Skip to content

chore(deps): bump base64 from 0.22.1 to 0.23.1 in the rust-major-dependencies group across 1 directory - #114

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-major-dependencies-9fd31f0012
Open

chore(deps): bump base64 from 0.22.1 to 0.23.1 in the rust-major-dependencies group across 1 directory#114
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-major-dependencies-9fd31f0012

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-major-dependencies group with 1 update in the / directory: base64.

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

@dependabot dependabot Bot changed the title chore(deps): bump base64 from 0.22.1 to 0.23.0 in the rust-major-dependencies group chore(deps): bump base64 from 0.22.1 to 0.23.0 in the rust-major-dependencies group across 1 directory Jul 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-major-dependencies-9fd31f0012 branch 2 times, most recently from 29911c1 to 0478ff1 Compare August 3, 2026 20:54

@postil-dev postil-dev Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

info 1 advisory finding open
1 finding posted inline

Review details

Comment thread Cargo.toml Outdated
http-body-util = "0.1.3"
hyper-util = { version = "0.1.20", features = ["tokio", "server", "http1", "http2", "client", "client-legacy"] }
base64 = "0.22.1"
base64 = "0.23.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

warn Verify base64 0.23.0 API and MSRV compatibility
warn · confidence 0.70 · kind: uncertainty

base64 0.22 to 0.23 is a breaking bump for a 0.x crate: the deprecated top-level encode/decode free functions were removed in favor of the Engine trait, and the MSRV rose to 1.71.0. If any source file calls base64::encode(...) or base64::decode(...) directly, it will fail to compile; if the project declares an MSRV below 1.71.0, downstream builds on older toolchains will break. Run cargo build and cargo +1.71.0 check (or whichever MSRV the project targets) and grep for base64::encode / base64::decode usage to confirm no removed APIs are referenced.

@dependabot @github

dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@postil-dev postil-dev Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

info 1 advisory finding open
1 finding posted inline

Review details

Comment thread Cargo.toml Outdated
http-body-util = "0.1.3"
hyper-util = { version = "0.1.20", features = ["tokio", "server", "http1", "http2", "client", "client-legacy"] }
base64 = "0.22.1"
base64 = "0.23.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

warn base64 0.22 to 0.23 is a breaking semver bump with no source changes
warn · confidence 0.70 · kind: uncertainty

base64 0.23.0 is a breaking 0.x release that reworked the engine API; code using the 0.22 engine pattern (e.g. base64::engine::general_purpose::STANDARD) may not compile without migration. This diff updates only Cargo.toml and Cargo.lock with no accompanying source changes. Run cargo check (or cargo build) to confirm every base64 call site compiles against the 0.23 API, and update any that do not.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-major-dependencies-9fd31f0012 branch from 0478ff1 to 6ac454f Compare August 10, 2026 20:54

@postil-dev postil-dev Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

info 1 advisory finding open
1 finding posted inline

Review details

Comment thread Cargo.toml Outdated
http-body-util = "0.1.3"
hyper-util = { version = "0.1.20", features = ["tokio", "server", "http1", "http2", "client", "client-legacy"] }
base64 = "0.22.1"
base64 = "0.23.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

info base64 major bump may break calling code
info · confidence 0.70 · kind: uncertainty

base64 is bumped from 0.22.1 to 0.23.0, a breaking semver change in the 0.x series. The 0.23 release raises MSRV to 1.71.0 and reworks engine APIs. This diff contains no source code updates to accommodate those changes. If any crate code calls base64 directly (e.g. via engine::general_purpose::STANDARD), it may fail to compile. Verify the project builds with cargo build and that the repo's MSRV is at least 1.71.0 before merging.

@dependabot dependabot Bot changed the title chore(deps): bump base64 from 0.22.1 to 0.23.0 in the rust-major-dependencies group across 1 directory chore(deps): bump base64 from 0.22.1 to 0.23.1 in the rust-major-dependencies group across 1 directory Aug 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-major-dependencies-9fd31f0012 branch from 6ac454f to 09e95ac Compare August 14, 2026 20:54

@postil-dev postil-dev Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

info 1 advisory finding open
1 finding posted inline

Review details

Comment thread Cargo.toml
http-body-util = "0.1.3"
hyper-util = { version = "0.1.20", features = ["tokio", "server", "http1", "http2", "client", "client-legacy"] }
base64 = "0.22.1"
base64 = "0.23.1"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

info base64 0.22 to 0.23 is a breaking bump with no source changes
info · confidence 0.72 · kind: uncertainty

base64 0.23.0 is a breaking release for a 0.x crate; the bundled changelog notes an MSRV bump to 1.71.0 and API restructuring. This diff updates only Cargo.toml and Cargo.lock with no accompanying source changes to call sites. If guard uses the 0.22 Engine or prelude API, compilation will fail; if the project's rust-version is below 1.71.0, downstream builds on older toolchains will break. Run cargo build and confirm the project MSRV is >= 1.71.0 before merging.

Bumps the rust-major-dependencies group with 1 update in the / directory: [base64](https://github.com/marshallpierce/rust-base64).


Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-major-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-major-dependencies-9fd31f0012 branch from 09e95ac to f59554c Compare August 17, 2026 20:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants