chore: update dependencies

Includes the security fix added in Radicle 1.7.0

Cargo.toml

@@ -11,30 +11,30 @@ repository = "https://app.radicle.xyz/nodes/radicle.liw.fi/rad:zwTxygwuz5LDGBq25
 categories = ["development-tools::build-utils"]
 
 [dependencies]
-clap = { version = "4.5.11", features = ["derive", "wrap_help"] }
-duration-str = "0.18.0"
+clap = { version = "4.6.0", features = ["derive", "wrap_help"] }
+duration-str = "0.21.0"
 git-ref-format-core = "0.6.0"
 html-page = "0.5.0"
-libc = "0.2.175"
+libc = "0.2.183"
 nonempty = "0.12.0"
-radicle = { version = "0.21.0", features = ["default", "test"] }
-radicle-crypto = "0.15.0"
-radicle-job = "0.5.0"
+radicle = { version = "0.22.1", features = ["default", "test"] }
+radicle-crypto = "0.16.0"
+radicle-job = "0.5.2"
 radicle-surf = { version = "0.27.0", default-features = false, features = ["serde"] }
-regex = "1.12.2"
-rss = "2.0.9"
-serde = { version = "1.0.204", features = ["derive"] }
-serde_json = "1.0.121"
+regex = "1.12.3"
+rss = "2.0.12"
+serde = { version = "1.0.228", features = ["derive"] }
+serde_json = "1.0.149"
 serde_norway = "0.9.42"
-sqlite = "0.32.0"
+sqlite = "0.37.0"
 subplotlib = "0.14.0"
-tempfile = { version = "3.24.0" }
-thiserror = "2.0.0"
+tempfile = { version = "3.27.0" }
+thiserror = "2.0.18"
 time = { version = "0.3.47", features = ["formatting", "macros"] }
-tracing = { version = "0.1.40", features = ["max_level_trace", "release_max_level_trace", "valuable"] }
-tracing-subscriber = { version = "0.3.18", features = ["env-filter", "fmt", "json", "valuable"] }
-url = "2.5.4"
-uuid = { version = "1.19.0", features = ["v4"] }
+tracing = { version = "0.1.44", features = ["max_level_trace", "release_max_level_trace", "valuable"] }
+tracing-subscriber = { version = "0.3.23", features = ["env-filter", "fmt", "json", "valuable"] }
+url = "2.5.8"
+uuid = { version = "1.22.0", features = ["v4"] }
 
 [dev-dependencies]
 culpa = "1.0.2"

src/ci_event.rs

@@ -314,13 +314,16 @@ impl CiEvent {
                     at: parent.into(),
                 };
 
-                let signed_refs_new = refs.load(&repo).map_err(CiEventError::StorageRefs)?.sigrefs;
+                let signed_refs_new = refs
+                    .load(&repo)
+                    .map_err(|err| CiEventError::StorageRefs(err.into()))?
+                    .sigrefs;
                 let signed_refs_old = parent_refs
                     .load(&repo)
-                    .map_err(CiEventError::StorageRefs)?
+                    .map_err(|err| CiEventError::StorageRefs(err.into()))?
                     .sigrefs;
 
-                let updates = diff_refs(signed_refs_old.refs, signed_refs_new.refs)
+                let updates = diff_refs(signed_refs_old.refs(), signed_refs_new.refs())
                     .into_iter()
                     .filter_map(|mut ref_update| {
                         let name = ref_update_name_mut(&mut ref_update);
@@ -401,16 +404,22 @@ fn originator(name: Namespaced) -> Result<PublicKey, CiEventError> {
     PublicKey::from_namespaced(&name).map_err(|err| CiEventError::key_from_namespaced(&name, err))
 }
 
-fn diff_refs(old_refs: Refs, new_refs: Refs) -> Vec<RefUpdate> {
+fn diff_refs(old_refs: &Refs, new_refs: &Refs) -> Vec<RefUpdate> {
     let mut updates = Vec::new();
-    let mut old_refs = BTreeMap::from(old_refs);
-    let mut new_refs = BTreeMap::from(new_refs);
+    let mut old_refs = old_refs
+        .iter()
+        .map(|(old_ref, &old_oid)| (old_ref, old_oid))
+        .collect::<BTreeMap<_, _>>();
+    let mut new_refs = new_refs
+        .iter()
+        .map(|(new_ref, &new_oid)| (new_ref, new_oid))
+        .collect::<BTreeMap<_, _>>();
 
     old_refs.retain(|old_ref, old_oid| match new_refs.remove_entry(old_ref) {
         Some((new_ref, new_oid)) => {
             if new_oid != *old_oid {
                 updates.push(RefUpdate::Updated {
-                    name: new_ref,
+                    name: new_ref.clone(),
                     old: *old_oid,
                     new: new_oid,
                 })
@@ -422,12 +431,18 @@ fn diff_refs(old_refs: Refs, new_refs: Refs) -> Vec<RefUpdate> {
     updates.extend(
         old_refs
             .into_iter()
-            .map(|(old_ref, oid)| RefUpdate::Deleted { name: old_ref, oid }),
+            .map(|(old_ref, oid)| RefUpdate::Deleted {
+                name: old_ref.clone(),
+                oid,
+            }),
     );
     updates.extend(
         new_refs
             .into_iter()
-            .map(|(new_ref, oid)| RefUpdate::Created { name: new_ref, oid }),
+            .map(|(new_ref, oid)| RefUpdate::Created {
+                name: new_ref.clone(),
+                oid,
+            }),
     );
 
     updates
@@ -799,17 +814,23 @@ mod test {
         let baz = RefString::try_from("refs/heads/baz").unwrap();
         let xyz = RefString::try_from("refs/heads/xyz").unwrap();
 
-        let old = Refs::from(BTreeMap::from([
-            (foo.clone(), oid1),
-            (bar.clone(), oid1),
-            (xyz.clone(), oid1),
-        ]));
-        let new = Refs::from(BTreeMap::from([
-            (foo.clone(), oid2),
-            (baz.clone(), oid2),
-            (xyz.clone(), oid1),
-        ]));
-        let updates = super::diff_refs(old, new);
+        let old = Refs::from(
+            [
+                (foo.clone(), oid1),
+                (bar.clone(), oid1),
+                (xyz.clone(), oid1),
+            ]
+            .into_iter(),
+        );
+        let new = Refs::from(
+            [
+                (foo.clone(), oid2),
+                (baz.clone(), oid2),
+                (xyz.clone(), oid1),
+            ]
+            .into_iter(),
+        );
+        let updates = super::diff_refs(&old, &new);
         assert_eq!(
             updates,
             [