build(deps): bump the cargo group with 2 updates

[dependabot]

Bumps the cargo group with 2 updates: age-core and age.

Updates age-core from 0.9.0 to 0.10.0

Release notes

Sourced from age-core's releases.

rage v0.10.0

rage

Added

• Russian translation!
• rage-keygen -y IDENTITY_FILE to convert identity files to recipients.
• Elvish completions to the Debian package. These are not automatically discovered; Elvish users will need to manually import them.
• Localized manpages to the Debian package.

Changed

• MSRV is now 1.65.0.
• Migrated from gumdrop to clap for argument parsing.
• -R/--recipients-file and -i/--identity now support "read-once" files, like those used by process substitution (-i <(other_binary get-age-identity)) and named pipes.
• The filename - (hyphen) is now treated as an explicit request to read from standard input when used with -R/--recipients-file or -i/--identity. It must only occur once across the -R/--recipients-file and -i/--identity flags, and the input file. It cannot be used if the input file is omitted.

Fixed

• OpenSSH private keys passed to -i/--identity that contain invalid public keys are no longer ignored when encrypting, and instead cause an error.
• Weak ssh-rsa public keys that are smaller than 2048 bits are now rejected.
• rage-keygen no longer overwrites existing key files with the -o/--output flag. This was its behaviour prior to 0.6.0, but was unintentionally changed when rage was modified to overwrite existing files. Key file overwriting can still be achieved by omitting -o/--output and instead piping stdout to the file.
• rage-keygen now prints fatal errors directly instead of them being hidden behind the RUST_LOG=error environment variable. It also now sets its return code appropriately instead of always returning 0.
• The Debian package now uses the correct installation paths for fish and Zsh completions.

age

Added

• Russian translation!
• age::cli_common:
  • file_io:
    • FileReader
    • impl Debug for {LazyFile, OutputFormat, OutputWriter, StdoutWriter}
  • StdinGuard
  • read_recipients
• age::identity::IdentityFile::from_input_reader (behind cli-common feature flag).
• impl Eq for age::ssh::{ParseRecipientKeyError, UnsupportedKey}
• impl {Debug, PartialEq, Eq, Hash} for age::x25519::Recipient

Changed

• MSRV is now 1.65.0.
• Migrated to base64 0.21, rsa 0.9.
• age::cli_common:
  • file_io:
    • InputReader::File enum variant now contains FileReader instead of std::fs::File.
    • OutputWriter::new now takes an allow_overwrite boolean argument. If OutputWriter will write to a file, this boolean enables the caller to control whether the file will be overwritten if it exists (instead of the implicit behaviour that was previously changed in 0.6.0).
  • read_identities now takes an &mut StdinGuard argument, and filenames may now contain at most one entry of "-", which will be interpreted as reading from standard input.
  • ReadError has new variants:
    • EncryptedIdentities
    • InvalidRecipient
    • InvalidRecipientsFile
    • MissingRecipientsFile
    • MultipleStdin
    • RsaModulusTooLarge
    • RsaModulusTooSmall

... (truncated)

Commits

• 5c82b23 Merge pull request #481 from str4d/release-0.10.0
• e833cd1 v0.10.0
• 5511d8c docs: Remove references to now-removed generation scripts
• 7bf8e5e Add CONTRIBUTING.md file with information about how to localize
• 87a0ec6 Merge pull request #480 from hexanova/main
• 7f51ef6 rage: Adjust line wrapping for multi-line ru strings, fix some bugs
• 22bc380 rage.ftl ru translation
• 6555f60 Create rage.ftl
• 1a91483 Merge pull request #479 from str4d/update-deps-0.10-final
• 09ef846 cargo vet regenerate imports
• Additional commits viewable in compare view

Updates age from 0.9.2 to 0.10.0

Release notes

Sourced from age's releases.

rage v0.10.0

rage

Added

• Russian translation!
• rage-keygen -y IDENTITY_FILE to convert identity files to recipients.
• Elvish completions to the Debian package. These are not automatically discovered; Elvish users will need to manually import them.
• Localized manpages to the Debian package.

Changed

• MSRV is now 1.65.0.
• Migrated from gumdrop to clap for argument parsing.
• -R/--recipients-file and -i/--identity now support "read-once" files, like those used by process substitution (-i <(other_binary get-age-identity)) and named pipes.
• The filename - (hyphen) is now treated as an explicit request to read from standard input when used with -R/--recipients-file or -i/--identity. It must only occur once across the -R/--recipients-file and -i/--identity flags, and the input file. It cannot be used if the input file is omitted.

Fixed

• OpenSSH private keys passed to -i/--identity that contain invalid public keys are no longer ignored when encrypting, and instead cause an error.
• Weak ssh-rsa public keys that are smaller than 2048 bits are now rejected.
• rage-keygen no longer overwrites existing key files with the -o/--output flag. This was its behaviour prior to 0.6.0, but was unintentionally changed when rage was modified to overwrite existing files. Key file overwriting can still be achieved by omitting -o/--output and instead piping stdout to the file.
• rage-keygen now prints fatal errors directly instead of them being hidden behind the RUST_LOG=error environment variable. It also now sets its return code appropriately instead of always returning 0.
• The Debian package now uses the correct installation paths for fish and Zsh completions.

age

Added

• Russian translation!
• age::cli_common:
  • file_io:
    • FileReader
    • impl Debug for {LazyFile, OutputFormat, OutputWriter, StdoutWriter}
  • StdinGuard
  • read_recipients
• age::identity::IdentityFile::from_input_reader (behind cli-common feature flag).
• impl Eq for age::ssh::{ParseRecipientKeyError, UnsupportedKey}
• impl {Debug, PartialEq, Eq, Hash} for age::x25519::Recipient

Changed

• MSRV is now 1.65.0.
• Migrated to base64 0.21, rsa 0.9.
• age::cli_common:
  • file_io:
    • InputReader::File enum variant now contains FileReader instead of std::fs::File.
    • OutputWriter::new now takes an allow_overwrite boolean argument. If OutputWriter will write to a file, this boolean enables the caller to control whether the file will be overwritten if it exists (instead of the implicit behaviour that was previously changed in 0.6.0).
  • read_identities now takes an &mut StdinGuard argument, and filenames may now contain at most one entry of "-", which will be interpreted as reading from standard input.
  • ReadError has new variants:
    • EncryptedIdentities
    • InvalidRecipient
    • InvalidRecipientsFile
    • MissingRecipientsFile
    • MultipleStdin
    • RsaModulusTooLarge
    • RsaModulusTooSmall

... (truncated)

Commits

• 5c82b23 Merge pull request #481 from str4d/release-0.10.0
• e833cd1 v0.10.0
• 5511d8c docs: Remove references to now-removed generation scripts
• 7bf8e5e Add CONTRIBUTING.md file with information about how to localize
• 87a0ec6 Merge pull request #480 from hexanova/main
• 7f51ef6 rage: Adjust line wrapping for multi-line ru strings, fix some bugs
• 22bc380 rage.ftl ru translation
• 6555f60 Create rage.ftl
• 1a91483 Merge pull request #479 from str4d/update-deps-0.10-final
• 09ef846 cargo vet regenerate imports
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions