build(deps): bump the patch group across 1 directory with 7 updates #1672

dependabot · 2026-02-10T00:36:59Z

Bumps the patch group with 7 updates in the / directory:

Package	From	To
anyhow	`1.0.100`	`1.0.101`
hyper-util	`0.1.19`	`0.1.20`
regex	`1.12.2`	`1.12.3`
bytes	`1.11.0`	`1.11.1`
time	`0.3.45`	`0.3.47`
libc	`0.2.180`	`0.2.181`
aws-lc-rs	`1.15.3`	`1.15.4`

Updates anyhow from 1.0.100 to 1.0.101

Release notes

Sourced from anyhow's releases.

1.0.101

Add #[inline] to anyhow::Ok helper (#437, thanks @Ibitier)

Commits

80bfe29 Release 1.0.101
dff8c43 Merge pull request #437 from Ibitier/inline-ok-helper
85d9ea9 Add #[inline] to anyhow::Ok helper
54036cc Update ui test suite to nightly-2026-01-21
cce0579 Update actions/upload-artifact@v5 -> v6
f2c598c Update actions/upload-artifact@v4 -> v5
2c0bda4 Update to 2021 edition
0d82268 Remove rustc version requirement from readme
67df012 Merge pull request #436 from dtolnay/up
c898488 Raise required compiler to Rust 1.68
Additional commits viewable in compare view

Updates hyper-util from 0.1.19 to 0.1.20

Release notes

Sourced from hyper-util's releases.

v0.1.20

What's Changed

fix(matcher): improve domain matching case insensitivity by @chen-hongzhi in hyperium/hyper-util#251

fix(matcher): improve subdomain matching case insensitivity by @0x676e67 in hyperium/hyper-util#252

fix(docs): correct malformed reference link in set_interface by @magurotuna in hyperium/hyper-util#254

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/hyper-util#261

chore: remove unused mac imports by @bts in hyperium/hyper-util#260

bump MSRV to 1.64 by @seanmonstar in hyperium/hyper-util#258

chore: bump system-configuration to 0.7 by @BugenZhao in hyperium/hyper-util#256

chore: use standard library api by @tottoto in hyperium/hyper-util#263

New Contributors

@chen-hongzhi made their first contribution in hyperium/hyper-util#251

@bts made their first contribution in hyperium/hyper-util#260

@BugenZhao made their first contribution in hyperium/hyper-util#256

Full Changelog: hyperium/hyper-util@v0.1.19...v0.1.20

Changelog

Sourced from hyper-util's changelog.

0.1.20 (2026-02-02)

Fix proxy::Matcher to properly match domains regardless of casing

Fix system proxy matcher dependency on macOS when used in sandboxed environements.

Increased MSRV to 1.64.

Commits

b23a13e v0.1.20
ffa5391 chore: use standard library api (#263)
b43aeab chore: bump system-configuration to 0.7 (#256)
d841f5d bump MSRV to 1.64 (#258)
af19656 chore(client): remove unused mac imports in system proxy (#260)
ad6a63d chore(ci): update to actions/checkout@v6 (#261)
d5503b2 docs(client): correct malformed reference link in set_interface (#254)
8c4f4a0 fix(matcher): improve subdomain matching case insensitivity (#252)
1b3fa96 fix(matcher): improve domain matching case insensitivity (#251)
See full diff in compare view

Updates regex from 1.12.2 to 1.12.3

Changelog

Sourced from regex's changelog.

1.12.3 (2025-02-03)

This release excludes some unnecessary things from the archive published to crates.io. Specifically, fuzzing data and various shell scripts are now excluded. If you run into problems, please file an issue.

Improvements:

#1319: Switch from a Cargo exclude list to an include list, and exclude some unnecessary stuff.

Commits

b028e4f 1.12.3
5e195de regex-automata-0.4.14
a3433f6 regex-syntax-0.8.9
0c07fae regex-lite-0.1.9
6a81006 cargo: exclude development scripts and fuzzing data
4733e28 automata: fix onepass::DFA::try_search_slots panic when too many slots are ...
See full diff in compare view

Updates bytes from 1.11.0 to 1.11.1

Release notes

Sourced from bytes's releases.

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

Fix integer overflow in BytesMut::reserve

Changelog

Sourced from bytes's changelog.

1.11.1 (February 3rd, 2026)

Fix integer overflow in BytesMut::reserve

Commits

417dccd Release bytes v1.11.1 (#820)
d0293b0 Merge commit from fork
See full diff in compare view

Updates time from 0.3.45 to 0.3.47

Release notes

Sourced from time's releases.

v0.3.47

See the changelog for details.

v0.3.46

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.47 [2026-02-05]

Security

The possibility of a stack exhaustion denial of service attack when parsing RFC 2822 has been eliminated. Previously, it was possible to craft input that would cause unbounded recursion. Now, the depth of the recursion is tracked, causing an error to be returned if it exceeds a reasonable limit.

This attack vector requires parsing user-provided input, with any type, using the RFC 2822 format.

Compatibility

Attempting to format a value with a well-known format (i.e. RFC 3339, RFC 2822, or ISO 8601) will error at compile time if the type being formatted does not provide sufficient information. This would previously fail at runtime. Similarly, attempting to format a value with ISO 8601 that is only configured for parsing (i.e. Iso8601::PARSING) will error at compile time.

Added

Builder methods for format description modifiers, eliminating the need for verbose initialization when done manually.

date!(2026-W01-2) is now supported. Previously, a space was required between W and 01.

[end] now has a trailing_input modifier which can either be prohibit (the default) or discard. When it is discard, all remaining input is ignored. Note that if there are components after [end], they will still attempt to be parsed, likely resulting in an error.

Changed

More performance gains when parsing.

Fixed

If manually formatting a value, the number of bytes written was one short for some components. This has been fixed such that the number of bytes written is always correct.

The possibility of integer overflow when parsing an owned format description has been effectively eliminated. This would previously wrap when overflow checks were disabled. Instead of storing the depth as u8, it is stored as u32. This would require multiple gigabytes of nested input to overflow, at which point we've got other problems and trivial mitigations are available by downstream users.

0.3.46 [2026-01-23]

Added

All possible panics are now documented for the relevant methods.

The need to use #[serde(default)] when using custom serde formats is documented. This applies only when deserializing an Option<T>.

Duration::nanoseconds_i128 has been made public, mirroring std::time::Duration::from_nanos_u128.

... (truncated)

Commits

d5144cd v0.3.47 release
f6206b0 Guard against integer overflow in release mode
1c63dc7 Avoid denial of service when parsing Rfc2822
5940df6 Add builder methods to avoid verbose construction
00881a4 Manually format macros everywhere
bb723b6 Add trailing_input modifier to end
31c4f8e Permit W12 in date! macro
490a17b Mark error paths in well-known formats as cold
6cb1896 Optimize Rfc2822 parsing
6d264d5 Remove erroneous #[inline(never)] attributes
Additional commits viewable in compare view

Updates libc from 0.2.180 to 0.2.181

Release notes

Sourced from libc's releases.

0.2.181

Added

Apple: Add MADV_ZERO (#4924)

Redox: Add makedev, major, and minor (#4928)

GLibc: Add PTRACE_SET_SYSCALL_INFO (#4933)

OpenBSD: Add more kqueue related constants for (#4945)

Linux: add CAN error types (#4944)

OpenBSD: Add siginfo_t::si_status (#4946)

QNX NTO: Add max_align_t (#4927)

Illumos: Add _CS_PATH (#4956)

OpenBSD: add ppoll (#4957)

Fixed

AIX: Change 'tv_nsec' of 'struct timespec' to type 'c_long' (#4931)

AIX: Use 'struct st_timespec' in 'struct stat{,64}' (#4931)

Glibc: Link old version of tc{g,s}etattr (#4938)

Glibc: Link the correct version of cf{g,s}et{i,o}speed on mips{32,64}r6 (#4938)

OpenBSD: Fix constness of tm.tm_zone (#4948)

OpenBSD: Fix the definition of ptrace_thread_state (#4947)

QuRT: Fix type visibility and defs (#4932)

Redox: Fix dev_t (#4928)

Redox: Fix values for PTHREAD_MUTEX_{NORMAL, RECURSIVE} (#4943)

Various: Mark additional fields as private padding (#4922)

Changed

Fuchsia: Update SO_* constants (#4937)

Revert "musl: convert inline timespecs to timespec" (resolves build issues on targets only supported by Musl 1.2.3+ ) (#4958)

Changelog

Sourced from libc's changelog.

0.2.181 - 2026-02-09

Added

Apple: Add MADV_ZERO (#4924)

Redox: Add makedev, major, and minor (#4928)

GLibc: Add PTRACE_SET_SYSCALL_INFO (#4933)

OpenBSD: Add more kqueue related constants for (#4945)

Linux: add CAN error types (#4944)

OpenBSD: Add siginfo_t::si_status (#4946)

QNX NTO: Add max_align_t (#4927)

Illumos: Add _CS_PATH (#4956)

OpenBSD: add ppoll (#4957)

Fixed

AIX: Change 'tv_nsec' of 'struct timespec' to type 'c_long' (#4931)

AIX: Use 'struct st_timespec' in 'struct stat{,64}' (#4931)

Glibc: Link old version of tc{g,s}etattr (#4938)

Glibc: Link the correct version of cf{g,s}et{i,o}speed on mips{32,64}r6 (#4938)

OpenBSD: Fix constness of tm.tm_zone (#4948)

OpenBSD: Fix the definition of ptrace_thread_state (#4947)

QuRT: Fix type visibility and defs (#4932)

Redox: Fix dev_t (#4928)

Redox: Fix values for PTHREAD_MUTEX_{NORMAL, RECURSIVE} (#4943)

Various: Mark additional fields as private padding (#4922)

Changed

Fuchsia: Update SO_* constants (#4937)

Revert "musl: convert inline timespecs to timespec" (resolves build issues on targets only supported by Musl 1.2.3+ ) (#4958)

Commits

d37b0aa chore: Release libc 0.2.181
08f7df7 Revert "musl: convert inline timespecs to timespec"
7710a7f tests linux: do not skip tests requiring kernel <= 6.8
83360a3 CI linux: Move to Ubuntu25.04 for i686
cab60d9 Macro cleanups.
a6168e1 Remove __item!.
52fcf32 checks termios size in the baud test
5971f2f fix libc-test ctest on mips64 and sparc64
1813ac8 links old version for glibc on mips{32,64}r6
6c7e282 links old version of tc{g,s}etattr for glibc on mips(64) and sparc(64)
Additional commits viewable in compare view

Updates aws-lc-rs from 1.15.3 to 1.15.4

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.15.4

What's Changed

HKDF: Fewer allocations by @justsmth in aws/aws-lc-rs#1011

aws-lc-sys v0.37.0 aligns with AWS-LC v1.67.0 by @justsmth in aws/aws-lc-rs#1016

Build Improvements

Fix non-CMake *-windows-gnullvm cross-compilation by @AlexTMjugador in aws/aws-lc-rs#1010

Fix building for older Android targets by @justsmth in aws/aws-lc-rs#1013

Support Windows 7 by @justsmth in aws/aws-lc-rs#1000

Issues Being Closed

Android Build Failure with cc-builder -- aws/aws-lc-rs#1006

aws-lc-sys build faild on ghcr.io/cross-rs/x86_64-pc-windows-msvc-cross:local -- aws/aws-lc-rs#1004

Windows 7 support? Missing ProcessPrng -- aws/aws-lc#1997

Other Merged PRs

Prepare aws-lc-rs v1.15.4 by @justsmth in aws/aws-lc-rs#1018

target-specific cc_builder files not needed by @justsmth in aws/aws-lc-rs#1003

New Contributors

@AlexTMjugador made their first contribution in aws/aws-lc-rs#1010

Full Changelog: aws/aws-lc-rs@v1.15.3...v1.15.4

Commits

13ff670 Prepare aws-lc-rs v1.15.4 (#1018)
9227112 Prepare aws-lc-sys v0.37.0 (#1016)
97a963f HKDF: Fewer allocations (#1011)
4d96702 target-specific cc_builder files not needed (#1003)
16fb367 Support Windows 7 (#1000)
855f5ca Fix building for older Android targets (#1013)
ba7b312 Fix non-CMake *-windows-gnullvm cross-compilation (#1010)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.101` | | [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.19` | `0.1.20` | | [regex](https://github.com/rust-lang/regex) | `1.12.2` | `1.12.3` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.0` | `1.11.1` | | [time](https://github.com/time-rs/time) | `0.3.45` | `0.3.47` | | [libc](https://github.com/rust-lang/libc) | `0.2.180` | `0.2.181` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.15.3` | `1.15.4` | Updates `anyhow` from 1.0.100 to 1.0.101 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.100...1.0.101) Updates `hyper-util` from 0.1.19 to 0.1.20 - [Release notes](https://github.com/hyperium/hyper-util/releases) - [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper-util@v0.1.19...v0.1.20) Updates `regex` from 1.12.2 to 1.12.3 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.2...1.12.3) Updates `bytes` from 1.11.0 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.0...v1.11.1) Updates `time` from 0.3.45 to 0.3.47 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.45...v0.3.47) Updates `libc` from 0.2.180 to 0.2.181 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.181/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.180...0.2.181) Updates `aws-lc-rs` from 1.15.3 to 1.15.4 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.15.3...v1.15.4) --- updated-dependencies: - dependency-name: anyhow dependency-version: 1.0.101 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: hyper-util dependency-version: 0.1.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: regex dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: bytes dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: time dependency-version: 0.3.47 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: libc dependency-version: 0.2.181 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: aws-lc-rs dependency-version: 1.15.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot assigned CBenoit Feb 10, 2026

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Feb 10, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the patch group across 1 directory with 7 updates #1672

build(deps): bump the patch group across 1 directory with 7 updates #1672

Uh oh!

dependabot bot commented on behalf of github Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

build(deps): bump the patch group across 1 directory with 7 updates #1672

Are you sure you want to change the base?

build(deps): bump the patch group across 1 directory with 7 updates #1672

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 10, 2026

1.0.101

v0.1.20

What's Changed

New Contributors

0.1.20 (2026-02-02)

1.12.3 (2025-02-03)

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

1.11.1 (February 3rd, 2026)

v0.3.47

v0.3.46

0.3.47 [2026-02-05]

Security

Compatibility

Added

Changed

Fixed

0.3.46 [2026-01-23]

Added

0.2.181

Added

Fixed

Changed

0.2.181 - 2026-02-09

Added

Fixed

Changed

aws-lc-rs v1.15.4

What's Changed

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant