From 378656ed7e6f4d594d7cd777c7da45d2284216ef Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Nov 2026 17:38:41 +0000
Subject: [PATCH] Bump the cargo group across 1 directory with 2 updates

Bumps the cargo group with 2 updates in the / directory: [blst](https://github.com/supranational/blst) and [libc](https://github.com/rust-lang/libc).


Updates `blst` from 0.3.16 to 0.3.17
- [Release notes](https://github.com/supranational/blst/releases)
- [Commits](https://github.com/supranational/blst/compare/v0.3.16...v0.3.17)

Updates `libc` from 0.2.189 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.189...0.2.191)

---
updated-dependencies:
- dependency-name: blst
  dependency-version: 0.3.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                  | 8 ++++----
 crates/q-bls/Cargo.toml     | 4 ++--
 crates/q-qbridge/Cargo.toml | 2 +-
 crates/q-runtime/Cargo.toml | 2 +-
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 3cee12f..73a5822 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4,9 +4,9 @@ version = 4
 
 [[package]]
 name = "blst"
-version = "0.3.16"
+version = "0.3.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dcdb4c7013139a150f9fc55d123186dbfaba0d912817466282c73ac49e71fb45"
+checksum = "c20659f9bbee16cbbd2f7393e40ab6309f5a98f76a2eb57a995ec508b72387fe"
 dependencies = [
  "cc",
  "glob",
@@ -44,9 +44,9 @@ checksum = "e17592d60ebacc7d5e169f4663c5f84f9161cc90328abcfe8456f41e4dfcb284"
 
 [[package]]
 name = "libc"
-version = "0.2.189"
+version = "0.2.191"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+checksum = "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a"
 
 [[package]]
 name = "num_cpus"
diff --git a/crates/q-bls/Cargo.toml b/crates/q-bls/Cargo.toml
index 710f4e4..44e5471 100644
--- a/crates/q-bls/Cargo.toml
+++ b/crates/q-bls/Cargo.toml
@@ -11,9 +11,9 @@ publish = false
 description = "Off-chain BLS12-381 aggregate verifier for the Ethereum sync committee seam. Backs the qlc-ethereum BlsAggregateVerifier trait with the audited blst pairing over the BLS_SIG_BLS12381G2_XMD:SHA-256_SSWU_RO_POP_ ciphersuite, deserializing G1 pubkeys and the G2 aggregate and running the real pairing. Classical cryptography lives here because Ethereum is verified with Ethereum's own crypto. This crate is an off-chain oracle component and is never linked into the chain, the VM, or consensus. Only the ML-DSA attestation and the hash STARK cross the Airlock."
 
 [dependencies]
-blst = "=0.3.16"
+blst = "=0.3.17"
 qlc-ethereum = { workspace = true }
 
 [dev-dependencies]
-blst = "=0.3.16"
+blst = "=0.3.17"
 qlc-ethereum = { workspace = true, features = ["test-util"] }
diff --git a/crates/q-qbridge/Cargo.toml b/crates/q-qbridge/Cargo.toml
index e66419e..7d160a6 100644
--- a/crates/q-qbridge/Cargo.toml
+++ b/crates/q-qbridge/Cargo.toml
@@ -28,6 +28,6 @@ qlc-cosmos = { workspace = true }
 qtv-crypto = { workspace = true }
 q-codec = { workspace = true }
 q-airlock = { workspace = true }
-blst = "=0.3.16"
+blst = "=0.3.17"
 qlc-ethereum = { workspace = true, features = ["test-util"] }
 qlc-cosmos = { workspace = true, features = ["test-util"] }
diff --git a/crates/q-runtime/Cargo.toml b/crates/q-runtime/Cargo.toml
index a9803c4..067dde9 100644
--- a/crates/q-runtime/Cargo.toml
+++ b/crates/q-runtime/Cargo.toml
@@ -15,7 +15,7 @@ name = "q-oracle"
 path = "src/main.rs"
 
 [dependencies]
-libc = "=0.2.189"
+libc = "=0.2.191"
 q-qbridge = { path = "../q-qbridge" }
 q-exits = { path = "../q-exits" }
 q-federated = { workspace = true }