Skip to content

chore(deps): bump the all-cargo-dependencies group across 1 directory with 17 updates - #1139

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-cargo-dependencies-e797e5be69
Open

chore(deps): bump the all-cargo-dependencies group across 1 directory with 17 updates#1139
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-cargo-dependencies-e797e5be69

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-cargo-dependencies group with 17 updates in the / directory:

Package From To
base64 0.23.0 0.23.1
futures-util 0.3.33 0.3.34
http-body-util 0.1.4 0.1.5
libdeflater 1.25.2 1.26.0
ordered-float 5.3.0 5.5.0
papaya 0.2.4 0.2.5
rkyv 0.8.17 0.8.18
rustls 0.23.42 0.23.43
rustls-webpki 0.103.13 0.103.15
syn 3.0.3 3.0.4
tango-bench 0.7.2 0.8.0
thiserror 2.0.19 2.0.20
time 0.3.54 0.3.55
toml 1.1.3+spec-1.1.0 1.1.4+spec-1.1.0
uuid 1.24.0 1.25.0
clap 4.6.4 4.6.6
roaring 0.11.4 0.11.5

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures
Commits

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates http-body-util from 0.1.4 to 0.1.5

Commits

Updates libdeflater from 1.25.2 to 1.26.0

Changelog

Sourced from libdeflater's changelog.

[1.26.0]

Commits

Updates ordered-float from 5.3.0 to 5.5.0

Release notes

Sourced from ordered-float's releases.

v5.5.0

  • Minimum supported Rust version increased from 1.63 to 1.90.
  • feat: derive Facet if facet feature is active by @​Erik1000 in #179

Full Changelog: reem/rust-ordered-float@v5.4.0...v5.5.0

v5.4.0

What's Changed

New Contributors

Full Changelog: reem/rust-ordered-float@v5.3.0...v5.4.0

Commits

Updates papaya from 0.2.4 to 0.2.5

Release notes

Sourced from papaya's releases.

0.2.5

Commits
  • 92b4499 release 0.2.5
  • f2336e6 fix signature of HashSet::retain
  • ad8c070 allowing setting a shared Arc\<seize::Collector>
  • 03df057 make seize/fast-barrier an optional feature
  • f3e18f4 check in Cargo lockfile
  • 3677fe2 skip allocation layout test on 32-bit targets
  • 864b9f5 fix a trivial typo in BENCHMARKS.md
  • 48487f7 unpark correct parker on resize abort
  • See full diff in compare view

Updates rkyv from 0.8.17 to 0.8.18

Commits

Updates rustls from 0.23.42 to 0.23.43

Commits
  • fcf61cd Prepare 0.23.43
  • f0dad4c Check server's proposed suite against actual offer
  • b480cc6 Test for server choosing a non-QUIC TLS1.3 suite
  • 883a44d Consider Protocol in ServerConfig::supports_version
  • c2f1fd9 Check suitability of server version in QUIC client
  • d98e1b9 Add test for server Tls13RequiredForQuic
  • e63d9bf Bound ticket age calculation
  • 79cd462 Defensiveness improvement for binder suffix arithmetic
  • 4a9f025 use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt
  • 3131e5c Accept that libcrux deps are vulnerable
  • Additional commits viewable in compare view

Updates rustls-webpki from 0.103.13 to 0.103.15

Release notes

Sourced from rustls-webpki's releases.

v/0.103.15

Fixes docs.rs build errors.

What's Changed

Full Changelog: https://github.com/rustls/webpki/compare/v/0.103.14..v/0.103.15

v/0.103.14

What's Changed

Full Changelog: rustls/webpki@v/0.103.13...v/0.103.14

Commits
  • c14836d Cargo: version 0.103.14 -> 0.103.15
  • 5c92308 Cargo: avoid all-features in docs.rs
  • 10a1514 Mark ML-DSA algorithms as FIPS submitted
  • 14cbaa1 Bump version to 0.103.14
  • cbb868a Support stable ML-DSA with aws-lc-rs
  • c782fd1 Update to aws-lc-rs 1.18
  • b250e31 Upgrade to base64 0.23
  • 99115b2 ci: sync cargo-check-external-types nightly
  • a82bfae crl: fix clippy::question_mark finding
  • See full diff in compare view

Updates syn from 3.0.3 to 3.0.4

Release notes

Sourced from syn's releases.

3.0.4

  • Allow safe fn in impl Parse for ForeignItemFn (#2078)
Commits
  • b5d62a6 Release 3.0.4
  • abf019c Merge pull request #2078 from dtolnay/foreginitemfn
  • d454333 Allow safe fn in impl Parse for ForeignItemFn
  • 8011b1c Update test suite to nightly-2026-08-18
  • 56a8d83 Raise rayon thread size for tests
  • f2c5c50 Ignore assert_is_empty pedantic clippy lint
  • 0eba76d Update test suite to nightly-2026-08-05
  • baaebce Update test suite to nightly-2026-07-25
  • b886a38 Update test suite to nightly-2026-07-24
  • 3c41416 Update test suite to nightly-2026-07-23
  • See full diff in compare view

Updates tango-bench from 0.7.2 to 0.8.0

Commits

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)
Commits

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

  • Avoid underflow in DateIter::nth, ensuring correct behavior.
  • Avoid overflow when deserializing timestamps.
  • Handle out-of-bounds data when deserializing.
  • Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
  • No longer silence errors when deserializing UtcOffset.
  • OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
  • OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
Commits
  • 857d9c4 v0.3.55 release
  • 2b72fcd Precise feature gating for macro
  • c1089eb Run check-targets, miri in parallel
  • f377fad Avoid range-validated ordinal => year in cascade
  • 2eacb0a Report miscellaneous tasks, overall status
  • 29621ac Speed up CI
  • 08de7ba Fix nano-timestamp validation
  • 3c3f046 Fix copy-paste error
  • 3c0c81c Cascade errors when deserializing UtcOffset
  • c21acd5 Handle more deserializations of SignedDuration
  • Additional commits viewable in compare view

Updates toml from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0

Commits
  • beee9fe chore: Release
  • 16e2ac1 docs: Update changelog
  • 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
  • 534039c fix(serde): Deserialize Value datetimes into typed targets
  • 6e45cef test(serde): Reproduce Value datetime deserialization error
  • 4ec099f chore: Release
  • 5a47a51 docs: Update changelog
  • da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
  • 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
  • ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
  • Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.25.0

Release notes

Sourced from uuid's releases.

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits
  • 302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
  • b7ccde8 prepare for 1.25.0 release
  • c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
  • 8c198b2 Add a serde::bytes module that encodes as a byte string
  • 2ea38af Merge pull request #900 from uuid-rs/cargo/v1.24.1
  • 9dbeb04 prepare for 1.24.1 release
  • e113df8 Merge pull request #899 from questfever/main
  • b017765 Fix non-ASCII character handling in parse diagnostics
  • See full diff in compare view

Updates clap from 4.6.4 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • Additional commits viewable in compare view

Updates roaring from 0.11.4 to 0.11.5

Release notes

Sourced from roaring's releases.

v0.11.5

What's Changed

New Contributors

Full Changelog: RoaringBitmap/roaring-rs@v0.11.4...v0.11.5

Commits
  • 0ce3fc8 Merge pull request #364 from RoaringBitmap/upgrade-dependencies-bump-version
  • a961a04 Remove the once_cell dependency
  • 5e8445b Merge pull request #363 from youdie006/fix/359-interval-remove-boundary
  • bf2961d Bump version to v0.11.5
  • 048a8b0 Fix off-by-one that corrupts a bitmap in remove_smallest/remove_biggest
  • 27d84f5 Merge pull request #360 from silver-ymz/fix/treemap-iter-advance-across-bitmaps
  • aac2de8 Make clippy happy
  • a3d1d54 Merge pull request #362 from RoaringBitmap/std-error-for-integer-too-small
  • 9a3c33e Implement std Error for IntegerTooSmall
  • f46c0ff fix: invalid treemap iter advance
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… with 17 updates

Bumps the all-cargo-dependencies group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.4` | `0.1.5` |
| [libdeflater](https://github.com/libdeflater/libdeflater) | `1.25.2` | `1.26.0` |
| [ordered-float](https://github.com/reem/rust-ordered-float) | `5.3.0` | `5.5.0` |
| [papaya](https://github.com/ibraheemdev/papaya) | `0.2.4` | `0.2.5` |
| [rkyv](https://github.com/rkyv/rkyv) | `0.8.17` | `0.8.18` |
| [rustls](https://github.com/rustls/rustls) | `0.23.42` | `0.23.43` |
| [rustls-webpki](https://github.com/rustls/webpki) | `0.103.13` | `0.103.15` |
| [syn](https://github.com/dtolnay/syn) | `3.0.3` | `3.0.4` |
| [tango-bench](https://github.com/bazhenov/tango) | `0.7.2` | `0.8.0` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` |
| [time](https://github.com/time-rs/time) | `0.3.54` | `0.3.55` |
| [toml](https://github.com/toml-rs/toml) | `1.1.3+spec-1.1.0` | `1.1.4+spec-1.1.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.25.0` |
| [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.6` |
| [roaring](https://github.com/RoaringBitmap/roaring-rs) | `0.11.4` | `0.11.5` |



Updates `base64` from 0.23.0 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1)

Updates `futures-util` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `http-body-util` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.4...http-body-util-v0.1.5)

Updates `libdeflater` from 1.25.2 to 1.26.0
- [Changelog](https://github.com/libdeflater/libdeflater/blob/master/CHANGELOG.md)
- [Commits](libdeflater/libdeflater@1.25.2...1.26.0)

Updates `ordered-float` from 5.3.0 to 5.5.0
- [Release notes](https://github.com/reem/rust-ordered-float/releases)
- [Commits](reem/rust-ordered-float@v5.3.0...v5.5.0)

Updates `papaya` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/ibraheemdev/papaya/releases)
- [Commits](ibraheemdev/papaya@v0.2.4...v0.2.5)

Updates `rkyv` from 0.8.17 to 0.8.18
- [Release notes](https://github.com/rkyv/rkyv/releases)
- [Commits](rkyv/rkyv@0.8.17...0.8.18)

Updates `rustls` from 0.23.42 to 0.23.43
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.42...v/0.23.43)

Updates `rustls-webpki` from 0.103.13 to 0.103.15
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](rustls/webpki@v/0.103.13...v/0.103.15)

Updates `syn` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.3...3.0.4)

Updates `tango-bench` from 0.7.2 to 0.8.0
- [Release notes](https://github.com/bazhenov/tango/releases)
- [Commits](bazhenov/tango@v0.7.2...v0.8.0)

Updates `thiserror` from 2.0.19 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.19...2.0.20)

Updates `time` from 0.3.54 to 0.3.55
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.54...v0.3.55)

Updates `toml` from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.3...toml-v1.1.4)

Updates `uuid` from 1.24.0 to 1.25.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...1.25.0)

Updates `clap` from 4.6.4 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.6)

Updates `roaring` from 0.11.4 to 0.11.5
- [Release notes](https://github.com/RoaringBitmap/roaring-rs/releases)
- [Commits](RoaringBitmap/roaring-rs@v0.11.4...v0.11.5)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: http-body-util
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: libdeflater
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-cargo-dependencies
- dependency-name: ordered-float
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-cargo-dependencies
- dependency-name: papaya
  dependency-version: 0.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: rkyv
  dependency-version: 0.8.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: rustls
  dependency-version: 0.23.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: rustls-webpki
  dependency-version: 0.103.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: syn
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: tango-bench
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-cargo-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: time
  dependency-version: 0.3.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: toml
  dependency-version: 1.1.4+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: uuid
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-cargo-dependencies
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: roaring
  dependency-version: 0.11.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants