Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• [deps]: Update gh minor (Azure/login, Swatinem/rust-cache, actions/download-artifact, actions/setup-java, actions/setup-node, actions/upload-artifact, checkmarx/ast-github-action, codecov/codecov-action, crazy-max/ghaction-import-gpg, github/codeql-action, gradle/actions, ncipollo/release-action)

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• [deps]: Lock file maintenance

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• [deps]: Update Rust crate uniffi to v0.29.3
• [deps]: Update Rust crate schemars to >=0.8.9, <0.10

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• [deps]: Update @openapitools/openapi-generator-cli to v2.21.0
• [deps]: Update prettier to v3.6.1
• [deps]: Update Rust crate schemars to v1

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [deps]: Update rust Docker tag to v1.87
• [deps]: Update Rust to v2025-06-25
• [deps]: Update Azure/login action to v2
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• [deps]: Update Rust crate getrandom to >=0.2.9, <0.4
• [deps]: Update Rust crate rand to >=0.8.5, <0.10
• [deps]: Update Rust crate rand_chacha to v0.9.0
• [deps]: Update Rust crate generic-array to v1

Detected dependencies

cargo

Cargo.toml

• async-trait >=0.1.80, <0.2
• chrono >=0.4.26, <0.5
• js-sys >=0.3.72, <0.4
• log >=0.4.18, <0.5
• proc-macro2 >=1.0.89, <2
• quote >=1.0.37, <2
• reqwest >=0.12.5, <0.13
• schemars >=0.8.9, <0.9
• serde >=1.0, <2.0
• serde_json >=1.0.96, <2.0
• serde_qs >=0.12.0, <0.16
• serde_repr >=0.1.12, <0.2
• syn >=2.0.87, <3
• thiserror >=1.0.40, <3
• tokio 1.36.0
• tsify-next >=0.5.4, <0.6
• uniffi =0.29.1
• uuid >=1.3.3, <2.0
• validator >=0.18.1, <0.21
• wasm-bindgen >=0.2.91, <0.3
• wasm-bindgen-futures 0.4.41
• wasm-bindgen-test 0.3.45
• serde-wasm-bindgen >=0.6.0, <0.7

bitwarden_license/bitwarden-sm/Cargo.toml

• wiremock 0.6.0

crates/bitwarden-api-api/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-api-identity/Cargo.toml

• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-cli/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• inquire 0.7.0
• supports-color 3.0.0

crates/bitwarden-core/Cargo.toml

• base64 >=0.22.1, <0.23
• getrandom >=0.2.9, <0.3
• rand >=0.8.5, <0.9
• zeroize >=1.7.0, <2.0
• zxcvbn >=3.0.1, <4.0
• rand_chacha 0.3.1
• zeroize >=1.7.0, <2.0
• rustls 0.23.19
• rustls-platform-verifier 0.6.0

crates/bitwarden-crypto/Cargo.toml

• aes >=0.8.2, <0.9
• argon2 >=0.5.0, <0.6
• base64 >=0.22.1, <0.23
• cbc >=0.1.2, <0.2
• chacha20poly1305 0.10.1
• ciborium >=0.2.2, <0.3
• coset >=0.3.8, <0.4
• ed25519-dalek >=2.1.1, <=2.2.0
• generic-array >=0.14.7, <1.0
• hkdf >=0.12.3, <0.13
• hmac >=0.12.1, <0.13
• num-bigint >=0.4, <0.5
• num-traits >=0.2.15, <0.3
• pbkdf2 >=0.12.1, <0.13
• rand >=0.8.5, <0.9
• rand_chacha >=0.3.1, <0.4.0
• rayon >=1.8.1, <2.0
• rsa >=0.9.2, <0.10
• serde_bytes >=0.11.17, <0.12.0
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• subtle >=2.5.0, <3.0
• typenum >=1.18.0, <1.19.0
• zeroize >=1.7.0, <2.0
• zeroizing-alloc >=0.1.0, <0.2
• criterion 0.6.0
• rand_chacha 0.3.1

crates/bitwarden-error-macro/Cargo.toml

• darling 0.20.10

crates/bitwarden-error/Cargo.toml

• trybuild 1.0.101

crates/bitwarden-exporters/Cargo.toml

• base64 >=0.22.1, <0.23
• credential-exchange-format >=0.1, <0.2
• csv 1.3.0
• num-traits >=0.2, <0.3

crates/bitwarden-fido/Cargo.toml

• base64 >=0.22.1, <0.23
• coset >=0.3.7, <0.4
• itertools >=0.13.0, <0.15
• p256 >=0.13.2, <0.14

crates/bitwarden-generators/Cargo.toml

• rand >=0.8.5, <0.9
• rand_chacha 0.3.1
• wiremock 0.6.0

crates/bitwarden-ipc/Cargo.toml

• erased-serde >=0.4.6, <0.5

crates/bitwarden-send/Cargo.toml

• base64 >=0.22.1, <0.23
• zeroize >=1.7.0, <2.0

crates/bitwarden-ssh/Cargo.toml

• ed25519 >=2.2.3, <3.0
• pem-rfc7468 0.7.0
• pkcs8 >=0.10.2, <0.11
• rand >=0.8.5, <0.9
• rsa >=0.9.2, <0.10
• ssh-key >=0.6.7, <0.7
• rand_chacha 0.3.1

crates/bitwarden-state/Cargo.toml

crates/bitwarden-threading/Cargo.toml

• tokio-util 0.7.15
• console_error_panic_hook 0.1.7
• tokio-test 0.4.4
• gloo-timers 0.3.0

crates/bitwarden-uniffi/Cargo.toml

• env_logger 0.11.1
• android_logger 0.15
• jni >=0.21, <0.22
• libloading >=0.8.1, <0.9
• rustls-platform-verifier 0.6.0
• oslog 0.2.0

crates/bitwarden-uuid-macro/Cargo.toml

crates/bitwarden-uuid/Cargo.toml

crates/bitwarden-vault/Cargo.toml

• base64 >=0.22.1, <0.23
• data-encoding >=2.0, <3
• hmac >=0.12.1, <0.13
• percent-encoding >=2.1, <3.0
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11

crates/bitwarden-wasm-internal/Cargo.toml

• base64 >=0.22.1, <0.23.0
• console_error_panic_hook 0.1.7
• console_log 1.0.0
• log 0.4.20
• wasm-bindgen =0.2.100
• wasm-bindgen-futures 0.4.41

crates/bw/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• env_logger 0.11.1
• inquire 0.7.0
• log 0.4.20

crates/memory-testing/Cargo.toml

• comfy-table 7.1.1
• hex 0.4.3
• serde 1.0.196
• serde_json 1.0.113
• zeroize 1.7.0

crates/uniffi-bindgen/Cargo.toml

dockerfile

crates/memory-testing/Dockerfile

• rust 1.85

github-actions

.github/workflows/build-android.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b

.github/workflows/build-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/build-swift.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/build-wasm-internal.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/github-script v7.0.1@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/check-powerset.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/cloc.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

.github/workflows/delete-old-packages.yml

• actions/delete-package-versions v5.0.0@e5bc658cc4c965c472efe991f8beea3981499c55

.github/workflows/direct-minimal-versions.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/enforce-labels.yml

• yogevbd/enforce-label-action 2.2.2@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024

.github/workflows/lint.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• github/codeql-action v3.28.8@dd746615b3b9d728a6a37ca2045b68ca76d4841a
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a

.github/workflows/memory-testing.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/minimum-rust-version.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/publish-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• chrnorm/deployment-action v2.0.7@55729fcebec3d284f60f5bcabbd8376437d696b1
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806

.github/workflows/publish-wasm-internal.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf

.github/workflows/release-rust-crates.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ncipollo/release-action v1.15.0@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87

.github/workflows/release-swift.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• ncipollo/release-action v1.15.0@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87

.github/workflows/rust-test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• codecov/codecov-action v5.3.1@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3

.github/workflows/rustdoc.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• actions/upload-pages-artifact v3.0.1@56afc609e74202658d3ffba0e8f6dda462b719fa
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/scan.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• checkmarx/ast-github-action 2.0.42@9fda4ab4c1b67c35de380552a972a82997d97731
• github/codeql-action v3.28.8@dd746615b3b9d728a6a37ca2045b68ca76d4841a
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• sonarsource/sonarqube-scan-action v5.2.0@2500896589ef8f7247069a56136f8dc177c27ccf

.github/workflows/version-bump.yml

• dtolnay/rust-toolchain b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• Azure/login v1.6.0@e15b166166a8746d1a47596803bd8c1b595455cf
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683

npm

crates/bitwarden-wasm-internal/npm/package.json

• type-fest ^4.41.0
• typescript 5.8.3

package.json

• @openapitools/openapi-generator-cli 2.20.2
• prettier 3.5.3

regex

rust-toolchain.toml

• rust 1.87.0

rust-toolchain.toml

• rust-nightly 2025-05-08

---

• Check this box to trigger a request for Renovate to run again on this repository