From fe539d37e6c620efd20970a0caadfdcbfa915683 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 12 Aug 2026 15:45:01 +0000
Subject: [PATCH 1/2] chore: Bump the cargo group with 3 updates

Bumps the cargo group with 3 updates: [clap](https://github.com/clap-rs/clap), [jsonwebtoken](https://github.com/Keats/jsonwebtoken) and test-temp-dir.


Updates `clap` from 4.6.4 to 4.6.5
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.6.4...clap_complete-v4.6.5)

Updates `jsonwebtoken` from 10.4.0 to 11.0.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Keats/jsonwebtoken/compare/v10.4.0...v11.0.0)

Updates `test-temp-dir` from 0.8.0 to 0.8.1

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: jsonwebtoken
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: test-temp-dir
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 33 +++++++++++++++++++++++++--------
 Cargo.toml |  2 +-
 2 files changed, 26 insertions(+), 9 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 85e62e0..5fb477a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -293,7 +293,7 @@ dependencies = [
  "hmac-sha256",
  "http",
  "http-body-util",
- "jsonwebtoken",
+ "jsonwebtoken 11.0.0",
  "libsystemd",
  "octocrab",
  "regex",
@@ -412,9 +412,9 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.6.4"
+version = "4.6.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d91e0c145792ef73a6ad36d27c75ac09f1832222a3c209689d90f534685ee5b7"
+checksum = "301b56658598e48f3648647ac6fc887be7e7108eddfa4e9b63fcf3ec58c0cadf"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -422,9 +422,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.6.2"
+version = "4.6.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f09628afdcc538b57f3c6341e9c8e9970f18e4a481690a64974d7023bd33548b"
+checksum = "94a65403d1a1bd28f7dc68eb8506e8874808ee5eecb59298de588e2e1407a078"
 dependencies = [
  "anstream",
  "anstyle",
@@ -1348,6 +1348,23 @@ dependencies = [
  "zeroize",
 ]
 
+[[package]]
+name = "jsonwebtoken"
+version = "11.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "881733cbc631fc9e472e24447ce32a64bedf2da498d6d8570b08edc87de71f65"
+dependencies = [
+ "base64",
+ "getrandom 0.2.16",
+ "js-sys",
+ "pem",
+ "serde",
+ "serde_json",
+ "signature",
+ "simple_asn1",
+ "zeroize",
+]
+
 [[package]]
 name = "lazy_static"
 version = "1.5.0"
@@ -1615,7 +1632,7 @@ dependencies = [
  "hyper-rustls",
  "hyper-timeout",
  "hyper-util",
- "jsonwebtoken",
+ "jsonwebtoken 10.4.0",
  "percent-encoding",
  "pin-project",
  "rustls",
@@ -2497,9 +2514,9 @@ dependencies = [
 
 [[package]]
 name = "test-temp-dir"
-version = "0.8.0"
+version = "0.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff3c6f0c014e7a4d028765a34cc2f43d763cc6c0e19bae9c5e269fd2c1e5c2b6"
+checksum = "2b5c3522ef0cc9068ac46bea8b9247f8a7bf8d5584d491925efe17c0a79dddfc"
 dependencies = [
  "anyhow",
  "derive_more",
diff --git a/Cargo.toml b/Cargo.toml
index 125f60c..127a50e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -14,7 +14,7 @@ directories = "6.0.0"
 futures = "0.3.32"
 git2 = "0.21.0"
 http = "1.4.2"
-jsonwebtoken = "10.4.0"
+jsonwebtoken = "11.0.0"
 octocrab = { version = "0.54.0", features = ["stream", "tracing"] }
 regex = "1.13.0"
 secrecy = "0.10.3"

From 3dc5e35cc927e3b47c41baeb6f2114a547db6345 Mon Sep 17 00:00:00 2001
From: "Philipp A." <flying-sheep@web.de>
Date: Wed, 12 Aug 2026 21:08:53 +0200
Subject: [PATCH 2/2] deduplicate

---
 Cargo.lock | 21 ++-------------------
 Cargo.toml |  2 +-
 2 files changed, 3 insertions(+), 20 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 5fb477a..dc4747a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -293,7 +293,7 @@ dependencies = [
  "hmac-sha256",
  "http",
  "http-body-util",
- "jsonwebtoken 11.0.0",
+ "jsonwebtoken",
  "libsystemd",
  "octocrab",
  "regex",
@@ -1348,23 +1348,6 @@ dependencies = [
  "zeroize",
 ]
 
-[[package]]
-name = "jsonwebtoken"
-version = "11.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "881733cbc631fc9e472e24447ce32a64bedf2da498d6d8570b08edc87de71f65"
-dependencies = [
- "base64",
- "getrandom 0.2.16",
- "js-sys",
- "pem",
- "serde",
- "serde_json",
- "signature",
- "simple_asn1",
- "zeroize",
-]
-
 [[package]]
 name = "lazy_static"
 version = "1.5.0"
@@ -1632,7 +1615,7 @@ dependencies = [
  "hyper-rustls",
  "hyper-timeout",
  "hyper-util",
- "jsonwebtoken 10.4.0",
+ "jsonwebtoken",
  "percent-encoding",
  "pin-project",
  "rustls",
diff --git a/Cargo.toml b/Cargo.toml
index 127a50e..125f60c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -14,7 +14,7 @@ directories = "6.0.0"
 futures = "0.3.32"
 git2 = "0.21.0"
 http = "1.4.2"
-jsonwebtoken = "11.0.0"
+jsonwebtoken = "10.4.0"
 octocrab = { version = "0.54.0", features = ["stream", "tracing"] }
 regex = "1.13.0"
 secrecy = "0.10.3"