Skip to content

chore(deps): bump the all-cargo group across 1 directory with 44 updates - #66

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-cargo-c10cf44f50
Closed

chore(deps): bump the all-cargo group across 1 directory with 44 updates#66
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-cargo-c10cf44f50

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-cargo group with 38 updates in the / directory:

Package From To
open 5.3.5 5.4.0
uuid 1.23.3 1.24.0
anyhow 1.0.102 1.0.103
http-body-util 0.1.3 0.1.4
aws-lc-rs 1.17.0 1.17.1
bitflags 2.13.0 2.13.1
bytes 1.11.1 1.12.1
cc 1.2.63 1.2.67
http-body 1.0.1 1.1.0
hybrid-array 0.4.12 0.4.13
jobserver 0.1.34 0.1.35
libredox 0.1.17 0.1.18
log 0.4.32 0.4.33
memchr 2.8.1 2.8.3
mio 1.2.1 1.2.2
num-bigint 0.4.6 0.4.8
num-iter 0.1.45 0.1.46
quinn 0.11.9 0.11.11
quinn-udp 0.5.14 0.5.15
quote 1.0.45 1.0.46
rand 0.8.6 0.8.7
rustc-hash 2.1.2 2.1.3
rustls 0.23.40 0.23.42
rustls-pki-types 1.14.1 1.15.0
rustversion 1.0.22 1.0.23
simd_cesu8 1.1.1 1.2.0
smallvec 1.15.1 1.15.2
socket2 0.6.4 0.6.5
spin 0.9.8 0.9.9
syn 2.0.117 2.0.119
time 0.3.47 0.3.53
tinyvec 1.11.0 1.12.0
wasip2 1.0.3+wasi-0.2.9 1.0.4+wasi-0.2.12
webpki-root-certs 1.0.7 1.0.8
webpki-roots 1.0.7 1.0.8
zerocopy 0.8.52 0.8.54
zeroize 1.8.2 1.9.0
zmij 1.0.21 1.0.23

Updates open from 5.3.5 to 5.4.0

Release notes

Sourced from open's releases.

v5.4.0

New Features

  • cargo run now shows the exact commands that were tried when opening. This is useful for debugging, mainly.

Bug Fixes

  • Align WSL PowerShell invocation with Windows Pass the WSL open target to PowerShell through the OPEN_RS_TARGET environment variable instead of embedding it in the command string and escaping it as a single-quoted PowerShell value.

    This matches the safer invocation already used by the native Windows backend. Keeping the PowerShell program fixed ensures that paths and URLs are treated purely as data, even when they contain quotes, semicolons, or other PowerShell metacharacters. It also removes the need for custom PowerShell quoting and avoids converting the target through to_string_lossy() during command construction.

    Add -NonInteractive for consistency with the Windows launcher and update the WSL tests to verify both the fixed command and the unchanged environment-variable value.

  • prevent launcher option and shell injection Opening an attacker-controlled dash-leading path could be interpreted as launcher options. On Windows, cmd /c start also parsed embedded quotes and metacharacters as command language, while the legacy gnome-open fallback could load a module even after a double-dash separator.

    Add command-construction regressions for malicious option-shaped paths and Windows shell metacharacters. Use supported separators on macOS and KDE, and rewrite dash-leading relative paths for launchers without separator support. Keep Windows values out of shell syntax by passing the default target through the environment and invoking custom applications directly, with explorer.exe as a PowerShell-free fallback.

    Exclude cmd-based opening by default, while providing an explicit insecure Cargo feature for users who need compatibility it and accept their unsafe handling of untrusted input.

    Validated with default and all-feature cargo tests, clippy, and cross-target cargo check --tests for aarch64 Linux and Windows.

Commit Statistics

  • 5 commits contributed to the release.
  • 3 commits were understood as conventional.
  • 1 unique issue was worked on: #124

Commit Details

... (truncated)

Changelog

Sourced from open's changelog.

5.4.0 (2026-07-12)

New Features

  • cargo run now shows the exact commands that were tried when opening. This is useful for debugging, mainly.

Bug Fixes

  • Align WSL PowerShell invocation with Windows Pass the WSL open target to PowerShell through the OPEN_RS_TARGET environment variable instead of embedding it in the command string and escaping it as a single-quoted PowerShell value.

    This matches the safer invocation already used by the native Windows backend. Keeping the PowerShell program fixed ensures that paths and URLs are treated purely as data, even when they contain quotes, semicolons, or other PowerShell metacharacters. It also removes the need for custom PowerShell quoting and avoids converting the target through to_string_lossy() during command construction.

    Add -NonInteractive for consistency with the Windows launcher and update the WSL tests to verify both the fixed command and the unchanged environment-variable value.

  • prevent launcher option and shell injection Opening an attacker-controlled dash-leading path could be interpreted as launcher options. On Windows, cmd /c start also parsed embedded quotes and metacharacters as command language, while the legacy gnome-open fallback could load a module even after a double-dash separator.

    Add command-construction regressions for malicious option-shaped paths and Windows shell metacharacters. Use supported separators on macOS and KDE, and rewrite dash-leading relative paths for launchers without separator support. Keep Windows values out of shell syntax by passing the default target through the environment and invoking custom applications directly, with explorer.exe as a PowerShell-free fallback.

    Exclude cmd-based opening by default, while providing an explicit insecure Cargo feature for users who need compatibility it and accept their unsafe handling of untrusted input.

    Validated with default and all-feature cargo tests, clippy, and cross-target cargo check --tests for aarch64 Linux and Windows.

Commit Statistics

  • 5 commits contributed to the release.
  • 3 commits were understood as conventional.

... (truncated)

Commits
  • b5c12bd Release open v5.4.0
  • bdc3397 Merge pull request #126 from Byron/fix-wsl
  • 7265cae fix: Align WSL PowerShell invocation with Windows
  • 407b058 Merge pull request #125 from Byron/open-with-dash-dash
  • fd29861 fix: prevent launcher option and shell injection (#124)
  • 7c19c0a feat: cargo run now shows the exact commands that were tried when opening.
  • cfb39d8 Release open v5.3.6
  • 41c4cf0 Merge pull request #123 from Byron/avoid-wslview
  • 44d1d41 fix: use PowerShell instead of wslview on WSL (#122)
  • See full diff in compare view

Updates uuid from 1.23.3 to 1.24.0

Release notes

Sourced from uuid's releases.

v1.24.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.5...v1.24.0

v1.23.5

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

v1.23.4

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits
  • 6a8aeab Merge pull request #896 from uuid-rs/cargo/v1.24.0
  • e6db8ec prepare for 1.24.0 release
  • 606f236 Merge pull request #892 from weifanglab/main
  • ab848db feat(fmt): support encoding into MaybeUninit buffers
  • 5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
  • 5a7dfe5 prepare for 1.23.5 release
  • 9b4bfc8 Merge pull request #894 from geeknoid/main
  • 5acc5a5 perf: Optimize UUID hex parsing and formatting
  • 6fa1a1e feat(fmt): support encoding into MaybeUninit buffers
  • 1e5d867 Merge pull request #891 from frostyplanet/doc
  • Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Updates http-body-util from 0.1.3 to 0.1.4

Release notes

Sourced from http-body-util's releases.

http-body-util-v0.1.4

What's Changed

  • Add Fused body combinator that always returns None once completed.
  • Add BodyExt::into_stream() to convert a body into a Stream.
  • Add Full::into_inner() to get the full Buf.
  • Add InspectFrame and InspectErr combinators.
Commits

Updates aws-lc-rs from 1.17.0 to 1.17.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

  • In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

Build Improvements

Issues Being Closed

Other Merged PRs

... (truncated)

Commits
  • 741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
  • e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
  • bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
  • 93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
  • 7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
  • a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
  • 00e016a Bump actions/checkout from 6 to 7 (#1157)
  • e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
  • dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
  • 26838da rsa: report specific key rejection for invalid sizes (#1153)
  • Additional commits viewable in compare view

Updates aws-lc-sys from 0.41.0 to 0.42.0

Commits
  • 741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
  • e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
  • bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
  • 93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
  • 7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
  • a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
  • 00e016a Bump actions/checkout from 6 to 7 (#1157)
  • e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
  • dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
  • 26838da rsa: report specific key rejection for invalid sizes (#1153)
  • Additional commits viewable in compare view

Updates bitflags from 2.13.0 to 2.13.1

Release notes

Sourced from bitflags's releases.

2.13.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

Changelog

Sourced from bitflags's changelog.

2.13.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

Commits

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Commits

Updates cc from 1.2.63 to 1.2.67

Release notes

Sourced from cc's releases.

cc-v1.2.67

Other

  • Fix clippy warning (#1788)
  • Regenerate target info (#1785)
  • Add support for aarch64-unknown-linux-pauthtest target (#1713)
  • Fix nightly compilation error (#1783)

cc-v1.2.66

Other

  • Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
  • Support new QNX targets (#1775)
  • Add kache to the supported compiler wrappers (#1770)

cc-v1.2.65

Other

  • Regenerate target info (#1763)

cc-v1.2.64

Other

  • Add more bare-metal 32-bit Arm support (#1753)
  • Remove unnecessary clone (#1748)
  • Add default compiler prefixes for thumbv7a/thumbv7r/thumbv8r bare-metal targets (#1742)
Changelog

Sourced from cc's changelog.

1.2.67 - 2026-07-11

Other

  • Fix clippy warning (#1788)
  • Regenerate target info (#1785)
  • Add support for aarch64-unknown-linux-pauthtest target (#1713)
  • Fix nightly compilation error (#1783)

1.2.66 - 2026-07-05

Other

  • Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
  • Support new QNX targets (#1775)
  • Add kache to the supported compiler wrappers (#1770)

1.2.65 - 2026-06-19

Other

  • Regenerate target info (#1763)

1.2.64 - 2026-06-12

Other

  • Add more bare-metal 32-bit Arm support (#1753)
  • Remove unnecessary clone (#1748)
  • Add default compiler prefixes for thumbv7a/thumbv7r/thumbv8r bare-metal targets (#1742)
Commits

Updates http-body from 1.0.1 to 1.1.0

Commits

Updates hybrid-array from 0.4.12 to 0.4.13

Changelog

Sourced from hybrid-array's changelog.

0.4.13 (2026-06-27)

Added

  • ArraySize for U521 and U522 for NIST P-521 (#228)

#228: RustCrypto/hybrid-array#228

Commits

Updates jobserver from 0.1.34 to 0.1.35

Commits
  • 85ba04e chore: bump to 0.1.35
  • 89f2303 Merge pull request #122 from weihanglo/nix-0.31.3
  • c539363 chore: bump to nix@0.31.3
  • 6753b4d Merge pull request #120 from kpcyrd/getrandom-0.4
  • 922f23b chore: bump MSRV to 1.85
  • c28a13d Merge pull request #121 from weihanglo/ci-native-make
  • d51b4bb ci: use native GNU Make instead of building from source
  • 2195928 test: exercise both jobserver styles in make-as-server tests
  • 18d138c Update getrandom to 0.4
  • See full diff in compare view

Updates libredox from 0.1.17 to 0.1.18

Updates log from 0.4.32 to 0.4.33

Changelog

Sourced from log's changelog.

[0.4.33] - 2026-06-20

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.32...0.4.33

Commits
  • f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
  • 6a24abf prepare for 0.4.33 release
  • 87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
  • a9b5711 Review: fallback to the &str hash
  • cc89cc6 Review: fixed other comparisons
  • 920e7dc Review: fixed comparison on MaybeStaticStr
  • 0d71d3c Fixed key comparison
  • See full diff in compare view

Updates memchr from 2.8.1 to 2.8.3

Commits
  • 5fdb40c 2.8.3
  • 922c7b5 memchr: let compiler know that indexes returned by memchr fns are in bounds
  • e21e9fb arch: add unsafe to internal routines
  • 581faf0 rebar: update memchr version
  • a61ac1a 2.8.2
  • a08bf90 arch: fix undefined behavior in lower level (but public) APIs
  • b41293b rebar: update memchr to latest
  • 87467c9 impl: remove unnecessary clones in into_owned impls
  • See full diff in compare view

Updates mio from 1.2.1 to 1.2.2

Changelog

Sourced from mio's changelog.

1.2.2

Commits
  • 50ee78d Release 1.2.2
  • e7f35de Document Solaris is supported
  • 8e067d2 Poll all fd events returned by port_getn in one zero-timeout poll call
  • f6a559a Remove dead POLLRDHUP handling and avoid registering unsupported priority
  • f0249a8 Add Solaris event ports selector
  • 2e267a5 Support NuttX (#1966)
  • See full diff in compare view

Updates num-bigint from 0.4.6 to 0.4.8

Changelog

Sourced from num-bigint's changelog.

Release 0.4.8 (2026-07-04)

Contributors: @​cuviper

Release 0.4.7 (2026-07-02)

Contributors: @​cp289, @​cuviper, @​hkalbasi, @​mikem8891, @​pRizz, @​tyilo, @​xtqqczze

Commits
  • 6533005 Merge pull request #349 from cuviper/bz-alg2-step3b-0.4.x
  • bb2a48b Release 0.4.9
  • 304c801 Fix the missing part of the Burnikel-Ziegler algorithm
  • bc275d2 Add failing tests for a bug in B-Z division
  • 1d3365b Merge pull request #346 from cuviper/release-0.4.7
  • 73a7205 Release 0.4.7
  • 6e9fe33 Merge pull request #335 from cp289/sign_docs
  • 7f492e0 Apply suggestions
  • c74ae51 Merge pull request #342 from xtqqczze/readme-alternatives
  • 5904161 Merge pull request #339 from mikem8891/master
  • Additional commits viewable in compare view

Updates num-iter from 0.1.45 to 0.1.46

Changelog

Sourced from

Bumps the all-cargo group with 38 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [open](https://github.com/Byron/open-rs) | `5.3.5` | `5.4.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.24.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.3` | `0.1.4` |
| [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.17.0` | `1.17.1` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.13.0` | `2.13.1` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.63` | `1.2.67` |
| [http-body](https://github.com/hyperium/http-body) | `1.0.1` | `1.1.0` |
| [hybrid-array](https://github.com/RustCrypto/hybrid-array) | `0.4.12` | `0.4.13` |
| [jobserver](https://github.com/rust-lang/jobserver-rs) | `0.1.34` | `0.1.35` |
| libredox | `0.1.17` | `0.1.18` |
| [log](https://github.com/rust-lang/log) | `0.4.32` | `0.4.33` |
| [memchr](https://github.com/BurntSushi/memchr) | `2.8.1` | `2.8.3` |
| [mio](https://github.com/tokio-rs/mio) | `1.2.1` | `1.2.2` |
| [num-bigint](https://github.com/rust-num/num-bigint) | `0.4.6` | `0.4.8` |
| [num-iter](https://github.com/rust-num/num-iter) | `0.1.45` | `0.1.46` |
| [quinn](https://github.com/quinn-rs/quinn) | `0.11.9` | `0.11.11` |
| [quinn-udp](https://github.com/quinn-rs/quinn) | `0.5.14` | `0.5.15` |
| [quote](https://github.com/dtolnay/quote) | `1.0.45` | `1.0.46` |
| [rand](https://github.com/rust-random/rand) | `0.8.6` | `0.8.7` |
| [rustc-hash](https://github.com/rust-lang/rustc-hash) | `2.1.2` | `2.1.3` |
| [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.42` |
| [rustls-pki-types](https://github.com/rustls/pki-types) | `1.14.1` | `1.15.0` |
| [rustversion](https://github.com/dtolnay/rustversion) | `1.0.22` | `1.0.23` |
| [simd_cesu8](https://github.com/seancroach/simd_cesu8) | `1.1.1` | `1.2.0` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.15.1` | `1.15.2` |
| [socket2](https://github.com/rust-lang/socket2) | `0.6.4` | `0.6.5` |
| [spin](https://github.com/mvdnes/spin-rs) | `0.9.8` | `0.9.9` |
| [syn](https://github.com/dtolnay/syn) | `2.0.117` | `2.0.119` |
| [time](https://github.com/time-rs/time) | `0.3.47` | `0.3.53` |
| [tinyvec](https://github.com/Lokathor/tinyvec) | `1.11.0` | `1.12.0` |
| [wasip2](https://github.com/bytecodealliance/wasi-rs) | `1.0.3+wasi-0.2.9` | `1.0.4+wasi-0.2.12` |
| [webpki-root-certs](https://github.com/rustls/webpki-roots) | `1.0.7` | `1.0.8` |
| [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.7` | `1.0.8` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.52` | `0.8.54` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` |
| [zmij](https://github.com/dtolnay/zmij) | `1.0.21` | `1.0.23` |



Updates `open` from 5.3.5 to 5.4.0
- [Release notes](https://github.com/Byron/open-rs/releases)
- [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md)
- [Commits](Byron/open-rs@v5.3.5...v5.4.0)

Updates `uuid` from 1.23.3 to 1.24.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.3...v1.24.0)

Updates `anyhow` from 1.0.102 to 1.0.103
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.103)

Updates `http-body-util` from 0.1.3 to 0.1.4
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.3...http-body-util-v0.1.4)

Updates `aws-lc-rs` from 1.17.0 to 1.17.1
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@v1.17.0...v1.17.1)

Updates `aws-lc-sys` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@aws-lc-sys/v0.41.0...aws-lc-sys/v0.42.0)

Updates `bitflags` from 2.13.0 to 2.13.1
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.13.0...2.13.1)

Updates `bytes` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.1...v1.12.1)

Updates `cc` from 1.2.63 to 1.2.67
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.63...cc-v1.2.67)

Updates `http-body` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@v1.0.1...v1.1.0)

Updates `hybrid-array` from 0.4.12 to 0.4.13
- [Changelog](https://github.com/RustCrypto/hybrid-array/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/hybrid-array@v0.4.12...v0.4.13)

Updates `jobserver` from 0.1.34 to 0.1.35
- [Commits](rust-lang/jobserver-rs@0.1.34...0.1.35)

Updates `libredox` from 0.1.17 to 0.1.18

Updates `log` from 0.4.32 to 0.4.33
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.32...0.4.33)

Updates `memchr` from 2.8.1 to 2.8.3
- [Commits](BurntSushi/memchr@2.8.1...2.8.3)

Updates `mio` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/tokio-rs/mio/releases)
- [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/mio@v1.2.1...v1.2.2)

Updates `num-bigint` from 0.4.6 to 0.4.8
- [Changelog](https://github.com/rust-num/num-bigint/blob/main/RELEASES.md)
- [Commits](rust-num/num-bigint@num-bigint-0.4.6...num-bigint-0.4.8)

Updates `num-iter` from 0.1.45 to 0.1.46
- [Changelog](https://github.com/rust-num/num-iter/blob/main/RELEASES.md)
- [Commits](rust-num/num-iter@num-iter-0.1.45...num-iter-0.1.46)

Updates `quinn` from 0.11.9 to 0.11.11
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-0.11.9...quinn-0.11.11)

Updates `quinn-proto` from 0.11.14 to 0.11.16
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.14...quinn-proto-0.11.16)

Updates `quinn-udp` from 0.5.14 to 0.5.15
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-udp-0.5.14...quinn-udp-0.5.15)

Updates `quote` from 1.0.45 to 1.0.46
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.45...1.0.46)

Updates `rand` from 0.8.6 to 0.8.7
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.8.7/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.6...0.8.7)

Updates `rustc-hash` from 2.1.2 to 2.1.3
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md)
- [Commits](rust-lang/rustc-hash@v2.1.2...v2.1.3)

Updates `rustls` from 0.23.40 to 0.23.42
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.40...v/0.23.42)

Updates `rustls-pki-types` from 1.14.1 to 1.15.0
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](rustls/pki-types@v/1.14.1...v/1.15.0)

Updates `rustversion` from 1.0.22 to 1.0.23
- [Release notes](https://github.com/dtolnay/rustversion/releases)
- [Commits](dtolnay/rustversion@1.0.22...1.0.23)

Updates `simd_cesu8` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/seancroach/simd_cesu8/releases)
- [Commits](seancroach/simd_cesu8@v1.1.1...v1.2.0)

Updates `smallvec` from 1.15.1 to 1.15.2
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.15.1...v1.15.2)

Updates `socket2` from 0.6.4 to 0.6.5
- [Release notes](https://github.com/rust-lang/socket2/releases)
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/socket2/commits/v0.6.5)

Updates `spin` from 0.9.8 to 0.9.9
- [Changelog](https://github.com/zesterer/spin-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mvdnes/spin-rs/commits)

Updates `syn` from 2.0.117 to 2.0.119
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.117...2.0.119)

Updates `time` from 0.3.47 to 0.3.53
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.47...v0.3.53)

Updates `time-core` from 0.1.8 to 0.1.9
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](https://github.com/time-rs/time/commits)

Updates `time-macros` from 0.2.27 to 0.2.31
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](https://github.com/time-rs/time/commits)

Updates `tinyvec` from 1.11.0 to 1.12.0
- [Changelog](https://github.com/Lokathor/tinyvec/blob/main/CHANGELOG.md)
- [Commits](Lokathor/tinyvec@v1.11.0...v1.12.0)

Updates `wasip2` from 1.0.3+wasi-0.2.9 to 1.0.4+wasi-0.2.12
- [Commits](bytecodealliance/wasi-rs@wasip2-1.0.3...wasip2-1.0.4)

Updates `webpki-root-certs` from 1.0.7 to 1.0.8
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/1.0.7...v/1.0.8)

Updates `webpki-roots` from 1.0.7 to 1.0.8
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/1.0.7...v/1.0.8)

Updates `zerocopy` from 0.8.52 to 0.8.54
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.52...v0.8.54)

Updates `zerocopy-derive` from 0.8.52 to 0.8.54
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.52...v0.8.54)

Updates `zeroize` from 1.8.2 to 1.9.0
- [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0)

Updates `zeroize_derive` from 1.4.3 to 1.5.0
- [Commits](RustCrypto/utils@zeroize_derive-v1.4.3...zeroize_derive-v1.5.0)

Updates `zmij` from 1.0.21 to 1.0.23
- [Release notes](https://github.com/dtolnay/zmij/releases)
- [Commits](dtolnay/zmij@1.0.21...1.0.23)

---
updated-dependencies:
- dependency-name: open
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: uuid
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: anyhow
  dependency-version: 1.0.103
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: http-body-util
  dependency-version: 0.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: aws-lc-rs
  dependency-version: 1.17.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: aws-lc-sys
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: bitflags
  dependency-version: 2.13.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: bytes
  dependency-version: 1.12.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: cc
  dependency-version: 1.2.67
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: http-body
  dependency-version: 1.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: hybrid-array
  dependency-version: 0.4.13
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: jobserver
  dependency-version: 0.1.35
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: libredox
  dependency-version: 0.1.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: log
  dependency-version: 0.4.33
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: memchr
  dependency-version: 2.8.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: mio
  dependency-version: 1.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: num-bigint
  dependency-version: 0.4.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: num-iter
  dependency-version: 0.1.46
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: quinn
  dependency-version: 0.11.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: quinn-proto
  dependency-version: 0.11.16
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: quinn-udp
  dependency-version: 0.5.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: quote
  dependency-version: 1.0.46
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: rand
  dependency-version: 0.8.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: rustc-hash
  dependency-version: 2.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: rustls
  dependency-version: 0.23.42
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: rustls-pki-types
  dependency-version: 1.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: rustversion
  dependency-version: 1.0.23
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: simd_cesu8
  dependency-version: 1.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: smallvec
  dependency-version: 1.15.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: socket2
  dependency-version: 0.6.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: spin
  dependency-version: 0.9.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: syn
  dependency-version: 2.0.119
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: time
  dependency-version: 0.3.53
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: time-core
  dependency-version: 0.1.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: time-macros
  dependency-version: 0.2.31
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: tinyvec
  dependency-version: 1.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: wasip2
  dependency-version: 1.0.4+wasi-0.2.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: webpki-root-certs
  dependency-version: 1.0.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: webpki-roots
  dependency-version: 1.0.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: zerocopy
  dependency-version: 0.8.54
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: zerocopy-derive
  dependency-version: 0.8.54
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
- dependency-name: zeroize
  dependency-version: 1.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: zeroize_derive
  dependency-version: 1.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-cargo
- dependency-name: zmij
  dependency-version: 1.0.23
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 22, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/all-cargo-c10cf44f50 branch July 22, 2026 21:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants