From 062f1c5c9a431ebded241c51eb49b09bb834935b Mon Sep 17 00:00:00 2001
From: "bootc-bot[bot]" <225049296+bootc-bot[bot]@users.noreply.github.com>
Date: Sun, 17 May 2026 01:06:20 +0000
Subject: [PATCH] fix(deps): update rust

Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>
---
 Cargo.lock                          | 24 +++++++++++++++---------
 Cargo.toml                          |  4 ++--
 crates/tests-integration/Cargo.toml |  2 +-
 3 files changed, 18 insertions(+), 12 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 0e30bc0f3..af757d488 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -168,7 +168,7 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 [[package]]
 name = "bcvk-qemu"
 version = "0.1.0"
-source = "git+https://github.com/bootc-dev/bcvk?rev=fe1b388f02d95e7b15c875cc3e671d35c4c83af1#fe1b388f02d95e7b15c875cc3e671d35c4c83af1"
+source = "git+https://github.com/bootc-dev/bcvk?rev=eac2fc357d059ba3cfcf5cd7a5fc00e6e5e70a7c#eac2fc357d059ba3cfcf5cd7a5fc00e6e5e70a7c"
 dependencies = [
  "camino",
  "cap-std-ext 5.1.2",
@@ -290,7 +290,7 @@ dependencies = [
  "rustix",
  "serde",
  "serde_json",
- "shlex",
+ "shlex 2.0.0",
  "similar-asserts",
  "static_assertions",
  "tempfile",
@@ -606,7 +606,7 @@ dependencies = [
  "find-msvc-tools",
  "jobserver",
  "libc",
- "shlex",
+ "shlex 1.3.0",
 ]
 
 [[package]]
@@ -769,7 +769,7 @@ checksum = "55b672471b4e9f9e95499ea597ff64941a309b2cdbffcc46f2cc5e2d971fd335"
 [[package]]
 name = "composefs"
 version = "0.4.0"
-source = "git+https://github.com/composefs/composefs-rs?rev=5d5e76e5aa7ade516df51a944bb6f742f6f78c06#5d5e76e5aa7ade516df51a944bb6f742f6f78c06"
+source = "git+https://github.com/composefs/composefs-rs?rev=7e86960f746cff33bdc96e6fdca935f004c5ffb8#7e86960f746cff33bdc96e6fdca935f004c5ffb8"
 dependencies = [
  "anyhow",
  "composefs-ioctls",
@@ -794,7 +794,7 @@ dependencies = [
 [[package]]
 name = "composefs-boot"
 version = "0.4.0"
-source = "git+https://github.com/composefs/composefs-rs?rev=5d5e76e5aa7ade516df51a944bb6f742f6f78c06#5d5e76e5aa7ade516df51a944bb6f742f6f78c06"
+source = "git+https://github.com/composefs/composefs-rs?rev=7e86960f746cff33bdc96e6fdca935f004c5ffb8#7e86960f746cff33bdc96e6fdca935f004c5ffb8"
 dependencies = [
  "anyhow",
  "composefs",
@@ -809,7 +809,7 @@ dependencies = [
 [[package]]
 name = "composefs-ctl"
 version = "0.4.0"
-source = "git+https://github.com/composefs/composefs-rs?rev=5d5e76e5aa7ade516df51a944bb6f742f6f78c06#5d5e76e5aa7ade516df51a944bb6f742f6f78c06"
+source = "git+https://github.com/composefs/composefs-rs?rev=7e86960f746cff33bdc96e6fdca935f004c5ffb8#7e86960f746cff33bdc96e6fdca935f004c5ffb8"
 dependencies = [
  "anyhow",
  "clap",
@@ -831,7 +831,7 @@ dependencies = [
 [[package]]
 name = "composefs-ioctls"
 version = "0.4.0"
-source = "git+https://github.com/composefs/composefs-rs?rev=5d5e76e5aa7ade516df51a944bb6f742f6f78c06#5d5e76e5aa7ade516df51a944bb6f742f6f78c06"
+source = "git+https://github.com/composefs/composefs-rs?rev=7e86960f746cff33bdc96e6fdca935f004c5ffb8#7e86960f746cff33bdc96e6fdca935f004c5ffb8"
 dependencies = [
  "rustix",
  "thiserror 2.0.18",
@@ -840,7 +840,7 @@ dependencies = [
 [[package]]
 name = "composefs-oci"
 version = "0.4.0"
-source = "git+https://github.com/composefs/composefs-rs?rev=5d5e76e5aa7ade516df51a944bb6f742f6f78c06#5d5e76e5aa7ade516df51a944bb6f742f6f78c06"
+source = "git+https://github.com/composefs/composefs-rs?rev=7e86960f746cff33bdc96e6fdca935f004c5ffb8#7e86960f746cff33bdc96e6fdca935f004c5ffb8"
 dependencies = [
  "anyhow",
  "async-compression",
@@ -869,7 +869,7 @@ dependencies = [
 [[package]]
 name = "composefs-storage"
 version = "0.4.0"
-source = "git+https://github.com/composefs/composefs-rs?rev=5d5e76e5aa7ade516df51a944bb6f742f6f78c06#5d5e76e5aa7ade516df51a944bb6f742f6f78c06"
+source = "git+https://github.com/composefs/composefs-rs?rev=7e86960f746cff33bdc96e6fdca935f004c5ffb8#7e86960f746cff33bdc96e6fdca935f004c5ffb8"
 dependencies = [
  "anyhow",
  "base64 0.22.1",
@@ -3129,6 +3129,12 @@ version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
 
+[[package]]
+name = "shlex"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f70fe4c6ac787e57441913f82b210e668fb2033613bc7a76909cd8afce8bb1f"
+
 [[package]]
 name = "signal-hook"
 version = "0.3.18"
diff --git a/Cargo.toml b/Cargo.toml
index 59ba0ba2e..a30078d8b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -44,7 +44,7 @@ clap_mangen = { version = "0.3.0" }
 #   [patch."https://github.com/composefs/composefs-rs"]
 #   composefs-ctl = { path = "/path/to/composefs-rs/crates/composefs-ctl" }
 # The Justfile will auto-detect these and bind-mount them into container builds.
-composefs-ctl = { git = "https://github.com/composefs/composefs-rs", rev = "5d5e76e5aa7ade516df51a944bb6f742f6f78c06" }
+composefs-ctl = { git = "https://github.com/composefs/composefs-rs", rev = "7e86960f746cff33bdc96e6fdca935f004c5ffb8" }
 fn-error-context = "0.2.1"
 futures-util = "0.3"
 hex = "0.4.3"
@@ -63,7 +63,7 @@ regex = "1.10.4"
 rustix = { "version" = "1", features = ["use-libc", "thread", "net", "fs", "system", "process", "mount"] }
 serde = "1.0.199"
 serde_json = "1.0.116"
-shlex = "1.3"
+shlex = "2.0"
 similar-asserts = "2.0.0"
 static_assertions = "1.1.0"
 tempfile = "3.10.1"
diff --git a/crates/tests-integration/Cargo.toml b/crates/tests-integration/Cargo.toml
index 0755030cf..ceb076741 100644
--- a/crates/tests-integration/Cargo.toml
+++ b/crates/tests-integration/Cargo.toml
@@ -30,7 +30,7 @@ bootc-kernel-cmdline = { path = "../kernel_cmdline", version = "0.0.0" }
 # This is a git dependency — not published to crates.io.
 # When updating, also check the bcvk-qemu Cargo.toml for its own
 # dependency versions (cap-std-ext, etc.) to avoid conflicts.
-bcvk-qemu = { git = "https://github.com/bootc-dev/bcvk", rev = "fe1b388f02d95e7b15c875cc3e671d35c4c83af1" }
+bcvk-qemu = { git = "https://github.com/bootc-dev/bcvk", rev = "eac2fc357d059ba3cfcf5cd7a5fc00e6e5e70a7c" }
 data-encoding = "2.9"
 indicatif = { workspace = true }
 libtest-mimic = "0.8.0"