From ee643ecbb49ea514f5d54d58e9143e2b0e9b8788 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Mar 2026 00:22:44 +0000
Subject: [PATCH] Bump the cargo group across 1 directory with 2 updates

Bumps the cargo group with 2 updates in the /runtime directory: [jsonwebtoken](https://github.com/Keats/jsonwebtoken) and [quinn-proto](https://github.com/quinn-rs/quinn).


Updates `jsonwebtoken` from 9.3.1 to 10.3.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Keats/jsonwebtoken/compare/v9.3.1...v10.3.0)

Updates `quinn-proto` from 0.11.13 to 0.11.14
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](https://github.com/quinn-rs/quinn/compare/quinn-proto-0.11.13...quinn-proto-0.11.14)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-version: 10.3.0
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: quinn-proto
  dependency-version: 0.11.14
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 runtime/Cargo.lock       | 28 ++++++++++++++++++++++------
 runtime/plaid/Cargo.toml |  2 +-
 2 files changed, 23 insertions(+), 7 deletions(-)

diff --git a/runtime/Cargo.lock b/runtime/Cargo.lock
index a4217fb4..e654a0e5 100644
--- a/runtime/Cargo.lock
+++ b/runtime/Cargo.lock
@@ -1914,9 +1914,9 @@ version = "0.14.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4e7f34442dbe69c60fe8eaf58a8cafff81a1f278816d8ab4db255b3bef4ac3c4"
 dependencies = [
- "getrandom 0.3.3",
+ "getrandom 0.3.4",
  "libm",
- "rand 0.9.1",
+ "rand 0.9.2",
  "siphasher",
 ]
 
@@ -2862,6 +2862,22 @@ dependencies = [
  "simple_asn1",
 ]
 
+[[package]]
+name = "jsonwebtoken"
+version = "10.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0529410abe238729a60b108898784df8984c87f6054c9c4fcacc47e4803c1ce1"
+dependencies = [
+ "base64 0.22.1",
+ "getrandom 0.2.17",
+ "js-sys",
+ "pem 3.0.6",
+ "serde",
+ "serde_json",
+ "signature",
+ "simple_asn1",
+]
+
 [[package]]
 name = "jwt-simple"
 version = "0.12.14"
@@ -3345,7 +3361,7 @@ dependencies = [
  "hyper-rustls 0.26.0",
  "hyper-timeout",
  "hyper-util",
- "jsonwebtoken",
+ "jsonwebtoken 9.3.1",
  "once_cell",
  "percent-encoding",
  "pin-project",
@@ -3649,7 +3665,7 @@ dependencies = [
  "futures-util",
  "hex",
  "http 1.4.0",
- "jsonwebtoken",
+ "jsonwebtoken 10.3.0",
  "jwt-simple",
  "log",
  "lru",
@@ -3869,9 +3885,9 @@ dependencies = [
 
 [[package]]
 name = "quinn-proto"
-version = "0.11.13"
+version = "0.11.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f1906b49b0c3bc04b5fe5d86a77925ae6524a19b816ae38ce1e426255f1d8a31"
+checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
 dependencies = [
  "bytes",
  "getrandom 0.3.4",
diff --git a/runtime/plaid/Cargo.toml b/runtime/plaid/Cargo.toml
index ccd6d138..6bef3490 100644
--- a/runtime/plaid/Cargo.toml
+++ b/runtime/plaid/Cargo.toml
@@ -44,7 +44,7 @@ flate2 = "1.0"
 futures-util = "0.3.30"
 hex = "0.4.3"
 http = "1"
-jsonwebtoken = { version = "9.2" }
+jsonwebtoken = { version = "10.3" }
 jwt-simple = { version = "0.12.10", default-features = false, features = [
     "pure-rust",
 ] }