From 0d2a6c4a364e389b37609eeee07aedd837714df3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 07:18:03 +0000
Subject: [PATCH] deps(rust): bump k256 from 0.13.4 to 0.14.0 in /rust

Bumps [k256](https://github.com/RustCrypto/elliptic-curves) from 0.13.4 to 0.14.0.
- [Commits](https://github.com/RustCrypto/elliptic-curves/compare/k256/v0.13.4...k256/v0.14.0)

---
updated-dependencies:
- dependency-name: k256
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 rust/Cargo.lock                      | 15 ++++++++-------
 rust/benches/Cargo.toml              |  2 +-
 rust/crates/mkit-attest/Cargo.toml   |  2 +-
 rust/crates/mkit-cli/Cargo.toml      |  2 +-
 rust/crates/mkit-keystore/Cargo.toml |  2 +-
 5 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 7b2a2cdb..43ad68f2 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -3118,15 +3118,16 @@ dependencies = [
 
 [[package]]
 name = "k256"
-version = "0.13.4"
+version = "0.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f6e3919bbaa2945715f0bb6d3934a173d1e9a59ac23767fbaaef277265a7411b"
+checksum = "93f50113171a713f4a4231ef82eb26703607139b35dcb56241f0ceab2ae1f7d8"
 dependencies = [
- "cfg-if",
- "ecdsa 0.16.9",
- "elliptic-curve 0.13.8",
- "once_cell",
- "sha2 0.10.9",
+ "cpubits",
+ "ecdsa 0.17.0",
+ "elliptic-curve 0.14.1",
+ "primeorder 0.14.0",
+ "sha2 0.11.0",
+ "wnaf",
 ]
 
 [[package]]
diff --git a/rust/benches/Cargo.toml b/rust/benches/Cargo.toml
index d5995285..f0e080aa 100644
--- a/rust/benches/Cargo.toml
+++ b/rust/benches/Cargo.toml
@@ -130,7 +130,7 @@ sha1 = "0.11"
 sha2 = "0.10"
 blake2 = "0.10"
 ed25519-dalek = { version = "2", default-features = false, features = ["std"] }
-k256 = { version = "0.13", default-features = false, features = ["ecdsa", "std"] }
+k256 = { version = "0.14", default-features = false, features = ["ecdsa", "std"] }
 p256 = { version = "0.13", default-features = false, features = ["ecdsa", "std"] }
 tempfile = "3"
 git2 = "0.21"
diff --git a/rust/crates/mkit-attest/Cargo.toml b/rust/crates/mkit-attest/Cargo.toml
index d2b6dd5d..891f5639 100644
--- a/rust/crates/mkit-attest/Cargo.toml
+++ b/rust/crates/mkit-attest/Cargo.toml
@@ -83,7 +83,7 @@ ed25519-dalek = { version = "2", default-features = false, features = ["std"], o
 # secp256k1 / ES256K (COSE -47) signer + verifier — gated behind
 # `algo-secp256k1`. Pinned to the `0.13` line shared across the
 # RustCrypto `ecdsa` ecosystem.
-k256 = { version = "0.13", optional = true, default-features = false, features = ["ecdsa", "std", "pkcs8"] }
+k256 = { version = "0.14", optional = true, default-features = false, features = ["ecdsa", "std", "pkcs8"] }
 # P-256 / secp256r1 / prime256v1 (COSE -7) — WebAuthn, Apple Secure
 # Enclave, Android Keystore, iOS CryptoKit, browser WebCrypto. Gated
 # behind `algo-p256`. Same `0.13` RustCrypto major as k256.
diff --git a/rust/crates/mkit-cli/Cargo.toml b/rust/crates/mkit-cli/Cargo.toml
index 21c9f997..905ca653 100644
--- a/rust/crates/mkit-cli/Cargo.toml
+++ b/rust/crates/mkit-cli/Cargo.toml
@@ -207,7 +207,7 @@ mockito = "1"
 # to build trust-roots TOML files. Dev-only: the CLI binary itself never
 # imports these directly — signing goes through the mkit-attest signers.
 ed25519-dalek = { version = "2", default-features = false, features = ["std"] }
-k256 = { version = "0.13", default-features = false, features = ["ecdsa", "std", "pkcs8"] }
+k256 = { version = "0.14", default-features = false, features = ["ecdsa", "std", "pkcs8"] }
 p256 = { version = "0.13", default-features = false, features = ["ecdsa", "std", "pkcs8"] }
 # Snapshot testing for CLI golden-output fixtures. See issue #164.
 # `filters` feature enables regex-based redaction so version-string
diff --git a/rust/crates/mkit-keystore/Cargo.toml b/rust/crates/mkit-keystore/Cargo.toml
index 61098ee0..6ebcb35a 100644
--- a/rust/crates/mkit-keystore/Cargo.toml
+++ b/rust/crates/mkit-keystore/Cargo.toml
@@ -47,7 +47,7 @@ der = { version = "0.8.0", optional = true }
 ed25519-dalek = { version = "2.2.0", default-features = false, features = ["std"] }
 getrandom = "0.4.2"
 keyring-core = { version = "1.0.0", optional = true }
-k256 = { version = "0.13.4", default-features = false, features = ["ecdsa", "std"] }
+k256 = { version = "0.14.0", default-features = false, features = ["ecdsa", "std"] }
 openpgp-card = { version = "0.6.1", optional = true }
 p256 = { version = "0.13.2", default-features = false, features = ["ecdsa", "std"] }
 sha2 = { version = "0.10.9", default-features = false }