microsandbox-rb 0.17.0 → 0.17.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37f44ca952f2885719237b06ea10b5316c383fee0a2fdfa5c51c76fd295c1591
-  data.tar.gz: 81e55203c1aea73d0368d93d7c36c73015b9a5a97634b69a3f5d805a48c7446c
+  metadata.gz: f76670a6753a6503a0764ed173db3c33a1eff9a62de7a7d9343bc76f8143c1ba
+  data.tar.gz: 80d4d4f1c2bbb3f47dd8f714602e6b01a841d62971b70b5682d3ad0c7dcff904
 SHA512:
-  metadata.gz: 49876e1d24e9e64ab486932f6180c511ea5142a93f8b1c0edb67f04847b861310a4972046b08babe11679f88835883fa80b739fd2f8d5f7ff5d49316f6c26c8d
-  data.tar.gz: 3bf053fb8c2e63099c128655fce91335c3ce35c7459af3616acad7d3b773f32184107740c124df2e7f122053d807f74c2d9f6337f66d0c6ed9121c4ddadd2eb3
+  metadata.gz: 74429f29417c1b2c2e6aeee35948d3c5201d5ac9d001beba4efceca484dbea53f0041e84f0f7fa0fef5933a89f3e317737fb134d6329267eb5e239fe56d7e297
+  data.tar.gz: d4d5072d1a68079a8bfe199e8c53e0d92e7614515e1326e81333f857c1b53b681575f8df2162abb167ea6228841ffba2631f4d2b8df38552040c946966223c2c

data/CHANGELOG.md

@@ -6,6 +6,212 @@ All notable changes to this gem are documented here. The format is based on
 microsandbox runtime it embeds; each release notes the upstream runtime tag it
 wraps, and the README's Versioning section keeps the full gem→runtime map.
 
+## [Unreleased]
+
+## [0.17.2] - 2026-10-12
+
+Gem-only fix and release-pipeline hardening release; the embedded runtime
+stays at **`v0.6.18`**. One behaviour change is visible: under
+`Thread.handle_interrupt(X => :on_blocking)` a native call now raises an
+already-deferred exception before it starts instead of after it finishes,
+except in the four sandbox-acquisition methods, which deliver it after the
+acquisition (see the first Fixed entry).
+
+### Added
+
+- Two contract specs keep the hand-maintained parts honest:
+  `spec/unit/rbs_contract_spec.rb` compares `sig/microsandbox.rbs` with the
+  loaded gem, and `spec/unit/docs_contract_spec.rb` checks the docs against
+  the code (version table, CHANGELOG links, error table, option list,
+  examples, release checklist). CI also runs `rbs -I sig validate`.
+
+### Changed
+
+- **Release pipeline hardened** (no change to the gem's code or API). A tag
+  now publishes only after a preflight passes — the tag equals the three
+  version constants, its commit is on `main`, and CI is green for that exact
+  commit — and after the companion `microsandbox-rb-binaries` gems have built
+  (a companion build failure now blocks the SDK publish; a companion push
+  failure still needs a re-run of `publish-binaries`). The published gem is built
+  with plain `gem build`, every workflow action is pinned to a commit SHA
+  (kept current by Dependabot), and CI checks `Cargo.lock` against the RustSec
+  advisory database with `cargo deny`. See [docs/releasing.md](docs/releasing.md).
+- **The precompiled-extension release job is removed.** The manual-dispatch
+  `cross-gems` job never produced a gem. Precompiled extension gems are not
+  built or published; every platform installs the source gem (compiled via
+  `rb_sys`), exactly as before. The `microsandbox-rb-binaries` gems are
+  unaffected.
+
+### Fixed
+
+- **An interrupted call no longer leaks what it produced.** A `Timeout.timeout`
+  (or any `Thread#raise`), a `Thread#kill` or a Ctrl-C that arrived while a
+  native call was in flight used to discard the call's result without
+  releasing it: `Timeout.timeout { Sandbox.create(...) }` raised
+  `Timeout::Error` and left the sandbox running with no Ruby object owning it
+  until the process exited, an interrupted `exec_stream` left its guest
+  session open with nothing able to kill it, and an interrupted `exec` kept
+  its collected output in memory. The result now always reaches Ruby, and
+  what happens to it depends on the interrupt:
+  - **`Timeout`/`Thread#raise` and `Thread#kill`** during `Sandbox.create`,
+    `Sandbox.connect_or_create`, `Sandbox.start` or `PullSession#sandbox`: the
+    sandbox is stopped before the exception propagates — only one the call
+    owns; a sandbox `connect_or_create` merely connected to is left running.
+    The stop is best-effort: if it fails, the interrupt is still what you
+    see, and the sandbox is torn down when its object is garbage-collected.
+  - **Ctrl-C (`SIGINT`)** during those four, and **any interrupt** during
+    every other call (`exec_stream`, streams, SSH clients, …): nothing is
+    stopped at once; the result is released — and a sandbox torn down — when
+    its unreferenced object is garbage-collected.
+
+  Native calls are still uninterruptible, so the exception is raised once the
+  call has finished, and in the first case only after the cleanup stop as well
+  (a timed-out create therefore returns later than before). One visible
+  difference for `Thread.handle_interrupt(X => :on_blocking)`: a native call
+  now raises an exception that is already deferred *before* it starts, where
+  it used to raise it after finishing. The four acquisition methods above are
+  the exception — they hold every queued interrupt back until the sandbox is
+  in the caller's hands, so there a deferred exception is delivered after the
+  acquisition (at the thread's next blocking operation), not before it.
+- **RBS: `Klass.new` now type-checks with its real arguments.** 24 classes
+  whose constructor takes arguments had no `initialize` declaration, so RBS
+  synthesized a zero-argument `new` for them.
+- **Docs:** `docs/surface.md` now lists every `create`/`modify` keyword;
+  `DESIGN.md` no longer names a runtime tag the gem stopped pinning long ago;
+  the `with_backend` example in `docs/runtime.md` is valid Ruby. `0.9.3`
+  (never tagged or published) is folded into `0.10.0`, both in this file and
+  in the README's Versioning table, and this file now defines the compare
+  links for `0.9.1`–`0.13.0`.
+
+## [0.17.1] - 2026-10-12
+
+Gem-only security and hardening release; the embedded runtime stays at
+**`v0.6.18`**. Upgrading is recommended for everyone on `0.17.0` or earlier.
+Two fixes tighten input handling and can reject input that used to be
+accepted: `Volume.fs` paths containing a `..` segment, and
+`Microsandbox.runtime_path = nil`.
+
+### Security
+
+- **Relative host paths are pinned when a sandbox is created**
+  ([GHSA-mcw9-9rf6-p4rm](https://github.com/superradcompany/microsandbox/security/advisories/GHSA-mcw9-9rf6-p4rm),
+  high; fixed upstream in runtime `v0.7.6`, which this gem does not embed yet).
+  The embedded runtime stored a relative host path exactly as written and
+  resolved it against the working directory of whichever process later
+  started the sandbox, so restarting a sandbox from another directory mounted
+  a different host directory than the one originally intended. The native
+  layer now anchors every relative host path to the creating process's
+  directory before the configuration is persisted: bind and disk mount
+  sources in `volumes:`, a directory or disk-image `image:`, a `root_disk:`
+  image path, `Patch.copy_file` / `Patch.copy_dir` sources, the `tls:`
+  certificate paths, and a path-form `from_snapshot:`. This covers sandboxes
+  created through the gem; the `msb` CLI the gem installs is unchanged, so use
+  absolute paths with it. Paths are anchored
+  without following symlinks and without requiring the target to exist, so a
+  symlinked bind-mount root is still refused unless
+  `follow_root_symlinks: true`. Absolute paths, named volumes, and OCI
+  references are unchanged, and on a cloud backend paths are forwarded as
+  written (they belong to the remote host).
+
+  **Existing sandboxes are not rewritten.** A sandbox created by an earlier
+  gem version with a relative path keeps that saved path and its old
+  behaviour: recreate it, or only ever start it from its original directory.
+  Affects every earlier `microsandbox-rb` release; the upstream advisory does
+  not list this gem.
+- **Errors no longer repeat values that can be credentials.** A URL-style
+  proxy address (`socks5://user:pass@host:port`) is refused by shape without
+  being echoed; an `env:` / `labels:` / `scripts:` value that is not a Hash
+  (or convertible to one, like `ENV`), a malformed patch, and a non-Hash
+  secret spec are reported by class name only.
+- **Dependencies with published advisories updated in `Cargo.lock`**:
+  `russh` 0.63.1 → 0.63.3 (GHSA-35g8-35p8-c8fw, SSH server side),
+  `rustls` 0.23.41 → 0.23.45 (RUSTSEC-2026-0285), `h2` 0.4.15 → 0.4.16
+  (RUSTSEC-2026-0258), plus `anyhow` 1.0.104 and `event-listener` 5.4.2
+  (unsoundness fixes). Those pulled in `aws-lc-rs` 1.18.1, `aws-lc-sys`
+  0.45.0, `rustls-webpki` 0.103.15, and `num-bigint` 0.5.1 in place of
+  `internal-russh-num-bigint`. `rkyv` and `rsa` have no compatible fixed
+  release at the pinned runtime and are unchanged.
+
+### Added
+
+- `SECURITY.md`: how to report a vulnerability privately, and a table mapping
+  upstream microsandbox advisories to the `microsandbox-rb` versions they
+  affect (upstream advisories do not list this gem). Shipped in the gem.
+- `require "microsandbox-rb"` as an entry point named after the gem. Outside
+  Bundler, `require "microsandbox"` can resolve to the unrelated `microsandbox`
+  gem on RubyGems.
+
+### Fixed
+
+- **Documentation examples that did not run.** The README quick start failed
+  on its second run (`SandboxAlreadyExistsError`; it now uses
+  `ephemeral: true`), and the README / configuration-guide `secrets:` example
+  used the `#modify` shape and raised `TypeError`. The observability and
+  errors guides named the wrong error class for the metrics startup window
+  (it is the base `Microsandbox::Error`, matched by message), and
+  `log_stream(follow: true)` was documented as ending when the sandbox stops
+  (it does not). The guides now also state that an inline secret `value:` is
+  stored in cleartext in the local catalog until the sandbox is removed, that
+  the block form stops but does not remove, that a runtime home belongs to one
+  runtime line (`MSB_HOME`), and list known issues at the pinned runtime
+  (including guest `fallocate` truncating bind-mounted files on macOS hosts).
+- **A rejected option no longer triggers a runtime download.** The first-use
+  runtime check ran before most argument validation, so `Sandbox.create` with
+  a bad option downloaded and installed `msb` before raising. It now runs
+  after the options are validated, in `create`, `connect_or_create` and
+  `create_with_progress`.
+- **First-use provisioning is serialized within a process.** Several threads
+  making their first `Sandbox.create` at once each ran the installer, which
+  replaces files in place. `Microsandbox.install`, `Microsandbox.setup` and
+  the first-use check now share one lock, and the check runs once.
+- **`Microsandbox.runtime_path = nil` / `libkrunfw_path = nil`** (or `""`)
+  raise `ArgumentError` instead of writing an empty path into the set-once
+  slot for the rest of the process.
+- **Companion gem detection no longer depends on the host project's name.**
+  When the host project is itself a gem with its bundle installed inside the
+  project directory, `microsandbox-rb-binaries` could be attributed to the
+  host project and ignored, depending on gem load order. The owner is now
+  the gem with the innermost matching root.
+- **`patches:` with `from_snapshot:`** raises `ArgumentError` up front. The
+  runtime rejects the pair only after claiming the sandbox name on disk,
+  which left an empty directory holding the name.
+- **Block forms keep the caller's exception.** `fs.write_stream { }`,
+  `ssh.open_client { }` and `client.sftp { }` closed in a bare `ensure`, so a
+  failing close replaced whatever the block had raised. The block's exception
+  now wins; a close failure is still raised when the block itself succeeded.
+- **`PullSession#sandbox`** re-raises the original create failure when called
+  again, instead of an unrelated "already taken" error.
+- **Timestamps are exact to the millisecond.** `Time.at(ms / 1000.0)` went
+  through a Float and reported one millisecond low for about half of all
+  values (`FsEntry#modified`, `FsMetadata#modified` / `#created`,
+  `LogEntry#timestamp`, `Metrics#timestamp`, and every `created_at` /
+  `updated_at` / `last_used_at` / `observed_at` reader).
+- **`secrets:` given as a `{ "NAME" => { ... } }` Hash** (the `#modify`
+  shape) raises a descriptive `ArgumentError` instead of `TypeError`; a single
+  bare spec Hash is accepted as a list of one, as is a single patch Hash for
+  `patches:`.
+
+### Changed
+
+- **`Volume.fs` paths may not contain a `..` segment.** Every `VolumeFs` operation
+  (`read`, `read_text`, `write`, `list`, `mkdir`, `remove_file`, `remove_dir`,
+  `exists?`, `copy`, `rename`, `stat`) now refuses a path that contains a `..`
+  segment with `FilesystemError`, in the native layer as well as the Ruby
+  wrapper. Volume paths are relative to the volume root and never need one.
+  A path such as `"a/../b"` that used to be accepted must now be written as
+  `"b"`. Names that merely contain dots (`"..hidden"`, `"a..b"`) are fine.
+- **README restructured** along the lines of a conventional Ruby SDK README:
+  badges, a Highlights list, a short install + quick start, a Documentation
+  table, and a sourced comparison with the official `microsandbox` gem. The
+  detailed guides moved into `docs/` (`lifecycle`, `configuration`,
+  `execution`, `filesystem`, `observability`, `images`, `runtime`, `errors`,
+  `surface`, `releasing`), which the gem now ships (`spec.files`), so the
+  links resolve on rubygems.org and rubydoc.info. `docs/surface.md` replaces
+  the duplicated implemented-surface prose in README and `DESIGN.md` as the
+  single scope statement. `docs/errors.md` lists every error class and marks
+  the four the native layer does not currently raise (`PathNotFoundError`,
+  `ImagePullFailedError`, `SecretViolationError`, `TlsError`) as reserved.
+
 ## [0.17.0] - 2026-09-13
 
 Adopts upstream runtime **`v0.6.16` → `v0.6.18`**, stepping through the
@@ -528,8 +734,10 @@ could make a later CLI copy-out overwrite an arbitrary host file — the SDK
 
 Ruby bindings for the additive `v0.6.6` SDK surface (upstream #1099 / #1128),
 bringing the gem to parity with the Python and Node SDKs, which already ship
-this API. The embedded runtime tag is unchanged (`v0.6.6`); this is a pure
-binding addition with no breaking change.
+this API. This release also adopts the upstream runtime **`v0.6.3` →
+`v0.6.6`**: that work was prepared as `0.9.3`, which was never tagged or
+published, so the runtime bump and the bindings for its new surface first
+shipped together here. Neither part is a breaking change.
 
 ### Added
 
@@ -562,16 +770,18 @@ Deliberately **not** exposed, matching the Python and Node SDKs (both surface
 these only through the CLI): `modify`'s `oci_upper_size` overlay-grow field, and
 the `SandboxMetricsReport` / per-sandbox metrics-report helpers.
 
-## [0.9.3] - 2026-07-09
+### Runtime adoption v0.6.3 → v0.6.6 (prepared as 0.9.3, first released in 0.10.0)
+
+`0.9.3` was never tagged or published; everything below shipped in `0.10.0`.
 
 Adopts upstream runtime **`v0.6.3` → `v0.6.6`** (spanning upstream `v0.6.4` and
 `v0.6.6`; `v0.6.5` was yanked upstream — its GitHub release was pulled and the
 type-model refactor it shipped, #1014, was reverted in `v0.6.6`, #1143). The
 upstream SDK crate's public API grew only *additive* surface (live
-modify/resize, ping/touch — Ruby bindings for these land in the next minor),
-so this is a pure runtime bump with no Ruby API change.
+modify/resize, ping/touch). The Ruby bindings for it are the `### Added`
+entries above.
 
-### Fixed
+#### Fixed
 
 - **Snapshot restore survives upstream tag republishes** (upstream #1130):
   restore now pulls the OCI image by its pinned manifest digest
@@ -591,7 +801,7 @@ so this is a pure runtime bump with no Ruby API change.
 - **Filesystem snapshot `readdir` streams entries** (upstream #1133), fixing
   unbounded memory growth (RSS leak) when listing very large directories.
 
-### Changed
+#### Changed
 
 - **Embedded runtime is now `v0.6.6`** (`Microsandbox::RUNTIME_VERSION` /
   `Microsandbox.runtime_version`). Also inherited:
@@ -1260,8 +1470,19 @@ microsandbox runtime, aligned with the official Python/Node/Go SDKs.
   core crate has Apple-native deps). Until precompiled gems are published,
   installing from source requires a Rust toolchain (stable >= 1.91).
 
-[Unreleased]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.14.0...HEAD
+[Unreleased]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.2...HEAD
+[0.17.2]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.1...v0.17.2
+[0.17.1]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.17.0...v0.17.1
+[0.17.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.16.0...v0.17.0
+[0.16.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.15.0...v0.16.0
+[0.15.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.14.0...v0.15.0
 [0.14.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.13.0...v0.14.0
+[0.13.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.12.0...v0.13.0
+[0.12.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.11.0...v0.12.0
+[0.11.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.10.0...v0.11.0
+[0.10.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.9.2...v0.10.0
+[0.9.2]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.9.1...v0.9.2
+[0.9.1]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.9.0...v0.9.1
 [0.9.0]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.8.2...v0.9.0
 [0.8.2]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.8.1...v0.8.2
 [0.8.1]: https://github.com/ya-luotao/microsandbox-rb/compare/v0.8.0...v0.8.1

data/Cargo.lock

@@ -169,9 +169,9 @@ dependencies = [
 
 [[package]]
 name = "anyhow"
-version = "1.0.102"
+version = "1.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
 
 [[package]]
 name = "argon2"
@@ -249,7 +249,7 @@ checksum = "b9552f96391c005e6ab449fa941420935e7e062489b12b8b1b08879b2163f5b5"
 dependencies = [
  "bytes",
  "half",
- "num-bigint",
+ "num-bigint 0.4.6",
  "num-traits",
 ]
 
@@ -579,9 +579,9 @@ checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
 
 [[package]]
 name = "aws-lc-rs"
-version = "1.17.0"
+version = "1.18.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5ec2f1fc3ec205783a5da9a7e6c1509cc69dedf09a1949e412c1e18469326d00"
+checksum = "b281d307588d634de920874890732659e2e7672f72b5e10e81badc1a8a83621e"
 dependencies = [
  "aws-lc-sys",
  "untrusted 0.7.1",
@@ -590,14 +590,15 @@ dependencies = [
 
 [[package]]
 name = "aws-lc-sys"
-version = "0.41.0"
+version = "0.45.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a2f9779ce85b93ab6170dd940ad0169b5766ff848247aff13bb788b832fe3f4"
+checksum = "9bff6c3b54fad79a2e60b8102caf565819711497c1f5f092f49508e2f5c31b27"
 dependencies = [
  "cc",
  "cmake",
  "dunce",
  "fs_extra",
+ "pkg-config",
 ]
 
 [[package]]
@@ -643,7 +644,7 @@ checksum = "4d6867f1565b3aad85681f1015055b087fcfd840d6aeee6eee7f2da317603695"
 dependencies = [
  "autocfg",
  "libm",
- "num-bigint",
+ "num-bigint 0.4.6",
  "num-integer",
  "num-traits",
  "serde",
@@ -1614,7 +1615,7 @@ dependencies = [
  "asn1-rs",
  "displaydoc",
  "nom",
- "num-bigint",
+ "num-bigint 0.4.6",
  "num-traits",
  "rusticata-macros",
 ]
@@ -1922,7 +1923,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -1937,11 +1938,10 @@ dependencies = [
 
 [[package]]
 name = "event-listener"
-version = "5.4.1"
+version = "5.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab"
+checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2"
 dependencies = [
- "concurrent-queue",
  "parking",
  "pin-project-lite",
 ]
@@ -2051,7 +2051,7 @@ checksum = "94e7099f6313ecacbe1256e8ff9d617b75d1bcb16a6fddef94866d225a01a14a"
 dependencies = [
  "io-lifetimes 2.0.4",
  "rustix",
- "windows-sys 0.59.0",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -2300,9 +2300,9 @@ dependencies = [
 
 [[package]]
 name = "h2"
-version = "0.4.15"
+version = "0.4.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6cb093c84e8bd9b188d4c4a8cb6579fc016968d14c99882163cd3ff402a4f155"
+checksum = "a9f37a958b41b3b19ee2707c06439c0e9e547e847223eb791ecb0cb821c65e27"
 dependencies = [
  "atomic-waker",
  "bytes",
@@ -2851,18 +2851,6 @@ dependencies = [
  "hybrid-array",
 ]
 
-[[package]]
-name = "internal-russh-num-bigint"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae8e22120c32fb4d19ec55fba35015f57095cd95a2e3b732e44457f5915b2ee8"
-dependencies = [
- "num-integer",
- "num-traits",
- "rand 0.10.2",
- "rand_core 0.10.1",
-]
-
 [[package]]
 name = "io-extras"
 version = "0.19.0"
@@ -2870,7 +2858,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "20fd6de4ccfcc187e38bc21cfa543cb5a302cb86a8b114eb7f0bf0dc9f8ac00f"
 dependencies = [
  "io-lifetimes 3.0.1",
- "windows-sys 0.60.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -3672,7 +3660,7 @@ dependencies = [
 
 [[package]]
 name = "microsandbox_rb"
-version = "0.17.0"
+version = "0.17.2"
 dependencies = [
  "chrono",
  "futures",
@@ -4033,7 +4021,7 @@ version = "0.4.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "35bd024e8b2ff75562e5f34e7f4905839deb4b22955ef5e73d2fea1b9813cb23"
 dependencies = [
- "num-bigint",
+ "num-bigint 0.4.6",
  "num-complex",
  "num-integer",
  "num-iter",
@@ -4051,6 +4039,18 @@ dependencies = [
  "num-traits",
 ]
 
+[[package]]
+name = "num-bigint"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93e7820bc0a80a0238e650327316f929ba18d5be054b647490a3a6a339f3e7c0"
+dependencies = [
+ "num-integer",
+ "num-traits",
+ "rand 0.10.2",
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "num-complex"
 version = "0.4.6"
@@ -4092,7 +4092,7 @@ version = "0.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f83d14da390562dca69fc84082e73e548e1ad308d24accdedd2720017cb37824"
 dependencies = [
- "num-bigint",
+ "num-bigint 0.4.6",
  "num-integer",
  "num-traits",
 ]
@@ -4733,7 +4733,7 @@ dependencies = [
  "once_cell",
  "socket2",
  "tracing",
- "windows-sys 0.60.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -5106,9 +5106,9 @@ dependencies = [
 
 [[package]]
 name = "russh"
-version = "0.63.1"
+version = "0.63.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "35bab1b87d915817d5d9cc352637cd40d5f0b298a48c6309af9156a4addc3031"
+checksum = "036204edbd199552a5b3832f63c60dcdf395dc44c7f06b4af1c0e8139cc11bce"
 dependencies = [
  "aes 0.9.1",
  "aws-lc-rs",
@@ -5137,13 +5137,12 @@ dependencies = [
  "hex-literal",
  "hmac 0.13.0",
  "inout 0.2.2",
- "internal-russh-num-bigint",
  "keccak",
  "log",
  "md5",
  "ml-kem",
  "module-lattice",
- "num-bigint",
+ "num-bigint 0.5.1",
  "p256",
  "p384",
  "p521",
@@ -5271,7 +5270,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -5286,9 +5285,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.41"
+version = "0.23.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6b92b125634d9b795e7beca796cc790df15a7fb38323bf3196fda83292d06b1f"
+checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
 dependencies = [
  "aws-lc-rs",
  "log",
@@ -5340,7 +5339,7 @@ dependencies = [
  "security-framework 3.7.0",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -5351,9 +5350,9 @@ checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.13"
+version = "0.103.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2"
 dependencies = [
  "aws-lc-rs",
  "ring",
@@ -6414,7 +6413,7 @@ dependencies = [
  "getrandom 0.4.2",
  "once_cell",
  "rustix",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -7211,7 +7210,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -7522,7 +7521,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3f3fd376f71958b862e7afb20cfe5a22830e1963462f3a17f49d82a6c1d1f42d"
 dependencies = [
  "bitflags 2.13.0",
- "windows-sys 0.59.0",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]