Skip to content

deps(deps): bump the rust-minor-patch group across 1 directory with 19 updates - #121

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-640de97273
Closed

deps(deps): bump the rust-minor-patch group across 1 directory with 19 updates#121
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-640de97273

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the rust-minor-patch group with 13 updates in the / directory:

Package From To
reqwest 0.13.4 0.13.5
bitflags 2.13.1 2.13.2
console 0.16.4 0.16.6
crc32fast 1.5.1 1.5.2
cxx 1.0.200 1.0.202
encoding_rs 0.8.35 0.8.41
jiff 0.2.35 0.2.37
jiff-core 0.1.0 0.1.1
libredox 0.1.23 0.1.24
rustls 0.23.43 0.23.44
smallvec 1.16.0 1.16.1
toml_edit 0.25.13+spec-1.1.0 0.25.15+spec-1.1.0
zerocopy 0.8.56 0.8.57

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.
Commits
  • de55373 v0.13.5
  • 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
  • 9f06fd2 docs: improve description of JSON method (#3082)
  • 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
  • ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
  • 4e9a3c7 chore: add pull request template for human-written content
  • 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
  • 221abe9 chore: Remove unnecessary clones and a cast (#3071)
  • 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
  • fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
  • Additional commits viewable in compare view

Updates bitflags from 2.13.1 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Commits
  • 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
  • 5822493 prepare for 2.13.2 release
  • 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
  • 2c0b042 re-pull const declarations outside of nested const
  • c3f8d31 Merge pull request #494 from DanielEScherzer/flags-docs-example
  • 0fc3762 Flags: adjust order of elements in manual implementation example
  • See full diff in compare view

Updates console from 0.16.4 to 0.16.6

Release notes

Sourced from console's releases.

0.16.6

What's Changed

0.16.5

What's Changed

Commits
  • 4329b77 Bump version to 0.16.6
  • bdf46b0 utils: wrap tests in module
  • 4f54213 fix: measure the truncation tail in visible columns
  • ed342d0 test: consolidate text width regression coverage
  • 48b99e9 perf: accelerate printable ASCII text width
  • abf0358 Fix truncate_str panicking mid-character without ansi-parsing
  • ac3cb73 Bump version to 0.16.5
  • 97a91ae ansi: strip OSC and DCS sequences
  • See full diff in compare view

Updates crc32fast from 1.5.1 to 1.5.2

Commits

Updates cxx from 1.0.200 to 1.0.202

Release notes

Sourced from cxx's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates cxx-build from 1.0.200 to 1.0.202

Release notes

Sourced from cxx-build's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates cxxbridge-cmd from 1.0.200 to 1.0.202

Release notes

Sourced from cxxbridge-cmd's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates cxxbridge-flags from 1.0.200 to 1.0.202

Release notes

Sourced from cxxbridge-flags's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates cxxbridge-macro from 1.0.200 to 1.0.202

Release notes

Sourced from cxxbridge-macro's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates encoding_rs from 0.8.35 to 0.8.41

Commits
  • 0860491 Increment version number to 0.8.41
  • 2e9ea61 Document multiversion 0.9.0 and syn version
  • 6667988 build(deps): accept multiversion 0.9.0
  • 662cb42 Allow split_u16_stride_mut as dead code
  • 55f2530 Increment version number to 0.8.40
  • 71ae1c0 Mention defense in depth when writing to &mut str
  • 12790ab Remove remarks about a standard library bug that has been worked around
  • d477c2a Inline asm not stable on powerpc/powerpc64 at MSRV
  • 6c2fb49 Work around slow _mm_packus_epi16 in Rust 1.96 through 1.98, inclusive
  • 9451175 Zero the output slice upon panic in functions that write to &mut str
  • Additional commits viewable in compare view

Updates jiff from 0.2.35 to 0.2.37

Changelog

Sourced from jiff's changelog.

0.2.37 (2026-09-12)

This is a redux release of 0.2.36 that fixes a compilation bug.

Bug fixes:

  • #647: Fixes a compilation bug due to incorrect include paths.

0.2.36 (2026-09-12)

This release has a couple bug fixes and adds opt-in integration with the arbitrary crate.

Enhancements:

  • #631: Add optional Arbitrary trait implementations from the arbitrary crate.

Bug fixes:

  • #617: Fixes a bug in jiff_core::tz::Offset checked subtraction routine.
  • #627: Use serialize_some for optional Serde helpers in jiff::fmt::serde.
Commits

Updates jiff-core from 0.1.0 to 0.1.1

Changelog

Sourced from jiff-core's changelog.

0.1.19 (2025-01-02)

This releases includes a UTF-8 related bug fix and a few enhancements.

Firstly, a Span's default Display implementation now writes uppercase unit designator labels. That means you'll get P1Y2M3DT4H5M6S instead of P1y2m3dT4h5m6s by default. You can restore previous behavior via jiff::fmt::temporal::SpanPrinter::lowercase. This change was made to improve interoperability.

Secondly, SignedDuration now supports rounding via SignedDuration::round. Note that it only supports rounding time units (hours or smaller). In order to round with calendar units, you'll still need to use a Span.

Enhancements:

  • #130: Document value ranges for methods like year, day, hour and so on.
  • #187: Add a rounding API (for time units only) on SignedDuration.
  • #190: Span and SignedDuration now use uppercase unit designator labels in their default ISO 8601 Display implementation.

Bug fixes:

  • #155: Relax strftime format strings from ASCII-only to all of UTF-8.

0.1.18 (2024-12-31)

This release includes a few minor enhancements. Namely, the ability to iterate over time zone transitions (in the future or the past), and some improvements to failure modes when Timestamp and Span arithmetic fails.

Enhancements:

  • #144: Add APIs for iterating over the transitions of a time zone.
  • #145: Improve docs and error messages around fallible Timestamp arithmetic.

0.1.17 (2024-12-31)

This release enhances Jiff's support for no_std environments by making its alloc feature optional. When alloc is disabled, only fixed offset time zones are supported and error messages are significantly degraded. If you have core-only use cases for Jiff, I'd love to hear about them on the issue tracker.

... (truncated)

Commits

Updates jiff-static from 0.2.35 to 0.2.37

Changelog

Sourced from jiff-static's changelog.

0.2.37 (2026-09-12)

This is a redux release of 0.2.36 that fixes a compilation bug.

Bug fixes:

  • #647: Fixes a compilation bug due to incorrect include paths.

0.2.36 (2026-09-12)

This release has a couple bug fixes and adds opt-in integration with the arbitrary crate.

Enhancements:

  • #631: Add optional Arbitrary trait implementations from the arbitrary crate.

Bug fixes:

  • #617: Fixes a bug in jiff_core::tz::Offset checked subtraction routine.
  • #627: Use serialize_some for optional Serde helpers in jiff::fmt::serde.
Commits

Updates libredox from 0.1.23 to 0.1.24

Updates rustls from 0.23.43 to 0.23.44

Commits
  • 64ad386 Bump version to 0.23.44
  • 1efbf66 bogo: remove PostQuantum setup
  • e78162f aws-lc-rs: add support for ML-DSA signatures
  • d880772 bogo: extract Options::provider() helper
  • 87201d6 bogo: force all callers to get provider from Options
  • 93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
  • bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
  • eb57688 tls12: require known signature algorithm
  • e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
  • 06a546d bogo: take latest
  • Additional commits viewable in compare view

Updates smallvec from 1.16.0 to 1.16.1

Release notes

Sourced from smallvec's releases.

v1.16.1

What's Changed

New Contributors

Full Changelog: servo/rust-smallvec@v1.16.0...v1.16.1

Commits

Updates toml_edit from 0.25.13+spec-1.1.0 to 0.25.15+spec-1.1.0

Commits
  • 8e1d5a8 chore: Release
  • 6098580 docs: Update changelog
  • 27e33c7 perf: reduce allocations dumping array-heavy documents (#1216)
  • e92e2a3 perf: Avoid boxed iterators in document output
  • ee351e7 test: Benchmark rendering many arrays
  • 572c005 chore: Release
  • 66d0c53 docs: Update changelog
  • 07af4e7 perf: Reduce allocations in toml_edit parsing and dumping (#1215)
  • 0ff90db perf(display): Write encoded strings directly
  • efb2536 perf(display): Move generated representation strings
  • Additional commits viewable in compare view

Updates zerocopy from 0.8.56 to 0.8.57

Release notes

Sourced from zerocopy's releases.

v0.8.57

What's Changed

New Contributors

Full Changelog: google/zerocopy@v0.8.56...v0.8.57

Commits
  • 0c90b11 Release 0.8.57 (#3660)
  • 52869eb [CI] Bump the all-actions group with 4 updates (#3644)
  • 7f1bdfa Qualify KnownLayout metadata extraction (#3625)
  • 94f0da7 Preserve source bytes after failed try_transmute (#3634)
  • 2dad389 Harden V5 staged runtime and recovery (#3607)
  • a186c9e Authenticate V5 review evidence through aggregation (#3604)
  • 102b4ee Make the V5 diagnostic harness executable and fail closed (#3603)
  • a971be2 Draft and validate the V5 diagnostic-prequalification harness (#3601)
  • f859d74 Harden V5 evaluation and terminal confirmation (#3537)
  • 34f2b6f Require evidence-bearing proof kernels in unsafe Rust V5 (#3536)
  • Additional commits viewable in compare view

Updates zerocopy-derive from 0.8.56 to 0.8.57

Release notes

Sourced from zerocopy-derive's releases.

v0.8.57

What's Changed

@dependabot
deps(deps): bump the rust-minor-patch group across 1 directory with 1…
dd53661 
…9 updates

Bumps the rust-minor-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.13.1` | `2.13.2` |
| [console](https://github.com/console-rs/console) | `0.16.4` | `0.16.6` |
| [crc32fast](https://github.com/srijs/rust-crc32fast) | `1.5.1` | `1.5.2` |
| [cxx](https://github.com/dtolnay/cxx) | `1.0.200` | `1.0.202` |
| [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.35` | `0.8.41` |
| [jiff](https://github.com/BurntSushi/jiff) | `0.2.35` | `0.2.37` |
| [jiff-core](https://github.com/BurntSushi/jiff) | `0.1.0` | `0.1.1` |
| libredox | `0.1.23` | `0.1.24` |
| [rustls](https://github.com/rustls/rustls) | `0.23.43` | `0.23.44` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.0` | `1.16.1` |
| [toml_edit](https://github.com/toml-rs/toml) | `0.25.13+spec-1.1.0` | `0.25.15+spec-1.1.0` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.56` | `0.8.57` |



Updates `reqwest` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5)

Updates `bitflags` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.13.1...2.13.2)

Updates `console` from 0.16.4 to 0.16.6
- [Release notes](https://github.com/console-rs/console/releases)
- [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md)
- [Commits](console-rs/console@0.16.4...0.16.6)

Updates `crc32fast` from 1.5.1 to 1.5.2
- [Commits](srijs/rust-crc32fast@v1.5.1...v1.5.2)

Updates `cxx` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `cxx-build` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `cxxbridge-cmd` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `cxxbridge-flags` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `cxxbridge-macro` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `encoding_rs` from 0.8.35 to 0.8.41
- [Commits](hsivonen/encoding_rs@v0.8.35...v0.8.41)

Updates `jiff` from 0.2.35 to 0.2.37
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/jiff-static-0.2.37/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-static-0.2.35...jiff-static-0.2.37)

Updates `jiff-core` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-core-0.1.0...jiff-core-0.1.1)

Updates `jiff-static` from 0.2.35 to 0.2.37
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/jiff-static-0.2.37/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-static-0.2.35...jiff-static-0.2.37)

Updates `libredox` from 0.1.23 to 0.1.24

Updates `rustls` from 0.23.43 to 0.23.44
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.43...v/0.23.44)

Updates `smallvec` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.0...v1.16.1)

Updates `toml_edit` from 0.25.13+spec-1.1.0 to 0.25.15+spec-1.1.0
- [Commits](toml-rs/toml@v0.25.13...v0.25.15)

Updates `zerocopy` from 0.8.56 to 0.8.57
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.56...v0.8.57)

Updates `zerocopy-derive` from 0.8.56 to 0.8.57
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.56...v0.8.57)

---
updated-dependencies:
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: bitflags
  dependency-version: 2.13.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: console
  dependency-version: 0.16.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: crc32fast
  dependency-version: 1.5.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxx
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxx-build
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-cmd
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-flags
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-macro
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: encoding_rs
  dependency-version: 0.8.41
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: jiff
  dependency-version: 0.2.37
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: jiff-core
  dependency-version: 0.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: jiff-static
  dependency-version: 0.2.37
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: libredox
  dependency-version: 0.1.24
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: rustls
  dependency-version: 0.23.44
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: smallvec
  dependency-version: 1.16.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: toml_edit
  dependency-version: 0.25.15+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: zerocopy
  dependency-version: 0.8.57
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: zerocopy-derive
  dependency-version: 0.8.57
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Sep 16, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.
See the Details below.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
cargo/bitflags 2.13.2 🟢 7.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
CI-Tests🟢 810 out of 12 merged PRs checked by a CI test -- score normalized to 8
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 5found 6 unreviewed changesets out of 12 -- score normalized to 5
Contributors🟢 1022 different organizations found -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool⚠️ 0no update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1021 commit(s) out of 30 and 3 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging⚠️ -1no published package detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 10no vulnerabilities detected
cargo/console 0.16.6 UnknownUnknown
cargo/core_detect 1.0.0 ⚠️ 2.8
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 0Found 0/9 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/crc32fast 1.5.2 🟢 4.6
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 1012 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 5/29 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxx 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxx-build 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxxbridge-cmd 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxxbridge-flags 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxxbridge-macro 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/encoding_rs 0.8.41 🟢 4.4
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 2/30 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
License🟢 9license file detected
cargo/jiff 0.2.37 UnknownUnknown
cargo/jiff-core 0.1.1 UnknownUnknown
cargo/jiff-static 0.2.37 UnknownUnknown
cargo/libredox 0.1.24 UnknownUnknown
cargo/multiversion 0.9.0 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/20 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1019 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/multiversion-macros 0.9.0 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/20 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1019 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/multiversion_no_op 1.0.0 UnknownUnknown
cargo/reqwest 0.13.5 🟢 5
Details
CheckScoreReason
Code-Review🟢 7Found 21/29 approved changesets -- score normalized to 7
Maintained🟢 1014 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/rustls 0.23.45 UnknownUnknown
cargo/smallvec 1.16.1 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/toml_edit 0.25.15+spec-1.1.0 🟢 7.8
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/16 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 10SAST tool is run on all commits
cargo/zerocopy 0.8.57 🟢 8.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Contributors🟢 10project has 10 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected
cargo/zerocopy-derive 0.8.57 🟢 8.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Contributors🟢 10project has 10 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected

Scanned Files

  • Cargo.lock

@dependabot @github

dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 17, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-minor-patch-640de97273 branch September 17, 2026 03:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants