From 3811e1d9d6e8f4d0075de9ad8cb9f91d556b9384 Mon Sep 17 00:00:00 2001
From: Rasensprenger <security@methanium.net>
Date: Thu, 6 Aug 2026 01:02:17 +0200
Subject: [PATCH 1/2] chore(deps): update mtp-transport digest to e8b7c43

---
 apps/tauri/src-tauri/Cargo.lock | 106 ++++++++++++++++----------------
 apps/tauri/src-tauri/Cargo.toml |   2 +-
 2 files changed, 54 insertions(+), 54 deletions(-)

diff --git a/apps/tauri/src-tauri/Cargo.lock b/apps/tauri/src-tauri/Cargo.lock
index 86f1b5b..33b4012 100644
--- a/apps/tauri/src-tauri/Cargo.lock
+++ b/apps/tauri/src-tauri/Cargo.lock
@@ -2759,18 +2759,6 @@ dependencies = [
  "tokio",
 ]
 
-[[package]]
-name = "mtp-codec"
-version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
-dependencies = [
- "base64 0.22.1",
- "byteorder",
- "mtp-common 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
- "mtp-type-map 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
- "rand 0.10.2",
-]
-
 [[package]]
 name = "mtp-codec"
 version = "0.2.0"
@@ -2785,14 +2773,15 @@ dependencies = [
 ]
 
 [[package]]
-name = "mtp-common"
+name = "mtp-codec"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471#e8b7c433e697660214fa17162f08ce6792792471"
 dependencies = [
- "quinn",
- "rustls",
- "thiserror 2.0.19",
- "wtransport",
+ "base64 0.22.1",
+ "byteorder",
+ "mtp-common 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471)",
+ "mtp-type-map 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471)",
+ "rand 0.10.2",
 ]
 
 [[package]]
@@ -2807,23 +2796,14 @@ dependencies = [
 ]
 
 [[package]]
-name = "mtp-crypto"
+name = "mtp-common"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471#e8b7c433e697660214fa17162f08ce6792792471"
 dependencies = [
- "base64 0.22.1",
- "chacha20poly1305",
- "ed25519-dalek",
- "getrandom 0.4.3",
- "hkdf",
- "ml-dsa",
- "rand 0.10.2",
- "rand_core 0.10.1",
+ "quinn",
  "rustls",
- "sha2 0.11.0",
- "thiserror 1.0.69",
- "tokio",
- "zeroize",
+ "thiserror 2.0.19",
+ "wtransport",
 ]
 
 [[package]]
@@ -2848,6 +2828,26 @@ dependencies = [
  "zeroize",
 ]
 
+[[package]]
+name = "mtp-crypto"
+version = "0.2.0"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471#e8b7c433e697660214fa17162f08ce6792792471"
+dependencies = [
+ "base64 0.22.1",
+ "chacha20poly1305",
+ "ed25519-dalek",
+ "getrandom 0.4.3",
+ "hkdf",
+ "ml-dsa",
+ "rand 0.10.2",
+ "rand_core 0.10.1",
+ "rustls",
+ "sha2 0.11.0",
+ "thiserror 1.0.69",
+ "tokio",
+ "zeroize",
+]
+
 [[package]]
 name = "mtp-host"
 version = "0.2.0"
@@ -2863,24 +2863,6 @@ dependencies = [
  "wtransport",
 ]
 
-[[package]]
-name = "mtp-transport"
-version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
-dependencies = [
- "async-trait",
- "mtp-codec 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
- "mtp-common 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
- "mtp-crypto 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
- "rcgen",
- "rustls",
- "rustls-native-certs",
- "sha2 0.11.0",
- "tokio",
- "tracing",
- "wtransport",
-]
-
 [[package]]
 name = "mtp-transport"
 version = "0.2.0"
@@ -2899,10 +2881,28 @@ dependencies = [
  "wtransport",
 ]
 
+[[package]]
+name = "mtp-transport"
+version = "0.2.0"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471#e8b7c433e697660214fa17162f08ce6792792471"
+dependencies = [
+ "async-trait",
+ "mtp-codec 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471)",
+ "mtp-common 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471)",
+ "mtp-crypto 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471)",
+ "rcgen",
+ "rustls",
+ "rustls-native-certs",
+ "sha2 0.11.0",
+ "tokio",
+ "tracing",
+ "wtransport",
+]
+
 [[package]]
 name = "mtp-type-map"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=d10266198d62ca9e14a8b1a55d2ab108b24e756e#d10266198d62ca9e14a8b1a55d2ab108b24e756e"
 dependencies = [
  "serde",
  "serde_yaml",
@@ -2911,7 +2911,7 @@ dependencies = [
 [[package]]
 name = "mtp-type-map"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=d10266198d62ca9e14a8b1a55d2ab108b24e756e#d10266198d62ca9e14a8b1a55d2ab108b24e756e"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471#e8b7c433e697660214fa17162f08ce6792792471"
 dependencies = [
  "serde",
  "serde_yaml",
@@ -5306,7 +5306,7 @@ dependencies = [
  "base64 0.22.1",
  "jni 0.21.1",
  "mtp",
- "mtp-transport 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
+ "mtp-transport 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=e8b7c433e697660214fa17162f08ce6792792471)",
  "reqwest 0.12.28",
  "serde",
  "serde_json",
diff --git a/apps/tauri/src-tauri/Cargo.toml b/apps/tauri/src-tauri/Cargo.toml
index 9160d2c..20aeee8 100644
--- a/apps/tauri/src-tauri/Cargo.toml
+++ b/apps/tauri/src-tauri/Cargo.toml
@@ -25,7 +25,7 @@ base64 = "0.22"
 reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
 tokio = { version = "1", features = ["rt-multi-thread", "sync", "time"] }
 mtp = { git = "https://git.methanium.net/methanium/mtp.git", rev = "d10266198d62ca9e14a8b1a55d2ab108b24e756e", features = ["client", "crypto"] }
-mtp-transport = { git = "https://git.methanium.net/methanium/mtp.git", rev = "a81ac4efca46fbf0e708c1a0f184735fc9bf7fec" }
+mtp-transport = { git = "https://git.methanium.net/methanium/mtp.git", rev = "e8b7c433e697660214fa17162f08ce6792792471" }
 webpki-root-certs = "1"
 tauri-plugin-deep-link = "2"
 tauri-plugin-notification = "2"

From 37310ee127ab827223898d3cb4998ca4e2dd3501 Mon Sep 17 00:00:00 2001
From: Rasensprenger <security@methanium.net>
Date: Thu, 6 Aug 2026 03:01:02 +0200
Subject: [PATCH 2/2] chore(deps): update mtp-transport digest to 7182272

---
 apps/tauri/src-tauri/Cargo.lock | 32 +++++++++++++++++++-------------
 apps/tauri/src-tauri/Cargo.toml |  2 +-
 2 files changed, 20 insertions(+), 14 deletions(-)

diff --git a/apps/tauri/src-tauri/Cargo.lock b/apps/tauri/src-tauri/Cargo.lock
index 86f1b5b..11c7dfe 100644
--- a/apps/tauri/src-tauri/Cargo.lock
+++ b/apps/tauri/src-tauri/Cargo.lock
@@ -315,6 +315,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
+
 [[package]]
 name = "base64ct"
 version = "1.8.3"
@@ -2762,12 +2768,12 @@ dependencies = [
 [[package]]
 name = "mtp-codec"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22#7182272e3edb0079d7b74b45b2f62a298d2fee22"
 dependencies = [
- "base64 0.22.1",
+ "base64 0.23.1",
  "byteorder",
- "mtp-common 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
- "mtp-type-map 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
+ "mtp-common 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22)",
+ "mtp-type-map 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22)",
  "rand 0.10.2",
 ]
 
@@ -2787,7 +2793,7 @@ dependencies = [
 [[package]]
 name = "mtp-common"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22#7182272e3edb0079d7b74b45b2f62a298d2fee22"
 dependencies = [
  "quinn",
  "rustls",
@@ -2809,9 +2815,9 @@ dependencies = [
 [[package]]
 name = "mtp-crypto"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22#7182272e3edb0079d7b74b45b2f62a298d2fee22"
 dependencies = [
- "base64 0.22.1",
+ "base64 0.23.1",
  "chacha20poly1305",
  "ed25519-dalek",
  "getrandom 0.4.3",
@@ -2866,12 +2872,12 @@ dependencies = [
 [[package]]
 name = "mtp-transport"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22#7182272e3edb0079d7b74b45b2f62a298d2fee22"
 dependencies = [
  "async-trait",
- "mtp-codec 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
- "mtp-common 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
- "mtp-crypto 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
+ "mtp-codec 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22)",
+ "mtp-common 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22)",
+ "mtp-crypto 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22)",
  "rcgen",
  "rustls",
  "rustls-native-certs",
@@ -2902,7 +2908,7 @@ dependencies = [
 [[package]]
 name = "mtp-type-map"
 version = "0.2.0"
-source = "git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec#a81ac4efca46fbf0e708c1a0f184735fc9bf7fec"
+source = "git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22#7182272e3edb0079d7b74b45b2f62a298d2fee22"
 dependencies = [
  "serde",
  "serde_yaml",
@@ -5306,7 +5312,7 @@ dependencies = [
  "base64 0.22.1",
  "jni 0.21.1",
  "mtp",
- "mtp-transport 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=a81ac4efca46fbf0e708c1a0f184735fc9bf7fec)",
+ "mtp-transport 0.2.0 (git+https://git.methanium.net/methanium/mtp.git?rev=7182272e3edb0079d7b74b45b2f62a298d2fee22)",
  "reqwest 0.12.28",
  "serde",
  "serde_json",
diff --git a/apps/tauri/src-tauri/Cargo.toml b/apps/tauri/src-tauri/Cargo.toml
index 9160d2c..91177b5 100644
--- a/apps/tauri/src-tauri/Cargo.toml
+++ b/apps/tauri/src-tauri/Cargo.toml
@@ -25,7 +25,7 @@ base64 = "0.22"
 reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
 tokio = { version = "1", features = ["rt-multi-thread", "sync", "time"] }
 mtp = { git = "https://git.methanium.net/methanium/mtp.git", rev = "d10266198d62ca9e14a8b1a55d2ab108b24e756e", features = ["client", "crypto"] }
-mtp-transport = { git = "https://git.methanium.net/methanium/mtp.git", rev = "a81ac4efca46fbf0e708c1a0f184735fc9bf7fec" }
+mtp-transport = { git = "https://git.methanium.net/methanium/mtp.git", rev = "7182272e3edb0079d7b74b45b2f62a298d2fee22" }
 webpki-root-certs = "1"
 tauri-plugin-deep-link = "2"
 tauri-plugin-notification = "2"