From 443cb90ffd175591be2cd115a24bc7bf9a06a20a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 26 Sep 2026 12:12:58 +0000
Subject: [PATCH] build(deps): bump ed25519-dalek from 2.1.1 to 2.2.0

Bumps [ed25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) from 2.1.1 to 2.2.0.
- [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases)
- [Commits](https://github.com/dalek-cryptography/curve25519-dalek/compare/2.1.1...ed25519-2.2.0)

---
updated-dependencies:
- dependency-name: ed25519-dalek
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                 | 4 ++--
 crates/oauth-as/Cargo.toml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index d9a80b1..a7a5b11 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -445,9 +445,9 @@ dependencies = [
 
 [[package]]
 name = "ed25519-dalek"
-version = "2.1.1"
+version = "2.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4a3daa8e81a3963a60642bcc1f90a670680bd4a77535faa384e9d1c79d620871"
+checksum = "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9"
 dependencies = [
  "curve25519-dalek",
  "ed25519",
diff --git a/crates/oauth-as/Cargo.toml b/crates/oauth-as/Cargo.toml
index c37f098..c88de6a 100644
--- a/crates/oauth-as/Cargo.toml
+++ b/crates/oauth-as/Cargo.toml
@@ -365,7 +365,7 @@ rsa = { version = "0.9", default-features = false, features = ["std", "sha2"], o
 # it is only for `SigningKey::generate` (key generation); RFC 8032 signing is deterministic and
 # consumes no randomness. No `*-sys` crate and no C/asm toolchain is pulled (curve25519-dalek is
 # pure Rust with default features), so `#![forbid(unsafe_code)]` in this crate stays satisfiable.
-ed25519-dalek = { version = "~2.1", default-features = false, features = ["std"], optional = true }
+ed25519-dalek = { version = "~2.2", default-features = false, features = ["std"], optional = true }
 
 [dev-dependencies]
 # DEV-ONLY, for the RS256 standalone vector test (tests/rsa_rfc7515_a2.rs). An integration-test
@@ -376,7 +376,7 @@ ed25519-dalek = { version = "~2.1", default-features = false, features = ["std"]
 rsa = { version = "0.9", default-features = false, features = ["std", "sha2"] }
 # DEV-ONLY, for the EdDSA test vector (tests/ed25519_rfc8037_vector.rs), which drives
 # `ed25519-dalek` DIRECTLY. Same `~2.1` pin and reasoning as the runtime entry above.
-ed25519-dalek = { version = "~2.1", default-features = false, features = ["std"] }
+ed25519-dalek = { version = "~2.2", default-features = false, features = ["std"] }
 tokio = { version = "1", features = ["rt", "macros", "time"] }
 # A DEV dependency now that the runtime one is optional: the test suite and the examples build JSON
 # fixtures by hand on paths where the library itself does not need a JSON crate at all.