git: e0254edf08c2 - main - security/rauthy: Security update to 0.36.2

From: Bernard Spil <brnrd_at_FreeBSD.org>
Date: Sun, 27 Sep 2026 08:36:02 UTC
The branch main has been updated by brnrd:

URL: https://cgit.FreeBSD.org/ports/commit/?id=e0254edf08c2efb68febe236b8f8c7279283de58

commit e0254edf08c2efb68febe236b8f8c7279283de58
Author:     Bernard Spil <brnrd@FreeBSD.org>
AuthorDate: 2026-09-27 08:34:45 +0000
Commit:     Bernard Spil <brnrd@FreeBSD.org>
CommitDate: 2026-09-27 08:34:45 +0000

    security/rauthy: Security update to 0.36.2
    
    PR:             298869
    Approved by:    Daniel Morante (maintainer)
    Security:       2ec747aa-b97e-11f1-b09d-8447094a420f
    MFH:            20263
---
 security/rauthy/Makefile        |   2 +-
 security/rauthy/Makefile.crates | 493 ++++++++++----------
 security/rauthy/distinfo        | 992 +++++++++++++++++++---------------------
 3 files changed, 691 insertions(+), 796 deletions(-)

diff --git a/security/rauthy/Makefile b/security/rauthy/Makefile
index 579526a7e9ec..708200afdeb4 100644
--- a/security/rauthy/Makefile
+++ b/security/rauthy/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	rauthy
 DISTVERSIONPREFIX=	v
-DISTVERSION=	0.35.2
+DISTVERSION=	0.36.2
 CATEGORIES=	security
 
 MAINTAINER=	daniel@morante.net
diff --git a/security/rauthy/Makefile.crates b/security/rauthy/Makefile.crates
index 8f42f490e251..6348f7729927 100644
--- a/security/rauthy/Makefile.crates
+++ b/security/rauthy/Makefile.crates
@@ -1,16 +1,16 @@
 CARGO_CRATES=	accept-language-3.1.0 \
 		actix-codec-0.5.2 \
-		actix-http-3.12.1 \
+		actix-http-3.13.1 \
 		actix-macros-0.2.4 \
-		actix-multipart-0.7.2 \
-		actix-multipart-derive-0.7.0 \
+		actix-multipart-0.8.0 \
+		actix-multipart-derive-0.8.0 \
 		actix-router-0.5.4 \
 		actix-rt-2.11.0 \
 		actix-server-2.6.0 \
 		actix-service-2.0.3 \
 		actix-tls-3.5.0 \
 		actix-utils-3.0.1 \
-		actix-web-4.13.0 \
+		actix-web-4.14.0 \
 		actix-web-codegen-4.3.0 \
 		actix-web-lab-0.26.0 \
 		actix-web-lab-derive-0.26.0 \
@@ -22,9 +22,9 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		ahash-0.8.12 \
 		aho-corasick-1.1.4 \
 		alloc-no-stdlib-2.0.4 \
-		alloc-stdlib-0.2.2 \
+		alloc-stdlib-0.2.4 \
 		allocator-api2-0.2.21 \
-		ammonia-4.1.2 \
+		ammonia-4.1.4 \
 		android_system_properties-0.1.5 \
 		anstream-1.0.0 \
 		anstyle-1.0.14 \
@@ -32,11 +32,11 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		anstyle-query-1.1.5 \
 		anstyle-wincon-3.0.11 \
 		anyerror-0.1.13 \
-		anyhow-1.0.102 \
+		anyhow-1.0.104 \
 		arbitrary-1.4.2 \
-		arc-swap-1.9.1 \
+		arc-swap-1.9.2 \
 		argon2-0.5.3 \
-		arrayvec-0.7.6 \
+		arrayvec-0.7.8 \
 		as_variant-1.3.0 \
 		askama-0.16.0 \
 		askama_derive-0.16.0 \
@@ -48,21 +48,21 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		asn1-rs-derive-0.6.0 \
 		asn1-rs-impl-0.2.0 \
 		assign-1.1.1 \
-		async-compression-0.4.42 \
+		async-compression-0.4.43 \
 		async-lock-3.4.2 \
 		async-stream-0.3.6 \
 		async-stream-impl-0.3.6 \
-		async-trait-0.1.89 \
+		async-trait-0.1.91 \
 		atomic-waker-1.1.2 \
 		atrium-api-0.25.8 \
 		atrium-common-0.1.4 \
 		atrium-identity-0.1.9 \
 		atrium-oauth-0.1.7 \
 		atrium-xrpc-0.12.4 \
-		autocfg-1.5.0 \
-		aws-lc-rs-1.17.0 \
+		autocfg-1.5.1 \
+		aws-lc-rs-1.17.3 \
 		aws-lc-sys-0.39.1 \
-		aws-lc-sys-0.41.0 \
+		aws-lc-sys-0.43.0 \
 		axum-0.8.9 \
 		axum-core-0.5.6 \
 		axum-extra-0.12.6 \
@@ -70,64 +70,64 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		base-x-0.2.11 \
 		base16ct-0.2.0 \
 		base256emoji-1.0.2 \
+		base45-3.2.0 \
 		base64-0.21.7 \
 		base64-0.22.1 \
+		base64-0.23.0 \
 		base64ct-1.8.3 \
 		base64urlsafedata-0.5.5 \
 		basic-toml-0.1.10 \
 		bincode-2.0.1 \
 		bincode_derive-2.0.1 \
 		bit-vec-0.9.1 \
-		bitflags-2.11.1 \
-		bitvec-1.0.1 \
+		bitflags-2.13.1 \
+		bitvec-1.1.1 \
 		blake2-0.10.6 \
 		block-buffer-0.10.4 \
-		block-buffer-0.12.0 \
-		borsh-1.6.1 \
-		borsh-derive-1.6.1 \
-		brotli-8.0.2 \
-		brotli-decompressor-5.0.0 \
-		bumpalo-3.20.2 \
-		byte-unit-5.2.0 \
+		block-buffer-0.12.1 \
+		borsh-1.8.0 \
+		borsh-derive-1.8.0 \
+		brotli-8.0.4 \
+		brotli-decompressor-5.0.3 \
+		bumpalo-3.20.3 \
+		byte-unit-5.2.5 \
 		bytecheck-0.6.12 \
 		bytecheck_derive-0.6.12 \
-		bytemuck-1.25.0 \
+		bytemuck-1.25.2 \
 		byteorder-1.5.0 \
 		byteorder-lite-0.1.0 \
-		bytes-1.11.1 \
+		bytes-1.12.1 \
+		bytesize-2.4.2 \
 		bytestring-1.5.1 \
 		cast-0.3.0 \
-		cc-1.2.62 \
-		cesu8-1.1.0 \
+		cc-1.4.0 \
 		cfg-if-1.0.4 \
-		cfg_aliases-0.2.1 \
+		cfg_aliases-0.2.2 \
 		chacha20-0.9.1 \
-		chacha20-0.10.0 \
+		chacha20-0.10.1 \
 		chacha20poly1305-0.10.1 \
-		chrono-0.4.44 \
+		chrono-0.4.45 \
 		chrono-tz-0.10.4 \
 		cid-0.11.3 \
 		cidr-0.3.2 \
 		cipher-0.4.4 \
-		clap-4.6.1 \
-		clap_builder-4.6.0 \
-		clap_derive-4.6.1 \
+		clap-4.6.4 \
+		clap_builder-4.6.2 \
+		clap_derive-4.6.4 \
 		clap_lex-1.1.0 \
 		cmake-0.1.58 \
-		cmov-0.5.3 \
+		cmov-0.5.4 \
 		colorchoice-1.0.5 \
 		colored-3.1.1 \
 		combine-4.6.7 \
 		compression-codecs-0.4.38 \
 		compression-core-0.4.32 \
-		concurrent-queue-2.5.0 \
 		console_error_panic_hook-0.1.7 \
 		const-oid-0.9.6 \
 		const-oid-0.10.2 \
 		const-str-0.4.3 \
 		const_panic-0.2.15 \
 		constant_time_eq-0.5.0 \
-		convert_case-0.4.0 \
 		convert_case-0.10.0 \
 		cookie-0.16.2 \
 		cookie-0.18.1 \
@@ -140,25 +140,27 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		crc-catalog-2.5.0 \
 		crc32fast-1.5.0 \
 		critical-section-1.2.0 \
-		cron-0.16.0 \
-		crossbeam-channel-0.5.15 \
-		crossbeam-epoch-0.9.18 \
-		crossbeam-utils-0.8.21 \
+		cron-0.17.0 \
+		crossbeam-0.8.4 \
+		crossbeam-channel-0.5.16 \
+		crossbeam-deque-0.8.7 \
+		crossbeam-epoch-0.9.20 \
+		crossbeam-queue-0.3.13 \
+		crossbeam-utils-0.8.22 \
 		crunchy-0.2.4 \
 		crypto-bigint-0.5.5 \
 		crypto-common-0.1.7 \
-		crypto-common-0.2.1 \
+		crypto-common-0.2.2 \
 		cryptr-0.10.0 \
 		css-color-0.2.8 \
-		cssparser-0.35.0 \
-		cssparser-macros-0.6.1 \
+		cssparser-0.37.0 \
 		csv-1.4.0 \
 		csv-core-0.1.13 \
-		ct-codecs-1.1.6 \
+		ct-codecs-1.1.7 \
 		ctutils-0.4.2 \
-		darling-0.20.11 \
-		darling_core-0.20.11 \
-		darling_macro-0.20.11 \
+		darling-0.23.0 \
+		darling_core-0.23.0 \
+		darling_macro-0.23.0 \
 		dary_heap-0.3.9 \
 		dashmap-6.2.1 \
 		data-encoding-2.11.0 \
@@ -172,13 +174,12 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		deadpool-runtime-0.1.4 \
 		deadpool-runtime-0.3.1 \
 		der-0.7.10 \
-		der-0.8.0 \
+		der-0.8.1 \
 		der-parser-9.0.0 \
 		der-parser-10.0.0 \
 		der_derive-0.7.3 \
 		deranged-0.5.8 \
 		derive_arbitrary-1.4.2 \
-		derive_more-0.99.20 \
 		derive_more-1.0.0 \
 		derive_more-2.1.1 \
 		derive_more-impl-1.0.0 \
@@ -186,7 +187,7 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		diff-0.1.13 \
 		digest-0.10.7 \
 		digest-0.11.3 \
-		displaydoc-0.2.5 \
+		displaydoc-0.2.7 \
 		dotenvy-0.15.7 \
 		dtoa-1.0.11 \
 		dtoa-short-0.3.5 \
@@ -194,21 +195,21 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		dyn-clone-1.0.20 \
 		ecdsa-0.16.9 \
 		ed25519-3.0.0 \
-		ed25519-compact-2.3.0 \
-		either-1.15.0 \
+		ed25519-compact-2.3.1 \
+		either-1.17.0 \
 		elliptic-curve-0.13.8 \
-		email-encoding-0.4.1 \
+		email-encoding-0.4.2 \
 		email_address-0.2.9 \
 		encoding_rs-0.8.35 \
 		equivalent-1.0.2 \
 		errno-0.3.14 \
-		event-listener-5.4.1 \
+		event-listener-5.4.2 \
 		event-listener-strategy-0.5.4 \
 		fallible-iterator-0.2.0 \
 		fallible-iterator-0.3.0 \
 		fallible-streaming-iterator-0.1.9 \
-		fastbloom-0.14.1 \
-		fastrand-2.4.1 \
+		fastbloom-0.17.0 \
+		fastrand-2.5.0 \
 		fastwebsockets-0.10.0 \
 		fdeflate-0.3.7 \
 		ff-0.13.1 \
@@ -218,67 +219,64 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		flate2-1.1.9 \
 		flume-0.12.0 \
 		fnv-1.0.7 \
-		foldhash-0.1.5 \
 		foldhash-0.2.0 \
 		foreign-types-0.3.2 \
 		foreign-types-shared-0.1.1 \
 		form_urlencoded-1.2.2 \
-		fs-err-3.3.0 \
-		fs4-0.13.1 \
+		fs-err-3.3.1 \
+		fs4-1.1.0 \
 		fs_extra-1.3.0 \
 		fsevent-sys-4.1.0 \
 		funty-2.0.0 \
-		futf-0.1.5 \
-		futures-0.3.32 \
-		futures-channel-0.3.32 \
-		futures-core-0.3.32 \
-		futures-executor-0.3.32 \
-		futures-io-0.3.32 \
-		futures-macro-0.3.32 \
-		futures-sink-0.3.32 \
-		futures-task-0.3.32 \
-		futures-timer-3.0.3 \
-		futures-util-0.3.32 \
+		futures-0.3.33 \
+		futures-channel-0.3.33 \
+		futures-core-0.3.33 \
+		futures-executor-0.3.33 \
+		futures-io-0.3.33 \
+		futures-macro-0.3.33 \
+		futures-sink-0.3.33 \
+		futures-task-0.3.33 \
+		futures-timer-3.0.4 \
+		futures-util-0.3.33 \
 		generic-array-0.14.7 \
 		gethostname-1.1.0 \
 		getopts-0.2.24 \
 		getrandom-0.2.17 \
 		getrandom-0.3.4 \
-		getrandom-0.4.2 \
-		glob-0.3.3 \
+		getrandom-0.4.3 \
+		glob-0.3.4 \
 		group-0.13.0 \
 		h2-0.3.27 \
-		h2-0.4.14 \
+		h2-0.4.15 \
 		half-2.7.1 \
 		hashbrown-0.12.3 \
 		hashbrown-0.14.5 \
-		hashbrown-0.15.5 \
 		hashbrown-0.16.1 \
 		hashbrown-0.17.1 \
-		hashlink-0.11.0 \
+		hashlink-0.12.1 \
 		heck-0.5.0 \
 		hermit-abi-0.5.2 \
 		hex-0.4.3 \
 		hickory-net-0.26.1 \
 		hickory-proto-0.26.1 \
 		hickory-resolver-0.26.1 \
-		hiqlite-0.13.1 \
-		hiqlite-derive-0.13.0 \
-		hiqlite-wal-0.13.0 \
+		hiqlite-0.14.0 \
+		hiqlite-derive-0.14.0 \
+		hiqlite-wal-0.14.0 \
 		hmac-0.12.1 \
 		hmac-0.13.0 \
 		hmac-sha256-1.1.14 \
 		hmac-sha512-1.1.12 \
 		hostname-0.4.2 \
-		html5ever-0.35.0 \
+		html5ever-0.39.0 \
 		http-0.2.12 \
-		http-1.4.0 \
-		http-body-1.0.1 \
-		http-body-util-0.1.3 \
+		http-1.5.0 \
+		http-body-1.1.0 \
+		http-body-util-0.1.4 \
 		httparse-1.10.1 \
 		httpdate-1.0.3 \
-		hybrid-array-0.4.12 \
-		hyper-1.9.0 \
+		hybrid-array-0.4.13 \
+		hyper-1.11.0 \
 		hyper-rustls-0.27.9 \
 		hyper-tls-0.6.0 \
 		hyper-util-0.1.20 \
@@ -291,17 +289,16 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		icu_properties-2.2.0 \
 		icu_properties_data-2.2.0 \
 		icu_provider-2.2.0 \
-		id-arena-2.3.0 \
 		ident_case-1.0.1 \
 		idna-1.1.0 \
 		idna_adapter-1.2.2 \
 		image-0.25.10 \
 		image-webp-0.2.4 \
 		impl-more-0.1.9 \
-		impl-more-0.3.1 \
+		impl-more-0.3.5 \
 		indexmap-2.14.0 \
-		inotify-0.11.1 \
-		inotify-sys-0.1.5 \
+		inotify-0.11.4 \
+		inotify-sys-0.1.8 \
 		inout-0.1.4 \
 		inventory-0.3.24 \
 		ipconfig-0.3.4 \
@@ -310,65 +307,61 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		ipnetwork-0.21.1 \
 		is_terminal_polyfill-1.70.2 \
 		itertools-0.14.0 \
+		itertools-0.15.0 \
 		itoa-1.0.18 \
-		jni-0.21.1 \
 		jni-0.22.4 \
 		jni-macros-0.22.4 \
-		jni-sys-0.3.1 \
 		jni-sys-0.4.1 \
 		jni-sys-macros-0.4.1 \
-		jobserver-0.1.34 \
+		jobserver-0.1.35 \
 		jose-b64-0.1.2 \
 		jose-jwa-0.1.2 \
 		jose-jwk-0.1.2 \
 		josekit-0.8.7 \
-		js-sys-0.3.98 \
+		js-sys-0.3.103 \
 		js_int-0.2.2 \
 		js_option-0.2.0 \
 		konst-0.4.3 \
-		kqueue-1.1.1 \
+		kqueue-1.2.0 \
 		kqueue-sys-1.1.2 \
 		langtag-0.3.4 \
 		language-tags-0.3.2 \
 		lazy_static-1.5.0 \
-		leb128fmt-0.1.0 \
 		lettre-0.11.22 \
-		libc-0.2.186 \
-		libflate-2.3.0 \
+		libc-0.2.189 \
+		libflate-2.3.1 \
 		libflate_lz77-2.3.0 \
 		libm-0.2.16 \
-		libredox-0.1.16 \
-		libsqlite3-sys-0.37.0 \
+		libredox-0.1.18 \
+		libsqlite3-sys-0.38.1 \
 		linux-raw-sys-0.12.1 \
 		litemap-0.8.2 \
 		local-channel-0.1.5 \
 		local-waker-0.1.4 \
 		lock_api-0.4.14 \
-		log-0.4.29 \
+		log-0.4.33 \
 		lru-0.16.4 \
 		lru-slab-0.1.2 \
 		lz4-sys-1.11.1+lz4-1.10.0 \
-		mac-0.1.1 \
 		maplit-1.0.2 \
-		markup5ever-0.35.0 \
+		markup5ever-0.39.0 \
 		match-lookup-0.1.2 \
-		match_token-0.35.0 \
 		matchers-0.2.0 \
 		matchit-0.8.4 \
-		maxminddb-0.28.1 \
+		maxminddb-0.30.0 \
 		md-5-0.11.0 \
-		md5-0.8.0 \
-		memchr-2.8.0 \
-		memmap2-0.9.10 \
+		md5-0.8.1 \
+		memchr-2.8.3 \
+		memmap2-0.9.11 \
 		mime-0.3.17 \
 		mime_guess-2.0.5 \
 		minicov-0.3.8 \
 		minimal-lexical-0.2.1 \
 		miniz_oxide-0.8.9 \
-		mio-1.2.0 \
+		mio-1.2.2 \
 		moka-0.12.15 \
 		moxcms-0.8.1 \
-		multibase-0.9.2 \
+		multibase-0.9.3 \
 		multihash-0.19.5 \
 		native-tls-0.2.18 \
 		ndk-context-0.1.1 \
@@ -379,11 +372,11 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		notify-8.2.0 \
 		notify-types-2.1.0 \
 		nu-ansi-term-0.50.3 \
-		num-bigint-0.4.6 \
+		num-bigint-0.4.8 \
 		num-bigint-dig-0.8.6 \
 		num-conv-0.2.2 \
 		num-integer-0.1.46 \
-		num-iter-0.1.45 \
+		num-iter-0.1.46 \
 		num-traits-0.2.19 \
 		num_cpus-1.17.0 \
 		num_threads-0.1.7 \
@@ -395,20 +388,19 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		once_cell_polyfill-1.70.2 \
 		oorandom-11.1.5 \
 		opaque-debug-0.3.1 \
-		openraft-0.9.24 \
-		openraft-macros-0.9.24 \
-		openssl-0.10.80 \
+		openraft-0.9.25 \
+		openraft-macros-0.9.25 \
+		openssl-0.10.81 \
 		openssl-macros-0.1.1 \
 		openssl-probe-0.2.1 \
-		openssl-src-300.6.0+3.6.2 \
-		openssl-sys-0.9.116 \
-		oxilangtag-0.1.5 \
+		openssl-src-300.6.1+3.6.3 \
+		openssl-sys-0.9.117 \
+		oxilangtag-0.1.6 \
 		oxiri-0.2.11 \
 		p256-0.13.2 \
 		parking-2.2.1 \
 		parking_lot-0.12.5 \
 		parking_lot_core-0.9.12 \
-		parse-size-1.1.0 \
 		password-hash-0.5.0 \
 		pastey-0.1.1 \
 		pem-3.0.6 \
@@ -417,8 +409,9 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		phf-0.11.3 \
 		phf-0.12.1 \
 		phf-0.13.1 \
-		phf_codegen-0.11.3 \
+		phf_codegen-0.13.1 \
 		phf_generator-0.11.3 \
+		phf_generator-0.13.1 \
 		phf_macros-0.11.3 \
 		phf_shared-0.11.3 \
 		phf_shared-0.12.1 \
@@ -432,64 +425,63 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		pkg-config-0.3.33 \
 		png-0.18.1 \
 		poly1305-0.8.0 \
-		portable-atomic-1.13.1 \
-		postgres-derive-0.4.8 \
-		postgres-native-tls-0.5.3 \
-		postgres-protocol-0.6.11 \
-		postgres-types-0.2.13 \
+		portable-atomic-1.14.0 \
+		postgres-derive-0.4.9 \
+		postgres-protocol-0.6.12 \
+		postgres-types-0.2.14 \
 		potential_utf-0.1.5 \
 		powerfmt-0.2.0 \
 		ppv-lite86-0.2.21 \
 		precomputed-hash-0.1.1 \
 		prefix-trie-0.8.4 \
 		pretty_assertions-1.4.1 \
-		prettyplease-0.2.37 \
 		primeorder-0.13.6 \
 		proc-macro-crate-3.5.0 \
-		proc-macro-error-attr2-2.0.0 \
-		proc-macro-error2-2.0.1 \
-		proc-macro2-1.0.106 \
+		proc-macro-error-attr3-3.0.2 \
+		proc-macro-error3-3.0.2 \
+		proc-macro2-1.0.107 \
 		prometheus-0.14.0 \
 		protobuf-3.7.2 \
 		protobuf-support-3.7.2 \
 		ptr_meta-0.1.4 \
 		ptr_meta_derive-0.1.4 \
-		pulldown-cmark-0.13.3 \
+		pulldown-cmark-0.13.4 \
 		pulldown-cmark-escape-0.11.0 \
-		pxfm-0.1.29 \
+		pxfm-0.1.30 \
 		quick-error-2.0.1 \
 		quick-xml-0.39.4 \
-		quinn-0.11.9 \
-		quinn-proto-0.11.14 \
-		quinn-udp-0.5.14 \
-		quote-1.0.45 \
+		quinn-0.11.11 \
+		quinn-proto-0.11.16 \
+		quinn-udp-0.5.15 \
+		quote-1.0.47 \
 		quoted_printable-0.5.2 \
 		r-efi-5.3.0 \
 		r-efi-6.0.0 \
 		radium-0.7.0 \
-		rand-0.8.6 \
-		rand-0.9.4 \
-		rand-0.10.1 \
+		rand-0.8.7 \
+		rand-0.9.5 \
+		rand-0.10.2 \
 		rand_chacha-0.3.1 \
 		rand_chacha-0.9.0 \
 		rand_core-0.6.4 \
 		rand_core-0.9.5 \
 		rand_core-0.10.1 \
+		rand_pcg-0.10.2 \
 		rcgen-0.14.8 \
 		redox_syscall-0.5.18 \
-		ref-cast-1.0.25 \
-		ref-cast-impl-1.0.25 \
-		refinery-0.9.1 \
-		refinery-core-0.9.1 \
-		refinery-macros-0.9.1 \
-		regex-1.12.3 \
-		regex-automata-0.4.14 \
+		ref-cast-1.0.26 \
+		ref-cast-impl-1.0.26 \
+		refinery-0.9.2 \
+		refinery-core-0.9.2 \
+		refinery-macros-0.9.2 \
+		regex-1.13.1 \
+		regex-automata-0.4.16 \
 		regex-lite-0.1.9 \
-		regex-syntax-0.8.10 \
+		regex-syntax-0.8.11 \
 		relative-path-1.9.3 \
 		rend-0.4.2 \
 		reqwest-0.12.28 \
-		reqwest-0.13.3 \
+		reqwest-0.13.4 \
 		resolv-conf-0.7.6 \
 		rfc6979-0.4.0 \
 		ring-0.17.14 \
@@ -498,91 +490,89 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		rkyv-0.7.46 \
 		rkyv_derive-0.7.46 \
 		rle-decode-fast-1.0.3 \
-		rpassword-7.5.2 \
+		rpassword-7.5.4 \
 		rsa-0.9.10 \
-		rsqlite-vfs-0.1.0 \
+		rsqlite-vfs-0.1.1 \
 		rstest-0.26.1 \
 		rstest_macros-0.26.1 \
 		rtoolbox-0.0.5 \
-		ruma-0.15.1 \
-		ruma-client-0.18.0 \
-		ruma-client-api-0.23.1 \
-		ruma-common-0.18.0 \
-		ruma-events-0.33.0 \
+		ruma-0.16.0 \
+		ruma-client-0.19.0 \
+		ruma-client-api-0.24.0 \
+		ruma-common-0.19.0 \
+		ruma-events-0.34.0 \
 		ruma-identifiers-validation-0.12.1 \
-		ruma-macros-0.18.0 \
-		rusqlite-0.39.0 \
-		rust-embed-8.11.0 \
-		rust-embed-impl-8.11.0 \
-		rust-embed-utils-8.11.0 \
-		rust_decimal-1.42.0 \
-		rustc-hash-2.1.2 \
+		ruma-macros-0.19.0 \
+		rusqlite-0.40.1 \
+		rust-embed-8.12.0 \
+		rust-embed-impl-8.12.0 \
+		rust-embed-utils-8.12.0 \
+		rust_decimal-1.42.1 \
+		rustc-hash-2.1.3 \
 		rustc_version-0.4.1 \
 		rusticata-macros-4.1.0 \
 		rustix-1.1.4 \
-		rustls-0.23.40 \
-		rustls-native-certs-0.8.3 \
-		rustls-pki-types-1.14.1 \
-		rustls-platform-verifier-0.6.2 \
+		rustls-0.23.43 \
+		rustls-native-certs-0.8.4 \
+		rustls-pki-types-1.15.1 \
 		rustls-platform-verifier-0.7.0 \
 		rustls-platform-verifier-android-0.1.1 \
 		rustls-webpki-0.103.13 \
-		rustversion-1.0.22 \
+		rustversion-1.0.23 \
 		ryu-1.0.23 \
 		s3-simple-0.8.0 \
 		same-file-1.0.6 \
 		schannel-0.1.29 \
-		schemars-1.2.1 \
+		schemars-1.2.2 \
 		scopeguard-1.2.0 \
 		seahash-4.1.0 \
 		sec1-0.7.3 \
 		security-framework-3.7.0 \
 		security-framework-sys-2.17.0 \
 		semver-1.0.28 \
-		serde-1.0.228 \
+		serde-1.0.229 \
 		serde_bytes-0.11.19 \
 		serde_cbor_2-0.13.0 \
-		serde_core-1.0.228 \
-		serde_derive-1.0.228 \
+		serde_core-1.0.229 \
+		serde_derive-1.0.229 \
 		serde_html_form-0.2.8 \
-		serde_html_form-0.4.0 \
-		serde_json-1.0.149 \
+		serde_html_form-0.4.1 \
+		serde_json-1.0.151 \
 		serde_json_path-0.7.2 \
 		serde_json_path_core-0.2.2 \
 		serde_json_path_macros-0.1.6 \
 		serde_json_path_macros_internal-0.1.2 \
 		serde_path_to_error-0.1.20 \
 		serde_plain-1.0.2 \
-		serde_rusqlite-0.42.0 \
-		serde_spanned-0.6.9 \
+		serde_rusqlite-0.43.0 \
 		serde_spanned-1.1.1 \
 		serde_urlencoded-0.7.1 \
-		sha1-0.10.6 \
+		sha1-0.10.7 \
 		sha1-0.11.0 \
 		sha2-0.10.9 \
 		sha2-0.11.0 \
 		sharded-slab-0.1.7 \
-		shlex-1.3.0 \
+		shlex-2.0.1 \
 		signal-hook-registry-1.4.8 \
 		signature-2.2.0 \
 		signature-3.0.0 \
-		simd-adler32-0.3.9 \
-		simd_cesu8-1.1.1 \
+		simd-adler32-0.3.10 \
+		simd_cesu8-1.2.0 \
 		simdutf8-0.1.5 \
 		siphasher-1.0.3 \
 		slab-0.4.12 \
-		smallvec-1.15.1 \
+		smallvec-1.15.2 \
 		socket2-0.5.10 \
-		socket2-0.6.3 \
-		spin-0.9.8 \
+		socket2-0.6.5 \
+		spin-0.9.9 \
 		spki-0.7.3 \
 		spki-0.8.0 \
 		spow-0.6.0 \
-		sqlite-wasm-rs-0.5.3 \
+		sqlite-wasm-rs-0.5.5 \
 		stable_deref_trait-1.2.1 \
 		strfmt-0.2.5 \
-		string_cache-0.8.9 \
-		string_cache_codegen-0.5.4 \
+		string_cache-0.9.0 \
+		string_cache_codegen-0.6.1 \
 		stringprep-0.1.5 \
 		strsim-0.11.1 \
 		strum-0.28.0 \
@@ -590,7 +580,8 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		subtle-2.6.1 \
 		svg-hush-0.9.6 \
 		syn-1.0.109 \
-		syn-2.0.117 \
+		syn-2.0.119 \
+		syn-3.0.3 \
 		sync_wrapper-1.0.2 \
 		synstructure-0.13.2 \
 		system-configuration-0.7.0 \
@@ -599,44 +590,41 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		tap-1.0.1 \
 		tar-0.4.46 \
 		tempfile-3.27.0 \
-		tendril-0.4.3 \
+		tendril-0.5.1 \
 		thiserror-1.0.69 \
-		thiserror-2.0.18 \
+		thiserror-2.0.19 \
 		thiserror-impl-1.0.69 \
-		thiserror-impl-2.0.18 \
-		thread-priority-3.0.0 \
-		thread_local-1.1.9 \
-		tikv-jemalloc-sys-0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7 \
-		tikv-jemallocator-0.6.1 \
-		time-0.3.47 \
-		time-core-0.1.8 \
-		time-macros-0.2.27 \
+		thiserror-impl-2.0.19 \
+		thread-priority-3.1.1 \
+		thread_local-1.1.10 \
+		tikv-jemalloc-sys-0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8 \
+		tikv-jemallocator-0.7.0 \
+		time-0.3.51 \
+		time-core-0.1.9 \
+		time-macros-0.2.30 \
 		tinystr-0.8.3 \
-		tinyvec-1.11.0 \
+		tinyvec-1.12.0 \
 		tinyvec_macros-0.1.1 \
 		tls-hot-reload-0.3.0 \
 		tls_codec-0.4.2 \
 		tls_codec_derive-0.4.2 \
-		tokio-1.52.3 \
-		tokio-macros-2.7.0 \
+		tokio-1.53.1 \
+		tokio-macros-2.7.2 \
 		tokio-native-tls-0.3.1 \
-		tokio-postgres-0.7.17 \
-		tokio-postgres-rustls-0.13.0 \
+		tokio-postgres-0.7.18 \
+		tokio-postgres-rustls-0.14.0 \
 		tokio-rustls-0.26.4 \
-		tokio-stream-0.1.18 \
+		tokio-stream-0.1.19 \
 		tokio-test-0.4.5 \
-		tokio-util-0.7.18 \
-		toml-0.8.23 \
-		toml-1.1.2+spec-1.1.0 \
-		toml_datetime-0.6.11 \
+		tokio-util-0.7.19 \
+		toml-1.1.4+spec-1.1.0 \
 		toml_datetime-1.1.1+spec-1.1.0 \
-		toml_edit-0.22.27 \
-		toml_edit-0.25.11+spec-1.1.0 \
-		toml_parser-1.1.2+spec-1.1.0 \
-		toml_write-0.1.2 \
-		toml_writer-1.1.1+spec-1.1.0 \
+		toml_edit-0.25.13+spec-1.1.0 \
+		toml_parser-1.1.3+spec-1.1.0 \
+		toml_writer-1.1.2+spec-1.1.0 \
 		tower-0.5.3 \
 		tower-http-0.6.11 \
+		tower-http-0.7.0 \
 		tower-layer-0.3.3 \
 		tower-service-0.3.3 \
 		tracing-0.1.44 \
@@ -646,16 +634,16 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		tracing-log-0.2.0 \
 		tracing-serde-0.2.0 \
 		tracing-subscriber-0.3.23 \
-		trait-variant-0.1.2 \
+		trait-variant-0.1.3 \
 		try-lock-0.2.5 \
-		typenum-1.20.0 \
+		typenum-1.20.1 \
 		typewit-1.15.2 \
 		unicase-2.9.0 \
 		unicode-bidi-0.3.18 \
 		unicode-ident-1.0.24 \
 		unicode-normalization-0.1.25 \
 		unicode-properties-0.1.4 \
-		unicode-segmentation-1.13.2 \
+		unicode-segmentation-1.13.3 \
 		unicode-width-0.2.2 \
 		unicode-xid-0.2.6 \
 		universal-hash-0.5.1 \
@@ -665,17 +653,17 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		unty-0.0.4 \
 		url-2.5.8 \
 		utf-8-0.7.6 \
-		utf8-width-0.1.8 \
+		utf8-width-0.1.9 \
 		utf8_iter-1.0.4 \
 		utf8parse-0.2.2 \
 		utoipa-5.5.0 \
 		utoipa-gen-5.5.0 \
 		utoipa-swagger-ui-9.0.2 \
 		utoipa-swagger-ui-vendored-0.1.2 \
-		uuid-1.23.1 \
+		uuid-1.24.0 \
 		validator-0.20.0 \
-		validator_derive-0.20.0 \
-		validit-0.2.5 \
+		validator_derive-0.20.1 \
+		validit-0.2.6 \
 		valuable-0.1.1 \
 		vcpkg-0.2.15 \
 		version_check-0.9.5 \
@@ -684,90 +672,67 @@ CARGO_CRATES=	accept-language-3.1.0 \
 		want-0.3.1 \
 		wasi-0.11.1+wasi-snapshot-preview1 \
 		wasi-0.14.7+wasi-0.2.4 \
-		wasip2-1.0.3+wasi-0.2.9 \
-		wasip3-0.4.0+wasi-0.3.0-rc-2026-01-06 \
+		wasip2-1.0.4+wasi-0.2.12 \
 		wasite-1.0.2 \
-		wasm-bindgen-0.2.121 \
-		wasm-bindgen-futures-0.4.71 \
-		wasm-bindgen-macro-0.2.121 \
-		wasm-bindgen-macro-support-0.2.121 \
-		wasm-bindgen-shared-0.2.121 \
-		wasm-bindgen-test-0.3.71 \
-		wasm-bindgen-test-macro-0.3.71 \
-		wasm-bindgen-test-shared-0.2.121 \
-		wasm-encoder-0.244.0 \
-		wasm-metadata-0.244.0 \
+		wasm-bindgen-0.2.126 \
+		wasm-bindgen-futures-0.4.76 \
+		wasm-bindgen-macro-0.2.126 \
+		wasm-bindgen-macro-support-0.2.126 \
+		wasm-bindgen-shared-0.2.126 \
+		wasm-bindgen-test-0.3.76 \
+		wasm-bindgen-test-macro-0.3.76 \
+		wasm-bindgen-test-shared-0.2.126 \
 		wasm-streams-0.5.0 \
-		wasmparser-0.244.0 \
-		web-sys-0.3.98 \
+		web-sys-0.3.103 \
 		web-time-1.1.0 \
-		web_atoms-0.1.3 \
+		web_atoms-0.2.5 \
 		webauthn-attestation-ca-0.5.5 \
 		webauthn-rs-0.5.5 \
 		webauthn-rs-core-0.5.5 \
 		webauthn-rs-proto-0.5.5 \
-		webpki-root-certs-1.0.7 \
-		webpki-roots-1.0.7 \
+		webpki-root-certs-1.0.9 \
+		webpki-roots-1.0.9 \
 		whoami-2.1.2 \
 		widestring-1.2.1 \
 		wildmatch-2.6.1 \
 		winapi-util-0.1.11 \
-		windows-0.61.3 \
-		windows-collections-0.2.0 \
-		windows-core-0.61.2 \
+		windows-0.62.2 \
+		windows-collections-0.3.2 \
 		windows-core-0.62.2 \
-		windows-future-0.2.1 \
+		windows-future-0.3.2 \
 		windows-implement-0.60.2 \
 		windows-interface-0.59.3 \
-		windows-link-0.1.3 \
 		windows-link-0.2.1 \
-		windows-numerics-0.2.0 \
+		windows-numerics-0.3.1 \
 		windows-registry-0.6.1 \
-		windows-result-0.3.4 \
 		windows-result-0.4.1 \
-		windows-strings-0.4.2 \
 		windows-strings-0.5.1 \
-		windows-sys-0.45.0 \
 		windows-sys-0.52.0 \
 		windows-sys-0.59.0 \
 		windows-sys-0.60.2 \
 		windows-sys-0.61.2 \
-		windows-targets-0.42.2 \
 		windows-targets-0.52.6 \
 		windows-targets-0.53.5 \
-		windows-threading-0.1.0 \
-		windows_aarch64_gnullvm-0.42.2 \
+		windows-threading-0.2.1 \
 		windows_aarch64_gnullvm-0.52.6 \
 		windows_aarch64_gnullvm-0.53.1 \
-		windows_aarch64_msvc-0.42.2 \
 		windows_aarch64_msvc-0.52.6 \
 		windows_aarch64_msvc-0.53.1 \
-		windows_i686_gnu-0.42.2 \
 		windows_i686_gnu-0.52.6 \
 		windows_i686_gnu-0.53.1 \
 		windows_i686_gnullvm-0.52.6 \
 		windows_i686_gnullvm-0.53.1 \
-		windows_i686_msvc-0.42.2 \
 		windows_i686_msvc-0.52.6 \
 		windows_i686_msvc-0.53.1 \
-		windows_x86_64_gnu-0.42.2 \
 		windows_x86_64_gnu-0.52.6 \
 		windows_x86_64_gnu-0.53.1 \
-		windows_x86_64_gnullvm-0.42.2 \
 		windows_x86_64_gnullvm-0.52.6 \
 		windows_x86_64_gnullvm-0.53.1 \
-		windows_x86_64_msvc-0.42.2 \
 		windows_x86_64_msvc-0.52.6 \
 		windows_x86_64_msvc-0.53.1 \
 		winnow-0.7.15 \
-		winnow-1.0.3 \
-		wit-bindgen-0.51.0 \
+		winnow-1.0.4 \
 		wit-bindgen-0.57.1 \
-		wit-bindgen-core-0.51.0 \
-		wit-bindgen-rust-0.51.0 \
-		wit-bindgen-rust-macro-0.51.0 \
-		wit-component-0.244.0 \
-		wit-parser-0.244.0 \
 		writeable-0.6.3 \
 		wyz-0.5.1 \
 		x509-cert-0.2.5 \
@@ -777,20 +742,20 @@ CARGO_CRATES=	accept-language-3.1.0 \
*** 1738 LINES SKIPPED ***