chore(deps): update dependencies

- Extract `futures-timer` and `rand` as workspace dependencies
- Update all dependencies where the version bump was trivial.

Pull-Request: #6355.

Author: elenaf9

Cargo.lock

@@ -119,12 +119,15 @@ libp2p-yamux = { version = "0.48.0", path = "muxers/yamux" }
 
 # External dependencies
 asynchronous-codec = { version = "0.7.0" }
+axum = { version = "0.7.9" }
+criterion = { version = "0.5.1" }
 bytes = "1.11.1"
 env_logger = "0.11"
 futures = "0.3.30"
 futures-bounded = { version = "0.3", features = ["tokio"] }
 futures-rustls = { version = "0.26.0", default-features = false }
-futures-timer = { version = "3" }
+futures-timer = "3.0"
+hex-literal = "0.4"
 getrandom = { version = "0.2", features = ["js"] }
 hashlink = "0.11.0"
 hickory-proto = { version = "0.26.1", default-features = false }
@@ -136,6 +139,7 @@ multistream-select = { version = "0.14.0", path = "misc/multistream-select" }
 prometheus-client = "0.24"
 quick-protobuf-codec = { version = "0.4.0", path = "misc/quick-protobuf-codec" }
 quickcheck = { package = "quickcheck-ext", path = "misc/quickcheck-ext" }
+rand = "0.8.0"
 rcgen = "0.13"
 ring = "0.17.12"
 rw-stream-sink = { version = "0.5.0", path = "misc/rw-stream-sink" }
@@ -144,7 +148,9 @@ tokio = { version = "1.52", default-features = false }
 tracing = "0.1.44"
 tracing-subscriber = "0.3.23"
 unsigned-varint = { version = "0.8.0" }
-wasm-bindgen-futures = "0.4"
+# Pinned to avoid wasm-bindgen 0.2.121 which breaks gloo-timers 0.2.6 (used by futures-timer for wasm)
+# TODO: remove when futures-timer is updated.
+wasm-bindgen-futures = "=0.4.50"
 web-time = "1.1.0"
 
 [patch.crates-io]

Cargo.toml

@@ -14,7 +14,7 @@ categories = ["network-programming", "asynchronous"]
 either = "1.11"
 fnv = "1.0"
 futures = { workspace = true, features = ["executor", "thread-pool"] }
-futures-timer = "3"
+futures-timer = { workspace = true }
 web-time = { workspace = true }
 libp2p-identity = { workspace = true, features = ["peerid", "ed25519"] }
 multiaddr = { workspace = true }
@@ -23,7 +23,7 @@ multistream-select = { workspace = true }
 parking_lot = "0.12.5"
 pin-project = "1.1.12"
 quick-protobuf = "0.8"
-rand = "0.8"
+rand = { workspace = true }
 rw-stream-sink = { workspace = true }
 thiserror = { workspace = true }
 tracing = { workspace = true }

core/Cargo.toml

@@ -20,7 +20,7 @@ clap = { version = "4.6.1", features = ["derive"] }
 tokio = { version = "1.52.3", features = ["macros", "rt-multi-thread"] }
 tracing = "0.1.44"
 tracing-subscriber = { workspace = true, features = ["env-filter"] }
-rand = "0.8.5"
+rand = { workspace = true }
 opentelemetry = { version = "0.27.0", optional = true }
 opentelemetry_sdk = { version = "0.27.0", optional = true, features = ["rt-tokio"] }
 opentelemetry-otlp = { version = "0.27.0", optional = true }

examples/autonatv2/Cargo.toml

@@ -18,19 +18,19 @@ crate-type = ["cdylib"]
 [dependencies]
 anyhow = "1.0.102"
 futures = { workspace = true }
-rand = "0.8"
+rand = { workspace = true }
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true, features = ["env-filter"] }
 
 [target.'cfg(not(target_arch = "wasm32"))'.dependencies]
-axum = "0.7.5"
+axum = { workspace = true }
 libp2p = { path = "../../libp2p", features = [ "ed25519", "macros", "ping", "tokio"] }
 libp2p-webrtc = { workspace = true, features = ["tokio"] }
 rust-embed = { version = "8.11.0", features = ["include-exclude", "interpolate-folder-path"] }
 tokio = { workspace = true, features = ["macros", "net", "rt", "signal"] }
 tokio-util = { version = "0.7", features = ["compat"] }
-tower = "0.4"
-tower-http = { version = "0.5.2", features = ["cors"] }
+tower = "0.5"
+tower-http = { version = "0.6", features = ["cors"] }
 mime_guess = "2.0.4"
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]

examples/browser-webrtc/Cargo.toml

@@ -11,7 +11,7 @@ release = false
 [dependencies]
 clap = { version = "4.6.1", features = ["derive"] }
 futures = { workspace = true }
-futures-timer = "3.0"
+futures-timer = { workspace = true }
 libp2p = { path = "../../libp2p", features = [ "dns", "dcutr", "identify", "macros", "noise", "ping", "quic", "relay", "rendezvous", "tcp", "tokio", "yamux"] }
 tokio = { workspace = true, features = ["macros", "net", "rt", "signal"] }
 tracing = { workspace = true }

examples/dcutr/Cargo.toml

@@ -10,7 +10,7 @@ release = false
 
 [dependencies]
 futures = { workspace = true }
-axum = "0.7"
+axum = { workspace = true }
 libp2p = { path = "../../libp2p", features = ["tokio", "metrics", "ping", "noise", "identify", "tcp", "yamux", "macros"] }
 opentelemetry = { version = "0.27.0", features = ["metrics"] }
 opentelemetry-otlp = { version = "0.27.0", features = ["metrics"] }

examples/metrics/Cargo.toml

@@ -9,11 +9,12 @@ license = "MIT"
 release = false
 
 [dependencies]
+
 anyhow = "1"
 futures = { workspace = true }
-libp2p = { path = "../../libp2p", features = [ "tokio", "quic"] }
+libp2p = { path = "../../libp2p", features = ["tokio", "quic"] }
+rand = { workspace = true }
 libp2p-stream = { path = "../../protocols/stream", version = "0.5.0-alpha" }
-rand = "0.8"
 tokio = { workspace = true, features = ["full"] }
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true, features = ["env-filter"] }

examples/stream/Cargo.toml

@@ -21,7 +21,7 @@ tracing = { workspace = true }
 multihash = { version = "0.19.5", optional = true }
 p256 = { version = "0.13", default-features = false, features = ["ecdsa", "std", "pem"], optional = true }
 quick-protobuf = { version = "0.8.1", optional = true }
-rand = { version = "0.8", optional = true }
+rand = { workspace = true, optional = true }
 sec1 = { version = "0.7", default-features = false, optional = true }
 serde = { version = "1", optional = true, features = ["derive"] }
 sha2 = { version = "0.10.8", optional = true }
@@ -43,8 +43,8 @@ rand = ["dep:rand"]
 quickcheck = { workspace = true }
 serde_json = "1.0"
 rmp-serde = "1.3"
-criterion = "0.5"
-hex-literal = "0.4.1"
+criterion = "0.8"
+hex-literal = "1.1.0"
 
 [[bench]]
 name = "peer_id"

identity/Cargo.toml

@@ -18,7 +18,9 @@
 // FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 // DEALINGS IN THE SOFTWARE.
 
-use criterion::{black_box, criterion_group, criterion_main, Criterion};
+use std::hint::black_box;
+
+use criterion::{criterion_group, criterion_main, Criterion};
 use libp2p_identity::{Keypair, PeerId};
 
 fn from_bytes(c: &mut Criterion) {