StefanSA/vaultwarden-plus
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases 12 Packages 1 Wiki Activity Actions

Dependency Dashboard #1

New issue
Open
opened 2026-06-21 14:53:40 +02:00 by StefanSA · 1 comment
StefanSA commented 2026-06-21 14:53:40 +02:00
Owner
Copy link

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

  • Update mysql Docker tag to v9
  • Update Node.js to v24
  • Update postgres Docker tag to v17
  • Update postgres Docker tag to v18
  • Update Rust crate cached to v1
  • Update Rust crate cached to v2
  • Update Rust crate jsonwebtoken to v11
  • Update Rust crate syn to v3
  • 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • Update cargo-auth (jsonwebtoken, yubico)
  • Update cargo-runtime (futures, quote, regex, reqwest, serde, serde_json, syn, time, tokio, tokio-util, uuid)
  • Update Rust crate bytes to 1.12.1
  • Update Rust crate diesel to 2.3.11
  • Update Rust crate diesel-derive-newtype to 2.1.3
  • Update Rust crate handlebars to 6.4.3
  • Update Rust crate html5gum to 0.8.4
  • Update Rust crate rand to 0.10.2
  • Update Rust crate which to 8.0.5
  • Update cargo-storage (aws-config, aws-credential-types, aws-sdk-sesv2, aws-smithy-runtime-api, opendal, reqsign-aws-v4, reqsign-core)
  • Update docker-build (docker.io/library/rust, docker.io/vaultwarden/web-vault, node)
  • Update docker-database (mariadb, mysql, postgres)
  • Update docker-keycloak
  • Update docker-mail
  • Update docker.io/library/alpine Docker tag to v3.24
  • Update ghcr.io/renovatebot/renovate Docker tag to v43.281.1
  • Update Rust crate libsqlite3-sys to 0.38.1
  • Update Rust crate num-derive to 0.5.1
  • Lock file maintenance
  • 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

cargo (2)
Cargo.toml (72)
  • log 0.4.33
  • fern 0.7.1
  • tracing 0.1.44
  • dotenvy 0.15.7
  • num-traits 0.2.19
  • num-derive 0.4.2 → [Updates: 0.5.1]
  • bigdecimal 0.4.10
  • rocket 0.5.1
  • rocket_ws 0.1.1
  • rmpv 1.3.1
  • dashmap 6.2.1
  • futures 0.3.32 → [Updates: 0.3.33]
  • tokio 1.52.3 → [Updates: 1.53.1]
  • tokio-util 0.7.18 → [Updates: 0.7.19]
  • serde 1.0.228 → [Updates: 1.0.229]
  • serde_json 1.0.150 → [Updates: 1.0.151]
  • diesel 2.3.10 → [Updates: 2.3.11]
  • diesel_migrations 2.3.2
  • derive_more 2.1.1
  • diesel-derive-newtype 2.1.2 → [Updates: 2.1.3]
  • libsqlite3-sys 0.37.0 → [Updates: 0.38.1]
  • rand 0.10.1 → [Updates: 0.10.2]
  • ring 0.17.14
  • subtle 2.6.1
  • uuid 1.23.3 → [Updates: 1.24.0]
  • chrono 0.4.45
  • chrono-tz 0.10.4
  • time 0.3.49 → [Updates: 0.3.54]
  • job_scheduler_ng 2.4.0
  • data-encoding 2.11.0
  • jsonwebtoken 10.3.0 → [Updates: 10.4.0, 11.0.0]
  • totp-lite 2.0.1
  • yubico 0.14.1 → [Updates: 0.15.0]
  • webauthn-rs 0.5.5
  • webauthn-rs-proto 0.5.5
  • webauthn-rs-core 0.5.5
  • url 2.5.8
  • lettre 0.11.22
  • percent-encoding 2.3.2
  • email_address 0.2.9
  • handlebars 6.4.1 → [Updates: 6.4.3]
  • reqwest 0.12.28 → [Updates: 0.13.4]
  • hickory-resolver 0.26.1
  • html5gum 0.8.3 → [Updates: 0.8.4]
  • regex 1.12.4 → [Updates: 1.13.1]
  • data-url 0.3.2
  • bytes 1.12.0 → [Updates: 1.12.1]
  • svg-hush 0.9.6
  • cached 0.59.0 → [Updates: 1.1.0, 2.0.2]
  • cookie 0.18.1
  • cookie_store 0.22.1
  • openssl 0.10.81
  • pico-args 0.5.0
  • pastey 0.2.3
  • governor 0.10.4
  • openidconnect 4.0.1
  • moka 0.12.15
  • semver 1.0.28
  • mimalloc 0.1.52
  • which 8.0.4 → [Updates: 8.0.5]
  • argon2 0.5.3
  • rpassword 7.5.4
  • grass_compiler 0.13.4
  • opendal 0.56.0 → [Updates: 0.57.0]
  • aws-config 1.8.16 → [Updates: 1.10.1]
  • aws-credential-types 1.2.14 → [Updates: 1.3.0]
  • aws-sdk-sesv2 1.118.0 → [Updates: 1.128.0]
  • aws-smithy-runtime-api 1.12.0 → [Updates: 1.14.0]
  • http 1.4.2
  • reqsign-aws-v4 3.0.0 → [Updates: 3.0.3]
  • reqsign-core 3.0.0 → [Updates: 3.2.0]
  • syslog 7.0.0
macros/Cargo.toml (2)
  • quote 1.0.45 → [Updates: 1.0.47]
  • syn 2.0.118 → [Updates: 2.0.119, 3.0.3]
docker-compose (1)
playwright/docker-compose.yml (5)
  • mariadb 12.2.2 → [Updates: 12.3.2]
  • mysql 8.4.1 → [Updates: 8.4.10, 9.7.1]
  • postgres 16.3 → [Updates: 16.14, 17.10, 18.4]
  • timshel/maildev 3.0.4 → [Updates: 3.3.3]
  • quay.io/keycloak/keycloak 26.3.4 → [Updates: 26.7.0]
dockerfile (6)
docker/Dockerfile.alpine (3)
  • docker/dockerfile 1.25
  • docker.io/vaultwarden/web-vault v2026.4.1@sha256:ca2a4251c4e63c9ad428262b4dd452789a1b9f6fce71da351e93dceed0d2edbe → [Updates: v2026.6.4]
  • docker.io/library/alpine 3.23 → [Updates: 3.24]
docker/Dockerfile.debian (4)
  • docker/dockerfile 1.25
  • docker.io/vaultwarden/web-vault v2026.4.1@sha256:ca2a4251c4e63c9ad428262b4dd452789a1b9f6fce71da351e93dceed0d2edbe → [Updates: v2026.6.4]
  • docker.io/tonistiigi/xx sha256:c64defb9ed5a91eacb37f96ccc3d4cd72521c4bd18d5442905b95e2226b0e707
  • docker.io/library/rust 1.95.0-slim-trixie → [Updates: 1.97.1-slim-trixie]
docker/Dockerfile.debian.kaniko (2)
  • docker.io/vaultwarden/web-vault v2026.4.1@sha256:ca2a4251c4e63c9ad428262b4dd452789a1b9f6fce71da351e93dceed0d2edbe → [Updates: v2026.6.4]
  • docker.io/library/rust 1.95.0-slim-trixie → [Updates: 1.97.1-slim-trixie]
playwright/compose/keycloak/Dockerfile
playwright/compose/playwright/Dockerfile
playwright/compose/warden/Dockerfile (1)
  • node 22-trixie → [Updates: 22.23.1-trixie, 24.18.0-trixie]
github-actions (5)
.forgejo/workflows/auto-image-build.yml (2)
  • https://data.forgejo.org/actions/checkout v7
  • https://data.forgejo.org/forgejo/upload-artifact v5
.forgejo/workflows/ci.yml (1)
  • https://data.forgejo.org/actions/checkout v7
.forgejo/workflows/manual-image-build.yml (2)
  • https://data.forgejo.org/actions/checkout v7
  • https://data.forgejo.org/forgejo/upload-artifact v5
.forgejo/workflows/renovate.yml (1)
  • ghcr.io/renovatebot/renovate 43.234.0 → [Updates: 43.281.1]
.forgejo/workflows/validate-publish-surface.yml (1)
  • https://data.forgejo.org/actions/checkout v7
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] <!-- approve-branch=renovate/mysql-9.x -->Update mysql Docker tag to v9 - [ ] <!-- approve-branch=renovate/node-24.x -->Update Node.js to v24 - [ ] <!-- approve-branch=renovate/postgres-17.x -->Update postgres Docker tag to v17 - [ ] <!-- approve-branch=renovate/postgres-18.x -->Update postgres Docker tag to v18 - [ ] <!-- approve-branch=renovate/cached-1.x -->Update Rust crate cached to v1 - [ ] <!-- approve-branch=renovate/cached-2.x -->Update Rust crate cached to v2 - [ ] <!-- approve-branch=renovate/jsonwebtoken-11.x -->Update Rust crate jsonwebtoken to v11 - [ ] <!-- approve-branch=renovate/syn-3.x -->Update Rust crate syn to v3 - [ ] <!-- approve-all-pending-prs -->🔐 **Create all pending approval PRs at once** 🔐 ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] <!-- unschedule-branch=renovate/cargo-auth -->Update cargo-auth (`jsonwebtoken`, `yubico`) - [ ] <!-- unschedule-branch=renovate/cargo-runtime -->Update cargo-runtime (`futures`, `quote`, `regex`, `reqwest`, `serde`, `serde_json`, `syn`, `time`, `tokio`, `tokio-util`, `uuid`) - [ ] <!-- unschedule-branch=renovate/bytes-1.x -->Update Rust crate bytes to 1.12.1 - [ ] <!-- unschedule-branch=renovate/diesel-2.x -->Update Rust crate diesel to 2.3.11 - [ ] <!-- unschedule-branch=renovate/diesel-derive-newtype-2.x -->Update Rust crate diesel-derive-newtype to 2.1.3 - [ ] <!-- unschedule-branch=renovate/handlebars-6.x -->Update Rust crate handlebars to 6.4.3 - [ ] <!-- unschedule-branch=renovate/html5gum-0.x -->Update Rust crate html5gum to 0.8.4 - [ ] <!-- unschedule-branch=renovate/rand-0.x -->Update Rust crate rand to 0.10.2 - [ ] <!-- unschedule-branch=renovate/which-8.x -->Update Rust crate which to 8.0.5 - [ ] <!-- unschedule-branch=renovate/cargo-storage -->Update cargo-storage (`aws-config`, `aws-credential-types`, `aws-sdk-sesv2`, `aws-smithy-runtime-api`, `opendal`, `reqsign-aws-v4`, `reqsign-core`) - [ ] <!-- unschedule-branch=renovate/docker-build -->Update docker-build (`docker.io/library/rust`, `docker.io/vaultwarden/web-vault`, `node`) - [ ] <!-- unschedule-branch=renovate/docker-database -->Update docker-database (`mariadb`, `mysql`, `postgres`) - [ ] <!-- unschedule-branch=renovate/docker-keycloak -->Update docker-keycloak - [ ] <!-- unschedule-branch=renovate/docker-mail -->Update docker-mail - [ ] <!-- unschedule-branch=renovate/docker.io-library-alpine-3.x -->Update docker.io/library/alpine Docker tag to v3.24 - [ ] <!-- unschedule-branch=renovate/ghcr.io-renovatebot-renovate-43.x -->Update ghcr.io/renovatebot/renovate Docker tag to v43.281.1 - [ ] <!-- unschedule-branch=renovate/libsqlite3-sys-0.x -->Update Rust crate libsqlite3-sys to 0.38.1 - [ ] <!-- unschedule-branch=renovate/num-derive-0.x -->Update Rust crate num-derive to 0.5.1 - [ ] <!-- unschedule-branch=renovate/lock-file-maintenance -->Lock file maintenance - [ ] <!-- create-all-awaiting-schedule-prs -->🔐 **Create all awaiting schedule PRs at once** 🔐 ## Detected Dependencies <details><summary>cargo (2)</summary> <blockquote> <details><summary>Cargo.toml (72)</summary> - `log 0.4.33` - `fern 0.7.1` - `tracing 0.1.44` - `dotenvy 0.15.7` - `num-traits 0.2.19` - `num-derive 0.4.2` → [Updates: `0.5.1`] - `bigdecimal 0.4.10` - `rocket 0.5.1` - `rocket_ws 0.1.1` - `rmpv 1.3.1` - `dashmap 6.2.1` - `futures 0.3.32` → [Updates: `0.3.33`] - `tokio 1.52.3` → [Updates: `1.53.1`] - `tokio-util 0.7.18` → [Updates: `0.7.19`] - `serde 1.0.228` → [Updates: `1.0.229`] - `serde_json 1.0.150` → [Updates: `1.0.151`] - `diesel 2.3.10` → [Updates: `2.3.11`] - `diesel_migrations 2.3.2` - `derive_more 2.1.1` - `diesel-derive-newtype 2.1.2` → [Updates: `2.1.3`] - `libsqlite3-sys 0.37.0` → [Updates: `0.38.1`] - `rand 0.10.1` → [Updates: `0.10.2`] - `ring 0.17.14` - `subtle 2.6.1` - `uuid 1.23.3` → [Updates: `1.24.0`] - `chrono 0.4.45` - `chrono-tz 0.10.4` - `time 0.3.49` → [Updates: `0.3.54`] - `job_scheduler_ng 2.4.0` - `data-encoding 2.11.0` - `jsonwebtoken 10.3.0` → [Updates: `10.4.0`, `11.0.0`] - `totp-lite 2.0.1` - `yubico 0.14.1` → [Updates: `0.15.0`] - `webauthn-rs 0.5.5` - `webauthn-rs-proto 0.5.5` - `webauthn-rs-core 0.5.5` - `url 2.5.8` - `lettre 0.11.22` - `percent-encoding 2.3.2` - `email_address 0.2.9` - `handlebars 6.4.1` → [Updates: `6.4.3`] - `reqwest 0.12.28` → [Updates: `0.13.4`] - `hickory-resolver 0.26.1` - `html5gum 0.8.3` → [Updates: `0.8.4`] - `regex 1.12.4` → [Updates: `1.13.1`] - `data-url 0.3.2` - `bytes 1.12.0` → [Updates: `1.12.1`] - `svg-hush 0.9.6` - `cached 0.59.0` → [Updates: `1.1.0`, `2.0.2`] - `cookie 0.18.1` - `cookie_store 0.22.1` - `openssl 0.10.81` - `pico-args 0.5.0` - `pastey 0.2.3` - `governor 0.10.4` - `openidconnect 4.0.1` - `moka 0.12.15` - `semver 1.0.28` - `mimalloc 0.1.52` - `which 8.0.4` → [Updates: `8.0.5`] - `argon2 0.5.3` - `rpassword 7.5.4` - `grass_compiler 0.13.4` - `opendal 0.56.0` → [Updates: `0.57.0`] - `aws-config 1.8.16` → [Updates: `1.10.1`] - `aws-credential-types 1.2.14` → [Updates: `1.3.0`] - `aws-sdk-sesv2 1.118.0` → [Updates: `1.128.0`] - `aws-smithy-runtime-api 1.12.0` → [Updates: `1.14.0`] - `http 1.4.2` - `reqsign-aws-v4 3.0.0` → [Updates: `3.0.3`] - `reqsign-core 3.0.0` → [Updates: `3.2.0`] - `syslog 7.0.0` </details> <details><summary>macros/Cargo.toml (2)</summary> - `quote 1.0.45` → [Updates: `1.0.47`] - `syn 2.0.118` → [Updates: `2.0.119`, `3.0.3`] </details> </blockquote> </details> <details><summary>docker-compose (1)</summary> <blockquote> <details><summary>playwright/docker-compose.yml (5)</summary> - `mariadb 12.2.2` → [Updates: `12.3.2`] - `mysql 8.4.1` → [Updates: `8.4.10`, `9.7.1`] - `postgres 16.3` → [Updates: `16.14`, `17.10`, `18.4`] - `timshel/maildev 3.0.4` → [Updates: `3.3.3`] - `quay.io/keycloak/keycloak 26.3.4` → [Updates: `26.7.0`] </details> </blockquote> </details> <details><summary>dockerfile (6)</summary> <blockquote> <details><summary>docker/Dockerfile.alpine (3)</summary> - `docker/dockerfile 1.25` - `docker.io/vaultwarden/web-vault v2026.4.1@sha256:ca2a4251c4e63c9ad428262b4dd452789a1b9f6fce71da351e93dceed0d2edbe` → [Updates: `v2026.6.4`] - `docker.io/library/alpine 3.23` → [Updates: `3.24`] </details> <details><summary>docker/Dockerfile.debian (4)</summary> - `docker/dockerfile 1.25` - `docker.io/vaultwarden/web-vault v2026.4.1@sha256:ca2a4251c4e63c9ad428262b4dd452789a1b9f6fce71da351e93dceed0d2edbe` → [Updates: `v2026.6.4`] - `docker.io/tonistiigi/xx sha256:c64defb9ed5a91eacb37f96ccc3d4cd72521c4bd18d5442905b95e2226b0e707` - `docker.io/library/rust 1.95.0-slim-trixie` → [Updates: `1.97.1-slim-trixie`] </details> <details><summary>docker/Dockerfile.debian.kaniko (2)</summary> - `docker.io/vaultwarden/web-vault v2026.4.1@sha256:ca2a4251c4e63c9ad428262b4dd452789a1b9f6fce71da351e93dceed0d2edbe` → [Updates: `v2026.6.4`] - `docker.io/library/rust 1.95.0-slim-trixie` → [Updates: `1.97.1-slim-trixie`] </details> <details><summary>playwright/compose/keycloak/Dockerfile</summary> </details> <details><summary>playwright/compose/playwright/Dockerfile</summary> </details> <details><summary>playwright/compose/warden/Dockerfile (1)</summary> - `node 22-trixie` → [Updates: `22.23.1-trixie`, `24.18.0-trixie`] </details> </blockquote> </details> <details><summary>github-actions (5)</summary> <blockquote> <details><summary>.forgejo/workflows/auto-image-build.yml (2)</summary> - `https://data.forgejo.org/actions/checkout v7` - `https://data.forgejo.org/forgejo/upload-artifact v5` </details> <details><summary>.forgejo/workflows/ci.yml (1)</summary> - `https://data.forgejo.org/actions/checkout v7` </details> <details><summary>.forgejo/workflows/manual-image-build.yml (2)</summary> - `https://data.forgejo.org/actions/checkout v7` - `https://data.forgejo.org/forgejo/upload-artifact v5` </details> <details><summary>.forgejo/workflows/renovate.yml (1)</summary> - `ghcr.io/renovatebot/renovate 43.234.0` → [Updates: `43.281.1`] </details> <details><summary>.forgejo/workflows/validate-publish-surface.yml (1)</summary> - `https://data.forgejo.org/actions/checkout v7` </details> </blockquote> </details>
StefanSA commented 2026-06-22 21:02:07 +02:00
Author
Owner
Copy link

RC1 Dependency Freeze – 2026-06-22

RC1 dependency candidates completed

  • log
  • handlebars
  • http
  • pastey
  • which
  • openssl
  • bytes
  • dashmap
  • mimalloc
  • chrono
  • regex
  • time
  • tokio
  • uuid
  • serde_json
  • syn
  • diesel

Validation

Diesel was validated separately with DB-focused checks:

  • cargo fmt --check: PASS
  • cargo check --features sqlite: PASS
  • cargo check --features sqlite,ses: PASS
  • cargo check --features sqlite,s3: PASS
  • cargo check --features mysql: PASS
  • cargo check --features postgresql: PASS

Latest Diesel commit:

4ba74020b9b4da53e5509ad423f5d7991362c4a2

CI Status

Latest main CI: PENDING as of this dashboard update.

Current Forgejo commit status for 4ba74020b9b4da53e5509ad423f5d7991362c4a2:

  • auto-image-build / docker-build (push): PENDING - Has started running
  • ci / rust-checks (push): PENDING - Waiting to run
  • validate-publish-surface / validate-publish-surface (push): PENDING - Waiting to run

No CI failure was reported at the time of review.

RC1 Freeze

The RC1 dependency update set is now considered complete.

No further dependency updates should be merged into RC1 unless required for:

  • security blocker
  • build blocker
  • release blocker

Deferred / Post-RC1

Optional / deferred:

  • cargo-storage / AWS / reqsign group

Post-RC1 / investigate:

  • reqwest
  • jsonwebtoken
  • yubico
  • opendal
  • cached
  • docker/toolchain/base images
  • database images
## RC1 Dependency Freeze – 2026-06-22 ### RC1 dependency candidates completed - log - handlebars - http - pastey - which - openssl - bytes - dashmap - mimalloc - chrono - regex - time - tokio - uuid - serde_json - syn - diesel ### Validation Diesel was validated separately with DB-focused checks: - cargo fmt --check: PASS - cargo check --features sqlite: PASS - cargo check --features sqlite,ses: PASS - cargo check --features sqlite,s3: PASS - cargo check --features mysql: PASS - cargo check --features postgresql: PASS Latest Diesel commit: `4ba74020b9b4da53e5509ad423f5d7991362c4a2` ### CI Status Latest `main` CI: PENDING as of this dashboard update. Current Forgejo commit status for `4ba74020b9b4da53e5509ad423f5d7991362c4a2`: - auto-image-build / docker-build (push): PENDING - Has started running - ci / rust-checks (push): PENDING - Waiting to run - validate-publish-surface / validate-publish-surface (push): PENDING - Waiting to run No CI failure was reported at the time of review. ### RC1 Freeze The RC1 dependency update set is now considered complete. No further dependency updates should be merged into RC1 unless required for: - security blocker - build blocker - release blocker ### Deferred / Post-RC1 Optional / deferred: - cargo-storage / AWS / reqsign group Post-RC1 / investigate: - reqwest - jsonwebtoken - yubico - opendal - cached - docker/toolchain/base images - database images
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
canonical/vwplus-all-in-20260612
v1.36.11
v1.36.10
v1.36.9
v1.36.8
v1.36.7
v1.36.6
v1.36.5
v1.36.4
v1.36.3
v1.36.2
v1.36.1
v1.36.0-rc1
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
StefanSA/vaultwarden-plus#1
No description provided.