Update most Rust dependencies & disable some unused features

Cargo.toml

@@ -64,7 +64,8 @@ features = ["axum", "axum-extra", "axum-json", "axum-query", "macros"]
 # GraphQL server
 [workspace.dependencies.async-graphql]
 version = "7.0.15"
-features = ["chrono", "url", "tracing"]
+default-features = false
+features = ["chrono", "url", "tracing", "playground"]
 
 [workspace.dependencies.async-stream]
 version = "0.3.6"
@@ -115,7 +116,7 @@ features = ["derive"]
 
 # Cron expressions
 [workspace.dependencies.cron]
-version = "0.13.0"
+version = "0.15.0"
 
 # Elliptic curve cryptography
 [workspace.dependencies.elliptic-curve]
@@ -133,7 +134,7 @@ version = "0.3.31"
 
 # Rate-limiting
 [workspace.dependencies.governor]
-version = "0.7.0"
+version = "0.8.0"
 
 # HTTP headers
 [workspace.dependencies.headers]
@@ -258,7 +259,7 @@ version = "0.23.22"
 
 # Use platform-specific verifier for TLS
 [workspace.dependencies.rustls-platform-verifier]
-version = "0.3.4"
+version = "0.5.0"
 
 # JSON Schema generation
 [workspace.dependencies.schemars]

crates/axum-utils/Cargo.toml

@@ -12,7 +12,6 @@ publish = false
 workspace = true
 
 [dependencies]
-async-trait.workspace = true
 axum.workspace = true
 axum-extra.workspace = true
 chrono.workspace = true

crates/cli/Cargo.toml

@@ -20,7 +20,7 @@ bytes.workspace = true
 camino.workspace = true
 clap.workspace = true
 console = "0.15.10"
-dialoguer = { version = "0.11.0", features = ["fuzzy-select"] }
+dialoguer = { version = "0.11.0", default-features = false, features = ["fuzzy-select", "password"] }
 dotenvy = "0.15.7"
 figment.workspace = true
 futures-util.workspace = true
@@ -39,7 +39,6 @@ serde_yaml = "0.9.34"
 sqlx.workspace = true
 tokio.workspace = true
 tokio-util.workspace = true
-tokio-stream.workspace = true
 tower.workspace = true
 tower-http.workspace = true
 url.workspace = true
@@ -81,7 +80,6 @@ mas-tasks.workspace = true
 mas-templates.workspace = true
 mas-tower.workspace = true
 
-oauth2-types.workspace = true
 syn2mas.workspace = true
 
 [build-dependencies]

crates/data-model/Cargo.toml

@@ -21,7 +21,6 @@ url.workspace = true
 crc = "3.2.1"
 ulid.workspace = true
 rand.workspace = true
-rand_chacha = "0.3.1"
 regex = "1.11.1"
 woothee = "0.13.0"
 ruma-common.workspace = true

crates/handlers/Cargo.toml

@@ -58,7 +58,7 @@ serde_urlencoded = "0.7.1"
 
 # Password hashing
 argon2 = { version = "0.5.3", features = ["password-hash", "std"] }
-bcrypt = "0.16.0"
+bcrypt = { version = "0.16.0", default-features = true }
 pbkdf2 = { version = "0.12.2", features = [
     "password-hash",
     "std",
@@ -107,6 +107,8 @@ zxcvbn = "3.1.0"
 [dev-dependencies]
 insta.workspace = true
 tracing-subscriber.workspace = true
-cookie_store = { version = "0.21.1", default-features = false, features = ["serde_json"] }
+cookie_store = { version = "0.21.1", default-features = false, features = [
+    "serde_json",
+] }
 sqlx.workspace = true
 wiremock.workspace = true

crates/http/Cargo.toml

@@ -20,6 +20,7 @@ opentelemetry-http.workspace = true
 opentelemetry-semantic-conventions.workspace = true
 opentelemetry.workspace = true
 reqwest.workspace = true
+rustls.workspace = true
 rustls-platform-verifier.workspace = true
 tokio.workspace = true
 tower.workspace = true

crates/http/src/reqwest.rs

@@ -30,6 +30,7 @@ use opentelemetry_semantic_conventions::{
         NETWORK_TYPE, SERVER_ADDRESS, SERVER_PORT, URL_FULL, URL_SCHEME, USER_AGENT_ORIGINAL,
     },
 };
+use rustls_platform_verifier::ConfigVerifierExt;
 use tokio::time::Instant;
 use tower::{BoxError, Service as _};
 use tracing::Instrument;
@@ -91,9 +92,10 @@ impl reqwest::dns::Resolve for TracingResolver {
 #[must_use]
 pub fn client() -> reqwest::Client {
     // TODO: can/should we limit in-flight requests?
+    let tls_config = rustls::ClientConfig::with_platform_verifier();
     reqwest::Client::builder()
         .dns_resolver(Arc::new(TracingResolver::new()))
-        .use_preconfigured_tls(rustls_platform_verifier::tls_config())
+        .use_preconfigured_tls(tls_config)
         .user_agent(USER_AGENT)
         .timeout(Duration::from_secs(60))
         .connect_timeout(Duration::from_secs(30))