From 1b9c6c32c0e28b8556de1b57aa4206d2555ca78e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Jul 2026 19:08:40 +0000
Subject: [PATCH 1/2] build(deps): bump ulid from 1.2.1 to 2.0.1

Bumps [ulid](https://github.com/dylanhart/ulid-rs) from 1.2.1 to 2.0.1.
- [Commits](https://github.com/dylanhart/ulid-rs/compare/v1.2.1...v2.0.1)

---
updated-dependencies:
- dependency-name: ulid
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                    | 6 +++---
 crates/vegify-core/Cargo.toml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index f66d0ec..154ca52 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5941,11 +5941,11 @@ dependencies = [
 
 [[package]]
 name = "ulid"
-version = "1.2.1"
+version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "470dbf6591da1b39d43c14523b2b469c86879a53e8b758c8e090a470fe7b1fbe"
+checksum = "39493d572b98fe1d142e132e7a726c50c68121bce84429216a5ec20e1ad7fec5"
 dependencies = [
- "rand 0.9.4",
+ "rand 0.10.2",
  "web-time",
 ]
 
diff --git a/crates/vegify-core/Cargo.toml b/crates/vegify-core/Cargo.toml
index f9096b3..9f237dd 100644
--- a/crates/vegify-core/Cargo.toml
+++ b/crates/vegify-core/Cargo.toml
@@ -13,7 +13,7 @@ serde = { version = "1.0", features = ["derive"] }
 # Pinned to match the desktop's ttipc/specta so the `Type` impls are the SAME trait the
 # `#[procedures]` macro consumes (a version skew would make them distinct traits and fail to compile).
 specta = { version = "=2.0.0-rc.25", features = ["derive"] }
-ulid = "1"
+ulid = "2"
 
 [lints]
 workspace = true

From e3e467baa7aec9cc99915dff8e84430cba31c4e1 Mon Sep 17 00:00:00 2001
From: John Carmack <johncarmack@me.com>
Date: Wed, 15 Jul 2026 15:58:32 -0700
Subject: [PATCH 2/2] migrate to ulid 2 (Ulid::new -> Ulid::gen); update yanked
 spin 0.10.0 -> 0.10.1

---
 Cargo.lock                    | 4 ++--
 crates/vegify-core/src/lib.rs | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 6b173eb..bd2976c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4875,9 +4875,9 @@ dependencies = [
 
 [[package]]
 name = "spin"
-version = "0.10.0"
+version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d5fe4ccb98d9c292d56fec89a5e07da7fc4cf0dc11e156b41793132775d3e591"
+checksum = "023a211cb3138dbc438680b32560ad89f699977624c9f8dbb95a47d5b4c07dd3"
 
 [[package]]
 name = "spki"
diff --git a/crates/vegify-core/src/lib.rs b/crates/vegify-core/src/lib.rs
index 55e7db8..f9e3689 100644
--- a/crates/vegify-core/src/lib.rs
+++ b/crates/vegify-core/src/lib.rs
@@ -22,7 +22,7 @@ use ulid::Ulid;
 /// A fresh client-side ULID (text id). Minted on insert when no id is supplied; a supplied id is
 /// honored, so offline creates and sync re-applies stay authoritative.
 pub fn new_id() -> String {
-    Ulid::new().to_string()
+    Ulid::gen().to_string()
 }
 
 /// The crate error. `Db` = a SQLite/data failure (incl. the owner-guard messages); `Auth` is