chore(deps): bump the cargo-minor-and-patch group across 1 directory with 23 updates (#8855)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>

crates/goose-cli/Cargo.toml

@@ -56,13 +56,13 @@ webbrowser = { workspace = true }
 indicatif = "0.18.1"
 tokio-util = { workspace = true, features = ["compat", "rt"] }
 anstream = "1.0.0"
-open = "5.3.2"
+open = "5.3.4"
 url = { workspace = true }
 urlencoding = { workspace = true }
-clap_complete = "4.5.62"
+clap_complete = "4.6.2"
 comfy-table = "7.2.2"
 sha2 = { workspace = true }
-sigstore-verify = { version = "0.6", default-features = false }
+sigstore-verify = { version = "=0.6.5", default-features = false }
 axum.workspace = true
 
 [target.'cfg(target_os = "windows")'.dependencies]

crates/goose-cli/src/commands/update.rs

@@ -1,6 +1,6 @@
 use anyhow::{bail, Context, Result};
 use sha2::{Digest, Sha256};
-use sigstore_verify::trust_root::TrustedRoot;
+use sigstore_verify::trust_root::{TrustedRoot, SIGSTORE_PRODUCTION_TRUSTED_ROOT};
 use sigstore_verify::types::{Bundle, Sha256Hash};
 use sigstore_verify::VerificationPolicy;
 use std::env;
@@ -165,7 +165,8 @@ async fn verify_provenance(archive_data: &[u8], tag: &str) -> Result<bool> {
         }
     };
 
-    let trusted_root = TrustedRoot::production().context("Failed to load Sigstore trusted root")?;
+    let trusted_root = TrustedRoot::from_json(SIGSTORE_PRODUCTION_TRUSTED_ROOT)
+        .context("Failed to load Sigstore trusted root")?;
     let policy = VerificationPolicy::with_issuer(GITHUB_ACTIONS_ISSUER);
     let artifact_digest =
         Sha256Hash::from_hex(&digest).context("Failed to parse artifact digest")?;

crates/goose-mcp/Cargo.toml

@@ -35,7 +35,7 @@ tempfile = { workspace = true }
 include_dir = { workspace = true }
 once_cell = { workspace = true }
 lopdf = "0.40.0"
-docx-rs = "0.4.7"
+docx-rs = "0.4.20"
 image = { version = "0.24.9", features = ["jpeg"] }
 umya-spreadsheet = "2.2.3"
 shell-words = { workspace = true }

crates/goose-server/Cargo.toml

@@ -75,7 +75,7 @@ rustls = { version = "0.23", features = ["aws_lc_rs"], optional = true }
 uuid = { workspace = true }
 rcgen = "0.14"
 axum-server = { version = "0.8.0" }
-aws-lc-rs = { version = "1.16.0", optional = true }
+aws-lc-rs = { version = "1.16.3", optional = true }
 openssl = { version = "0.10", optional = true }
 pem = "3.0.6"
 

crates/goose/Cargo.toml

@@ -86,7 +86,7 @@ uuid = { workspace = true, features = ["v7"] }
 regex = { workspace = true }
 async-trait = { workspace = true }
 async-stream = { workspace = true }
-minijinja = { version = "2.12.0", features = ["loader"] }
+minijinja = { version = "2.19.0", features = ["loader"] }
 include_dir = { workspace = true }
 tiktoken-rs = "0.11.0"
 chrono = { workspace = true }
@@ -130,7 +130,7 @@ sqlx = { version = "0.8", default-features = false, features = [
 
 # For Bedrock provider (optional, behind "aws-providers" feature)
 aws-config = { version = "=1.8.12", features = ["behavior-version-latest"], optional = true }
-aws-smithy-types = { version = "=1.3.5", optional = true }
+aws-smithy-types = { version = "=1.4.7", optional = true }
 aws-sdk-bedrockruntime = { version = "=1.120.0", default-features = false, features = ["default-https-client", "rt-tokio"], optional = true }
 
 # For SageMaker TGI provider (optional, behind "aws-providers" feature)
@@ -139,7 +139,7 @@ aws-sdk-sagemakerruntime = { version = "1.62.0", default-features = false, featu
 # For GCP Vertex AI provider auth
 jsonwebtoken = { version = "10.3.0", default-features = false, features = ["use_pem"] }
 
-blake3 = "1.5"
+blake3 = "1.8"
 fs2 = { workspace = true }
 tokio-stream = { workspace = true, features = ["io-util"] }
 tempfile = { workspace = true }
@@ -164,9 +164,9 @@ sys-info = "0.9"
 schemars = { workspace = true, features = [
     "derive",
 ] }
-insta = "1.43.2"
+insta = "1.47.2"
 shellexpand = { workspace = true }
-indexmap = "2.12.0"
+indexmap = "2.14.0"
 ignore = { workspace = true }
 rayon = { workspace = true }
 tree-sitter = { workspace = true }
@@ -182,9 +182,9 @@ tree-sitter-typescript = { workspace = true }
 which = { workspace = true }
 pctx_code_mode = { version = "^0.3.0", optional = true }
 pulldown-cmark = "0.13.0"
-llama-cpp-2 = { version = "0.1.143", features = ["sampler", "mtmd"], optional = true }
+llama-cpp-2 = { version = "0.1.145", features = ["sampler", "mtmd"], optional = true }
 encoding_rs = "0.8.35"
-pastey = "0.2.1"
+pastey = "0.2.2"
 shell-words = { workspace = true }
 pem = { version = "3", optional = true }
 pkcs1 = { version = "0.7", default-features = false, features = ["pkcs8"], optional = true }
@@ -208,7 +208,7 @@ keyring = { version = "3.6.2", features = ["apple-native"] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
 keyring = { version = "3.6.2", features = ["sync-secret-service"] }
-libc = "0.2.184"
+libc = "0.2.186"
 
 [dev-dependencies]
 serial_test = { workspace = true }