chore(deps): bump the rust-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #5388 · boa-dev/boa

dependabot · 2026-05-30T08:07:58Z

Bumps the rust-dependencies group with 8 updates in the / directory:

Package	From	To
http	`1.4.0`	`1.4.1`
mimalloc-safe	`0.1.61`	`0.1.62`
reqwest	`0.13.3`	`0.13.4`
serde_json	`1.0.149`	`1.0.150`
log	`0.4.29`	`0.4.30`
pastey	`0.2.2`	`0.2.3`
dashmap	`6.1.0`	`6.2.1`
either	`1.15.0`	`1.16.0`

Updates http from 1.4.0 to 1.4.1

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

chore(header): fix clippy::assign_op_pattern by @rxc-amzn in hyperium/http#806

ci: pin itoa in msrv job by @seanmonstar in hyperium/http#813

Remove unnecessary explicit lifetimes by @jplatte in hyperium/http#815

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/http#819

tests: update to rand 0.10 by @tottoto in hyperium/http#818

refactor: Remove usage of float instruction by @AurelienFT in hyperium/http#823

refactor(uri): consolidate PathAndQuery::from_shared and from_static by @seanmonstar in hyperium/http#825

fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @seanmonstar in hyperium/http#826

Rephrase comment by @daalfox in hyperium/http#827

Fix typo in request builder docs by @vleksis in hyperium/http#831

fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @SAY-5 in hyperium/http#833

fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @seanmonstar in hyperium/http#837

fix(header): use a set_len guard in IntoIter drop by @seanmonstar in hyperium/http#838

New Contributors

@rxc-amzn made their first contribution in hyperium/http#806

@AurelienFT made their first contribution in hyperium/http#823

@daalfox made their first contribution in hyperium/http#827

@vleksis made their first contribution in hyperium/http#831

@SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.1 (May 25, 2026)

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

a24c968 v1.4.1
bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
68e0abb docs: fix typo in request builder docs (#831)
29dd307 docs(extensions): rephrase internal comment (#827)
ae48fb5 fix(uri): reject Path::from_shared/from_static if doesn't start with slash (#...
1ad200e refactor(uri): consolidate PathAndQuery::from_shared and from_static (#825)
d59d939 refactor: Remove usage of float instruction (#823)
ed680c4 tests: update to rand 0.10 (#818)
Additional commits viewable in compare view

Updates mimalloc-safe from 0.1.61 to 0.1.62

Release notes

Sourced from mimalloc-safe's releases.

mimalloc-safe-v0.1.62

Bug Fixes

(sys) Vendor Apple THREAD_LOCAL patch in napi-rs/mimalloc fork (#71)

Chore

(deps) Update yarn to v4.15.0 (#70)

Changelog

Sourced from mimalloc-safe's changelog.

[0.1.62] - 2026-05-26

Bug Fixes

(sys) Vendor Apple THREAD_LOCAL patch in napi-rs/mimalloc fork (#71)

Chore

(deps) Update yarn to v4.15.0 (#70)

Commits

1e402fe chore: release (#69)
dc31c31 chore(deps): update yarn to v4.15.0 (#70)
92060fe fix(sys): vendor Apple THREAD_LOCAL patch in napi-rs/mimalloc fork (#71)
See full diff in compare view

Updates reqwest from 0.13.3 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.

Add ClientBuilder::http2_keep_alive_* options for the blocking client.

Add TLS 1.3 support when using native-tls backend.

Fix redirect handling to strip sensitive headers when the scheme changes.

Fix HTTP/3 happy-eyeball connection creation.

Upgrade hickory-resolver to 0.26.

What's Changed

fix(tls): improve rustls-no-provider panic message and add module docs by @smythg4 in seanmonstar/reqwest#3021

fix: do not lose the url in error when decoding json by @Dushistov in seanmonstar/reqwest#3026

Add tls_sslkeylogfile builder method by @passcod in seanmonstar/reqwest#2923

fix(redirect): strip sensitive headers on scheme change across redirects by @SAY-5 in seanmonstar/reqwest#3034

chore: upgrade MSRV to 1.85 by @seanmonstar in seanmonstar/reqwest#3038

chore: clean up minimal-versions CI job by @seanmonstar in seanmonstar/reqwest#3039

fix(http3): use happy eyeballs for h3 connect by @lyuzichong in seanmonstar/reqwest#3030

fix: update hickory-resolver to 0.26 and adjust code accordingly by @seanmonstar in seanmonstar/reqwest#3040

fix: remove unwrap in hickory initialization by @mat813 in seanmonstar/reqwest#3041

feat(https): support TLS 1.3 as min version under native-tls 🎉 by @AverageHelper in seanmonstar/reqwest#2975

Expose keep alive configurations in blocking client by @aeb-dev in seanmonstar/reqwest#3043

Prepare v0.13.4 by @seanmonstar in seanmonstar/reqwest#3046

New Contributors

@smythg4 made their first contribution in seanmonstar/reqwest#3021

@Dushistov made their first contribution in seanmonstar/reqwest#3026

@SAY-5 made their first contribution in seanmonstar/reqwest#3034

@mat813 made their first contribution in seanmonstar/reqwest#3041

@AverageHelper made their first contribution in seanmonstar/reqwest#2975

@aeb-dev made their first contribution in seanmonstar/reqwest#3043

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

Changelog

Sourced from reqwest's changelog.

v0.13.4

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.

Add ClientBuilder::http2_keep_alive_* options for the blocking client.

Add TLS 1.3 support when using native-tls backend.

Fix redirect handling to strip sensitive headers when the scheme changes.

Fix HTTP/3 happy-eyeball connection creation.

Upgrade hickory-resolver to 0.26.

Commits

11489b3 v0.13.4
d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
fb7bf6a fix: remove unwrap in hickory initialization (#3041)
3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
9cbb65b chore: clean up minimal-versions CI job (#3039)
17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates log from 0.4.29 to 0.4.30

Release notes

Sourced from log's releases.

0.4.30

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Changelog

Sourced from log's changelog.

[0.4.30] - 2026-05-21

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Commits

9c55760 Merge pull request #725 from rust-lang/cargo/0.4.30
d1acb05 update docs on current MSRV and note latest bump in changelog
5068293 prepare for 0.4.30 release
7ccd873 Merge pull request #724 from rust-lang/feat/net-to-value
923dfaa fix up test cfgs
ecb7de8 gate net value impls on std
67bb4f6 run fmt
25f49fe rework net type capturing
7087dcb feat: impl ToValue for core::net types
67bc7e3 Merge pull request #723 from woodruffw-forks/ww/ci
Additional commits viewable in compare view

Updates pastey from 0.2.2 to 0.2.3

Release notes

Sourced from pastey's releases.

v0.2.3

Improved

Improved Branch Coverage #34

Improved Line Coverage #32

Full Changelog: AS1100K/pastey@v0.2.2...v0.2.3

Changelog

Sourced from pastey's changelog.

[0.2.3] - 2026-05-20

Improved

Improved Branch Coverage #34

Improved Line Coverage #32

Commits

c377d07 RELEASE v0.2.3
d23c755 Improve Branch Coverage to 100% (#34)
998437f Improve Line Coverage (#32)
See full diff in compare view

Updates dashmap from 6.1.0 to 6.2.1

Release notes

Sourced from dashmap's releases.

v6.2.1

This is an interim maintenance release for the existing v6 branch before v7 can be released. This bumps the MSRV to 1.85 and updates dependencies to their latest versions.

Commits

749ed1f v6.2.1
d02b945 v6.2.0
b983625 update dependencies
94a294a bump msrv to 1.85
See full diff in compare view

Updates either from 1.15.0 to 1.16.0

Commits

8f4ecd9 Merge pull request #138 from cuviper/release-1.16.0
c35bb4e Release 1.16.0
652486e Fix an unused import
c26e693 Merge pull request #137 from ronnodas/map-both
aa7f1d4 Add a single-ident version of map_both!
a706625 Format the map_both! example
85b1b56 Merge pull request #128 from A4-Tacks/for-both-ident-pattern
304e814 Merge pull request #127 from A4-Tacks/map-or
ff9e326 Apply formatting suggestions from code review
71c9a91 Merge pull request #126 from A4-Tacks/is-and
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 8 updates Bumps the rust-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.1` | | [mimalloc-safe](https://github.com/napi-rs/mimalloc-safe) | `0.1.61` | `0.1.62` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.3` | `0.13.4` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.30` | | [pastey](https://github.com/as1100k/pastey) | `0.2.2` | `0.2.3` | | [dashmap](https://github.com/xacrimon/dashmap) | `6.1.0` | `6.2.1` | | [either](https://github.com/rayon-rs/either) | `1.15.0` | `1.16.0` | Updates `http` from 1.4.0 to 1.4.1 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.0...v1.4.1) Updates `mimalloc-safe` from 0.1.61 to 0.1.62 - [Release notes](https://github.com/napi-rs/mimalloc-safe/releases) - [Changelog](https://github.com/napi-rs/mimalloc-safe/blob/main/CHANGELOG.md) - [Commits](napi-rs/mimalloc-safe@mimalloc-safe-v0.1.61...mimalloc-safe-v0.1.62) Updates `reqwest` from 0.13.3 to 0.13.4 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.3...v0.13.4) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `log` from 0.4.29 to 0.4.30 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.29...0.4.30) Updates `pastey` from 0.2.2 to 0.2.3 - [Release notes](https://github.com/as1100k/pastey/releases) - [Changelog](https://github.com/AS1100K/pastey/blob/master/CHANGELOG.md) - [Commits](AS1100K/pastey@v0.2.2...v0.2.3) Updates `dashmap` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/xacrimon/dashmap/releases) - [Commits](xacrimon/dashmap@v6.1.0...v6.2.1) Updates `either` from 1.15.0 to 1.16.0 - [Commits](rayon-rs/either@1.15.0...1.16.0) --- updated-dependencies: - dependency-name: http dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: mimalloc-safe dependency-version: 0.1.62 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: reqwest dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: log dependency-version: 0.4.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: pastey dependency-version: 0.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: dashmap dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: either dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-30T08:17:22Z

Test262 conformance changes

Test result	main count	PR count	difference
Total	53,125	53,125	0
Passed	51,071	51,072	+1
Ignored	1,482	1,482	0
Failed	572	571	-1
Panics	0	0	0
Conformance	96.13%	96.14%	+0.00%

Fixed tests (1):

test/staging/sm/Math/acosh-approx.js (previously Failed)

Tested main commit: 8f5ef6542d641fd22320e51234e914b59e623717
Tested PR commit: 0236b284080eb24dca53e58b7b60fa05a7e0fcec
Compare commits: 8f5ef65...0236b28

dependabot Bot added the C-Dependencies Pull requests that update a dependency file label May 30, 2026

dependabot Bot requested a review from a team as a code owner May 30, 2026 08:07

dependabot Bot added the C-Dependencies Pull requests that update a dependency file label May 30, 2026

github-actions Bot added the Waiting On Review Waiting on reviews from the maintainers label May 30, 2026

github-actions Bot added this to the v1.0.0 milestone May 30, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the rust-dependencies group across 1 directory with 8 updates#5388

chore(deps): bump the rust-dependencies group across 1 directory with 8 updates#5388
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-1c49d0a9a5

dependabot Bot commented on behalf of github May 30, 2026

Uh oh!

github-actions Bot commented May 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 30, 2026

v1.4.1

tl;dr

What's Changed

New Contributors

1.4.1 (May 25, 2026)

mimalloc-safe-v0.1.62

Bug Fixes

Chore

[0.1.62] - 2026-05-26

Bug Fixes

Chore

v0.13.4

tl;dr

What's Changed

New Contributors

v0.13.4

v1.0.150

0.4.30

What's Changed

New Contributors

Notable Changes

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Notable Changes

v0.2.3

Improved

[0.2.3] - 2026-05-20

Improved

v6.2.1

Uh oh!

github-actions Bot commented May 30, 2026

Test262 conformance changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants