From 611e6be56c953788f290bb9f065f2aaf02823dce Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Aug 2026 08:08:54 +0000
Subject: [PATCH] chore(deps): bump pem from 3.0.6 to 4.0.0

Bumps [pem](https://github.com/jcreekmore/pem-rs) from 3.0.6 to 4.0.0.
- [Changelog](https://github.com/jcreekmore/pem-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jcreekmore/pem-rs/compare/v3.0.6...v4.0.0)

---
updated-dependencies:
- dependency-name: pem
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                       | 16 +++++++++++++---
 crates/key-repository/Cargo.toml |  2 +-
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 11809fa8e..11d92b2ae 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3932,7 +3932,7 @@ dependencies = [
  "js-sys",
  "p256",
  "p384",
- "pem",
+ "pem 3.0.6",
  "rand 0.8.7",
  "rsa",
  "serde",
@@ -5404,7 +5404,7 @@ dependencies = [
  "nix 0.31.3",
  "notify",
  "p256",
- "pem",
+ "pem 4.0.0",
  "pkcs8 0.11.0",
  "rand_core 0.6.4",
  "rsa",
@@ -6379,6 +6379,16 @@ dependencies = [
  "serde_core",
 ]
 
+[[package]]
+name = "pem"
+version = "4.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d354a98a3d1251555de99e8fdd8afda05573c31b82f59063a7b0a29b5527f120"
+dependencies = [
+ "base64 0.23.0",
+ "serde_core",
+]
+
 [[package]]
 name = "pem-rfc7468"
 version = "0.7.0"
@@ -7216,7 +7226,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "57f6d249aad744e274e682777a50283a225a32705394ee6d5fcc01efa25e4055"
 dependencies = [
  "aws-lc-rs",
- "pem",
+ "pem 3.0.6",
  "rustls-pki-types",
  "time",
  "x509-parser 0.18.1",
diff --git a/crates/key-repository/Cargo.toml b/crates/key-repository/Cargo.toml
index dda1a1362..a072854ff 100644
--- a/crates/key-repository/Cargo.toml
+++ b/crates/key-repository/Cargo.toml
@@ -19,7 +19,7 @@ jsonwebtoken.workspace = true
 nix = { workspace = true, features = ["fs", "user"] }
 notify = "8.2"
 p256 = { version = "0.13", features = ["ecdsa", "pkcs8"] }
-pem = "3"
+pem = "4"
 pkcs8 = { version = "0.11", features = ["pem"] }
 rand_core = { version = "0.6", features = ["std"] }
 rsa = "0.9"