Skip to content
This repository was archived by the owner on Jul 18, 2026. It is now read-only.

deps: bump keyring from 2.3.3 to 4.1.5#7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/keyring-4.1.5
Open

deps: bump keyring from 2.3.3 to 4.1.5#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/keyring-4.1.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown
Contributor

Bumps keyring from 2.3.3 to 4.1.5.

Release notes

Sourced from keyring's releases.

v4.1.5: Compatibility release

Rust 1.97 introduced a new clippy lint that fired on the CLI example. This release fixes that problem.

This release also takes the recent bug fix to the Apple native credential store.

There are no functional changes in this release.

What's Changed

Full Changelog: open-source-cooperative/keyring-rs@v4.1.4...v4.1.5

v4.1.3 (YANKED): better error reporting

The only functional change is better error reporting on the first call to Entry::new if the default store fails to instantiate (thanks @​eirnym).

NOTE: This release has been yanked because of #335. It has been replaced by v4.1.4.

What's Changed

Full Changelog: open-source-cooperative/keyring-rs@v4.1.2...v4.1.3

v4.1.2: coverage for more *nix OSes

This release allows use of secret-service crate on all *nix OSes - thanks @​eirnym!

There are no functional changes.

What's Changed

New Contributors

Full Changelog: open-source-cooperative/keyring-rs@v4.1.1...v4.1.2

v4.1.1: documentation fixes

This release fixes the problems with documentation and public markers in v4.0. There are no functional changes.

What's Changed

Full Changelog: open-source-cooperative/keyring-rs@v4.1.0...v4.1.1

v4.1.0: Restore keyring v1-like standalone functionality

... (truncated)

Commits
  • 17054f0 Fix new clippy warnings introduced in Rust 1.97 (#338)
  • 0c92a68 Take updated dependencies.
  • e428622 Fix new clippy warnings introduced in Rust 1.97
  • 1866f8b Fix Entry::new and add test. (#336)
  • 216e228 Fix CI to install correct dependencies.
  • 0b49dac Fix Entry::new and add test.
  • 7d5f846 Prepare release of v4.1.3 (#334)
  • e9ffc73 Prepare release of v4.1.3.
  • aa25b57 Build for iOS and Android targets
  • 86689de Use AtomicBool to guard initialization and return error if occur on the fir...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [keyring](https://github.com/open-source-cooperative/keyring-rs) from 2.3.3 to 4.1.5.
- [Release notes](https://github.com/open-source-cooperative/keyring-rs/releases)
- [Commits](open-source-cooperative/keyring-rs@v2.3.3...v4.1.5)

---
updated-dependencies:
- dependency-name: keyring
  dependency-version: 4.1.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 18, 2026
@nuntius-review

Copy link
Copy Markdown
Nuntius

Reviewed commits

Commit Summary
e466b05 deps: bump keyring from 2.3.3 to 4.1.5

An analysis of the changes in Cargo.lock shows a clean and beneficial dependency cleanup and upgrade.

Analysis

  1. Dependency Consolidation (Correctness & Performance):

    • The changes remove older duplicate versions of several asynchronous ecosystem crates, such as async-io (v1.13.0 removed, keeping v2.6.0), async-lock (v2.8.0 removed, keeping v3.4.2), and async-fs (v1.6.0 removed).
    • Consolidating these duplicate versions reduces dependency bloat, decreases compilation times, and helps prevent potential runtime issues or type mismatches caused by mixing different versions of the same library.
  2. Upgrades:

    • async-broadcast is upgraded from 0.5.1 to 0.7.2.
    • async-process is upgraded from 1.8.1 to 2.5.0.
    • These upgrades bring performance improvements, bug fixes, and better compatibility with modern asynchronous runtimes.
  3. Security:

    • The addition of apple-native-keyring-store (v1.0.1) is a standard dependency for macOS keychain integration, typically pulled in by the keyring crate. There are no known security vulnerabilities associated with the added or upgraded versions.

No code modifications are required as these are standard dependency updates.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants