From 7adb09652ec98914fced7aa32f2ce2199993671c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 12 Mar 2026 18:26:08 +0000
Subject: [PATCH] chore(deps): bump coset from 0.3.8 to 0.4.2

Bumps [coset](https://github.com/google/coset) from 0.3.8 to 0.4.2.
- [Changelog](https://github.com/google/coset/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/coset/compare/v0.3.8...v0.4.2)

---
updated-dependencies:
- dependency-name: coset
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 16 +++++++++++++---
 Cargo.toml |  2 +-
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 2e8729a..ac9468e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1270,7 +1270,7 @@ dependencies = [
  "bytes",
  "chacha20poly1305",
  "ciborium",
- "coset",
+ "coset 0.3.8",
  "hex",
  "hkdf",
  "openssl",
@@ -1352,6 +1352,16 @@ dependencies = [
  "ciborium-io",
 ]
 
+[[package]]
+name = "coset"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1eb98d5e9155e2cf7cd942c8b3033097d4563b6fb0a00b9caecb74669555c058"
+dependencies = [
+ "ciborium",
+ "ciborium-io",
+]
+
 [[package]]
 name = "cpufeatures"
 version = "0.2.17"
@@ -1829,7 +1839,7 @@ dependencies = [
  "ciborium",
  "clap",
  "confidential-ml-transport",
- "coset",
+ "coset 0.4.2",
  "ed25519-dalek",
  "ephemeral-ml-common",
  "hex",
@@ -1861,7 +1871,7 @@ dependencies = [
  "candle-transformers",
  "ciborium",
  "confidential-ml-transport",
- "coset",
+ "coset 0.4.2",
  "ed25519-dalek",
  "hex",
  "lazy_static",
diff --git a/Cargo.toml b/Cargo.toml
index f5c0ef2..a3e334c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -55,7 +55,7 @@ zeroize = { version = "1.7", features = ["zeroize_derive"] }
 
 # CBOR and COSE
 ciborium = "0.2"
-coset = "0.3"
+coset = "0.4"
 
 # RSA for KMS integration
 rsa = { version = "0.9", features = ["sha2"] }