chore(deps): update rust crate cachekit-core to 0.6

[cachekit-renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
cachekit-core	dependencies	minor	0.5 → 0.6

---

Release Notes

cachekit-io/cachekit-core (cachekit-core)

v0.6.0

Compare Source

Features

• cache keyring per-tenant derivation at construction via TenantKeyring (LAB-1638) (#​71) (d3f0eb0)
• expose winning-key index via decrypt_indexed for rotation drain observability (LAB-1645) (#​73) (d834f74)

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[kodus-27b]

Code Review Completed! 🔥

The code review was successfully completed based on your current configurations.

Kody Guide: Usage and Configuration

Interacting with Kody

• Request a Review: Ask Kody to review your PR manually by adding a comment with the @kody start-review command at the root of your PR.

• Validate Business Logic: Ask Kody to validate your code against business rules by adding a comment with the @kody -v business-logic command.

• Provide Feedback: Help Kody learn and improve by reacting to its comments with a 👍 for helpful suggestions or a 👎 if improvements are needed.

Current Kody Configuration

Review Options

The following review options are enabled or disabled:

Options	Enabled
Bug	✅
Performance	✅
Security	✅
Business Logic	✅

Access your configuration settings here.

​

[kodus-27b]

WHAT: Dependency manifest changed by bumping cachekit-core from 0.5 to 0.6 without SCA/CVE evidence. WHY: New dependency versions may introduce known vulnerabilities or supply-chain risk (Rule 81). HOW: Run an OSV/SCA scan (e.g. cargo audit / osv-scanner) for cachekit-core 0.6, include the results in the PR description, and ensure Cargo.lock is updated to pin the version.

Kody rule violation: Validate new/updated dependencies for CVEs and supply-chain risk

Prompt for LLM

File crates/cachekit/Cargo.toml:

Line 48:

WHAT: Dependency manifest changed by bumping cachekit-core from 0.5 to 0.6 without SCA/CVE evidence. WHY: New dependency versions may introduce known vulnerabilities or supply-chain risk (Rule 81). HOW: Run an OSV/SCA scan (e.g. cargo audit / osv-scanner) for cachekit-core 0.6, include the results in the PR description, and ensure Cargo.lock is updated to pin the version.

_{Talk to Kody by mentioning @kody}

_{Was this suggestion helpful? React with 👍 or 👎 to help Kody learn from this interaction.}

​

​