Bump argon2 from 0.5.3 to 0.6.0 in /backend #21

Open

dependabot[bot] wants to merge 1 commit from dependabot/cargo/backend/argon2-0.6.0 into main

dependabot[bot] commented

2026-10-12 23:17:11 +00:00

(Migrated from github.com)

Bumps argon2 from 0.5.3 to 0.6.0.

Commits

b1e0ad6 argon2 v0.6.0 (#931)
c0d2aca argon2: bump blake2 to v0.11 (#929)
d9c628b Cargo.lock: bump dependencies (#930)
0b31c1c Cargo.toml: use password-hash crate release (#920)
420cbc9 build(deps): bump rust-lang/crates-io-auth-action from 1.0.4 to 1.0.5 (#912)
3a88540 build(deps): bump actions/checkout from 6 to 7 (#913)
90b974f build(deps): bump the all-deps group with 5 updates (#914)
82c688f build(deps): bump the all-deps group across 1 directory with 18 updates (#911)
b2cef17 build(deps): bump the all-deps group with 6 updates (#902)
2c16e5a build(deps): bump the all-deps group with 7 updates (#901)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [argon2](https://github.com/RustCrypto/password-hashes) from 0.5.3 to 0.6.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/RustCrypto/password-hashes/commit/b1e0ad6fe229b1ba74e4696c7359ab45d7e931f0"><code>b1e0ad6</code></a> argon2 v0.6.0 (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/931">#931</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/c0d2acabf3e37ca8faa289b09511ef82513a634e"><code>c0d2aca</code></a> argon2: bump <code>blake2</code> to v0.11 (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/929">#929</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/d9c628bdc7cf2260d6f9f5b1befc5736ff6db407"><code>d9c628b</code></a> Cargo.lock: bump dependencies (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/930">#930</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/0b31c1cd92f5208a560bb1fc97fd1c413607c0ee"><code>0b31c1c</code></a> Cargo.toml: use <code>password-hash</code> crate release (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/920">#920</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/420cbc91377e650f8c5de36371fb0814a8b1286a"><code>420cbc9</code></a> build(deps): bump rust-lang/crates-io-auth-action from 1.0.4 to 1.0.5 (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/912">#912</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/3a88540522bceb04b2cae1d7c37442e031fdb2ef"><code>3a88540</code></a> build(deps): bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/913">#913</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/90b974fffaf32468c73524b99e6999d385a01b40"><code>90b974f</code></a> build(deps): bump the all-deps group with 5 updates (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/914">#914</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/82c688fcdfc359452056dba2d8431020c590f9ae"><code>82c688f</code></a> build(deps): bump the all-deps group across 1 directory with 18 updates (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/911">#911</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/b2cef1796b73cd4a288a93877d1be7a28218535a"><code>b2cef17</code></a> build(deps): bump the all-deps group with 6 updates (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/902">#902</a>)</li> <li><a href="https://github.com/RustCrypto/password-hashes/commit/2c16e5abfb74834a19550a67a4e7b09e6cb4d64e"><code>2c16e5a</code></a> build(deps): bump the all-deps group with 7 updates (<a href="https://redirect.github.com/RustCrypto/password-hashes/issues/901">#901</a>)</li> <li>Additional commits viewable in <a href="https://github.com/RustCrypto/password-hashes/compare/argon2-v0.5.3...argon2-v0.6.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=argon2&package-manager=cargo&previous-version=0.5.3&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions