build(deps): bump the everything-else group across 1 directory with 46 updates

Cargo.toml

@@ -65,7 +65,7 @@ tokio-tungstenite = { version = "0.26", features = ["rustls-tls-native-roots"] }
 eventsource-stream = "0.2"
 
 # Agent Client Protocol (ACP) — standard communication with coding agents
-agent-client-protocol = "0.10"
+agent-client-protocol = "1.0"
 
 # HTTP client
 reqwest = { version = "0.12", default-features = false, features = ["json", "multipart", "rustls-tls-native-roots", "stream"] }
@@ -78,14 +78,14 @@ serde_json = "1"
 deadpool-postgres = { version = "0.14", optional = true }
 tokio-postgres = { version = "0.7", features = ["with-uuid-1", "with-chrono-0_4", "with-serde_json-1"], optional = true }
 postgres-types = { version = "0.2", features = ["with-serde_json-1"], optional = true }
-refinery = { version = "0.8", features = ["tokio-postgres"], optional = true }
+refinery = { version = "0.9", features = ["tokio-postgres"], optional = true }
 tokio-postgres-rustls = { version = "0.13", optional = true }
 rustls = { version = "0.23", optional = true, default-features = false }
 rustls-native-certs = { version = "0.8", optional = true }
-webpki-roots = { version = "0.26", optional = true }
+webpki-roots = { version = "1.0", optional = true }
 
 # Database - libSQL/Turso (optional embedded database)
-libsql = { version = "0.6", optional = true, default-features = false, features = ["core", "replication", "remote", "tls"] }
+libsql = { version = "0.9", optional = true, default-features = false, features = ["core", "replication", "remote", "tls"] }
 
 # Error handling
 thiserror = "2"
@@ -97,7 +97,7 @@ tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }
 
 # Configuration
 dotenvy = "0.15"
-toml = "0.8"
+toml = "1.1"
 
 # Core types
 uuid = { version = "1", features = ["v4", "v5", "serde"] }
@@ -124,12 +124,12 @@ tower = "0.5"
 tower-http = { version = "0.6", features = ["trace", "cors", "set-header", "catch-panic"] }
 
 # Cron scheduling for routines
-cron = "0.13"
+cron = "0.17"
 
 # JSON Schema validation (workspace document metadata).
 # default-features disabled to avoid pulling a second `reqwest` major version
 # for remote $ref resolution (we only validate against in-memory schemas).
-jsonschema = { version = "0.45", default-features = false }
+jsonschema = { version = "0.46", default-features = false }
 
 # Shared types
 ironclaw_common = { path = "crates/ironclaw_common", version = "0.4.2" }
@@ -159,7 +159,7 @@ serde_yml = "0.0.12"
 
 # Filesystem paths
 dirs = "6"
-fs4 = "0.6"
+fs4 = "1.1"
 glob = "0.3"
 
 # Semantic versioning
@@ -187,21 +187,21 @@ pgvector = { version = "0.4", features = ["postgres"], optional = true }
 # these advisories.
 wasmtime = { version = "44.0.3", features = ["component-model"] }
 wasmtime-wasi = "44.0.3"  # WASI support for component model
-wasmparser = "0.246.2"  # WASM binary parsing for validation
+wasmparser = "0.250.0"  # WASM binary parsing for validation
 
 # Cryptography for secrets management
-aes = "0.8"
+aes = "0.9"
 aes-gcm = "0.10"
-hkdf = "0.12"
-hmac = "0.12"
-md-5 = "0.10"
-sha2 = "0.10"
+hkdf = "0.13"
+hmac = "0.13"
+md-5 = "0.11"
+sha2 = "0.11"
 blake3 = "1"
-rand = "0.8"
+rand = "0.10"
 subtle = "2"  # Constant-time comparisons for token validation
 
 # Multi-provider LLM support
-rig-core = { version = "0.30", default-features = false, features = ["reqwest-rustls"] }
+rig-core = { version = "0.33", default-features = false, features = ["reqwest-rustls"] }
 
 # AWS Bedrock: deps now live in `ironclaw_llm` (LLM provider) and
 # `ironclaw_embeddings` (Titan embeddings); the top-level `bedrock` feature
@@ -216,7 +216,7 @@ tar = "0.4"
 
 # Document text extraction lives in `crates/ironclaw_extractors` (pdf-extract,
 # etc.); `zip` is kept here because `src/tools/builtin/skill_tools.rs` uses it.
-zip = { version = "2", default-features = false, features = ["deflate"] }
+zip = { version = "8", default-features = false, features = ["deflate"] }
 
 # HTTP proxy for sandboxed network access
 hyper = { version = "1.5", features = ["server", "http1", "http2"] }
@@ -225,20 +225,20 @@ http-body-util = "0.1"
 bytes = "1"
 base64 = "0.22.1"
 cookie = "0.18"
-jsonwebtoken = "9"
+jsonwebtoken = "10"
 mime_guess = "2.0.5"
 clap_complete = "4.5.0"
-lru = "0.16.3"
+lru = "0.18.0"
 
 # HTML to Markdown conversion (feature gated)
-html-to-markdown-rs = { version = "2.3", optional = true }
+html-to-markdown-rs = { version = "3.7", optional = true }
 readabilityrs = { version = "0.1.2", optional = true }
 ed25519-dalek = { version = "2.2.0", features = ["std"] }
 bs58 = "0.5"
 hex = "0.4.3"
 
 # OpenClaw import (feature gated)
-json5 = { version = "0.4", optional = true }
+json5 = { version = "1.3", optional = true }
 
 # macOS keychain
 [target.'cfg(target_os = "macos")'.dependencies]
@@ -250,16 +250,16 @@ pty-process = { version = "0.5", features = ["async"] }
 
 # Linux secret-service (GNOME Keyring, KWallet)
 [target.'cfg(target_os = "linux")'.dependencies]
-secret-service = { version = "4", features = ["rt-tokio-crypto-rust"] }
-zbus = "4"
+secret-service = { version = "5", features = ["rt-tokio-crypto-rust"] }
+zbus = "5"
 
 [build-dependencies]
 serde_json = "1"
 
 [dev-dependencies]
 tokio-test = "0.4"
 tracing-test = "0.2"
-testcontainers-modules = { version = "0.11", features = ["postgres"] }
+testcontainers-modules = { version = "0.12", features = ["postgres"] }
 pretty_assertions = "1"
 tempfile = "3"
 insta = { version = "1.46.3", features = ["yaml"] }

crates/ironclaw_common/Cargo.toml

@@ -17,9 +17,9 @@ base64 = "0.22"
 chrono-tz = "0.10"
 dirs = "6"
 hex = "0.4"
-rand = "0.8"
+rand = "0.10"
 serde = { version = "1", features = ["derive"] }
-sha2 = "0.10"
+sha2 = "0.11"
 serde_json = "1"
 thiserror = "2"
 tracing = "0.1"

crates/ironclaw_embeddings/Cargo.toml

@@ -25,12 +25,12 @@ testing = []
 ironclaw_llm = { path = "../ironclaw_llm", version = "0.1.0" }
 
 async-trait = "0.1"
-lru = "0.16.3"
+lru = "0.18.0"
 reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls-native-roots"] }
 secrecy = { version = "0.10", features = ["serde"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 thiserror = "2"
 tracing = "0.1"
 

crates/ironclaw_engine/Cargo.toml

@@ -15,19 +15,19 @@ dist = false
 
 [dependencies]
 async-trait = "0.1"
-cron = "0.13"
+cron = "0.17"
 ironclaw_common = { path = "../ironclaw_common", version = "0.4.2" }
 ironclaw_skills = { path = "../ironclaw_skills", version = "0.3.0", default-features = false }
 chrono = { version = "0.4", features = ["serde"] }
-monty = { git = "https://github.com/pydantic/monty.git", tag = "v0.0.16" }
+monty = { git = "https://github.com/pydantic/monty.git", tag = "v0.0.18" }
 regex = "1"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 thiserror = "2"
 tokio = { version = "1", features = ["sync", "time", "macros", "rt"] }
 tracing = "0.1"
 uuid = { version = "1", features = ["v4", "v5", "serde"] }
-sha2 = "0.10"
+sha2 = "0.11"
 
 [dev-dependencies]
 pretty_assertions = "1"

crates/ironclaw_extensions/Cargo.toml

@@ -21,7 +21,7 @@ serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 thiserror = "2"
 tokio = { version = "1", features = ["sync"] }
-toml = "0.8"
+toml = "1.1"
 url = "2"
 
 [dev-dependencies]

crates/ironclaw_extractors/Cargo.toml

@@ -12,6 +12,6 @@ publish = false
 
 [dependencies]
 ironclaw_common = { path = "../ironclaw_common", version = "0.4.2" }
-pdf-extract = "0.7"
+pdf-extract = "0.10"
 thiserror = "2"
-zip = { version = "2", default-features = false, features = ["deflate"] }
+zip = { version = "8", default-features = false, features = ["deflate"] }

crates/ironclaw_filesystem/Cargo.toml

@@ -21,7 +21,7 @@ blake3 = "1"
 deadpool-postgres = { version = "0.14", optional = true }
 ironclaw_host_api = { path = "../ironclaw_host_api", version = "0.1.0" }
 ironclaw_safety = { path = "../ironclaw_safety", version = "0.2.2" }
-libsql = { version = "0.6", optional = true, default-features = false, features = ["core", "replication", "remote", "tls"] }
+libsql = { version = "0.9", optional = true, default-features = false, features = ["core", "replication", "remote", "tls"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 thiserror = "2"

crates/ironclaw_first_party_extensions/Cargo.toml

@@ -25,7 +25,7 @@ ironclaw_skills = { path = "../ironclaw_skills" }
 regex = "1"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-similar = "2"
+similar = "3"
 thiserror = "2"
 tokio = { version = "1", features = ["rt", "sync"] }
 tracing = "0.1"

crates/ironclaw_hooks/Cargo.toml

@@ -32,7 +32,7 @@ ironclaw_host_api = { path = "../ironclaw_host_api" }
 ironclaw_prompt_envelope = { path = "../ironclaw_prompt_envelope" }
 ironclaw_turns = { path = "../ironclaw_turns" }
 ironclaw_wasm_limiter = { path = "../ironclaw_wasm_limiter" }
-lru = "0.16"
+lru = "0.18"
 rust_decimal = { version = "1", features = ["serde", "serde-with-str"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
@@ -44,7 +44,7 @@ wasmtime = { version = "44.0.3", features = ["component-model"] }
 
 [dev-dependencies]
 tokio = { version = "1", features = ["macros", "rt", "rt-multi-thread"] }
-toml = "0.8"
+toml = "1.1"
 wat = "1"
 
 [lints]

crates/ironclaw_hooks_libsql/Cargo.toml

@@ -11,7 +11,7 @@ blake3 = "1"
 chrono = { version = "0.4", features = ["serde"] }
 ironclaw_hooks = { path = "../ironclaw_hooks" }
 ironclaw_host_api = { path = "../ironclaw_host_api" }
-libsql = { version = "0.6", default-features = false, features = ["core", "replication", "remote", "tls"] }
+libsql = { version = "0.9", default-features = false, features = ["core", "replication", "remote", "tls"] }
 rust_decimal = { version = "1", features = ["serde", "serde-with-str"] }
 # `sync` for the connection-admission Semaphore; `time` for connect-retry
 # backoff sleeps (see the concurrency contract on LibSqlPredicateStateBackend).

crates/ironclaw_hooks_parity/Cargo.toml

@@ -54,7 +54,7 @@ ironclaw_host_api = { path = "../ironclaw_host_api" }
 
 async-trait = "0.1"
 chrono = { version = "0.4", features = ["serde"] }
-libsql = { version = "0.6", default-features = false, features = ["core", "replication", "remote", "tls"] }
+libsql = { version = "0.9", default-features = false, features = ["core", "replication", "remote", "tls"] }
 rust_decimal = { version = "1", features = ["serde"] }
 tempfile = "3"
 tokio = { version = "1", features = ["macros", "rt", "rt-multi-thread", "sync"] }

crates/ironclaw_host_api/Cargo.toml

@@ -17,7 +17,7 @@ chrono = { version = "0.4", features = ["serde"] }
 rust_decimal = { version = "1", features = ["serde", "serde-with-str"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 thiserror = "2"
 uuid = { version = "1", features = ["v4", "serde"] }
 zeroize = "1"

crates/ironclaw_host_runtime/Cargo.toml

@@ -50,27 +50,27 @@ ironclaw_triggers = { path = "../ironclaw_triggers" }
 ironclaw_trust = { path = "../ironclaw_trust" }
 ironclaw_turns = { path = "../ironclaw_turns" }
 ironclaw_wasm = { path = "../ironclaw_wasm" }
-libsql = { version = "0.6", optional = true, default-features = false, features = ["core", "replication", "remote", "tls"] }
-jsonschema = { version = "0.45", default-features = false }
+libsql = { version = "0.9", optional = true, default-features = false, features = ["core", "replication", "remote", "tls"] }
+jsonschema = { version = "0.46", default-features = false }
 libc = "0.2"
 rust_decimal = { version = "1", features = ["serde", "serde-with-str"] }
 secrecy = "0.10"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 thiserror = "2"
 tokio = { version = "1", features = ["io-util", "macros", "process", "rt", "sync", "time"] }
 tokio-util = { version = "0.7" }
 tracing = "0.1"
 url = "2"
 uuid = { version = "1", features = ["v4"] }
-zip = { version = "2", default-features = false, features = ["deflate"] }
+zip = { version = "8", default-features = false, features = ["deflate"] }
 
 [dev-dependencies]
 axum = { version = "0.8", features = ["json"] }
 hex = "0.4"
 ironclaw_event_projections = { path = "../ironclaw_event_projections" }
-sha2 = "0.10"
+sha2 = "0.11"
 tempfile = "3"
 tokio = { version = "1", features = ["macros", "rt", "sync", "time"] }
 tokio-postgres = "0.7"

crates/ironclaw_llm/Cargo.toml

@@ -35,17 +35,17 @@ dirs = "6"
 eventsource-stream = "0.2"
 futures = "0.3"
 open = "5"
-rand = "0.8"
+rand = "0.10"
 urlencoding = "2"
 regex = "1"
 reqwest = { version = "0.12", default-features = false, features = ["json", "multipart", "rustls-tls-native-roots", "stream"] }
-rig-core = { version = "0.30", default-features = false, features = ["reqwest-rustls"] }
+rig-core = { version = "0.33", default-features = false, features = ["reqwest-rustls"] }
 rust_decimal = { version = "1", features = ["serde", "serde-with-str", "maths"] }
 rust_decimal_macros = "1"
 secrecy = { version = "0.10", features = ["serde"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 thiserror = "2"
 tokio = { version = "1", features = ["sync", "io-util", "io-std", "time", "macros", "rt", "fs", "process", "net"] }
 tracing = "0.1"

crates/ironclaw_loop_support/Cargo.toml

@@ -16,7 +16,7 @@ chrono = { version = "0.4", features = ["serde"] }
 dashmap = "6"
 futures = "0.3"
 hex = "0.4.3"
-jsonschema = { version = "0.45", default-features = false }
+jsonschema = { version = "0.46", default-features = false }
 parking_lot = "0.12"
 tracing = "0.1"
 tokio = { version = "1", features = ["rt", "sync", "time"] }

crates/ironclaw_memory/Cargo.toml

@@ -20,7 +20,7 @@ chrono-tz = "0.10"
 ironclaw_host_api = { path = "../ironclaw_host_api", version = "0.1.0" }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 # Required only by `DocumentMetadata::from_value`, which logs a diagnostic on
 # deserialize failure; preserved to keep behavior identical to the impl crate.
 tracing = "0.1"

crates/ironclaw_memory_native/Cargo.toml

@@ -44,10 +44,10 @@ ironclaw_host_api = { path = "../ironclaw_host_api", version = "0.1.0" }
 ironclaw_memory = { path = "../ironclaw_memory", version = "0.1.0" }
 ironclaw_prompt_envelope = { path = "../ironclaw_prompt_envelope" }
 ironclaw_safety = { path = "../ironclaw_safety", version = "0.2.1" }
-jsonschema = { version = "0.45", default-features = false }
+jsonschema = { version = "0.46", default-features = false }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 tracing = "0.1"
 uuid = { version = "1", features = ["v4"] }
 

crates/ironclaw_outbound/Cargo.toml

@@ -20,10 +20,10 @@ ironclaw_event_projections = { path = "../ironclaw_event_projections" }
 ironclaw_filesystem = { path = "../ironclaw_filesystem" }
 ironclaw_host_api = { path = "../ironclaw_host_api" }
 ironclaw_turns = { path = "../ironclaw_turns" }
-libsql = { version = "0.6", optional = true, default-features = false, features = ["core", "replication", "remote", "tls"] }
+libsql = { version = "0.9", optional = true, default-features = false, features = ["core", "replication", "remote", "tls"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 thiserror = "2"
 tokio-postgres = { version = "0.7", optional = true }
 tracing = "0.1"

crates/ironclaw_product_adapter_registry/Cargo.toml

@@ -16,7 +16,7 @@ ironclaw_host_api = { path = "../ironclaw_host_api", version = "0.1.0" }
 ironclaw_product_adapters = { path = "../ironclaw_product_adapters", version = "0.1.0" }
 serde = { version = "1", features = ["derive"] }
 thiserror = "2"
-toml = "0.8"
+toml = "1.1"
 
 [dev-dependencies]
 chrono = { version = "0.4", features = ["serde"] }

crates/ironclaw_product_workflow/Cargo.toml

@@ -40,7 +40,7 @@ ironclaw_product_context = { path = "../ironclaw_product_context", version = "0.
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 secrecy = { version = "0.10", features = ["serde"] }
-sha2 = "0.10"
+sha2 = "0.11"
 thiserror = "2"
 tokio = { version = "1", features = ["macros", "time"] }
 tracing = "0.1"

crates/ironclaw_product_workflow_storage/Cargo.toml

@@ -29,7 +29,7 @@ tracing = "0.1"
 deadpool-postgres = "0.14"
 ironclaw_filesystem = { path = "../ironclaw_filesystem", features = ["libsql", "postgres"] }
 ironclaw_product_adapters = { path = "../ironclaw_product_adapters" }
-libsql = { version = "0.6", default-features = false, features = ["core", "replication", "remote", "tls"] }
+libsql = { version = "0.9", default-features = false, features = ["core", "replication", "remote", "tls"] }
 tempfile = "3"
 tokio = { version = "1", features = ["macros", "rt", "sync", "time"] }
 tokio-postgres = "0.7"