From aa125310ed7c3c0514fb30ad24fb74d093d7f091 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Jul 2026 10:12:40 +0000
Subject: [PATCH] chore(deps)(deps): bump tungstenite from 0.29.0 to 0.30.0

---
updated-dependencies:
- dependency-name: tungstenite
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                         | 60 ++++++++++++++++++++++++++++--
 crates/rustynes-mobile/Cargo.toml  |  2 +-
 crates/rustynes-netplay/Cargo.toml |  2 +-
 3 files changed, 58 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index d1f9185e..c71e479b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -633,6 +633,17 @@ version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
+[[package]]
+name = "chacha20"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "ciborium"
 version = "0.2.2"
@@ -830,6 +841,12 @@ dependencies = [
  "wasm-bindgen",
 ]
 
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
 [[package]]
 name = "const-str"
 version = "0.5.7"
@@ -1203,6 +1220,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
 dependencies = [
  "block-buffer 0.12.1",
+ "const-oid",
  "crypto-common 0.2.2",
 ]
 
@@ -1735,6 +1753,7 @@ dependencies = [
  "cfg-if",
  "libc",
  "r-efi 6.0.0",
+ "rand_core 0.10.1",
 ]
 
 [[package]]
@@ -3734,6 +3753,17 @@ dependencies = [
  "rand_core 0.9.5",
 ]
 
+[[package]]
+name = "rand"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7f5fa3a058cd35567ef9bfa5e75732bee0f9e4c55fa90477bef2dfcdbc4be80"
+dependencies = [
+ "chacha20",
+ "getrandom 0.4.3",
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "rand_chacha"
 version = "0.3.1"
@@ -3772,6 +3802,12 @@ dependencies = [
  "getrandom 0.3.4",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
+
 [[package]]
 name = "rand_xorshift"
 version = "0.4.0"
@@ -4427,7 +4463,7 @@ dependencies = [
  "rustynes-ra",
  "rustynes-script",
  "thiserror 2.0.18",
- "tungstenite",
+ "tungstenite 0.30.0",
  "uniffi",
  "zip",
 ]
@@ -4450,7 +4486,7 @@ dependencies = [
  "thiserror 2.0.18",
  "tokio",
  "tokio-tungstenite",
- "tungstenite",
+ "tungstenite 0.30.0",
  "wasm-bindgen",
  "web-sys",
 ]
@@ -5231,7 +5267,7 @@ dependencies = [
  "futures-util",
  "log",
  "tokio",
- "tungstenite",
+ "tungstenite 0.29.0",
 ]
 
 [[package]]
@@ -5329,9 +5365,25 @@ dependencies = [
  "httparse",
  "log",
  "rand 0.9.4",
+ "sha1 0.10.6",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "tungstenite"
+version = "0.30.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e48ac77174b19c110a50ab2128b24215ac9cb40e0e12e093fb602d175c569d22"
+dependencies = [
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand 0.10.2",
  "rustls",
  "rustls-pki-types",
- "sha1 0.10.6",
+ "sha1 0.11.0",
  "thiserror 2.0.18",
  "webpki-roots 0.26.11",
 ]
diff --git a/crates/rustynes-mobile/Cargo.toml b/crates/rustynes-mobile/Cargo.toml
index 6c893833..4cc47a50 100644
--- a/crates/rustynes-mobile/Cargo.toml
+++ b/crates/rustynes-mobile/Cargo.toml
@@ -75,7 +75,7 @@ zip = { version = "8", default-features = false, features = ["deflate"] }
 # STUN responder, exactly like `rustynes-netplay`'s `tests/nat_loopback.rs`. The
 # blocking `tungstenite` server side mirrors the client the bridge uses; same
 # version + pure-rustls features (no OpenSSL) so the dev build stays consistent.
-tungstenite = { version = "0.29", default-features = false, features = ["handshake", "rustls-tls-webpki-roots"] }
+tungstenite = { version = "0.30", default-features = false, features = ["handshake", "rustls-tls-webpki-roots"] }
 
 [[bin]]
 # The binding generator the platform builds invoke:
diff --git a/crates/rustynes-netplay/Cargo.toml b/crates/rustynes-netplay/Cargo.toml
index d4dd6efa..e3858ebb 100644
--- a/crates/rustynes-netplay/Cargo.toml
+++ b/crates/rustynes-netplay/Cargo.toml
@@ -45,7 +45,7 @@ serde_json = { version = "1.0", optional = true }
 # worker. `rustls-tls-webpki-roots` keeps it pure-Rust TLS (no system OpenSSL),
 # which is what lets it cross-compile cleanly to aarch64-linux-android. No async
 # runtime: this is the blocking `tungstenite::connect` + `read`/`send` API.
-tungstenite = { version = "0.29", default-features = false, features = ["handshake", "rustls-tls-webpki-roots"], optional = true }
+tungstenite = { version = "0.30", default-features = false, features = ["handshake", "rustls-tls-webpki-roots"], optional = true }
 
 # v2.5.0 Phase C — WebRTC transport scaffold for the browser (wasm32 only).
 # The native build (UDP/std::net) needs none of these; on wasm they back the