chore(deps): update compatible by renovate[bot] · Pull Request #17057 · rust-lang/cargo

renovate · 2026-06-01T00:10:31Z

This PR contains the following updates:

Package	Type	Update	Change
annotate-snippets	workspace.dependencies	patch	`0.12.15` → `0.12.16`
clap_complete	workspace.dependencies	patch	`4.6.3` → `4.6.5`
filetime	workspace.dependencies	patch	`0.2.27` → `0.2.29`
futures-timer	workspace.dependencies	patch	`3.0.3` → `3.0.4`
gix-transport	workspace.dependencies	patch	`0.57.0` → `0.57.1`
handlebars	workspace.dependencies	patch	`6.4.0` → `6.4.1`
http	workspace.dependencies	patch	`1.4.0` → `1.4.1`
jiff	workspace.dependencies	patch	`0.2.24` → `0.2.28`
libgit2-sys	workspace.dependencies	patch	`0.18.3+1.9.2` → `0.18.5`
memchr	workspace.dependencies	patch	`2.8.0` → `2.8.1`
openssl	workspace.dependencies	patch	`0.10.78` → `0.10.80`
os_info	workspace.dependencies	minor	`3.14.0` → `3.15.0`
pulldown-cmark	workspace.dependencies	patch	`0.13.3` → `0.13.4`
serde_json	workspace.dependencies	patch	`1.0.149` → `1.0.150`
snapbox	workspace.dependencies	patch	`1.2.1` → `1.2.2`
tar	workspace.dependencies	patch	`0.4.45` → `0.4.46`
toml_edit	workspace.dependencies	patch	`0.25.11+spec-1.1.0` → `0.25.12`
winnow	workspace.dependencies	patch	`1.0.2` → `1.0.3`

Release Notes

rust-lang/annotate-snippets-rs (annotate-snippets)

`v0.12.16`

Compare Source

Fixed

Correctly format suggestion paths when DecorStyle::Unicode #414
Correctly highlight multi-line removals that leave only whitespace #413

clap-rs/clap (clap_complete)

`v4.6.5`

Compare Source

`v4.6.4`

Compare Source

alexcrichton/filetime (filetime)

`v0.2.29`

Compare Source

`v0.2.28`

Compare Source

async-rs/futures-timer (futures-timer)

`v3.0.4`

Compare Source

Bug Fixes

Handle potential overflow gracefully (#68)

Changes

Upgrade dependencies (#72)
cfg-gate wasm dependencies for wasm32 targets (#75)
Fix compilation warnings (#83)

GitoxideLabs/gitoxide (gix-transport)

`v0.57.1`: gix-transport v0.57.1

Compare Source

Commit Statistics

7 commits contributed to the release over the course of 28 calendar days.
28 days passed between releases.
0 commits were understood as conventional.
0 issues like '(#ID)' were seen in commit messages

Commit Details

view details

Uncategorized
- Merge pull request #2573 from cruessler/run-gix-traverse-tests-with-sha-256 (278d7ec)
- Cleanup the justfile and automate feature tests (db7b97b)
- Merge pull request #2568 from GitoxideLabs/dependabot/cargo/cargo-56d6b174d8 (ab2fee1)
- Update crates to Rust 2024 edition (2cb17b2)
- Remove rust_2018_idioms lint declarations (e10d5f6)
- Raise MSRV for hash dependency updates (3675a8d)
- Merge pull request #2546 from GitoxideLabs/fix-2545 (adb8328)

sunng87/handlebars-rust (handlebars)

`v6.4.1`

Compare Source

[Fixed] Allow using @partial-block with block include and fallback template [#752]

hyperium/http (http)

`v1.4.1`

Compare Source

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
Fix Extend for HeaderMap to clamp max size hint and not overflow.
Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

BurntSushi/jiff (jiff)

`v0.2.28`

===================
This is a small release with a fix for test failures on 32-bit targets in
no-alloc environments.

Bug fixes:

#573:
Fix test failure on 32-bit targets in no-alloc environments.

`v0.2.27`

===================
This is a small release with a bug fix for build errors on Windows for very old
versions of Rust.

Bug fixes:

#566:
Fix build error on Windows for very old versions of Rust (e.g., 1.71).

`v0.2.26`

Compare Source

===================
This release has a couple enhancements.

Firstly, Jiff now uses windows-link for calling FFI routines on Windows
instead of windows-sys. Using windows-link means less churn and fewer
duplicates in the dependency graph.

Secondly, a new jiff-sqlx 0.2.0 release has been put out to support
sqlx 0.9.0.

Enhancements:

#538:
Replace use of windows-sys with windows-link and inline bindings.
#561:
Update jiff-sqlx to use sqlx 0.9.0 and release jiff-sqlx 0.2.0.

Bug fixes:

#548:
Absolutetize incorrect relative size terms in the documentation of RoundMode.

`v0.2.25`

Compare Source

===================
This release updates Jiff's bundled copy of the [IANA Time Zone Database]
to 2026b. See the 2026b release announcement for more details.

rust-lang/git2-rs (libgit2-sys)

`v0.18.5`

Compare Source

`v0.18.4`

Compare Source

0.20.4...main

Added

Added experimental SHA256 repository support behind the new unstable-sha256 Cargo feature,
along with *_ext API variants that accept an ObjectFormat.
#1206
Added opts::set_cache_max_size() and opts::get_cached_memory().
#1188
Added Repository::object_format() and a new ObjectFormat enum.
#1204
Added Repository::set_config().
#1208
Added merge_file() along with MergeFileInput.
#1210
Added Repository::refdb_compress() for packing loose refs.
#1221
Added public Refdb type, along with Repository::refdb() and Repository::set_refdb(). Repository::refdb_compress() now delegates to Refdb::compress().
#1228
Added Revspec::into_objects().
#1230
Added BlameHunk::final_committer(), BlameHunk::orig_committer(), BlameHunk::summary(), and BlameHunk::summary_bytes().
#1231
Implemented Clone for Reference.
#1233
Added Repository::author_from_env() and Repository::committer_from_env().
#1237
Added impl From<Utf8Error> for Error.
#1239

Changed

❗ The ssh, https, and cred Cargo features are no longer enabled by default.
Previously default = ["ssh", "https"]; now default = [].
Enable them explicitly if you rely on credential helpers or transport support.
#1168
❗ CredentialHelper and the url dependency are now gated behind the new cred Cargo feature.
Enabling ssh or https transitively enables cred.
#1168
❗ Updated to the 2021 edition.
#1173
❗ Many string accessors that previously returned Option<&str>
now return Result<&str, Error> or Result<Option<&str>, Error>,
so callers can distinguish a missing value from a non-UTF-8 one.
#1241
❗ BlameHunk::final_signature, BlameHunk::final_committer, BlameHunk::orig_signature, and BlameHunk::orig_committer
now return Option to avoid segfaults when signature information is missing.
#1254
Bumped requirement to libgit2-sys 0.18.4, which updates libgit2 to 1.9.3.
#1242

Fixed

Fixed MergeOptions::skip_reuc() to use the correct GIT_MERGE_SKIP_REUC flag.
#1194
Repository::submodules() now returns an Error when the underlying git_submodule_lookup() call to libgit2 fails, rather than panicking with a failed assertion.
#1220
Reference::is_valid_name() now propagates errors from CString conversion instead of panicking.
#1229
Fixed Remote::list() to return an empty list instead of erroring
when the remote advertises no refs.
#1250
ReferenceNames now returns an Err for non-UTF-8 branch names instead of panicking.
#1239

Documentation

Added note regarding potentially confusing behavior of git_checkout_head.
#1149
Added comments describing the IndexAddOption flags.
#1163
Updated README note about the ssh feature.
#1187
Improved function docs for Repository::tag_foreach().
#1190
Fixed doc comment typo in StatusOptions.
#1199
Fixed missing period in module documentation.
#1219
Small wording fix in Signature::from_raw_const() docs.
#1222
Replaced discussion of missing gist in README.
#1223
Documented the bitflag methods for checking flags.
#1224
Clarified CheckoutBuilder::update_index() documentation.
#1232
Added more missing documentation.
#1235
Fixed typo in Repository::stash_save_ext() docs.
#1245
Added example showing retrieval of the latest commit for a file.
#1243
Replaced comma with period in CheckoutBuilder::refresh() docs.
#1252

Internals

Dropped civet/conduit from dev-dependencies.
#1170
Updated dependencies.
#1171
Fixed lockfile verification in CI.
#1177
Updated CI and documentation to cover feature combinations.
#1182
Listed all examples that may need HTTP and SSH.
#1196
Allowed publishing from any ref in the publish workflow.
#1198
Bumped time from 0.3.41 to 0.3.47.
#1215
Added end-to-end test for branch name on initialization.
#1244
Added end-to-end test for stash count.
#1246
Added end-to-end tests demonstrating use of Repository::statuses().
#1251
Internal refactors preparing for experimental SHA256 OID support.
#1201
#1205

BurntSushi/memchr (memchr)

`v2.8.1`

Compare Source

rust-openssl/rust-openssl (openssl)

`v0.10.80`

Compare Source

What's Changed

Prefer Homebrew openssl@4 and stop looking for openssl@1.1 by @alex in #2633
Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @alex in #2638
Release openssl 0.10.80 and openssl-sys 0.9.116 by @alex in #2639

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

`v0.10.79`

Compare Source

What's Changed

Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #2610
Try to fix OpenSSL 1.1.0l download by @botovq in #2614
Require &mut BigNumContextRef for EcPointRef mul/invert by @alex in #2615
Fix UB in EcGroupRef::generator on groups without a generator by @alex in #2617
Replace use libc::*; with targeted imports in openssl-sys by @alex in #2618
Add PKeyRef::is_a and KeyType for name-based key identification by @reaperhulk in #2619
Add PKey::{public,private}_key_from_raw_bytes_ex by @reaperhulk in #2620
Bump MSRV to 1.80 by @reaperhulk in #2622
Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @reaperhulk in #2623
Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @reaperhulk in #2621
parallelize more builds in CI for cold caches by @reaperhulk in #2625
Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @reaperhulk in #2626
Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @alex in #2624
Bind OSSL_PARAM_modified and use it for seed_into by @reaperhulk in #2628
Add PkeyCtxRef::set_context_string for ML-DSA by @reaperhulk in #2629
Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @alex in #2631
Fix output buffer overflow for AES key-wrap-with-padding ciphers by @alex in #2630
Release openssl 0.10.79 and openssl-sys 0.9.115 by @reaperhulk in #2632

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

stanislav-tkach/os_info (os_info)

`v3.15.0`

Compare Source

KDE neon support has been added. (#433)
Hurd support has been added. (#434)
Bazzite support has been added. (#435)
The codename detection from files has been fixed. (#436)

raphlinus/pulldown-cmark (pulldown-cmark)

`v0.13.4`: 0.13.4

Compare Source

Fix panic in specific cases with TightParagraph.

What's Changed

fix: panic in parser iterator for TightParagraph in some cases by @Martin1887 in pulldown-cmark#1096

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.3...v0.13.4

serde-rs/json (serde_json)

`v1.0.150`

Compare Source

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

assert-rs/snapbox (snapbox)

`v1.2.2`

Compare Source

composefs/tar-rs (tar)

`v0.4.46`

Compare Source

Security

archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm) by @cgwalters in #454

Other changes

ci: Fix and re-enable reverse dependency testing by @cgwalters in #444
Update astral-tokio-tar requirement from 0.5 to 0.6 by @dependabot[bot] in #446
Update some links by @atouchet in #445
Add support of absolute paths by @zxvfc in #426
docs: Expand notes on concurrent mutations and following symlinks by @cgwalters in #453
Update repo links by @cgwalters in #451
ci: Add crates.io trusted publishing workflow by @cgwalters in #456
Release 0.4.46 by @cgwalters in #455

New Contributors

@dependabot[bot] made their first contribution in #446
@atouchet made their first contribution in #445
@zxvfc made their first contribution in #426

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

toml-rs/toml (toml_edit)

`v0.25.12`

Compare Source

winnow-rs/winnow (winnow)

`v1.0.3`

Compare Source

Fixes

Remove unused AsBStr bound on ascii::float

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 5am on the first day of the month"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

rustbot · 2026-06-01T00:10:36Z

r? @weihanglo

rustbot has assigned @weihanglo.
They will have a look at your PR within the next two weeks and either review your PR or reassign to another reviewer.

Use r? to explicitly pick a reviewer

Why was this reviewer chosen?

The reviewer was selected based on:

Owners of files modified in this PR: @ehuss, @epage, @weihanglo
@ehuss, @epage, @weihanglo expanded to ehuss, epage, weihanglo
Random selection from ehuss, epage, weihanglo

Update cargo submodule 14 commits in fbb61be30e5f9ac3a6ad58e56a5c0f5db2d2b3ef..0b1123a48825309b697312b44fdb64b3df00c958 2026-05-26 15:08:03 +0000 to 2026-06-01 21:20:28 +0000 - chore(deps): update rust crate git2 to 0.21.0 (rust-lang/cargo#17060) - chore(deps): update compatible (rust-lang/cargo#17057) - fix(util): constant type for Redox OS (rust-lang/cargo#17064) - chore(deps): update crate-ci/typos action to v1.47.0 (rust-lang/cargo#17059) - chore(deps): update embarkstudios/cargo-deny-action action to v2.0.20 (rust-lang/cargo#17058) - chore(deps): update cargo-semver-checks to v0.48.0 (rust-lang/cargo#17054) - chore: bump to 0.99.0; update changelog (rust-lang/cargo#17049) - Bump cargo-util-schemas to 0.14.2 (rust-lang/cargo#17048) - feat: Add edition for scripts anytime we mutate the manifest (rust-lang/cargo#17038) - docs: clarify on crate removal post RFC 3660 (rust-lang/cargo#17036) - feat: Add --output-format=json to cargo doc as an unstable option (rust-lang/cargo#17025) - feat(diag): Add the 'cargo::default' group (rust-lang/cargo#17033) - fix(add): Ensure erros are lower case (rust-lang/cargo#17037) - fix(diag): Report summaries for unused_deps (rust-lang/cargo#17034)

chore(deps): update compatible

810206e

rustbot added the S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. label Jun 1, 2026

rustbot assigned weihanglo Jun 1, 2026

weihanglo approved these changes Jun 1, 2026

View reviewed changes

weihanglo added this pull request to the merge queue Jun 1, 2026

Merged via the queue into master with commit 8b241a6 Jun 1, 2026
31 checks passed

weihanglo deleted the renovate/compatible branch June 1, 2026 18:53

rustbot removed the S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. label Jun 1, 2026

rustbot mentioned this pull request Jun 1, 2026

feat(git): SHA256 repository support #16939

Draft

weihanglo mentioned this pull request Jun 3, 2026

Update cargo submodule rust-lang/rust#157349

Merged

rustbot added this to the 1.98.0 milestone Jun 3, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update compatible#17057

chore(deps): update compatible#17057
weihanglo merged 1 commit into
masterfrom
renovate/compatible

renovate Bot commented Jun 1, 2026 •

edited

Loading

Uh oh!

rustbot commented Jun 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jun 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixed

Bug Fixes

Changes

v0.57.1: gix-transport v0.57.1

Commit Statistics

Commit Details

Added

Changed

Fixed

Documentation

Internals

What's Changed

What's Changed

v0.13.4: 0.13.4

What's Changed

Security

Other changes

New Contributors

Fixes

Configuration

Uh oh!

rustbot commented Jun 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Jun 1, 2026 •

edited

Loading

`v0.57.1`: gix-transport v0.57.1

`v0.13.4`: 0.13.4