build(deps): bump the build group across 1 directory with 9 updates by dependabot[bot] · Pull Request #1122 · coreos/bootupd

dependabot · 2026-06-29T01:43:14Z

Bumps the build group with 8 updates in the / directory:

Package	From	To
anyhow	`1.0.102`	`1.0.103`
bootc-internal-blockdev	`1.16.0`	`1.16.2`
camino	`1.2.2`	`1.2.4`
chrono	`0.4.44`	`0.4.45`
env_logger	`0.11.10`	`0.11.11`
log	`0.4.30`	`0.4.33`
openssl	`0.10.80`	`0.10.81`
regex	`1.12.3`	`1.12.4`

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates bootc-internal-blockdev from 1.16.0 to 1.16.2

Release notes

Sourced from bootc-internal-blockdev's releases.

Release v1.16.2

bootc 1.16.2

Continuing our new ~weekly release cadence!

Changes

sd-boot: Only use --random-seed flag on systemd >= 257 by @yeetypete in bootc-dev/bootc#2253

docs: tiny typo fix in SUMMARY.md by @Scanf-s in bootc-dev/bootc#2255

fix(composefs): restore registry auth discovery on direct pull by @yeetypete in bootc-dev/bootc#2259

Release 1.16.2 by @bootc-bot[bot] in bootc-dev/bootc#2261

Assets

bootc-1.16.2-vendor.tar.zstd - Vendored dependencies archive

bootc-1.16.2.tar.zstd - Source archive

New Contributors

@Scanf-s made their first contribution in bootc-dev/bootc#2255

Full Changelog: bootc-dev/bootc@v1.16.1...v1.16.2

Release v1.16.1

bootc 1.16.1

First of our new weekly release schedule - delayed a bit because we're hitting some CI flakes. Just smaller bug fixes here and prep for larger changes.

What's Changed

README.md: Link website and blog by @cgwalters in bootc-dev/bootc#2233

fix(deps): update rust by @bootc-bot[bot] in bootc-dev/bootc#2226

Prepwork for #2200 by @Johan-Liebert1 in bootc-dev/bootc#2240

Do not recursively clean tempdir by @Johan-Liebert1 in bootc-dev/bootc#2245

Update shlex to 2.0.1 by @jeckersb in bootc-dev/bootc#2244

A few CI tweaks by @cgwalters in bootc-dev/bootc#2232

Release 1.16.1 by @bootc-bot[bot] in bootc-dev/bootc#2254

Assets

bootc-1.16.1-vendor.tar.zstd - Vendored dependencies archive

bootc-1.16.1.tar.zstd - Source archive

Full Changelog: bootc-dev/bootc@v1.16.0...v1.16.1

Commits

7c7e8be Release 1.16.2
e8953d1 fix(composefs): restore registry auth discovery on direct pull
f9d5d2f docs: typo fix in SUMMARY.md
3db2c19 sd-boot: Only use --random-seed flag on systemd >= 257
e10e933 Release 1.16.1
bec34ca ci: Capture VM journal+console logs via bcvk --log-dir
1f824fb build: Fix /usr/lib permissions clobbered by COPY --from=packaging
aa712ff test: Don't assert on journal message in shadow-fixup test
85ad2f9 Update shlex to 2.0.1
922eb71 Do not clean tempdir if we fail to unmount
Additional commits viewable in compare view

Updates bootc-internal-utils from 1.16.0 to 1.16.2

Release notes

Sourced from bootc-internal-utils's releases.

Release v1.16.2

bootc 1.16.2

Continuing our new ~weekly release cadence!

Changes

sd-boot: Only use --random-seed flag on systemd >= 257 by @yeetypete in bootc-dev/bootc#2253

docs: tiny typo fix in SUMMARY.md by @Scanf-s in bootc-dev/bootc#2255

fix(composefs): restore registry auth discovery on direct pull by @yeetypete in bootc-dev/bootc#2259

Release 1.16.2 by @bootc-bot[bot] in bootc-dev/bootc#2261

Assets

bootc-1.16.2-vendor.tar.zstd - Vendored dependencies archive

bootc-1.16.2.tar.zstd - Source archive

New Contributors

@Scanf-s made their first contribution in bootc-dev/bootc#2255

Full Changelog: bootc-dev/bootc@v1.16.1...v1.16.2

Release v1.16.1

bootc 1.16.1

First of our new weekly release schedule - delayed a bit because we're hitting some CI flakes. Just smaller bug fixes here and prep for larger changes.

What's Changed

README.md: Link website and blog by @cgwalters in bootc-dev/bootc#2233

fix(deps): update rust by @bootc-bot[bot] in bootc-dev/bootc#2226

Prepwork for #2200 by @Johan-Liebert1 in bootc-dev/bootc#2240

Do not recursively clean tempdir by @Johan-Liebert1 in bootc-dev/bootc#2245

Update shlex to 2.0.1 by @jeckersb in bootc-dev/bootc#2244

A few CI tweaks by @cgwalters in bootc-dev/bootc#2232

Release 1.16.1 by @bootc-bot[bot] in bootc-dev/bootc#2254

Assets

bootc-1.16.1-vendor.tar.zstd - Vendored dependencies archive

bootc-1.16.1.tar.zstd - Source archive

Full Changelog: bootc-dev/bootc@v1.16.0...v1.16.1

Commits

7c7e8be Release 1.16.2
e8953d1 fix(composefs): restore registry auth discovery on direct pull
f9d5d2f docs: typo fix in SUMMARY.md
3db2c19 sd-boot: Only use --random-seed flag on systemd >= 257
e10e933 Release 1.16.1
bec34ca ci: Capture VM journal+console logs via bcvk --log-dir
1f824fb build: Fix /usr/lib permissions clobbered by COPY --from=packaging
aa712ff test: Don't assert on journal message in shadow-fixup test
85ad2f9 Update shlex to 2.0.1
922eb71 Do not clean tempdir if we fail to unmount
Additional commits viewable in compare view

Updates camino from 1.2.2 to 1.2.4

Release notes

Sourced from camino's releases.

camino 1.2.4

Added

Methods to convert between Box<Utf8Path> and Box<Path>:

From<Box<Utf8Path>> for Box<Path> (as of release, not documented due to rust-lang/rust#158466).

Utf8Path::into_std_boxed_path(self: Box<Self>)

Utf8Path::from_boxed_path(path: Box<Path>)

TryFrom<Box<Path>> for Box<Utf8Path>

Thanks nicopap for your first contribution!

camino 1.2.3

Performance improvements

Utf8Path::hash now delegates to std::path::Path::hash, resulting in hashing requiring ~2x fewer instructions. Thanks stormslowly for your first contribution!

Changelog

Sourced from camino's changelog.

[1.2.4] - 2026-06-27

Added

Methods to convert between Box<Utf8Path> and Box<Path>:

From<Box<Utf8Path>> for Box<Path> (as of release, not documented due to rust-lang/rust#158466).

Utf8Path::into_std_boxed_path(self: Box<Self>)

Utf8Path::from_boxed_path(path: Box<Path>)

TryFrom<Box<Path>> for Box<Utf8Path>

Thanks nicopap for your first contribution!

[1.2.3] - 2026-06-18

Performance improvements

Utf8Path::hash now delegates to std::path::Path::hash, resulting in hashing requiring ~2x fewer instructions. Thanks stormslowly for your first contribution!

Commits

8966366 [camino] version 1.2.4
abf526b [meta] prepare release
417c6e1 docs: fix dangling [from] link in into_std_boxed_path (#125)
6d25706 add Box<Path> -> Box<Utf8Path> conversion (#124)
816ddeb test Box\<Utf8Path> conversions, and other review fixes (#123)
e437cc3 Add conversion from Box<Utf8Path> to Box<Path> (#122)
0b4c744 [camino] version 1.2.3
feac129 [meta] prepare changelog
f806a85 add cargo-release autoreplacements
6368097 perf: delegate Utf8Path::hash to the wrapped Path (#120)
Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in chronotope/chrono#1787

tz_data: fix tzdata locations on Android by @caruschalalamove in chronotope/chrono#1789

Commits

1703382 Prepare 0.4.45 release
881f9ab tz_data: fix tzdata locations on Android
f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
120686c Bump codecov/codecov-action from 5 to 6
See full diff in compare view

Updates env_logger from 0.11.10 to 0.11.11

Release notes

Sourced from env_logger's releases.

v0.11.11

[0.11.11] - 2026-06-25

Internal

Updated env_filter

Changelog

Sourced from env_logger's changelog.

[0.11.11] - 2026-06-25

Internal

Updated env_filter

Commits

b4d3f2b chore: Release
cc2b2ef chore: Release
69e27d1 docs: Update changelog
166880d Merge pull request #411 from epage/parse
0a580d0 fix(filter): Remove 'parse' on no_std
78d8ef1 Merge pull request #404 from cagatay-y/feature/filter-no_std
132fe86 feat(filter): Add support for no_std environments
4feafa4 refactor(env_filter): Fix unreachable pub warning
92f8d8d Merge pull request #410 from rust-cli/renovate/crate-ci-typos-1.x
4e57784 chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
Additional commits viewable in compare view

Updates log from 0.4.30 to 0.4.33

Release notes

Sourced from log's releases.

0.4.32

What's Changed

Support Value -> string conversions with kv + std features instead of kv_std by @tisonkun in rust-lang/log#729

Prepare for 0.4.32 release by @KodrAus in rust-lang/log#730

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

fix typos in kv compile errors and log documentation by @Isvane in rust-lang/log#726

Leverage static str key when possible by @tisonkun in rust-lang/log#727

Prepare for 0.4.31 release by @KodrAus in rust-lang/log#728

New Contributors

@Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

Changelog

Sourced from log's changelog.

[0.4.33] - 2026-06-20

What's Changed

Fixed key comparison by @matteo-zeggiotti-ok in rust-lang/log#732

New Contributors

@matteo-zeggiotti-ok made their first contribution in rust-lang/log#732

Full Changelog: rust-lang/log@0.4.32...0.4.33

[0.4.32] - 2026-06-04

What's Changed

Support Value -> string conversions with kv + std features instead of kv_std by @tisonkun in rust-lang/log#729

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

Leverage static str key when possible by @tisonkun in rust-lang/log#727

New Contributors

@Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

Commits

f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
6a24abf prepare for 0.4.33 release
87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
a9b5711 Review: fallback to the &str hash
cc89cc6 Review: fixed other comparisons
920e7dc Review: fixed comparison on MaybeStaticStr
0d71d3c Fixed key comparison
a5b5b21 Merge pull request #730 from rust-lang/cargo/0.4.32
c8d3b12 prepare for 0.4.32 release
ce6cd9f Merge pull request #729 from tisonkun/kv-std-support
Additional commits viewable in compare view

Updates openssl from 0.10.80 to 0.10.81

Release notes

Sourced from openssl's releases.

openssl-v0.10.81

What's Changed

Bump aws-ls-sys to 0.41 by @joshgodsiff in rust-openssl/rust-openssl#2640

Add brainpoolP224r1 and brainpoolP224t1 NID constants by @sfarestam-iproov in rust-openssl/rust-openssl#2642

x509: add minimal support for CRL building by @DavidFontaineOcd in rust-openssl/rust-openssl#2538

add mldsa.h to the boringssl bindgen by @reaperhulk in rust-openssl/rust-openssl#2650

Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @alex in rust-openssl/rust-openssl#2652

Fix verify_mode() panic on unmodeled verify mode bits by @alex in rust-openssl/rust-openssl#2651

Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in rust-openssl/rust-openssl#2653

Release openssl 0.10.81 and openssl-sys 0.9.117 by @reaperhulk in rust-openssl/rust-openssl#2655

New Contributors

@joshgodsiff made their first contribution in rust-openssl/rust-openssl#2640

@sfarestam-iproov made their first contribution in rust-openssl/rust-openssl#2642

@DavidFontaineOcd made their first contribution in rust-openssl/rust-openssl#2538

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81

Commits

db9c9e2 Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)
3a7fb56 Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)
d059c43 Fix verify_mode() panic on unmodeled verify mode bits (#2651)
8b1519e Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)
d5713d6 add mldsa.h to the boringssl bindgen (#2650)
9fac317 Merge pull request #2538 from ocdlroux/feat/crl-full
4dae20b x509: adding minimal support for X509CrlBuilder
47f7777 Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)
659da17 Bump aws-ls-sys to 0.41 (#2640)
See full diff in compare view

Updates regex from 1.12.3 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

#1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.

Commits

7b96fdc 1.12.4
7b89cf0 deps: update to regex-syntax 0.8.11
1401679 regex-syntax-0.8.11
d709000 changelog: 1.12.4
9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
a7f2ff6 docs: clarify regex-lite word boundaries
2c7b172 docs: clarify unsupported Anchored::Pattern searches
839d16b regex-syntax-0.8.10
c4865a0 syntax: fix negation handling in HIR translation
d8761c0 cargo: also include benches
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the build group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [bootc-internal-blockdev](https://github.com/bootc-dev/bootc) | `1.16.0` | `1.16.2` | | [camino](https://github.com/camino-rs/camino) | `1.2.2` | `1.2.4` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [env_logger](https://github.com/rust-cli/env_logger) | `0.11.10` | `0.11.11` | | [log](https://github.com/rust-lang/log) | `0.4.30` | `0.4.33` | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.80` | `0.10.81` | | [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.12.4` | Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `bootc-internal-blockdev` from 1.16.0 to 1.16.2 - [Release notes](https://github.com/bootc-dev/bootc/releases) - [Commits](bootc-dev/bootc@v1.16.0...v1.16.2) Updates `bootc-internal-utils` from 1.16.0 to 1.16.2 - [Release notes](https://github.com/bootc-dev/bootc/releases) - [Commits](bootc-dev/bootc@v1.16.0...v1.16.2) Updates `camino` from 1.2.2 to 1.2.4 - [Release notes](https://github.com/camino-rs/camino/releases) - [Changelog](https://github.com/camino-rs/camino/blob/main/CHANGELOG.md) - [Commits](camino-rs/camino@camino-1.2.2...camino-1.2.4) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `env_logger` from 0.11.10 to 0.11.11 - [Release notes](https://github.com/rust-cli/env_logger/releases) - [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md) - [Commits](rust-cli/env_logger@v0.11.10...v0.11.11) Updates `log` from 0.4.30 to 0.4.33 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.30...0.4.33) Updates `openssl` from 0.10.80 to 0.10.81 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81) Updates `regex` from 1.12.3 to 1.12.4 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.3...1.12.4) --- updated-dependencies: - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: bootc-internal-blockdev dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: bootc-internal-utils dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: camino dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: env_logger dependency-version: 0.11.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: log dependency-version: 0.4.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: openssl dependency-version: 0.10.81 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: regex dependency-version: 1.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the area/dependencies label Jun 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the build group across 1 directory with 9 updates#1122

build(deps): bump the build group across 1 directory with 9 updates#1122
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/build-1ab3cc6135

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

1.0.103

Release v1.16.2

bootc 1.16.2

Changes

Assets

New Contributors

Release v1.16.1

bootc 1.16.1

What's Changed

Assets

Release v1.16.2

bootc 1.16.2

Changes

Assets

New Contributors

Release v1.16.1

bootc 1.16.1

What's Changed

Assets

camino 1.2.4

Added

camino 1.2.3

Performance improvements

[1.2.4] - 2026-06-27

Added

[1.2.3] - 2026-06-18

Performance improvements

0.4.45

What's Changed

v0.11.11

[0.11.11] - 2026-06-25

Internal

[0.11.11] - 2026-06-25

Internal

0.4.32

What's Changed

0.4.31

What's Changed

New Contributors

[0.4.33] - 2026-06-20

What's Changed

New Contributors

[0.4.32] - 2026-06-04

What's Changed

[0.4.31] - 2026-06-02

What's Changed

New Contributors

openssl-v0.10.81

What's Changed

New Contributors

1.12.4 (2025-06-09)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants