From 350ff67d9933de66996db877157913aec942b136 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 31 Aug 2026 09:32:57 +0000
Subject: [PATCH 1/2] chore(deps): bump uuid from 1.23.3 to 1.26.0

Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.23.3 to 1.26.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.23.3...v1.26.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 6c4bf927..21ad5f59 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2683,9 +2683,9 @@ checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
 
 [[package]]
 name = "uuid"
-version = "1.23.3"
+version = "1.26.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "144d6b123cef80b301b8f72a9e2ca4370ddec21950d0a103dd22c437006d2db7"
+checksum = "b5772d71c9be8a8a6ac2117d949c5b224c1b72241bb611d9a3012edcf8af7812"
 dependencies = [
  "getrandom 0.4.2",
  "js-sys",

From e226d07bc7e6b7d637fbe27f6d28c2d3824b733b Mon Sep 17 00:00:00 2001
From: UncleSp1d3r <unclesp1d3r@evilbitlabs.io>
Date: Thu, 17 Sep 2026 20:21:05 -0400
Subject: [PATCH 2/2] fix(ci): pin Rust toolchain to 1.97.1 and update yanked
 chacha20
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The `quality` job has failed on every PR since Rust 1.98.0 landed
(2026-08-18). `mise.toml` pinned `rust = "latest"`, so CI floated onto
1.98.0, whose clippy fires `unused_async` on async-trait impl methods —
17 errors in `daemoneye-eventbus`, failing `just lint-rust` with exit
101. Pinning to 1.97.1 restores a reproducible toolchain and stops the
next stable release from breaking CI again.

Separately, the nightly Security workflow has failed since at least
2026-09-15 on `error[yanked]: detected yanked crate (chacha20)`.
chacha20 0.10.0 is a transitive dev-dependency via rand 0.10.2;
0.10.2 is not yanked. `cargo deny check advisories` now passes.

Unblocks the five stalled Dependabot PRs (#234-#238), which fail only
on this toolchain break.

Closes #233

Signed-off-by: UncleSp1d3r <unclesp1d3r@evilbitlabs.io>
---
 Cargo.lock | 4 ++--
 mise.toml  | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 6c4bf927..497a7450 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -328,9 +328,9 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
 [[package]]
 name = "chacha20"
-version = "0.10.0"
+version = "0.10.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6f8d983286843e49675a4b7a2d174efe136dc93a18d69130dd18198a6c167601"
+checksum = "65c35e4b699c7e15ccbe7ee35c005e4fc0a278d22238a2857e6ce2dadeda1b06"
 dependencies = [
  "cfg-if",
  "cpufeatures 0.3.0",
diff --git a/mise.toml b/mise.toml
index c87ad79d..69899a76 100644
--- a/mise.toml
+++ b/mise.toml
@@ -16,7 +16,7 @@ cargo-insta                 = "1.47.2"
 "cargo:mdbook-i18n-helpers" = "latest"
 just                        = "latest"
 python                      = "latest"
-rust                        = { version = "latest", components = "llvm-tools,cargo,rustfmt,clippy", profile = "default" }
+rust                        = { version = "1.97.1", components = "llvm-tools,cargo,rustfmt,clippy", profile = "default" }
 "cargo:cargo-outdated"      = "latest"
 "cargo:cargo-release"       = "latest"
 "cargo:cargo-auditable"     = "latest"