build(deps): bump the rust group across 1 directory with 6 updates

[dependabot]

Bumps the rust group with 6 updates in the / directory:

Package	From	To
clevis-pin-trustee-lib	7394f16	4dcc7df
compute-pcrs-lib	12a1d01	7ed3bc4
uuid	1.24.0	1.24.1
futures-util	0.3.33	0.3.34
jsonwebtoken	10.4.0	11.0.0
jsonwebtoken-openssl	1.0.0	2.0.0

Updates clevis-pin-trustee-lib from 7394f16 to 4dcc7df

Commits

• 4dcc7df Merge pull request #45 from latchset/dependabot/cargo/rust-5dfb51eb5f
• 8b002be Merge pull request #47 from Jakob-Naucke/last-stderr-only
• e9691e2 Do not print trustee-attester stdout
• 3a99bfc Print stderr only on last attempt
• 71ec545 Merge pull request #46 from Jakob-Naucke/no-print-key
• d3aee0c Do not print key
• 431486e build(deps): bump the rust group across 1 directory with 6 updates
• See full diff in compare view

Updates compute-pcrs-lib from 12a1d01 to 7ed3bc4

Commits

• 7ed3bc4 Merge pull request #80 from bgartzi/remove-lief
• 4f31f1c deps: Remove lief
• f65491f pefile: Remove lief dependencies
• f7c58b7 linux: Implement wrapper
• a6f3cca linux: Use Path's built ins to join paths
• ac20a31 esp: move directory check
• 04fe891 deps: Add authenticode and object
• 2811e22 certs: Decouple from lief cert abstractions
• d2e1ee4 Merge pull request #68 from trusted-execution-clusters/dependabot/cargo/rust-...
• 3d69a06 build(deps): bump the rust group with 4 updates
• Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.24.1

Release notes

Sourced from uuid's releases.

v1.24.1

What's Changed

• Fix non-ASCII character handling in parse diagnostics by @​questfever in uuid-rs/uuid#899
• Prepare for 1.24.1 release by @​KodrAus in uuid-rs/uuid#900

New Contributors

• @​questfever made their first contribution in uuid-rs/uuid#899

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits

• 2ea38af Merge pull request #900 from uuid-rs/cargo/v1.24.1
• 9dbeb04 prepare for 1.24.1 release
• e113df8 Merge pull request #899 from questfever/main
• b017765 Fix non-ASCII character handling in parse diagnostics
• See full diff in compare view

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Commits

• 705e6b5 Release 0.3.34
• 616dac7 compat: Inline RawWaker clone function
• 4176369 Inline remaining RawWaker clone functions
• f17a895 Fix cloned FuturesUnordered waker identity
• 51d62ad macro: bump syn to v3 (#3028)
• 9e26177 ci: Reduce timeout-minutes
• b2d0983 tsan: Enable Adaptive Delay
• f733d0e Miri: Ignore compat tests
• e5def2f Rename default branch to main
• See full diff in compare view

Updates jsonwebtoken from 10.4.0 to 11.0.0

Changelog

Sourced from jsonwebtoken's changelog.

11.0.0 (2026-07-24)

• Add conversions between Algorithm and KeyAlgorithm
• JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
• JWKs with unknown key types are now deserializable
• BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
• BREAKING: Jwk.thumbprint now returns a Result<_>
• BREAKING: Header.extras is now a struct that allows for deserialization to any T
• BREAKING: Implicit features resulting from optional crates have been removed
• BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
• BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
• BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead

Changes for CryptoProviders

• When constructing HMAC signers, the algorithm family must now be verified on construction
• JwkUtils has been renamed to KeyUtils
  • compute_digest now returns a Result<_>
  • extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
  • rsa_pub_components_from_public_key has been added
  • extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
  • ed_pub_components_from_private_key has been added

Commits

• 900010f Bump v11
• 6aac5ae Allow deserializing unknown key type JWKs (#530)
• e7ea8f0 Implement Default on JwkSet (#527)
• 249f5f7 Don't panic when computing thumbprint (#524)
• b5d9c38 Prepare for v11 release (#522)
• 6086da7 Unify encoding and decoding key APIs (#515)
• 474728f Remove deprecated insecure_disable_signature_validation (#521)
• 31a1dc6 Feat: Added support for JWK decoding Ed25519 keys (#506)
• e681247 feat: add Jwk::from_decoding_key (#475)
• bba16eb Allow conversion between Algorithm and KeyAlgorithm (#516)
• Additional commits viewable in compare view

Updates jsonwebtoken-openssl from 1.0.0 to 2.0.0

Commits

• 0649a31 Fix crate versioning
• 6c45492 Merge pull request #4 from arckoor/jsonwebtoken-v11
• 7c55f49 Upgrade to jsonwebtoken v11
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a trusted-execution-clusters member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.