Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bitwarden/sdk-internal).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] [deps] Key Management (cargo): Update Rust crate aes-gcm to v0.11.1
- [ ] [deps] Platform (cargo): Update dylint (crates + actions) to v6.0.4 (`dylint_linting`, `dylint_testing`)
- [ ] [deps] Platform (cargo): Update Rust crate aes to v0.9.3
- [ ] [deps] Platform (cargo): Update Rust crate rustls to v0.23.44
- [ ] [deps] Platform (cargo): Update Rust crate tsify to >=0.5.5, <0.5.9
- [ ] [deps] Platform (cargo): Update Rust crate tsify to v0.5.8
- [ ] [deps] Platform (cargo): Update Rust crate tsify-macros to >=0.5.5, <0.5.9
- [ ] [deps] Platform (cargo): Update wasm-bindgen group (`wasm-bindgen`, `wasm-bindgen-cli`, `wasm-bindgen-futures`, `wasm-bindgen-test`)
- [ ] [deps] Platform (npm): Update @types/node to v25.9.5
- [ ] [deps] Platform (npm): Update prettier to v3.9.6
- [ ] [deps]: Update Rust crate argon2 to v0.6.0
- [ ] [deps]: Update Rust crate clap to v4.6.6
- [ ] [deps]: Update Rust crate clap_complete to v4.6.9
- [ ] [deps]: Update Rust crate data-encoding-macro to v0.1.21
- [ ] [deps]: Update Rust crate hybrid-array to v0.4.14
- [ ] [deps]: Update Rust crate trybuild to v1.0.120
- [ ] [deps]: Update Rust crate xaes-256-gcm to v0.1.0
- [ ] [deps]: Update typescript to v6.0.3
- [ ] [deps]: Update gh minor (`Swatinem/rust-cache`, `actions/create-github-app-token`, `actions/deploy-pages`, `actions/setup-java`, `codecov/codecov-action`, `github/codeql-action`, `gradle/actions`)
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] [deps]: Update Rust to v1.98.1

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [[deps] Platform (cargo): Update Rust crate serde_qs to v1](../pull/767)

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] [deps] Platform (cargo): Update Rust crate uniffi to v0.32.1
- [ ] [deps] Platform (npm): Update @types/node to v24.13.4
- [ ] [deps]: Update Rust to v2026-09-14

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [[deps]: Update dtolnay/rust-toolchain digest to 6bed076](../pull/1475)
- [ ] [[deps] Platform (npm): Update lint-staged to v17.5.0](../pull/1477)
- [ ] [[deps] Platform (npm): Update tsx to v4.23.13](../pull/1329)
- [ ] [[deps] Tools: Update Rust crate icu_normalizer to v2.3.0](../pull/1425)
- [ ] [[deps]: Update cargo-llvm-cov to 0.9.0](../pull/1330)
- [ ] [[deps]: Update Rust crate credential-exchange-format to >=0.3, <0.5](../pull/1332)
- [ ] [[deps]: Update Rust crate darling to 0.24.0](../pull/1426)
- [ ] [[deps]: Update Rust crate num-bigint to >=0.4, <0.6](../pull/1334)
- [ ] [[deps]: Update Rust crate p256 to >=0.13.2, <0.15](../pull/1335)
- [ ] [[deps]: Update rust Docker tag to v1.97](../pull/1336)
- [ ] [[deps]: Update type-fest to v5.9.0](../pull/1479)
- [ ] [[deps] Platform (cargo): Update Rust crate syn to v3](../pull/1339)
- [ ] [[deps]: Update actions/setup-java action to v6](../pull/1480)
- [ ] [[deps]: Update cargo-release to v1](../pull/1343)
- [ ] [[deps]: Update codecov/codecov-action action to v7](../pull/1344)
- [ ] [[deps]: Update gradle/actions action to v6](../pull/942)
- [ ] [[deps] Platform: Lock file maintenance](../pull/1430)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [[deps]: Update Rust crate getrandom2 to 0.4](../pull/1055)
- [ ] [[deps]: Update Rust crate getrandom3 to 0.4](../pull/1056)
- [ ] [[deps]: Update Rust crate inquire to 0.9.0](../pull/474)
- [ ] [[deps]: Update Rust crate libloading to >=0.8.1, <0.10](../pull/575)
- [ ] [[deps]: Update typescript to v7](../pull/1345)

## Detected Dependencies

cargo (66)

bitwarden_license/bitwarden-commercial-vault/Cargo.toml

bitwarden_license/bitwarden-pam/Cargo.toml

bitwarden_license/bitwarden-sm/Cargo.toml

Cargo.toml (56)

- `aes 0.9.0` → [Updates: `0.9.0`]
- `aes-gcm 0.11.0` → [Updates: `0.11.0`]
- `async-trait >=0.1.80, <0.2`
- `cbc 0.2.0`
- `chrono >=0.4.34, <0.5`
- `ciborium >=0.2.2, <0.3`
- `crypto-bigint 0.7.5`
- `data-encoding >=2.0, <3`
- `ed25519-dalek 3.0.0-pre.7`
- `futures >=0.3.31, <0.4`
- `hkdf 0.13.0`
- `hmac 0.13.0`
- `http >=1.4.0, <2.0`
- `icu_normalizer 2.2.0` → [Updates: `2.2.0`]
- `js-sys >=0.3.72, <0.4`
- `keepass >=0.13.7, <0.14`
- `mockall >=0.13.1, <0.16`
- `password-rules-parser >=1.1.0, <2`
- `pbkdf2 0.13.0-rc.10`
- `proc-macro2 >=1.0.89, <2`
- `quote >=1.0.37, <2`
- `rand >=0.10.0, <0.11`
- `rand_chacha >=0.10.0, <0.11`
- `reqwest 0.13.3` → [Updates: `0.13.3`]
- `reqwest-middleware 0.5.1`
- `rsa 0.10.0-rc.17`
- `rustls 0.23.27` → [Updates: `0.23.27`]
- `rustls-platform-verifier 0.7.0`
- `schemars >=1.0.0, <2.0`
- `serde >=1.0, <2.0`
- `serde-wasm-bindgen >=0.6.0, <0.7`
- `serde_bytes >=0.11.17, <0.12.0`
- `serde_json >=1.0.96, <2.0`
- `serde_qs >=0.12.0, <0.16` → [Updates: `>=0.12.0, <1.2`]
- `serde_repr >=0.1.12, <0.2`
- `sha1 0.11.0`
- `sha2 0.11.0`
- `subtle >=2.5.0, <3.0`
- `syn >=2.0.87, <3` → [Updates: `>=2.0.87, <4`]
- `thiserror >=1.0.40, <3`
- `tokio 1.36.0`
- `tracing 0.1.41`
- `tracing-subscriber 0.3.20`
- `tsify >=0.5.5, <0.5.7` → [Updates: `>=0.5.5, <0.5.9`]
- `tsify-macros >=0.5.5, <0.5.7` → [Updates: `>=0.5.5, <0.5.9`]
- `uniffi =0.32.0` → [Updates: `=0.32.1`]
- `url >=2.5.8, <3.0`
- `uuid >=1.3.3, <2.0`
- `validator >=0.18.1, <0.22`
- `wasm-bindgen =0.2.114` → [Updates: `=0.2.128`]
- `wasm-bindgen-cli =0.2.114` → [Updates: `=0.2.128`]
- `wasm-bindgen-futures 0.4.64` → [Updates: `0.4.64`]
- `wasm-bindgen-test 0.3.64` → [Updates: `0.3.64`]
- `wiremock >=0.6.0, <0.7`
- `zeroize >=1.7.0, <2.0`
- `zxcvbn >=3.0.1, <4.0`

crates/bitwarden-api-api/Cargo.toml (2)

- `serde_with >=3.8, <4`
- `url >=2.5, <3`

crates/bitwarden-api-base/Cargo.toml (2)

- `http >=1.4.0, <2`
- `url >=2.5, <3`

crates/bitwarden-api-identity/Cargo.toml (2)

- `serde_with >=3.8, <4`
- `url >=2.5, <3`

crates/bitwarden-api-key-connector/Cargo.toml

crates/bitwarden-auth/Cargo.toml (2)

- `serde_urlencoded >=0.7.1, <0.8`
- `wiremock 0.6.0`

crates/bitwarden-cli/Cargo.toml (4)

- `clap 4.5.4` → [Updates: `4.5.4`]
- `color-eyre 0.6.3`
- `inquire 0.7.0` → [Updates: `0.9.0`]
- `supports-color 3.0.0`

crates/bitwarden-collections/Cargo.toml

crates/bitwarden-core-macro/Cargo.toml

crates/bitwarden-core/Cargo.toml (3)

- `getrandom2 0.2` → [Updates: `0.4`]
- `getrandom3 0.3` → [Updates: `0.4`]
- `getrandom4 0.4`

crates/bitwarden-crypto-cipher-suite/Cargo.toml

crates/bitwarden-crypto-sync-handler/Cargo.toml

crates/bitwarden-crypto/Cargo.toml (13)

- `argon2 =0.6.0-rc.8` → [Updates: `=0.6.0`]
- `chacha20poly1305 0.11.0-rc.3`
- `coset >=0.4.2, <0.5`
- `hex >=0.4.0, <0.5`
- `hybrid-array 0.4.10` → [Updates: `0.4.10`]
- `ml-dsa 0.1.0-rc.8`
- `num-bigint >=0.4, <0.5` → [Updates: `>=0.4, <0.6`]
- `num-traits >=0.2.15, <0.3`
- `rayon >=1.8.1, <2.0`
- `typenum >=1.18.0, <1.21.0`
- `xaes-256-gcm =0.1.0-rc.3` → [Updates: `=0.1.0`]
- `zeroizing-alloc >=0.1.0, <0.2`
- `criterion 0.8.0`

crates/bitwarden-encoding/Cargo.toml (1)

- `data-encoding-macro 0.1.18` → [Updates: `0.1.18`]

crates/bitwarden-error-macro/Cargo.toml (1)

- `darling 0.20.10` → [Updates: `0.24.0`]

crates/bitwarden-error/Cargo.toml (1)

- `trybuild 1.0.101` → [Updates: `1.0.101`]

crates/bitwarden-exporters/Cargo.toml (3)

- `credential-exchange-format >=0.3, <0.4` → [Updates: `>=0.3, <0.5`]
- `csv 1.3.0`
- `num-traits >=0.2, <0.3`

crates/bitwarden-ffi-macro/Cargo.toml

crates/bitwarden-ffi/Cargo.toml (1)

- `trybuild 1.0.101` → [Updates: `1.0.101`]

crates/bitwarden-fido/Cargo.toml (5)

- `coset >=0.3.7, <0.5`
- `itertools >=0.13.0, <0.16`
- `p256 >=0.13.2, <0.14` → [Updates: `>=0.13.2, <0.15`]
- `passkey 043279e92e2eb5f509bf87eb7fa50987fd377e32`
- `passkey-client 043279e92e2eb5f509bf87eb7fa50987fd377e32`

crates/bitwarden-generators/Cargo.toml

crates/bitwarden-importers/Cargo.toml (1)

- `p256 =0.14.0`

crates/bitwarden-ipc/Cargo.toml (2)

- `erased-serde >=0.4.6, <0.5`
- `snow 0.10.0`

crates/bitwarden-logging-macro/Cargo.toml

crates/bitwarden-logging/Cargo.toml (2)

- `criterion 0.8.0`
- `trybuild 1.0.101` → [Updates: `1.0.101`]

crates/bitwarden-managed-settings-types/Cargo.toml

crates/bitwarden-managed-settings/Cargo.toml

crates/bitwarden-organization-crypto/Cargo.toml

crates/bitwarden-organization-invite-link/Cargo.toml

crates/bitwarden-organizations/Cargo.toml

crates/bitwarden-pm/Cargo.toml

crates/bitwarden-policies/Cargo.toml

crates/bitwarden-random/Cargo.toml (2)

- `getrandom4 0.4`
- `snow 0.10.0`

crates/bitwarden-send/Cargo.toml

crates/bitwarden-sensitive-value/Cargo.toml

crates/bitwarden-server-communication-config/Cargo.toml

crates/bitwarden-shared-unlock/Cargo.toml (2)

- `web-time 1.1.0`
- `zeroize 1.8.2`

crates/bitwarden-ssh/Cargo.toml (9)

- `block-padding =0.4.2`
- `ed25519 3.0.0-rc.4`
- `p256 0.14.0-rc.9`
- `p384 0.14.0-rc.9`
- `p521 0.14.0-rc.9`
- `pem-rfc7468 1.0.0`
- `pkcs8 0.11.0`
- `ssh-cipher 0.3.0-rc.8`
- `ssh-key 0.7.0-rc.10`

crates/bitwarden-state-bridge-macro/Cargo.toml

crates/bitwarden-state/Cargo.toml (2)

- `rusqlite >=0.37.0, <0.41`
- `indexed-db >=0.4.2, <0.5`

crates/bitwarden-sync/Cargo.toml

crates/bitwarden-test-macro/Cargo.toml

crates/bitwarden-test/Cargo.toml

crates/bitwarden-threading/Cargo.toml (4)

- `tokio-util 0.7.15`
- `console_error_panic_hook 0.1.7`
- `tokio-test 0.4.4`
- `gloo-timers 0.4.0`

crates/bitwarden-uniffi-error/Cargo.toml (1)

- `anyhow >=1.0, <2.0`

crates/bitwarden-uniffi/Cargo.toml (4)

- `jni >=0.22, <0.23`
- `libloading >=0.8.1, <0.9` → [Updates: `>=0.8.1, <0.10`]
- `tracing-android 0.2.0`
- `tracing-oslog 0.3.0`

crates/bitwarden-unlock/Cargo.toml

crates/bitwarden-user-crypto-management/Cargo.toml (1)

- `wiremock 0.6.0`

crates/bitwarden-uuid-macro/Cargo.toml

crates/bitwarden-uuid/Cargo.toml

crates/bitwarden-vault/Cargo.toml (2)

- `percent-encoding >=2.1, <3.0`
- `tokio-util 0.7.15`

crates/bitwarden-wasm-internal/Cargo.toml (2)

- `console_error_panic_hook 0.1.7`
- `tracing-web 0.1.3`

crates/bw/Cargo.toml (8)

- `base64 >=0.22.1, <0.24`
- `bat 0.26.0`
- `clap 4.5.4` → [Updates: `4.5.4`]
- `clap_complete 4.5.55` → [Updates: `4.5.55`]
- `color-eyre 0.6.3`
- `erased-serde 0.4.6`
- `inquire 0.9.1`
- `serde_yaml 0.9.33`

crates/memory-testing/Cargo.toml (4)

- `comfy-table 8.0.0`
- `hex 0.4.3`
- `serde 1.0.196`
- `serde_json 1.0.113`

crates/uniffi-bindgen/Cargo.toml

crates/wasm-bindgen-cli-runner/Cargo.toml (1)

- `env_logger 0.11.1`

support/lints/Cargo.toml (2)

- `dylint_linting 6.0.0` → [Updates: `6.0.0`]
- `dylint_testing 6.0.0` → [Updates: `6.0.0`]

support/lints/error_enum/Cargo.toml (1)

- `thiserror >=1.0.40, <3`

support/lints/error_suffix/Cargo.toml (1)

- `thiserror >=1.0.40, <3`

support/lints/repr_with_tsify/Cargo.toml (4)

- `serde 1`
- `serde_repr 0.1`
- `tsify 0.5` → [Updates: `0.5`]
- `wasm-bindgen 0.2` → [Updates: `0.2`]

support/lints/tracing_instrument/Cargo.toml (4)

- `proc-macro2 1`
- `quote 1`
- `syn 2` → [Updates: `3`]
- `tracing 0.1`

support/lints/uniffi_async_export/Cargo.toml

support/lints/uniffi_config/Cargo.toml

dockerfile (1)

crates/memory-testing/Dockerfile (2)

- `rust 1.96-alpine` → [Updates: `1.97-alpine`]
- `alpine 3.24`

github-actions (24)

.github/workflows/build-android-target.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/build-android.yml (17)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654` → [Updates: `v5.7.0`, `v6.0.0`]
- `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `gradle/actions v5.0.1@f29f5a9d7b09a7c6b29859002d29d24e1674c884` → [Updates: `v5.0.2`, `v6.3.0`]
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859` → [Updates: `v3.2.0`]
- `rust stable`
- `rust stable`

.github/workflows/build-rust-crates.yml (8)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `rust stable`
- `rust stable`

.github/workflows/build-swift.yml (11)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `rust stable`

.github/workflows/build-wasm-internal-target.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/build-wasm-internal.yml (11)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`
- `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `bitwarden/gh-actions main`

.github/workflows/check-powerset.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `rust stable`

.github/workflows/cloc.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/delete-old-packages.yml (1)

- `actions/delete-package-versions v5.0.0@e5bc658cc4c965c472efe991f8beea3981499c55`

.github/workflows/detect-breaking-changes.yml (4)

- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859` → [Updates: `v3.2.0`]

.github/workflows/direct-maximum-versions.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `rust stable`

.github/workflows/direct-minimal-versions.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]

.github/workflows/enforce-labels.yml (1)

- `yogevbd/enforce-label-action 2.2.2@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024`

.github/workflows/lint.yml (6)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `github/codeql-action v4.32.1@6bc82e05fd0ea64601dd4b465378bbcf57de0314` → [Updates: `v4.37.9`]
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`

.github/workflows/memory-testing.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `rust stable`

.github/workflows/minimum-rust-version.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]

.github/workflows/publish-rust-crates.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/release-swift.yml (9)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859` → [Updates: `v3.2.0`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859` → [Updates: `v3.2.0`]

.github/workflows/respond.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/review-code.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/rust-test.yml (14)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2` → [Updates: `v6.0.2`, `v7.0.0`]
- `rust stable`
- `rust stable`

.github/workflows/rustdoc.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9`
- `actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128` → [Updates: `v5.0.1`]

.github/workflows/update-api-bindings.yml (8)

- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859` → [Updates: `v3.2.0`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020`

.github/workflows/version-bump.yml (9)

- `dtolnay/rust-toolchain stable@4360b52568e2003a75bf9bc1d59f33a8e3fc893c` → [Updates: `stable`]
- `Swatinem/rust-cache v2.8.2@779680da715d629ac1d338a641029a2f4372abb5` → [Updates: `v2.9.2`]
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.0.0@f8d387b68d61c58ab83c6c016672934102569859` → [Updates: `v3.2.0`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `rust stable`

npm (4)

crates/bitwarden-wasm-internal/bitwarden_license/npm/package.json (2)

- `type-fest ^5.0.0` → [Updates: `^5.0.0`]
- `typescript 6.0.2` → [Updates: `6.0.3`, `7.0.2`]

crates/bitwarden-wasm-internal/integration-tests/package.json (5)

- `@types/jest ^30.0.0`
- `@types/node ^24.0.0` → [Updates: `^24.0.0`]
- `jest ^30.0.0`
- `ts-jest ^29.1.0`
- `typescript ^5.6.0` → [Updates: `^7.0.0`]

crates/bitwarden-wasm-internal/npm/package.json (2)

- `type-fest ^5.0.0` → [Updates: `^5.0.0`]
- `typescript 6.0.2` → [Updates: `6.0.3`, `7.0.2`]

package.json (7)

- `@openapitools/openapi-generator-cli 2.41.0`
- `@types/node 25.9.1` → [Updates: `25.9.5`]
- `husky 9.1.7`
- `json5 2.2.3`
- `lint-staged 17.3.0` → [Updates: `17.5.0`]
- `prettier 3.9.3` → [Updates: `3.9.6`]
- `tsx 4.22.4` → [Updates: `4.23.13`]

regex (9)

.github/workflows/build-android.yml (1)

- `cargo-run-bin 1.7.4`

.github/workflows/build-rust-crates.yml (1)

- `cargo-run-bin 1.7.4`

.github/workflows/check-powerset.yml (1)

- `cargo-run-bin 1.7.4`

.github/workflows/lint.yml (1)

- `cargo-run-bin 1.7.4`

.github/workflows/rust-test.yml (1)

- `cargo-run-bin 1.7.4`

.github/workflows/version-bump.yml (1)

- `cargo-run-bin 1.7.4`

Cargo.toml (8)

- `cargo-sort 2.0.2`
- `cargo-udeps 0.1.57`
- `cargo-hack 0.6.33`
- `cargo-llvm-cov 0.5.38` → [Updates: `0.9.0`]
- `cargo-release 0.25.20` → [Updates: `1.0.0`]
- `cargo-edit 0.13.6`
- `cargo-dylint 6.0.0`
- `dylint-link 6.0.0`

rust-toolchain.toml (1)

- `rust 1.98.0` → [Updates: `1.98.1`]

rust-toolchain.toml (1)

- `rust-nightly 2026-09-01` → [Updates: `2026-09-14`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

This is a Renovate-generated Dependency Dashboard rather than a scoped change request. Read the linked Renovate dashboard documentation, then inspect the listed Cargo.toml files and existing pull requests to understand each update. Done would mean selecting an appropriate dashboard action and verifying the resulting dependency PR, but the issue does not identify one focused task.

Written by the indexing model from the issue text.