Skip to content

chore(deps): bump tough from 0.22.0 to 0.23.0#101

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tough-0.23.0
Open

chore(deps): bump tough from 0.22.0 to 0.23.0#101
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tough-0.23.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 25, 2026

Copy link
Copy Markdown
Contributor

Bumps tough from 0.22.0 to 0.23.0.

Release notes

Sourced from tough's releases.

tough-v0.23.0

Breaking Changes

  • Migrated from chrono to jiff. Public API: DateTime<Utc> types replaced with jiff::Timestamp on Role::expires, Root/Snapshot/Targets/Timestamp expires fields, RepositoryEditor::*_expires setters, and the SystemTimeSteppedBackward error variant. Wire format unchanged (RFC 3339, Z suffix). #948
  • HttpTransport and HttpTransportBuilder no longer implement Copy #940

Added

  • Add support for a custom CryptoProvider in HttpTransportBuilder #940

Changes

  • Update to reqwest 0.13 #938
  • Dependency updates
Commits
  • a605fc0 Merge pull request #949 from sky1122/release-prerp
  • 5edc360 fix(failure-server): replace deprecated Retry::spawn with Retry::start
  • d56461d chore(tuftool): prepare for release 0.16.0
  • 6c41329 chore(tough-ssm): prepare for release 0.18.0
  • 5287492 chore(tough-kms): prepare for release 0.15.0
  • e233da9 chore(tough): prepare for release 0.23.0
  • f9b6934 chore: update dependency
  • a1c1aa3 Merge pull request #948 from jmt-lab/jiff
  • 4acbde6 feat!: migrate from chrono to jiff
  • 907f8d6 Merge pull request #940 from sky1122/cryptoprovider
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Rust implementation work. labels Jun 25, 2026
@dependabot dependabot Bot requested a review from jeremi as a code owner June 25, 2026 11:33
@dependabot dependabot Bot added rust Rust implementation work. dependencies Pull requests that update a dependency file labels Jun 25, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/tough-0.23.0 branch 8 times, most recently from d7d70fe to 035d3a5 Compare June 26, 2026 12:49
@dependabot dependabot Bot changed the title Bump tough from 0.22.0 to 0.23.0 chore(deps): bump tough from 0.22.0 to 0.23.0 Jun 27, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/tough-0.23.0 branch 3 times, most recently from 891515f to 98ccd1c Compare June 27, 2026 22:58
Bumps [tough](https://github.com/awslabs/tough) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/awslabs/tough/releases)
- [Commits](awslabs/tough@tough-v0.22.0...tough-v0.23.0)

---
updated-dependencies:
- dependency-name: tough
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/tough-0.23.0 branch from 98ccd1c to 0ebd8be Compare June 28, 2026 01:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Rust implementation work.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants