Skip to content

chore(deps): update jsonwebtoken requirement from 9 to 10#5

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/jsonwebtoken-10
Open

chore(deps): update jsonwebtoken requirement from 9 to 10#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/jsonwebtoken-10

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Updates the requirements on jsonwebtoken to permit the latest version.

Changelog

Sourced from jsonwebtoken's changelog.

10.4.0 (2026-05-11)

  • Fix incorrect encoding for Ed25519 JWK thumbprints
  • Make Algorithm.family public and add Validation.new_for_family
  • EncodingKey and DecodingKey are now partially zeroized on drop (the intermediate PemEncodedKey isn't so far)

10.3.0 (2026-01-27)

  • Export everything needed to define your own CryptoProvider
  • Fix type confusion with exp/nbf when not required

10.2.0 (2025-11-06)

  • Remove Clone bound from decode functions

10.1.0 (2025-10-18)

  • add dangerous::insecure_decode
  • Implement TryFrom &Jwk for DecodingKey

10.0.0 (2025-09-29)

  • BREAKING: now using traits for crypto backends, you have to choose between aws_lc_rs and rust_crypto
  • Add Clone bound to decode
  • Support decoding byte slices
  • Support JWS

9.3.1 (2024-02-06)

  • Update base64

9.3.0 (2024-03-12)

  • Add Validation.reject_tokens_expiring_in_less_than, the opposite of leeway

9.2.0 (2023-12-01)

  • Add an option to not validate aud in the Validation struct
  • Get the current timestamp in wasm without using std
  • Update ring to 0.17

9.1.0 (2023-10-21)

  • Supports deserialization of unsupported algorithms for JWKs

9.0.0 (2023-10-16)

  • Update ring
  • Rejects JWTs containing audiences when the Validation doesn't contain any

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 25, 2026
Updates the requirements on [jsonwebtoken](https://github.com/Keats/jsonwebtoken) to permit the latest version.
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v9.0.0...v10.4.0)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-version: 10.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): update jsonwebtoken requirement from 9 to 10 chore(deps): update jsonwebtoken requirement from 9 to 10 May 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/jsonwebtoken-10 branch from 4e43dbc to 430d49f Compare May 29, 2026 13:25
podheitor pushed a commit that referenced this pull request May 31, 2026
…rint #5

ATTENDEE lines were parsed for cn/role/partstat/rsvp but not CUTYPE
(RFC 5545 §3.2.3), so resource and room attendees were indistinguishable from
people. Add it:

- itip::Attendee gains a cutype field; parse_attendees reads the CUTYPE param
  (uppercased; None when absent → caller treats as the INDIVIDUAL default).
- GET /calendars/:cal_id/events/:id/attendees now returns cutype and accepts
  ?cutype=resource|room|individual|… to filter (INDIVIDUAL also matches
  attendees with no CUTYPE param).

No migration — attendees are parsed live from ical_raw, same as the existing
endpoint. Scope is resource/room *visibility*; a bookable-room registry and
double-booking detection remain a separate, larger follow-up. 559 calendar lib
tests pass (incl. 3 new CUTYPE tests).
podheitor pushed a commit that referenced this pull request May 31, 2026
… — sprint #6

Builds on sprint #5 (CUTYPE parsing) to complete roadmap #10's larger half: a
room/equipment registry and conflict detection.

- migrations calendar_resources (registry: email/name/kind/capacity, UNIQUE per
  tenant) + calendar_event_resources (per-event booking index), both +down.
- EventRepo now also syncs booked resources: sync_resources extracts the event's
  CUTYPE=ROOM/RESOURCE attendee emails (lowercased, deduped) and re-indexes them
  delete-then-insert in-tx on create/update/replace_by_uid, alongside attachments.
- domain/resource.rs: ResourceRepo (create/list/get/delete) + conflicts() — a
  self-join on calendar_event_resources sharing a resource_email whose events
  overlap in time (stored dtstart/dtend, no RRULE expansion, matching the
  existing events-conflicts endpoint).
- api/resources.rs: GET/POST /api/v1/resources, GET/DELETE /:id, and
  GET /:id/conflicts?from=&to= (404 if the resource isn't registered).
- error: new ResourceNotFound(Uuid) → 404.

Closes roadmap #10. 567 calendar lib tests pass (incl. 8 new resource/booking
tests).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants