Bump all Rust dependencies (#4354)

Cargo.toml

@@ -109,7 +109,7 @@ version = "1.1.9"
 
 # Memory optimisation for short strings
 [workspace.dependencies.compact_str]
-version = "0.8.1"
+version = "0.9.0"
 
 # Time utilities
 [workspace.dependencies.chrono]
@@ -278,7 +278,7 @@ version = "0.15.1"
 
 # TLS stack
 [workspace.dependencies.rustls]
-version = "0.23.23"
+version = "0.23.25"
 
 # Use platform-specific verifier for TLS
 [workspace.dependencies.rustls-platform-verifier]
@@ -312,18 +312,18 @@ features = [
 
 # Sentry error tracking
 [workspace.dependencies.sentry]
-version = "0.36.0"
+version = "0.37.0"
 default-features = false
 features = ["backtrace", "contexts", "panic", "tower", "reqwest"]
 
 # Sentry tower layer
 [workspace.dependencies.sentry-tower]
-version = "0.36.0"
+version = "0.37.0"
 features = ["http"]
 
 # Sentry tracing integration
 [workspace.dependencies.sentry-tracing]
-version = "0.36.0"
+version = "0.37.0"
 
 # Serialization and deserialization
 [workspace.dependencies.serde]
@@ -387,37 +387,37 @@ version = "0.3.19"
 
 # OpenTelemetry
 [workspace.dependencies.opentelemetry]
-version = "0.28.0"
+version = "0.29.1"
 features = ["trace", "metrics"]
 
 [workspace.dependencies.opentelemetry-http]
-version = "0.28.0"
+version = "0.29.0"
 features = ["reqwest"]
 
 [workspace.dependencies.opentelemetry-jaeger-propagator]
-version = "0.28.0"
+version = "0.29.0"
 
 [workspace.dependencies.opentelemetry-otlp]
-version = "0.28.0"
+version = "0.29.0"
 default-features = false
 features = ["trace", "metrics", "http-proto"]
 
 [workspace.dependencies.opentelemetry-prometheus]
-version = "0.28.0"
+version = "0.29.0"
 
 [workspace.dependencies.opentelemetry-resource-detectors]
-version = "0.7.0"
+version = "0.8.0"
 
 [workspace.dependencies.opentelemetry-semantic-conventions]
-version = "0.28.0"
+version = "0.29.0"
 features = ["semconv_experimental"]
 
 [workspace.dependencies.opentelemetry-stdout]
-version = "0.28.0"
+version = "0.29.0"
 features = ["trace", "metrics"]
 
 [workspace.dependencies.opentelemetry_sdk]
-version = "0.28.0"
+version = "0.29.0"
 features = [
     "experimental_trace_batch_span_processor_with_async_runtime",
     "experimental_metrics_periodicreader_with_async_runtime",
@@ -425,7 +425,7 @@ features = [
 ]
 
 [workspace.dependencies.tracing-opentelemetry]
-version = "0.29.0"
+version = "0.30.0"
 default-features = false
 
 [workspace.dependencies.prometheus]

crates/cli/src/telemetry.rs

@@ -145,7 +145,9 @@ fn init_tracer(config: &TracingConfig) -> anyhow::Result<()> {
     Ok(())
 }
 
-fn otlp_metric_reader(endpoint: Option<&url::Url>) -> anyhow::Result<PeriodicReader> {
+fn otlp_metric_reader(
+    endpoint: Option<&url::Url>,
+) -> anyhow::Result<PeriodicReader<opentelemetry_otlp::MetricExporter>> {
     let mut exporter = opentelemetry_otlp::MetricExporter::builder()
         .with_http()
         .with_http_client(mas_http::reqwest_client());
@@ -160,7 +162,7 @@ fn otlp_metric_reader(endpoint: Option<&url::Url>) -> anyhow::Result<PeriodicRea
     Ok(reader)
 }
 
-fn stdout_metric_reader() -> PeriodicReader {
+fn stdout_metric_reader() -> PeriodicReader<opentelemetry_stdout::MetricExporter> {
     let exporter = opentelemetry_stdout::MetricExporter::builder().build();
     PeriodicReader::builder(exporter, opentelemetry_sdk::runtime::Tokio).build()
 }

crates/handlers/Cargo.toml

@@ -58,7 +58,7 @@ serde_urlencoded = "0.7.1"
 
 # Password hashing
 argon2 = { version = "0.5.3", features = ["password-hash", "std"] }
-bcrypt = { version = "0.16.0", default-features = true }
+bcrypt = { version = "0.17.0", default-features = true }
 pbkdf2 = { version = "0.12.2", features = [
     "password-hash",
     "std",

crates/policy/Cargo.toml

@@ -14,7 +14,7 @@ workspace = true
 [dependencies]
 anyhow.workspace = true
 arc-swap.workspace = true
-opa-wasm = "0.1.4"
+opa-wasm = "0.1.5"
 serde.workspace = true
 serde_json.workspace = true
 schemars = { workspace = true, optional = true }

deny.toml

@@ -77,6 +77,13 @@ skip = [
     { name = "itertools", version = "0.12.1" },
     # pad depends on an old version
     { name = "unicode-width", version = "0.1.14" },
+    { name = "zerocopy", version = "0.7.35" },      # hashbrown 0.14.5 depends on this old version
+
+    # We are still mainly using rand 0.8
+    { name = "rand", version = "0.8.5" },
+    { name = "rand_chacha", version = "0.3.1" },
+    { name = "rand_core", version = "0.6.4" },
+    { name = "getrandom", version = "0.2.15" },
 ]
 
 skip-tree = []