From 3cbce35df83ca871fedd525ed4c981ea3aad6159 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 13 Feb 2026 01:23:15 +0000
Subject: [PATCH] chore(deps): bump jsonwebtoken from 9.3.1 to 10.3.0 in /core

Bumps [jsonwebtoken](https://github.com/Keats/jsonwebtoken) from 9.3.1 to 10.3.0.
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Keats/jsonwebtoken/compare/v9.3.1...v10.3.0)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-version: 10.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 core/Cargo.lock                          | 19 ++++++++++---------
 core/domain/Cargo.toml                   |  2 +-
 core/examples/test-concurrent/Cargo.toml |  2 +-
 3 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/core/Cargo.lock b/core/Cargo.lock
index 74727f2e..d8030962 100644
--- a/core/Cargo.lock
+++ b/core/Cargo.lock
@@ -2429,16 +2429,17 @@ dependencies = [
 
 [[package]]
 name = "jsonwebtoken"
-version = "9.3.1"
+version = "10.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a87cc7a48537badeae96744432de36f4be2b4a34a05a5ef32e9dd8a1c169dde"
+checksum = "0529410abe238729a60b108898784df8984c87f6054c9c4fcacc47e4803c1ce1"
 dependencies = [
  "base64 0.22.1",
+ "getrandom 0.2.16",
  "js-sys",
  "pem",
- "ring 0.17.14",
  "serde",
  "serde_json",
+ "signature",
  "simple_asn1",
 ]
 
@@ -4808,9 +4809,9 @@ dependencies = [
 
 [[package]]
 name = "serde"
-version = "1.0.225"
+version = "1.0.228"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd6c24dee235d0da097043389623fb913daddf92c76e9f5a1db88607a0bcbd1d"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
 dependencies = [
  "serde_core",
  "serde_derive",
@@ -4829,18 +4830,18 @@ dependencies = [
 
 [[package]]
 name = "serde_core"
-version = "1.0.225"
+version = "1.0.228"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "659356f9a0cb1e529b24c01e43ad2bdf520ec4ceaf83047b83ddcc2251f96383"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
 dependencies = [
  "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.225"
+version = "1.0.228"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ea936adf78b1f766949a4977b91d2f5595825bd6ec079aa9543ad2685fc4516"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
 dependencies = [
  "proc-macro2",
  "quote",
diff --git a/core/domain/Cargo.toml b/core/domain/Cargo.toml
index c40cba89..764948fc 100644
--- a/core/domain/Cargo.toml
+++ b/core/domain/Cargo.toml
@@ -15,7 +15,7 @@ serde_json = { workspace = true }
 quick-protobuf = { workspace = true }
 quick-protobuf-codec = { workspace = true }
 async-trait = {workspace = true} 
-jsonwebtoken = "9.3.0"
+jsonwebtoken = "10.3.0"
 tracing = { workspace = true }
 posemesh-networking = { workspace = true }
 rs_merkle = "1.5.0"
diff --git a/core/examples/test-concurrent/Cargo.toml b/core/examples/test-concurrent/Cargo.toml
index 57e7afbf..4a467535 100644
--- a/core/examples/test-concurrent/Cargo.toml
+++ b/core/examples/test-concurrent/Cargo.toml
@@ -11,7 +11,7 @@ quick-protobuf = { workspace = true }
 serde = { workspace = true }
 tokio = { workspace = true }
 futures = { workspace = true }
-jsonwebtoken = "9.3.0"
+jsonwebtoken = "10.3.0"
 uuid = "1.13.2"
 posemesh-domain = {workspace = true}
 tracing = {workspace = true}