Update dependencies

Author: bilelmoussaoui

Cargo.lock

@@ -34,6 +34,7 @@ tokio = { version = "1.43", default-features = false }
 tempfile = "3.15"
 tracing = "0.1"
 tracing-subscriber = "0.3"
-zbus = { version = "5.0", default-features = false }
+zbus = { version = "5.5", default-features = false }
+zbus_macros = {version = "5.5", features = ["gvariant"]}
 zeroize = { version = "1", features = ["zeroize_derive"] }
 zvariant = { version = "5.2", default-features = false, features = ["gvariant"]}

Cargo.toml

@@ -28,15 +28,15 @@ digest = { version = "0.10", optional = true }
 endi.workspace = true
 futures-lite = { workspace = true, optional = true }
 futures-util.workspace = true
-getrandom = "0.2"
+getrandom = "0.3"
 hkdf = { version = "0.12", optional = true }
 hmac = { version = "0.12", optional = true }
 md-5 = { version = "0.10", optional = true }
 num = "0.4.0"
 num-bigint-dig = { version = "0.8", features = ["zeroize"] }
 openssl = { version = "0.10", optional = true }
 pbkdf2 = { version = "0.12", optional = true }
-rand = { version = "0.8", default-features = false }
+rand = { version = "0.9", default-features = false, features = ["thread_rng"] }
 serde.workspace = true
 sha2 = { version = "0.10", optional = true }
 subtle = { version = "2.5", optional = true }
@@ -47,6 +47,7 @@ tokio = { workspace = true, features = [
 ], optional = true, default-features = false }
 tracing = { workspace = true, optional = true }
 zbus.workspace = true
+zbus_macros.workspace = true
 zvariant.workspace = true
 zeroize.workspace = true
 

client/Cargo.toml

@@ -85,7 +85,7 @@ pub struct Keyring {
 impl Keyring {
     #[allow(clippy::new_without_default)]
     pub(crate) fn new() -> Self {
-        let salt = rand::thread_rng().gen::<[u8; DEFAULT_SALT_SIZE]>().to_vec();
+        let salt = rand::rng().random::<[u8; DEFAULT_SALT_SIZE]>().to_vec();
 
         Self {
             salt_size: salt.len() as u32,
@@ -120,8 +120,8 @@ impl Keyring {
         mtime: Option<std::time::SystemTime>,
     ) -> Result<(), Error> {
         let tmp_path = if let Some(parent) = path.as_ref().parent() {
-            let rnd: String = rand::thread_rng()
-                .sample_iter(&rand::distributions::Alphanumeric)
+            let rnd: String = rand::rng()
+                .sample_iter(&rand::distr::Alphanumeric)
                 .take(16)
                 .map(char::from)
                 .collect();
@@ -285,7 +285,7 @@ impl Keyring {
 
     // Reset Keyring content
     pub(crate) fn reset(&mut self) {
-        let salt = rand::thread_rng().gen::<[u8; DEFAULT_SALT_SIZE]>().to_vec();
+        let salt = rand::rng().random::<[u8; DEFAULT_SALT_SIZE]>().to_vec();
         self.salt_size = salt.len() as u32;
         self.salt = salt;
         self.iteration_count = DEFAULT_ITERATION_COUNT;

client/src/file/api/mod.rs

@@ -17,7 +17,7 @@ impl Secret {
     pub fn random() -> Result<Self, getrandom::Error> {
         let mut secret = [0; 64];
         // Equivalent of `ring::rand::SecureRandom`
-        getrandom::getrandom(&mut secret)?;
+        getrandom::fill(&mut secret)?;
 
         Ok(Self::blob(secret))
     }

client/src/secret.rs

@@ -14,11 +14,27 @@ allow = [
   "MIT",
   "Apache-2.0", # rpassword by cli only
   "BSD-3-Clause", # used by subtle -> digest
-  "Unicode-DFS-2016", # used by unicode-ident -> proc-macro2
   "Unicode-3.0", # used by icu_collections -> url
 ]
 
+[sources]
+allow-git = [
+  "https://github.com/bilelmoussaoui/ashpd"
+]
+
 [bans]
 multiple-versions = "deny"
 wildcards = "deny"
 highlight = "all"
+skip = [
+  # num-bigint-dig & crypto_common
+  {name = "rand_core", version = "0.6.4"},
+  # num-bigint-dig
+  {name = "rand_chacha", version = "0.3.1"},
+  # num-bigint-dig
+  {name = "rand", version = "0.8.5"},
+  # num-bigint-dig -> ppv-lite86
+  {name = "zerocopy", version = "0.7.35"},
+  # num-bigint-dig & crypto_common
+  {name = "getrandom", version = "0.2.15"},
+]

deny.toml

@@ -3,6 +3,7 @@ mod error;
 
 use ashpd::{
     async_trait,
+    desktop::HandleToken,
     zbus::{self, zvariant::OwnedValue},
     AppID,
 };
@@ -17,13 +18,14 @@ struct Secret;
 
 #[async_trait::async_trait]
 impl ashpd::backend::request::RequestImpl for Secret {
-    async fn close(&self) {}
+    async fn close(&self, _token: HandleToken) {}
 }
 
 #[async_trait::async_trait]
 impl ashpd::backend::secret::SecretImpl for Secret {
     async fn retrieve(
         &self,
+        _token: HandleToken,
         app_id: ashpd::AppID,
         fd: std::os::fd::OwnedFd,
     ) -> ashpd::backend::Result<HashMap<String, OwnedValue>> {