4.2.0">https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.6...v4.2.0</a></p> <h2>v4.1.6: fix concurrent initialization bug</h2> <p>This release fixes <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/issues/343">#343</a>, a bug in concurrent initialization of the v1 default credential store (thanks <a href="https://github.com/bbmediaco"><code>@bbmediaco</code></a> for reporting this). As part of this fix, there's an added feature: you can now query the exact result of the default credential store creation, as well as force it to happen without creating an entry.</p> <h2>What's Changed</h2> <ul> <li>Bump dependencies by <a href="https://github.com/stevelr"><code>@stevelr</code></a> in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/344">open-source-cooperative/keyring-rs#344</a></li> <li>Prepare the release of v4.1.6 by <a href="https://github.com/brotskydotcom"><code>@brotskydotcom</code></a> in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/345">open-source-cooperative/keyring-rs#345</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.5...v4.1.6">https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.5...v4.1.6</a></p> <h2>v4.1.5: Compatibility release</h2> <p>Rust 1.97 introduced a new clippy lint that fired on the CLI example. This release fixes that problem.</p> <p>This release also takes the recent bug fix to the Apple native credential store.</p> <p>There are no functional changes in this release.</p> <h2>What's Changed</h2> <ul> <li>Fix new clippy warnings introduced in Rust 1.97 by <a href="https://github.com/brotskydotcom"><code>@brotskydotcom</code></a> in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/338">open-source-cooperative/keyring-rs#338</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.4...v4.1.5">https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.4...v4.1.5</a></p> <h2>v4.1.4: fix yanked version v4.1.3</h2> <p>This is an emergency release fixing the DOA bug <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/issues/335">#335</a> reported by <a href="https://github.com/raph-ADF"><code>@raph-ADF</code></a> (thanks!).</p> <h2>What's Changed</h2> <ul> <li>Fix Entry::new and add test. by <a href="https://github.com/brotskydotcom"><code>@brotskydotcom</code></a> in <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/pull/336">open-source-cooperative/keyring-rs#336</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.3...v4.1.4">https://github.com/open-source-cooperative/keyring-rs/compare/v4.1.3...v4.1.4</a></p> <h2>v4.1.3 (YANKED): better error reporting</h2> <p>The only functional change is better error reporting on the first call to <code>Entry::new</code> if the default store fails to instantiate (thanks <a href="https://github.com/eirnym"><code>@eirnym</code></a>).</p> <p><strong>NOTE</strong>: This release has been <em>yanked</em> because of <a href="https://redirect.github.com/open-source-cooperative/keyring-rs/issues/335">#335</a>. It has been replaced by <a href="https://github.com/open-source-cooperative/keyring-rs/releases/tag/v4.1.4">v4.1.4</a>.</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/d18b5c89a0a4e9192eebac82a508a1607378ea15"><code>d18b5c8</code></a> Restore the android-native-keyring-store dependency for the cli. (<a href="https://redirect.github.com/open-source-cooperative/keyring-rs/issues/351">#351</a>)</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/ef30fb8abd009e00dff4f5dda7656e3fbd6ee7db"><code>ef30fb8</code></a> Restore the android-native-keyring-store dependency for the cli.</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/a0a5a7fdb9d613453ab3aa1bc32721a4fcfe6920"><code>a0a5a7f</code></a> Remove mimalloc feature from db-keystore. (<a href="https://redirect.github.com/open-source-cooperative/keyring-rs/issues/350">#350</a>)</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/36981e5cd3b5cb9b378c176846a4a87549644025"><code>36981e5</code></a> Remove mimalloc feature from db-keystore.</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/6db16c48c65efe5ffb7a2f9da63df5a4c794b081"><code>6db16c4</code></a> Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (<a href="https://redirect.github.com/open-source-cooperative/keyring-rs/issues/348">#348</a>)</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/19d5b62b89f01f0645de0ae395bc774ca9d1e8f5"><code>19d5b62</code></a> Merge branch 'main' into dependabot/cargo/dbus-secret-service-keyring-store-1...</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/6ea8273b098e023dde91afafe712594934a5c484"><code>6ea8273</code></a> Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (<a href="https://redirect.github.com/open-source-cooperative/keyring-rs/issues/349">#349</a>)</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/6a3ac80d8075f29a9e040ca4744f26e9337d8388"><code>6a3ac80</code></a> Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/659caf5e41ef5861367f510d47054e1b092c6ac2"><code>659caf5</code></a> Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1</li> <li><a href="https://github.com/open-source-cooperative/keyring-rs/commit/ce7fee7ea0ce4e750e06a5b3ab9daf8b7b87b8fc"><code>ce7fee7</code></a> Bump base64 from 0.23.0 to 0.23.1 (<a href="https://redirect.github.com/open-source-cooperative/keyring-rs/issues/346">#346</a>)</li> <li>Additional commits viewable in <a href="https://github.com/open-source-cooperative/keyring-rs/compare/v2.3.3...v4.2.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keyring&package-manager=cargo&previous-version=2.3.3&new-version=4.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/cargo/keyring-4.2.0:dependabot/cargo/keyring-4.2.0

git checkout dependabot/cargo/keyring-4.2.0

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/nuncio#438