chore(deps): update rust crate cachekit-core to 0.6.0

[cachekit-renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
cachekit-core	dependencies	minor	0.5.0 → 0.6.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

cachekit-io/cachekit-core (cachekit-core)

v0.6.0

Compare Source

Features

• cache keyring per-tenant derivation at construction via TenantKeyring (LAB-1638) (#​71) (d3f0eb0)
• expose winning-key index via decrypt_indexed for rotation drain observability (LAB-1645) (#​73) (d834f74)

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[kodus-27b]

WHAT: This bumps the cachekit-core dependency from 0.4.0 to 0.5.0 without evidence of CVE/SCA scanning or a lockfile update. WHY: Rule 81 requires validating new/updated dependency versions for known vulnerabilities and supply-chain risk. HOW: Run an OSV/SCA scan against cachekit-core 0.5.0, include the audit/advisory evidence in the PR description, and ensure the corresponding Cargo.lock is updated and pinned.

Also found in:

• packages/cachekit-core-ts/Cargo.toml:13-13

Kody rule violation: Validate new/updated dependencies for CVEs and supply-chain risk

Prompt for LLM

File packages/cachekit-core-wasm/Cargo.toml:

Line 21:

WHAT: This bumps the cachekit-core dependency from 0.4.0 to 0.5.0 without evidence of CVE/SCA scanning or a lockfile update. WHY: Rule 81 requires validating new/updated dependency versions for known vulnerabilities and supply-chain risk. HOW: Run an OSV/SCA scan against cachekit-core 0.5.0, include the audit/advisory evidence in the PR description, and ensure the corresponding Cargo.lock is updated and pinned.

_{Talk to Kody by mentioning @kody}

_{Was this suggestion helpful? React with 👍 or 👎 to help Kody learn from this interaction.}

​

​

[kodus-27b]

WHAT: This dependency version bump (0.4.0 -> 0.6.0) changes a dependency manifest without evidence of CVE/SCA validation. WHY: New package versions may introduce known vulnerabilities or supply-chain risk. HOW: Run an OSV/SCA scan against the new version and include audit output or advisory links in the PR description, and ensure the lockfile is updated.

Also found in:

• packages/cachekit-core-ts/Cargo.toml:13-13

Kody rule violation: Validate new/updated dependencies for CVEs and supply-chain risk

Prompt for LLM

File packages/cachekit-core-wasm/Cargo.toml:

Line 21:

WHAT: This dependency version bump (0.4.0 -> 0.6.0) changes a dependency manifest without evidence of CVE/SCA validation. WHY: New package versions may introduce known vulnerabilities or supply-chain risk. HOW: Run an OSV/SCA scan against the new version and include audit output or advisory links in the PR description, and ensure the lockfile is updated.

_{Talk to Kody by mentioning @kody}

_{Was this suggestion helpful? React with 👍 or 👎 to help Kody learn from this interaction.}

​

​

[kodus-27b]

Code Review Could Not Complete ⚠️

The review failed before suggestions could be generated.

Reason: The configured API key appears invalid or lacks permission. Check the key in your settings.

After fixing the issue, comment @kody review on this PR to re-run the review.

Kody Guide: Usage and Configuration

Interacting with Kody

• Request a Review: Ask Kody to review your PR manually by adding a comment with the @kody start-review command at the root of your PR.

• Validate Business Logic: Ask Kody to validate your code against business rules by adding a comment with the @kody -v business-logic command.

• Provide Feedback: Help Kody learn and improve by reacting to its comments with a 👍 for helpful suggestions or a 👎 if improvements are needed.

Current Kody Configuration

Review Options

The following review options are enabled or disabled:

Options	Enabled
Bug	✅
Performance	✅
Security	✅
Business Logic	✅

Access your configuration settings here.

​