Skip to content

chore(deps): bump the all-cargo-dependencies group across 1 directory with 12 updates - #1138

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-cargo-dependencies-e2ccbf4f2a
Open

chore(deps): bump the all-cargo-dependencies group across 1 directory with 12 updates#1138
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-cargo-dependencies-e2ccbf4f2a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-cargo-dependencies group with 12 updates in the / directory:

Package From To
base64 0.23.0 0.23.1
futures-util 0.3.33 0.3.34
http-body-util 0.1.4 0.1.5
rkyv 0.8.17 0.8.18
rustls 0.23.42 0.23.43
rustls-webpki 0.103.13 0.103.14
thiserror 2.0.19 2.0.20
time 0.3.54 0.3.55
toml 1.1.3+spec-1.1.0 1.1.4+spec-1.1.0
uuid 1.24.0 1.24.1
clap 4.6.4 4.6.6
roaring 0.11.4 0.11.5

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures
Commits

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates http-body-util from 0.1.4 to 0.1.5

Commits

Updates rkyv from 0.8.17 to 0.8.18

Commits

Updates rustls from 0.23.42 to 0.23.43

Commits
  • fcf61cd Prepare 0.23.43
  • f0dad4c Check server's proposed suite against actual offer
  • b480cc6 Test for server choosing a non-QUIC TLS1.3 suite
  • 883a44d Consider Protocol in ServerConfig::supports_version
  • c2f1fd9 Check suitability of server version in QUIC client
  • d98e1b9 Add test for server Tls13RequiredForQuic
  • e63d9bf Bound ticket age calculation
  • 79cd462 Defensiveness improvement for binder suffix arithmetic
  • 4a9f025 use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt
  • 3131e5c Accept that libcrux deps are vulnerable
  • Additional commits viewable in compare view

Updates rustls-webpki from 0.103.13 to 0.103.14

Commits

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)
Commits

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

  • Avoid underflow in DateIter::nth, ensuring correct behavior.
  • Avoid overflow when deserializing timestamps.
  • Handle out-of-bounds data when deserializing.
  • Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
  • No longer silence errors when deserializing UtcOffset.
  • OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
  • OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
Commits
  • 857d9c4 v0.3.55 release
  • 2b72fcd Precise feature gating for macro
  • c1089eb Run check-targets, miri in parallel
  • f377fad Avoid range-validated ordinal => year in cascade
  • 2eacb0a Report miscellaneous tasks, overall status
  • 29621ac Speed up CI
  • 08de7ba Fix nano-timestamp validation
  • 3c3f046 Fix copy-paste error
  • 3c0c81c Cascade errors when deserializing UtcOffset
  • c21acd5 Handle more deserializations of SignedDuration
  • Additional commits viewable in compare view

Updates toml from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0

Commits
  • beee9fe chore: Release
  • 16e2ac1 docs: Update changelog
  • 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
  • 534039c fix(serde): Deserialize Value datetimes into typed targets
  • 6e45cef test(serde): Reproduce Value datetime deserialization error
  • 4ec099f chore: Release
  • 5a47a51 docs: Update changelog
  • da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
  • 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
  • ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
  • Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.24.1

Release notes

Sourced from uuid's releases.

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits
  • 2ea38af Merge pull request #900 from uuid-rs/cargo/v1.24.1
  • 9dbeb04 prepare for 1.24.1 release
  • e113df8 Merge pull request #899 from questfever/main
  • b017765 Fix non-ASCII character handling in parse diagnostics
  • See full diff in compare view

Updates clap from 4.6.4 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • Additional commits viewable in compare view

Updates roaring from 0.11.4 to 0.11.5

Release notes

Sourced from roaring's releases.

v0.11.5

What's Changed

New Contributors

Full Changelog: RoaringBitmap/roaring-rs@v0.11.4...v0.11.5

Commits
  • 0ce3fc8 Merge pull request #364 from RoaringBitmap/upgrade-dependencies-bump-version
  • a961a04 Remove the once_cell dependency
  • 5e8445b Merge pull request #363 from youdie006/fix/359-interval-remove-boundary
  • bf2961d Bump version to v0.11.5
  • 048a8b0 Fix off-by-one that corrupts a bitmap in remove_smallest/remove_biggest
  • 27d84f5 Merge pull request #360 from silver-ymz/fix/treemap-iter-advance-across-bitmaps
  • aac2de8 Make clippy happy
  • a3d1d54 Merge pull request #362 from RoaringBitmap/std-error-for-integer-too-small
  • 9a3c33e Implement std Error for IntegerTooSmall
  • f46c0ff fix: invalid treemap iter advance
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… with 12 updates

Bumps the all-cargo-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.4` | `0.1.5` |
| [rkyv](https://github.com/rkyv/rkyv) | `0.8.17` | `0.8.18` |
| [rustls](https://github.com/rustls/rustls) | `0.23.42` | `0.23.43` |
| [rustls-webpki](https://github.com/rustls/webpki) | `0.103.13` | `0.103.14` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` |
| [time](https://github.com/time-rs/time) | `0.3.54` | `0.3.55` |
| [toml](https://github.com/toml-rs/toml) | `1.1.3+spec-1.1.0` | `1.1.4+spec-1.1.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.24.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.6` |
| [roaring](https://github.com/RoaringBitmap/roaring-rs) | `0.11.4` | `0.11.5` |



Updates `base64` from 0.23.0 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1)

Updates `futures-util` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `http-body-util` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.4...http-body-util-v0.1.5)

Updates `rkyv` from 0.8.17 to 0.8.18
- [Release notes](https://github.com/rkyv/rkyv/releases)
- [Commits](rkyv/rkyv@0.8.17...0.8.18)

Updates `rustls` from 0.23.42 to 0.23.43
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.42...v/0.23.43)

Updates `rustls-webpki` from 0.103.13 to 0.103.14
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](https://github.com/rustls/webpki/commits)

Updates `thiserror` from 2.0.19 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.19...2.0.20)

Updates `time` from 0.3.54 to 0.3.55
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.54...v0.3.55)

Updates `toml` from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.3...toml-v1.1.4)

Updates `uuid` from 1.24.0 to 1.24.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...v1.24.1)

Updates `clap` from 4.6.4 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.6)

Updates `roaring` from 0.11.4 to 0.11.5
- [Release notes](https://github.com/RoaringBitmap/roaring-rs/releases)
- [Commits](RoaringBitmap/roaring-rs@v0.11.4...v0.11.5)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: http-body-util
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: rkyv
  dependency-version: 0.8.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: rustls
  dependency-version: 0.23.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: rustls-webpki
  dependency-version: 0.103.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: time
  dependency-version: 0.3.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: toml
  dependency-version: 1.1.4+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: uuid
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
- dependency-name: roaring
  dependency-version: 0.11.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants