aperim · dependabot · Aug 13, 2026
@@ -92,7 +92,7 @@ tracing-subscriber = { workspace = true }
 # performs NO FFI (it stays `unsafe_code = forbid`); all raw libav* remains owned
 # by `multiview-ffmpeg`. Pinned to match its binding. `cargo deny` runs with
 # all-features=false so it never sees this opt-in dependency.
-ffmpeg-next = { version = "8.1", optional = true }
+ffmpeg-next = { version = "9.0", optional = true }
 
 # Used by the real `ffmpeg`-feature pipeline to stage a generated `test`-source
 # clip into a tempdir before decoding it. Optional + gated by the `ffmpeg`
@@ -144,7 +144,7 @@ toml = "1.1.2"
 # public key as base64url (ADR-I008's verified raw-32 encoding). Pure Rust
 # (MIT/Apache-2.0); already a dev-dep and in the workspace graph (the licence
 # plane). `default-features = false` keeps it `alloc`-only.
-base64 = { version = "0.22", default-features = false, features = ["alloc"] }
+base64 = { version = "0.23", default-features = false, features = ["alloc"] }
 # The `multiview node` display pairing code is a Crockford-base32 truncation of
 # the SHA-256 of the device public key — deterministic so the displayed code is
 # stable across power cycles. Pure Rust (MIT/Apache-2.0), the same hash the
@@ -169,7 +169,7 @@ tempfile = "3"
 # dev-only — the cli's non-test code has no signer/RNG.
 ed25519-dalek = { version = "3", default-features = false, features = ["alloc"] }
 p256 = { version = "0.13", default-features = false, features = ["ecdsa"] }
-base64 = { version = "0.22", default-features = false, features = ["alloc"] }
+base64 = { version = "0.23", default-features = false, features = ["alloc"] }
 serde_json = { workspace = true }
 # Property tests for the pure media-player transport state machine (ADR-0057 /
 # ADR-0097): the exact-once vamp-exit-latch race over a 2–3-frame vamp segment,

@@ -88,7 +88,7 @@ chrono = { workspace = true, features = ["alloc"] }
 sha2 = "0.11.0"
 hmac = "0.13.0"
 subtle = "2.6.1"
-base64 = "0.22.1"
+base64 = "0.23.1"
 
 # OpenAPI 3.1 (utoipa) + Scalar try-it-out, behind the default `openapi` feature.
 utoipa = { version = "5.5.0", features = ["axum_extras", "uuid"], optional = true }

@@ -26,7 +26,7 @@ tracing = { workspace = true }
 # 7.x line to match the FFmpeg 7.1 / libavcodec 61 in the dev/CI image. WTFPL
 # (public-domain-equivalent, permissive) — acceptable for an opt-in feature; the
 # default `cargo deny check` runs with all-features=false so it never sees this.
-ffmpeg-next = { version = "8.1", optional = true }
+ffmpeg-next = { version = "9.0", optional = true }
 # C ABI scalar types (`c_int`/`c_void`) for the GP-0 `AVIOInterruptCB` callback,
 # whose libav-bound signature is `extern "C" fn(*mut libc::c_void) -> libc::c_int`
 # (ffmpeg-sys-next's bindings use `libc::*`). Only pulled in with `ffmpeg`; it is

@@ -24,7 +24,7 @@ arc-swap = "1.9.1"
 # no native deps, LGPL-clean (MIT/Zlib/Apache-2.0) — the crate stays
 # `unsafe_code = forbid`. Always compiled: the SAP packet codec is
 # feature-independent (only the socket transport sits behind `st2110`).
-miniz_oxide = "0.8.9"
+miniz_oxide = "0.9.1"
 thiserror = { workspace = true }
 tracing = { workspace = true }
 tokio = { workspace = true }
@@ -74,7 +74,7 @@ proptest = "1.11.0"
 # vs the 64 KiB cap) without a multi-KiB magic const; the parser must reject it
 # AT the cap. Already a normal dependency at this exact version (deny-neutral),
 # and it is safe code — the crate stays `unsafe_code = forbid`.
-miniz_oxide = "0.8.9"
+miniz_oxide = "0.9.1"
 # Self-contained ffmpeg-feature tests generate their own tiny clip at runtime
 # (via the `ffmpeg` CLI) into a tempdir — no checked-in media.
 tempfile = "3"

@@ -69,7 +69,7 @@ p256 = { version = "0.13", default-features = false, features = ["ecdsa"], optio
 # STANDARD-base64 (RFC 4648 §4) decode of `leaseBytes` + base64url decode of the
 # well-known key material/signatures (D3). `MIT OR Apache-2.0`, deny-clean, pure
 # Rust, no native deps.
-base64 = { version = "0.22", default-features = false, features = ["alloc"], optional = true }
+base64 = { version = "0.23", default-features = false, features = ["alloc"], optional = true }
 # Lower-case hex decode of the bare-Ed25519 lease `signature` (64 bytes) + the
 # device-PoP challenge nonce (32 raw bytes from 64-hex). `MIT OR Apache-2.0`,
 # deny-clean, pure Rust.

@@ -127,7 +127,7 @@ multiview-ffmpeg = { workspace = true, optional = true }
 # `unsafe` and performs NO FFI (it stays `unsafe_code = forbid`); all raw libav*
 # remains owned by `multiview-ffmpeg`. Pinned to match its binding. `cargo deny`
 # runs with all-features=false so it never sees this opt-in dependency.
-ffmpeg-next = { version = "8.1", optional = true }
+ffmpeg-next = { version = "9.0", optional = true }
 
 [dev-dependencies]
 proptest = "1.11.0"

@@ -28,7 +28,7 @@ sha2 = "0.11.0"
 # itself `forbid(unsafe_code)` and dependency-free. Both 0.6.1 and the 0.7 line add
 # an extra `IJG` license term that is NOT in our allowlist and would fail
 # `cargo deny`, so we deliberately do not float to them.
-jpeg-encoder = { version = "=0.7.0", default-features = false, features = ["std"] }
+jpeg-encoder = { version = "=0.7.1", default-features = false, features = ["std"] }
 # NOTE: this crate no longer depends on `str0m`. The native ICE/DTLS/SRTP WHEP
 # transport relocated to `multiview-webrtc` (ADR-0048 / ADR-P006 move 1) — exactly
 # one str0m owner per process. `multiview-preview` keeps only the pure, socket-free

@@ -33,7 +33,7 @@ hmac = "0.13.0"
 sha1 = "0.11.0"
 sha2 = "0.11.0"
 md-5 = "0.11.0"
-base64 = "0.22.1"
+base64 = "0.23.1"
 # Native WebRTC (ICE/DTLS/SRTP) stack — OPTIONAL, pulled in ONLY by `native`.
 # str0m is sans-IO (`MIT OR Apache-2.0`), pinned EXACTLY to =0.16.2 (ADR-0048 §3,
 # a tightening of multiview-preview's caret requirement; lockfile-resolved to the