Skip to content

chore(deps): bump the rust-patch group across 1 directory with 15 updates - #841

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-patch-763f9fe71f
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-patch-763f9fe71f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-patch group with 15 updates in the / directory:

Package From To
crossbeam-channel 0.5.16 0.5.17
log 0.4.33 0.4.34
thiserror 2.0.18 2.0.20
fontdue 0.9.3 0.9.4
rustls 0.23.41 0.23.44
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.151
tobj 4.0.4 4.0.5
bytemuck 1.25.0 1.25.2
rcgen 0.14.8 0.14.10
quote 1.0.46 1.0.47
proc-macro2 1.0.106 1.0.107
anyhow 1.0.103 1.0.104
schemars 1.2.1 1.2.2
futures-util 0.3.32 0.3.34

Updates crossbeam-channel from 0.5.16 to 0.5.17

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.17

  • Fix UB in bounded channel when SelectedOperation is leaked. (#1295)
  • Fix behavior inconsistency on already received case in at(). (#1296)
  • Handle overflow in bounded channel initialization. (#1301)
  • Use 64-bit index on 32-bit platforms if 64-bit atomic is available. (#1321)
  • Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)
Commits
  • 2920c98 Prepare for the next release
  • 808b75a ci: Update codegen job
  • 46774e0 channel: Document that send_timeout sends an available message even if the ti...
  • 89a3fe4 epoch: Make Shared::null const
  • 383d74a Use *::MAX associated constants
  • a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
  • a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
  • 94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
  • 30e5963 epoch: Add missing fence emulation for tsan
  • 708a6bd Handle overflow in bounded channel/queue initialization (#1301)
  • Additional commits viewable in compare view

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

Updates thiserror from 2.0.18 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

  • Update to syn 3
Commits
  • b1d5db5 Release 2.0.20
  • c4c3ebd Merge pull request #454 from dtolnay/clippy
  • 2266152 Suppress redundant_field_names clippy lint
  • 2901cfd Raise minimum tested compiler to rust 1.88
  • aa9d91f Update ui tests for version 2.0.19
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • Additional commits viewable in compare view

Updates fontdue from 0.9.3 to 0.9.4

Changelog

Sourced from fontdue's changelog.

[0.9.4] - 2026-07-29

Fixed

  • Fix soundness issue #172
Commits

Updates rustls from 0.23.41 to 0.23.44

Commits
  • 64ad386 Bump version to 0.23.44
  • 1efbf66 bogo: remove PostQuantum setup
  • e78162f aws-lc-rs: add support for ML-DSA signatures
  • d880772 bogo: extract Options::provider() helper
  • 87201d6 bogo: force all callers to get provider from Options
  • 93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
  • bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
  • eb57688 tls12: require known signature algorithm
  • e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
  • 06a546d bogo: take latest
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates tobj from 4.0.4 to 4.0.5

Release notes

Sourced from tobj's releases.

4.0.5

What's Changed

New Contributors

Full Changelog: Twinklebear/tobj@4.0.4...4.0.5

Commits
  • a54fea9 bump
  • 076344c Merge pull request #78 from GiGainfosystems/fix_parsing_of_w_component
  • efe0d0a Accept either a w coordinate component or an RGB color
  • 245ccea Merge pull request #76 from GiGainfosystems/cargo_fmt_all
  • 06f0f01 Run cargo +nightly fmt --all
  • See full diff in compare view

Updates bytemuck from 1.25.0 to 1.25.2

Changelog

Sourced from bytemuck's changelog.

1.25.2

  • implement NoUninit for char, bool, NonZero* arrays

1.25.1

1.25

1.24

1.23.2

  • bump derive minimum version.

1.23.1

  • Added a windows-only ZeroableInOption impl for "stdcall" functions.

1.23

  • impl_core_error crate feature adds core::error::Error impl.
  • More ZeroableInOption impls.

1.22

  • Add the pod_saturating feature, which adds Pod impls for Saturating<T> when T is already Pod.
  • A bump in the minimum bytemuck_derive dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient cargo.lock file sitting around.
  • Adds Send and Sync impls to BoxBytes.

1.21

  • Implement Pod and Zeroable for core::arch::{x86, x86_64}::__m512, __m512d and __m512i without nightly. Requires Rust 1.72, and is gated through the avx512_simd cargo feature.
  • Allow the use of must_cast_mut and must_cast_slice_mut in const contexts. Requires Rust 1.83, and is gated through the must_cast_extra cargo feature.
  • internal: introduced the maybe_const_fn macro that allows defining some function to be const depending upon some cfg predicate.

... (truncated)

Commits

Updates rcgen from 0.14.8 to 0.14.10

Release notes

Sourced from rcgen's releases.

0.14.10

What's Changed

0.14.9

Previous versions generated DER that is strictly incompatible with the spec, writing an explicit false value for IsCa::ExplicitNoCa where this should be omitted (as it's the default).

What's Changed

Commits
  • f4a3b16 Bump version to 0.14.10
  • dea3d4d Upgrade to botan 0.13
  • 788b093 Upgrade to pem 4
  • 7ce21f4 Take advantage of stable ML-DSA in aws-lc-rs
  • e2dba45 Remove unused RSASSA-PSS signature algorithm
  • 37070de Omit reasonCode unspecified(0) from CRL entry extensions
  • b247a87 Write extensions for certs that only set KeyUsage or CRLDP
  • 85eafdd Reject empty CRL distribution point URIs
  • 3a99b50 Encode CRL invalidityDate as GeneralizedTime
  • 7ca88d2 rcgen: bump version to 0.14.9
  • Additional commits viewable in compare view

Updates quote from 1.0.46 to 1.0.47

Release notes

Sourced from quote's releases.

1.0.47

  • Documentation improvements
Commits

Updates proc-macro2 from 1.0.106 to 1.0.107

Release notes

Sourced from proc-macro2's releases.

1.0.107

  • Documentation improvements
Commits
  • ed8a549 Release 1.0.107
  • d2550fb Update documentation links to syn 3
  • 0bf387d Resolve redundant_else pedantic clippy lint
  • 949d696 Update actions/upload-artifact@v6 -> v7
  • 294a2bb Update actions/checkout@v6 -> v7
  • cd46c1b Lint clippy::from_iter_instead_of_collect has been removed
  • bb38d83 Update afl fuzzer from 0.17 to 0.18
  • 0f510db Unpin CI miri toolchain
  • b3c5fe3 Pin CI miri to nightly-2026-02-11
  • 7e2a990 Raise required compiler to Rust 1.71
  • Additional commits viewable in compare view

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3
Commits

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

  • Update to syn 3 in schemars_derive
Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

  • Update to syn 3 in schemars_derive
Commits

Updates futures-util from 0.3.32 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the rust-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam) | `0.5.16` | `0.5.17` |
| [log](https://github.com/rust-lang/log) | `0.4.33` | `0.4.34` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.20` |
| [fontdue](https://github.com/mooman219/fontdue) | `0.9.3` | `0.9.4` |
| [rustls](https://github.com/rustls/rustls) | `0.23.41` | `0.23.44` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [tobj](https://github.com/Twinklebear/tobj) | `4.0.4` | `4.0.5` |
| [bytemuck](https://github.com/Lokathor/bytemuck) | `1.25.0` | `1.25.2` |
| [rcgen](https://github.com/rustls/rcgen) | `0.14.8` | `0.14.10` |
| [quote](https://github.com/dtolnay/quote) | `1.0.46` | `1.0.47` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.106` | `1.0.107` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.103` | `1.0.104` |
| [schemars](https://github.com/GREsau/schemars) | `1.2.1` | `1.2.2` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` |



Updates `crossbeam-channel` from 0.5.16 to 0.5.17
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-channel-0.5.16...crossbeam-channel-0.5.17)

Updates `log` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)

Updates `thiserror` from 2.0.18 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.20)

Updates `fontdue` from 0.9.3 to 0.9.4
- [Changelog](https://github.com/mooman219/fontdue/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mooman219/fontdue/commits)

Updates `rustls` from 0.23.41 to 0.23.44
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.41...v/0.23.44)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `tobj` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/Twinklebear/tobj/releases)
- [Commits](Twinklebear/tobj@4.0.4...4.0.5)

Updates `bytemuck` from 1.25.0 to 1.25.2
- [Changelog](https://github.com/Lokathor/bytemuck/blob/main/changelog.md)
- [Commits](Lokathor/bytemuck@v1.25.0...v1.25.2)

Updates `rcgen` from 0.14.8 to 0.14.10
- [Release notes](https://github.com/rustls/rcgen/releases)
- [Commits](rustls/rcgen@v0.14.8...v0.14.10)

Updates `quote` from 1.0.46 to 1.0.47
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.46...1.0.47)

Updates `proc-macro2` from 1.0.106 to 1.0.107
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.106...1.0.107)

Updates `anyhow` from 1.0.103 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.103...1.0.104)

Updates `schemars` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v1.2.1...v1.2.2)

Updates `futures-util` from 0.3.32 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.34)

---
updated-dependencies:
- dependency-name: crossbeam-channel
  dependency-version: 0.5.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: fontdue
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: rustls
  dependency-version: 0.23.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: tobj
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: bytemuck
  dependency-version: 1.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: rcgen
  dependency-version: 0.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: quote
  dependency-version: 1.0.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: proc-macro2
  dependency-version: 1.0.107
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: schemars
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: aramhammoudeh. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@codecov

codecov Bot commented Sep 14, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants