chore(deps): bump the rust-dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #63 · ezzy1630/Terminus

dependabot · 2026-09-14T14:38:49Z

Bumps the rust-dependencies group with 7 updates in the / directory:

Package	From	To
sha2	`0.10.9`	`0.11.0`
hmac	`0.12.1`	`0.13.0`
uuid	`1.24.0`	`1.26.1`
thiserror	`1.0.69`	`2.0.20`
reqwest	`0.13.4`	`0.13.5`
keyring	`4.1.6`	`4.2.0`
rusqlite	`0.32.1`	`0.40.2`

Updates sha2 from 0.10.9 to 0.11.0

Commits

ffe0939 Release sha2 0.11.0 (#806)
8991b65 Use the standard order of the [package] section fields (#807)
3d2bc57 sha2: refactor backends (#802)
faa55fb sha3: bump keccak to v0.2 (#803)
d3e6489 sha3 v0.11.0-rc.9 (#801)
bbf6f51 sha2: tweak backend docs (#800)
155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
ed514f2 Use published version of keccak v0.2 (#799)
702bcd8 Migrate to closure-based keccak (#796)
827c043 sha3 v0.11.0-rc.8 (#794)
Additional commits viewable in compare view

Updates hmac from 0.12.1 to 0.13.0

Commits

0236c8e hmac v0.13.0 (#263)
b895e50 Migrate tests to the new blobby format (#264)
3d1440b Workspace-level lint configuration (#261)
11d4f36 hmac: use release versions of dev-dependencies (#260)
c40b82b hmac: bump sha2 dev-dependency to v0.11 (#259)
1fa0781 Cut rc.5 prereleases (#258)
a008265 hmac v0.13.0-rc.6 (#256)
da485cd Use (Reset)MacTraits (#254)
2c51e3b hmac: derive Clone instead of relying on (Reset)MacTraits (#253)
669d805 Relax Clone bounds (#250)
Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.26.1

Release notes

Sourced from uuid's releases.

v1.26.1

What's Changed

Seat the v7 counter below the version nibble by @lenamonj in uuid-rs/uuid#907

Don't panic in overflowing Timestamp to SystemTime conversion by @KodrAus in uuid-rs/uuid#909

Prepare for 1.26.1 release by @KodrAus in uuid-rs/uuid#910

New Contributors

@lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Add ContextV7::with_additional_precision_bits by @ChrisJr404 in uuid-rs/uuid#904

Prepare for 1.26.0 release by @KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

Add a serde::bytes module that encodes a Uuid as a byte string by @ChrisJr404 in uuid-rs/uuid#902

Prepare for 1.25.0 release by @KodrAus in uuid-rs/uuid#903

New Contributors

@ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

Fix non-ASCII character handling in parse diagnostics by @questfever in uuid-rs/uuid#899

Prepare for 1.24.1 release by @KodrAus in uuid-rs/uuid#900

New Contributors

@questfever made their first contribution in uuid-rs/uuid#899

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits

9f92712 Merge pull request #910 from uuid-rs/cargo/v1.26.1
d4df8f0 prepare for 1.26.1 release
5613f23 Merge pull request #909 from uuid-rs/fix/ts-conversion-overflow
fda00eb don't panic in overflowing Timestamp to SystemTime conversion
c82e88c Merge pull request #907 from lenamonj/v7-counter-placement
ac065a6 Align the counter diagram
34ec102 Seat the v7 counter below the version nibble
cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
34e4f49 don't test macros under miri
d9e7242 update nightly used for miri
Additional commits viewable in compare view

Updates thiserror from 1.0.69 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

Update to syn 3

2.0.18

Make compatible with project-level needless_lifetimes = "forbid" (#443, thanks @LucaCappelletti94)

2.0.17

Use differently named __private module per patch release (#434)

2.0.16

Add to "no-std" crates.io category (#429)

2.0.15

Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

Documentation improvements

2.0.12

Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)

2.0.11

Add feature gate to tests that use std (#409, #410, thanks @Maytha8)

2.0.10

Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @zertosh)

2.0.6

Suppress deprecation warning on generated From impls (#396)

2.0.5

Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @matt-phylum)

... (truncated)

Commits

b1d5db5 Release 2.0.20
c4c3ebd Merge pull request #454 from dtolnay/clippy
2266152 Suppress redundant_field_names clippy lint
2901cfd Raise minimum tested compiler to rust 1.88
aa9d91f Update ui tests for version 2.0.19
e13a785 Release 2.0.19
0a0e76c Update to syn 3
ec42ea7 Update actions/upload-artifact@v6 -> v7
4178c4a Update actions/checkout@v6 -> v7
7214e0e Ignore items_after_statements pedantic clippy lint in test
Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates keyring from 4.1.6 to 4.2.0

Release notes

Sourced from keyring's releases.

v4.2.0: update the CLI dependencies

This release updates the dependencies of the CLI feature so that it builds appropriate credential stores on each platform. In particular, the db-keystore requires 64-bit platforms and the Android keystore is included on Android.

What's Changed

Bump base64 from 0.23.0 to 0.23.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#346

Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#349

Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#348

Remove mimalloc feature from db-keystore. by @brotskydotcom in open-source-cooperative/keyring-rs#350

Restore the android-native-keyring-store dependency for the cli. by @brotskydotcom in open-source-cooperative/keyring-rs#351

Full Changelog: open-source-cooperative/keyring-rs@v4.1.6...v4.2.0

Commits

d18b5c8 Restore the android-native-keyring-store dependency for the cli. (#351)
ef30fb8 Restore the android-native-keyring-store dependency for the cli.
a0a5a7f Remove mimalloc feature from db-keystore. (#350)
36981e5 Remove mimalloc feature from db-keystore.
6db16c4 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#348)
19d5b62 Merge branch 'main' into dependabot/cargo/dbus-secret-service-keyring-store-1...
6ea8273 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#349)
6a3ac80 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1
659caf5 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1
ce7fee7 Bump base64 from 0.23.0 to 0.23.1 (#346)
Additional commits viewable in compare view

Updates rusqlite from 0.32.1 to 0.40.2

Release notes

Sourced from rusqlite's releases.

0.40.2

What's Changed

Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

0.40.1

What's Changed

Fix clippy warnings #1852

Bump bundled SQLite version to 3.53.2 #1853

Bump hashlink version #1855

Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

Breaking changes: Replace VTab macros by constructors #1823

Breaking changes: Fix VTab::best_index #1824

Asserts on VTab::connect aux and args #1825

Breaking changes: Fix VTab::connect / create #1826

Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829

Derive Default for SeriesTabCursor/ArrayTabCursor #1830

Update link to pre-update hook #1831

Breaking changes: Fix VTab::connect #1832

impl From for FromSqlError #1833

Breaking changes: Fix vtab::dequote #1835

Bump bundled SQLCipher to version 4.14.0 #1837

sqlite3_set_errmsg #1752

Bump sqlite3-parser version #1838

Fix UB in ToSqlOutput::from_rc #1839

Ensure miri doesn't complain #1840

Bump to actions/checkout@v6 #1842

Add support to UtcDateTime #1843, #1844

Bump bundled SQLite version to 3.53.1 #1848

Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

Fix constraints on VTab Aux data #1778, #1771

Fix docs.rs generation #1779

Fix a small typo in rollback_hook docstring #1780

Fix some warnings from Intellij #1781

Minimal doc for features #1783

Clear hooks only for owning connections #1785, #1784

Fix link to SQLite C Interface, Prepare Flags #1787

Comment functions which are not usable from a loadable extension #1789

Factorize code #1792

... (truncated)

Commits

e88f112 Prepare release
d11c76e Update main.yml
c922ca5 Lower MSRV to 1.88.0
6d3c282 Merge pull request #1856 from gwenn/0.40.1
2ba28b7 Prepare next release
a021dc7 Merge pull request #1854 from gwenn/savepoint
534a149 Merge pull request #1855 from gwenn/hashlink
6d9764f Bump hashlink version
fa574eb Use sqlite3_keyword_check
15385cc Fix SQL injection when SAVEPOINT name is tainted
Additional commits viewable in compare view

coderabbitai · 2026-09-14T14:39:09Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 34d79019-440c-4795-960e-4c44c1e618b0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

deepsource-io · 2026-09-14T14:39:50Z

DeepSource Code Review

We reviewed changes in c84c898...252c8b6 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade	Security Reliability Complexity Hygiene

Code Review Summary

Analyzer	Updated (UTC)	Details
Docker	Sep 19, 2026 5:41p.m.	Review ↗
JavaScript	Sep 19, 2026 5:41p.m.	Review ↗
Python	Sep 19, 2026 5:41p.m.	Review ↗
Rust	Sep 19, 2026 5:41p.m.	Review ↗
Shell	Sep 19, 2026 5:41p.m.	Review ↗
SQL	Sep 19, 2026 5:41p.m.	Review ↗
Secrets	Sep 19, 2026 5:41p.m.	Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

… 7 updates Bumps the rust-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` | | [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.1` | | [thiserror](https://github.com/dtolnay/thiserror) | `1.0.69` | `2.0.20` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [keyring](https://github.com/open-source-cooperative/keyring-rs) | `4.1.6` | `4.2.0` | | [rusqlite](https://github.com/rusqlite/rusqlite) | `0.32.1` | `0.40.2` | Updates `sha2` from 0.10.9 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) Updates `hmac` from 0.12.1 to 0.13.0 - [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0) Updates `uuid` from 1.24.0 to 1.26.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.0...v1.26.1) Updates `thiserror` from 1.0.69 to 2.0.20 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@1.0.69...2.0.20) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `keyring` from 4.1.6 to 4.2.0 - [Release notes](https://github.com/open-source-cooperative/keyring-rs/releases) - [Commits](open-source-cooperative/keyring-rs@v4.1.6...v4.2.0) Updates `rusqlite` from 0.32.1 to 0.40.2 - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.32.1...v0.40.2) --- updated-dependencies: - dependency-name: hmac dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: keyring dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rusqlite dependency-version: 0.40.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: thiserror dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: uuid dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 14, 2026

dependabot Bot requested a review from ezzy1630 as a code owner September 14, 2026 14:38

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 14, 2026

dependabot Bot force-pushed the dependabot/cargo/rust-dependencies-bde5dc1901 branch from d1ea831 to 252c8b6 Compare September 19, 2026 17:41

Navigation Menu

chore(deps): bump the rust-dependencies group across 1 directory with 7 updates - #63

chore(deps): bump the rust-dependencies group across 1 directory with 7 updates#63
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-bde5dc1901

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 14, 2026 •

edited

Loading

Review skipped

Uh oh!

deepsource-io Bot commented Sep 14, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.26.1

What's Changed

New Contributors

v1.26.0

What's Changed

1.25.0

What's Changed

New Contributors

v1.24.1

What's Changed

New Contributors

2.0.20

2.0.19

2.0.18

2.0.17

2.0.16

2.0.15

2.0.14

2.0.13

2.0.12

2.0.11

2.0.10

2.0.9

2.0.8

2.0.7

2.0.6

2.0.5

2.0.4

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

v4.2.0: update the CLI dependencies

What's Changed

0.40.2

What's Changed

0.40.1

What's Changed

0.40.0

What's Changed

0.39.0

What's Changed

Uh oh!

coderabbitai Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

deepsource-io Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DeepSource Code Review

PR Report Card

Code Review Summary

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

coderabbitai Bot commented Sep 14, 2026 •

edited

Loading

deepsource-io Bot commented Sep 14, 2026 •

edited

Loading