Skip to content

deps(deps): bump the rust-minor-patch group across 1 directory with 31 updates - #123

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-dfed1d310d
Open

deps(deps): bump the rust-minor-patch group across 1 directory with 31 updates#123
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-dfed1d310d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-minor-patch group with 31 updates in the / directory:

Package From To
ringbuf 0.5.1 0.5.2
ureq 3.4.1 3.4.2
reqwest 0.13.4 0.13.5
clap 4.6.6 4.6.7
bitflags 2.13.1 2.13.2
cc 1.4.5 1.4.6
clap_builder 4.6.6 4.6.7
clap_derive 4.6.4 4.6.7
clap_lex 1.1.0 1.1.1
console 0.16.4 0.16.6
crc32fast 1.5.1 1.5.2
cxx 1.0.200 1.0.202
cxx-build 1.0.200 1.0.202
cxxbridge-cmd 1.0.200 1.0.202
cxxbridge-flags 1.0.200 1.0.202
cxxbridge-macro 1.0.200 1.0.202
encoding_rs 0.8.35 0.8.41
jiff 0.2.35 0.2.37
jiff-core 0.1.0 0.1.1
jiff-static 0.2.35 0.2.37
libredox 0.1.23 0.1.24
lru-slab 0.1.2 0.1.3
quinn 0.11.11 0.11.12
quinn-proto 0.11.17 0.11.18
rustls 0.23.43 0.23.45
smallvec 1.16.0 1.16.1
tinyvec 1.13.2 1.13.3
toml_edit 0.25.13+spec-1.1.0 0.25.15+spec-1.1.0
ureq-proto 0.6.2 0.6.4
zerocopy 0.8.56 0.8.57
zerocopy-derive 0.8.56 0.8.57

Updates ringbuf from 0.5.1 to 0.5.2

Commits

Updates ureq from 3.4.1 to 3.4.2

Changelog

Sourced from ureq's changelog.

3.4.2

  • Bump ureq-proto to 0.6.3 (fixes network-path references in redirects)
  • Bypass pooling for request connection settings incompatible with the Agent #1201
  • Try the next resolved address on unreachable/unavailable connect errors #1195
Commits

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.
Commits
  • de55373 v0.13.5
  • 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
  • 9f06fd2 docs: improve description of JSON method (#3082)
  • 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
  • ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
  • 4e9a3c7 chore: add pull request template for human-written content
  • 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
  • 221abe9 chore: Remove unnecessary clones and a cast (#3071)
  • 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
  • fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
  • Additional commits viewable in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates bitflags from 2.13.1 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Commits
  • 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
  • 5822493 prepare for 2.13.2 release
  • 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
  • 2c0b042 re-pull const declarations outside of nested const
  • c3f8d31 Merge pull request #494 from DanielEScherzer/flags-docs-example
  • 0fc3762 Flags: adjust order of elements in manual implementation example
  • See full diff in compare view

Updates cc from 1.4.5 to 1.4.6

Release notes

Sourced from cc's releases.

cc-v1.4.6

Fixed

  • Prevent check_exe from dropping flags on the floor. (#1884)
  • update fd handling to use BorrowedFd (#1882)

Other

  • (deps) bump taiki-e/install-action from 2.87.2 to 2.87.4 (#1888)
  • Regenerate target info (#1891)
  • (deps) bump tombi-toml/setup-tombi from 1.5.0 to 1.5.1 (#1890)
  • (deps) bump release-plz/action from 0.5.131 to 0.5.132 (#1889)
  • Fix ci(test): make sure right toolchain is passed (#1892)
  • (deps) bump tombi-toml/setup-tombi from 1.2.5 to 1.5.0 (#1885)
  • (deps) bump taiki-e/install-action from 2.85.5 to 2.87.2 (#1886)
  • add toml formatting check (#1879)
Changelog

Sourced from cc's changelog.

1.4.6 - 2026-09-11

Fixed

  • Prevent check_exe from dropping flags on the floor. (#1884)
  • update fd handling to use BorrowedFd (#1882)

Other

  • (deps) bump taiki-e/install-action from 2.87.2 to 2.87.4 (#1888)
  • Regenerate target info (#1891)
  • (deps) bump tombi-toml/setup-tombi from 1.5.0 to 1.5.1 (#1890)
  • (deps) bump release-plz/action from 0.5.131 to 0.5.132 (#1889)
  • Fix ci(test): make sure right toolchain is passed (#1892)
  • (deps) bump tombi-toml/setup-tombi from 1.2.5 to 1.5.0 (#1885)
  • (deps) bump taiki-e/install-action from 2.85.5 to 2.87.2 (#1886)
  • add toml formatting check (#1879)
Commits
  • 4c76c59 chore(cc): release v1.4.6 (#1895)
  • ecdd98f chore(deps): update windows-bindgen requirement from 0.66 to 0.100 (#1896)
  • 9fea865 Add support for CUDA on Windows on ARM. (#1893)
  • 29acb75 chore(deps): bump taiki-e/install-action from 2.87.2 to 2.87.4 (#1888)
  • f0d33bb Regenerate target info (#1891)
  • 1686a3d chore(deps): bump tombi-toml/setup-tombi from 1.5.0 to 1.5.1 (#1890)
  • bd6b7d0 chore(deps): bump release-plz/action from 0.5.131 to 0.5.132 (#1889)
  • 42adfca Fix ci(test): make sure right toolchain is passed (#1892)
  • 527ec73 fix: Prevent check_exe from dropping flags on the floor. (#1884)
  • fc1fb3c chore(deps): bump tombi-toml/setup-tombi from 1.2.5 to 1.5.0 (#1885)
  • Additional commits viewable in compare view

Updates clap_builder from 4.6.6 to 4.6.7

Release notes

Sourced from clap_builder's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Changelog

Sourced from clap_builder's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Commits
  • 13f2db5 chore: Release
  • 3304fea docs: Update changelog
  • 7b2ad34 Merge pull request #6521 from r-near/feat/derive-deferred-initialization
  • 4380302 chore(deps): Update Rust crate trybuild to v1.0.120 (#6509)
  • a812461 Merge pull request #6528 from epage/template
  • 710884f style: Make clippy happy
  • ce800a3 chore: Update from _rust template
  • 78d70f3 feat(derive): Defer enum subcommand initialization
  • 2b2d881 test(derive): Cover subcommand initialization
  • 7f87020 test(derive): Build before nested introspection
  • Additional commits viewable in compare view

Updates clap_derive from 4.6.4 to 4.6.7

Release notes

Sourced from clap_derive's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap_derive's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • 13f2db5 chore: Release
  • 3304fea docs: Update changelog
  • 7b2ad34 Merge pull request #6521 from r-near/feat/derive-deferred-initialization
  • 4380302 chore(deps): Update Rust crate trybuild to v1.0.120 (#6509)
  • a812461 Merge pull request #6528 from epage/template
  • 710884f style: Make clippy happy
  • ce800a3 chore: Update from _rust template
  • 78d70f3 feat(derive): Defer enum subcommand initialization
  • 2b2d881 test(derive): Cover subcommand initialization
  • 7f87020 test(derive): Build before nested introspection
  • Additional commits viewable in compare view

Updates clap_lex from 1.1.0 to 1.1.1

Changelog

Sourced from clap_lex's changelog.

v1.1.1 (2015-07-17)

Bug Fixes

  • fixes a logic bug and allows setting Arg::number_of_values() < 2 (42b6d1fc, closes #161)
Commits
  • 13f2db5 chore: Release
  • 3304fea docs: Update changelog
  • 7b2ad34 Merge pull request #6521 from r-near/feat/derive-deferred-initialization
  • 4380302 chore(deps): Update Rust crate trybuild to v1.0.120 (#6509)
  • a812461 Merge pull request #6528 from epage/template
  • 710884f style: Make clippy happy
  • ce800a3 chore: Update from _rust template
  • 78d70f3 feat(derive): Defer enum subcommand initialization
  • 2b2d881 test(derive): Cover subcommand initialization
  • 7f87020 test(derive): Build before nested introspection
  • Additional commits viewable in compare view

Updates console from 0.16.4 to 0.16.6

Release notes

Sourced from console's releases.

0.16.6

What's Changed

0.16.5

What's Changed

Commits
  • 4329b77 Bump version to 0.16.6
  • bdf46b0 utils: wrap tests in module
  • 4f54213 fix: measure the truncation tail in visible columns
  • ed342d0 test: consolidate text width regression coverage
  • 48b99e9 perf: accelerate printable ASCII text width
  • abf0358 Fix truncate_str panicking mid-character without ansi-parsing
  • ac3cb73 Bump version to 0.16.5
  • 97a91ae ansi: strip OSC and DCS sequences
  • See full diff in compare view

Updates crc32fast from 1.5.1 to 1.5.2

Commits

Updates cxx from 1.0.200 to 1.0.202

Release notes

Sourced from cxx's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates cxx-build from 1.0.200 to 1.0.202

Release notes

Sourced from cxx-build's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates cxxbridge-cmd from 1.0.200 to 1.0.202

Release notes

Sourced from cxxbridge-cmd's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates cxxbridge-flags from 1.0.200 to 1.0.202

Release notes

Sourced from cxxbridge-flags's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates cxxbridge-macro from 1.0.200 to 1.0.202

Release notes

Sourced from cxxbridge-macro's releases.

1.0.202

  • Support build environments that limit build-script filesystem writes outside of OUT_DIR (#1760, thanks @​gudcks0305)

1.0.201

  • Specialize enable_borrowed_range and enable_view for rust::Slice<T> (#1758, thanks @​MixusMinimax)
  • Register bazel toolchains as dev dependencies (#1759)
Commits
  • 983982c Release 1.0.202
  • 552330e Touch up PR 1760
  • 3a9d010 Merge pull request 1760 from gudcks0305/codex/fix-shared-header-fallback
  • 97c1cff fix: tolerate unavailable shared header directory
  • 982aa18 Release 1.0.201
  • a543f3b Lockfile update
  • a237c37 Reformat with clang-format 22
  • eeabfb5 Move static assertions from header to source file
  • 47d9bf7 Merge pull request #1758 from MixusMinimax/slice-impl-borrowed-range-and-view
  • 5a9c2ba Merge pull request #1759 from dtolnay/bazel
  • Additional commits viewable in compare view

Updates encoding_rs from 0.8.35 to 0.8.41

Commits
  • 0860491 Increment version number to 0.8.41
  • 2e9ea61 Document multiversion 0.9.0 and syn version
  • 6667988 build(deps): accept multiversion 0.9.0
  • 662cb42 Allow split_u16_stride_mut as dead code
  • 55f2530 Increment version number to 0.8.40
  • 71ae1c0 Mention defense in depth when writing to &mut str
  • 12790ab Remove remarks about a standard library bug that has been worked around
  • d477c2a Inline asm not stable on powerpc/powerpc64 at MSRV
  • 6c2fb49 Work around slow _mm_packus_epi16 in Rust 1.96 through 1.98, inclusive
  • 9451175 Zero the output slice upon panic in functions that write to &mut str
  • Additional commits viewable in compare view

Updates jiff from 0.2.35 to 0.2.37

Changelog

Sourced from jiff's changelog.

0.2.37 (2026-09-12)

This is a redux release of 0.2.36 that fixes a compilation bug.

Bug fixes:

  • #647: Fixes a compilation bug due to incorrect include paths.

0.2.36 (2026-09-12)

This release has a couple bug fixes and adds opt-in integration with the arbitrary crate.

Enhancements:

  • #631: Add optional Arbitrary trait implementations from the arbitrary crate.

Bug fixes:

  • #617: Fixes a bug in jiff_core::tz::Offset checked subtraction routine.
  • #627: Use serialize_some for optional Serde helpers in jiff::fmt::serde.
Commits

Updates jiff-core from 0.1.0 to 0.1.1

Changelog

Sourced from jiff-core's changelog.

0.1.19 (2025-01-02)

This releases includes a UTF-8 related bug fix and a few enhancements.

Firstly, a Span's default Display implementation now writes uppercase unit designator labels. That means you'll get P1Y2M3DT4H5M6S instead of P1y2m3dT4h5m6s by default. You can restore previous behavior via jiff::fmt::temporal::SpanPrinter::lowercase. This change was made to improve interoperability.

Secondly, SignedDuration now supports rounding via SignedDuration::round. Note that it only supports rounding time units (hours or smaller). In order to round with calendar units, you'll still need to use a Span.

Enhancements:

  • #130: Document value ranges for methods like year, day, hour and so on.
  • #187: Add a rounding API (for time units only) on SignedDuration.
  • #190: Span and SignedDuration now use uppercase unit designator labels in their default ISO 8601 Display implementation.

Bug fixes:

  • #155: Relax strftime format strings from ASCII-only to all of UTF-8.

0.1.18 (2024-12-31)

This release includes a few minor enhancements. Namely, the ability to iterate over time zone transitions (in the future or the past), and some improvements to failure modes when Timestamp and Span arithmetic fails.

Enhancements:

  • #144: Add APIs for iterating over the transitions of a time zone.
  • #145: Improve docs and error messages around fallible Timestamp arithmetic.

0.1.17 (2024-12-31)

This release enhances Jiff's support for no_std environments by making its alloc feature optional. When alloc is disabled, only fixed offset time zones are supported and error messages are significantly degraded. If you have core-only use cases for Jiff, I'd love to hear about them on the issue tracker.

... (truncated)

Commits

Updates jiff-static from 0.2.35 to 0.2.37

Changelog

Sourced from jiff-static's changelog.

0.2.37 (2026-09-12)

This is a redux release of 0.2.36 that fixes a compilation bug.

Bug fixes:

  • #647: Fixes a compilation bug due to incorrect include paths.

0.2.36 (2026-09-12)

This release has a couple bug fixes and adds opt-in integration with the arbitrary crate.

Enhancements:

  • #631: Add optional Arbitrary trait implementations from the arbitrary crate.

Bug fixes:

  • #617: Fixes a bug in jiff_core::tz::Offset checked subtraction routine.

@dependabot
deps(deps): bump the rust-minor-patch group across 1 directory with 3…
cecd90c 
…1 updates

Bumps the rust-minor-patch group with 31 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ringbuf](https://github.com/agerasev/ringbuf) | `0.5.1` | `0.5.2` |
| [ureq](https://github.com/algesten/ureq) | `3.4.1` | `3.4.2` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` |
| [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.13.1` | `2.13.2` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.4.5` | `1.4.6` |
| [clap_builder](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` |
| [clap_derive](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.7` |
| [clap_lex](https://github.com/clap-rs/clap) | `1.1.0` | `1.1.1` |
| [console](https://github.com/console-rs/console) | `0.16.4` | `0.16.6` |
| [crc32fast](https://github.com/srijs/rust-crc32fast) | `1.5.1` | `1.5.2` |
| [cxx](https://github.com/dtolnay/cxx) | `1.0.200` | `1.0.202` |
| [cxx-build](https://github.com/dtolnay/cxx) | `1.0.200` | `1.0.202` |
| [cxxbridge-cmd](https://github.com/dtolnay/cxx) | `1.0.200` | `1.0.202` |
| [cxxbridge-flags](https://github.com/dtolnay/cxx) | `1.0.200` | `1.0.202` |
| [cxxbridge-macro](https://github.com/dtolnay/cxx) | `1.0.200` | `1.0.202` |
| [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.35` | `0.8.41` |
| [jiff](https://github.com/BurntSushi/jiff) | `0.2.35` | `0.2.37` |
| [jiff-core](https://github.com/BurntSushi/jiff) | `0.1.0` | `0.1.1` |
| [jiff-static](https://github.com/BurntSushi/jiff) | `0.2.35` | `0.2.37` |
| libredox | `0.1.23` | `0.1.24` |
| [lru-slab](https://github.com/Ralith/lru-slab) | `0.1.2` | `0.1.3` |
| [quinn](https://github.com/quinn-rs/quinn) | `0.11.11` | `0.11.12` |
| [quinn-proto](https://github.com/quinn-rs/quinn) | `0.11.17` | `0.11.18` |
| [rustls](https://github.com/rustls/rustls) | `0.23.43` | `0.23.45` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.0` | `1.16.1` |
| [tinyvec](https://github.com/Lokathor/tinyvec) | `1.13.2` | `1.13.3` |
| [toml_edit](https://github.com/toml-rs/toml) | `0.25.13+spec-1.1.0` | `0.25.15+spec-1.1.0` |
| [ureq-proto](https://github.com/algesten/ureq-proto) | `0.6.2` | `0.6.4` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.56` | `0.8.57` |
| [zerocopy-derive](https://github.com/google/zerocopy) | `0.8.56` | `0.8.57` |



Updates `ringbuf` from 0.5.1 to 0.5.2
- [Release notes](https://github.com/agerasev/ringbuf/releases)
- [Commits](https://github.com/agerasev/ringbuf/commits)

Updates `ureq` from 3.4.1 to 3.4.2
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@3.4.1...3.4.2)

Updates `reqwest` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5)

Updates `clap` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7)

Updates `bitflags` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.13.1...2.13.2)

Updates `cc` from 1.4.5 to 1.4.6
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.4.5...cc-v1.4.6)

Updates `clap_builder` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.6.6...v4.6.7)

Updates `clap_derive` from 4.6.4 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.6.4...v4.6.7)

Updates `clap_lex` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_lex-v1.1.0...clap_lex-v1.1.1)

Updates `console` from 0.16.4 to 0.16.6
- [Release notes](https://github.com/console-rs/console/releases)
- [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md)
- [Commits](console-rs/console@0.16.4...0.16.6)

Updates `crc32fast` from 1.5.1 to 1.5.2
- [Commits](srijs/rust-crc32fast@v1.5.1...v1.5.2)

Updates `cxx` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `cxx-build` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `cxxbridge-cmd` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `cxxbridge-flags` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `cxxbridge-macro` from 1.0.200 to 1.0.202
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.200...1.0.202)

Updates `encoding_rs` from 0.8.35 to 0.8.41
- [Commits](hsivonen/encoding_rs@v0.8.35...v0.8.41)

Updates `jiff` from 0.2.35 to 0.2.37
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/jiff-static-0.2.37/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-static-0.2.35...jiff-static-0.2.37)

Updates `jiff-core` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-core-0.1.0...jiff-core-0.1.1)

Updates `jiff-static` from 0.2.35 to 0.2.37
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/jiff-static-0.2.37/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-static-0.2.35...jiff-static-0.2.37)

Updates `libredox` from 0.1.23 to 0.1.24

Updates `lru-slab` from 0.1.2 to 0.1.3
- [Commits](https://github.com/Ralith/lru-slab/commits/v0.1.3)

Updates `quinn` from 0.11.11 to 0.11.12
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-0.11.11...quinn-0.11.12)

Updates `quinn-proto` from 0.11.17 to 0.11.18
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.17...quinn-proto-0.11.18)

Updates `rustls` from 0.23.43 to 0.23.45
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.43...v/0.23.45)

Updates `smallvec` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.0...v1.16.1)

Updates `tinyvec` from 1.13.2 to 1.13.3
- [Changelog](https://github.com/Lokathor/tinyvec/blob/main/changelog.md)
- [Commits](Lokathor/tinyvec@v1.13.2...v1.13.3)

Updates `toml_edit` from 0.25.13+spec-1.1.0 to 0.25.15+spec-1.1.0
- [Commits](toml-rs/toml@v0.25.13...v0.25.15)

Updates `ureq-proto` from 0.6.2 to 0.6.4
- [Commits](https://github.com/algesten/ureq-proto/commits)

Updates `zerocopy` from 0.8.56 to 0.8.57
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.56...v0.8.57)

Updates `zerocopy-derive` from 0.8.56 to 0.8.57
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.56...v0.8.57)

---
updated-dependencies:
- dependency-name: ringbuf
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: ureq
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: bitflags
  dependency-version: 2.13.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cc
  dependency-version: 1.4.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: clap_builder
  dependency-version: 4.6.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: clap_derive
  dependency-version: 4.6.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: clap_lex
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: console
  dependency-version: 0.16.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: crc32fast
  dependency-version: 1.5.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxx
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxx-build
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-cmd
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-flags
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-macro
  dependency-version: 1.0.202
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: encoding_rs
  dependency-version: 0.8.41
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: jiff
  dependency-version: 0.2.37
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: jiff-core
  dependency-version: 0.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: jiff-static
  dependency-version: 0.2.37
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: libredox
  dependency-version: 0.1.24
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: lru-slab
  dependency-version: 0.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: quinn
  dependency-version: 0.11.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: quinn-proto
  dependency-version: 0.11.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: rustls
  dependency-version: 0.23.45
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: smallvec
  dependency-version: 1.16.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: tinyvec
  dependency-version: 1.13.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: toml_edit
  dependency-version: 0.25.15+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: ureq-proto
  dependency-version: 0.6.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: zerocopy
  dependency-version: 0.8.57
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: zerocopy-derive
  dependency-version: 0.8.57
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Sep 18, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.
See the Details below.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
cargo/bitflags 2.13.2 🟢 7.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
CI-Tests🟢 810 out of 12 merged PRs checked by a CI test -- score normalized to 8
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 5found 6 unreviewed changesets out of 12 -- score normalized to 5
Contributors🟢 1022 different organizations found -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool⚠️ 0no update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1021 commit(s) out of 30 and 3 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging⚠️ -1no published package detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 10no vulnerabilities detected
cargo/cc 1.4.6 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 8Found 13/15 approved changesets -- score normalized to 8
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/clap 4.6.7 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Code-Review⚠️ 2Found 2/9 approved changesets -- score normalized to 2
Packaging⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Token-Permissions⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Pinned-Dependencies⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
cargo/clap_builder 4.6.7 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Code-Review⚠️ 2Found 2/9 approved changesets -- score normalized to 2
Packaging⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Token-Permissions⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Pinned-Dependencies⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
cargo/clap_derive 4.6.7 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Code-Review⚠️ 2Found 2/9 approved changesets -- score normalized to 2
Packaging⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Token-Permissions⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Pinned-Dependencies⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
cargo/clap_lex 1.1.1 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Code-Review⚠️ 2Found 2/9 approved changesets -- score normalized to 2
Packaging⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Token-Permissions⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Pinned-Dependencies⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ -1internal error: internal error: invalid GitHub workflow: :25:10: could not parse as YAML: could not find expected ':' [syntax-check]
cargo/console 0.16.6 UnknownUnknown
cargo/core_detect 1.0.0 ⚠️ 2.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/9 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/crc32fast 1.5.2 🟢 4.6
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 1012 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 5/29 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxx 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxx-build 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxxbridge-cmd 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxxbridge-flags 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxxbridge-macro 1.0.202 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/24 approved changesets -- score normalized to 1
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/encoding_rs 0.8.41 🟢 4.4
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 2/30 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
License🟢 9license file detected
cargo/jiff 0.2.37 UnknownUnknown
cargo/jiff-core 0.1.1 UnknownUnknown
cargo/jiff-static 0.2.37 UnknownUnknown
cargo/libredox 0.1.24 UnknownUnknown
cargo/lru-slab 0.1.3 UnknownUnknown
cargo/multiversion 0.9.0 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/20 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1019 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/multiversion-macros 0.9.0 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/20 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1019 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/multiversion_no_op 1.0.0 UnknownUnknown
cargo/quinn 0.11.12 🟢 5.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/quinn-proto 0.11.18 🟢 5.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/reqwest 0.13.5 🟢 5
Details
CheckScoreReason
Code-Review🟢 7Found 21/29 approved changesets -- score normalized to 7
Maintained🟢 1016 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/ringbuf 0.5.2 UnknownUnknown
cargo/rustls 0.23.45 UnknownUnknown
cargo/smallvec 1.16.1 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/tinyvec 1.13.3 🟢 4
Details
CheckScoreReason
Code-Review⚠️ 2Found 7/30 approved changesets -- score normalized to 2
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1025 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/toml_edit 0.25.15+spec-1.1.0 🟢 7.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 2/13 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 10SAST tool is run on all commits
cargo/ureq 3.4.2 🟢 5.7
Details
CheckScoreReason
Code-Review🟢 3Found 10/30 approved changesets -- score normalized to 3
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 1019 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/ureq-proto 0.6.4 UnknownUnknown
cargo/zerocopy 0.8.57 🟢 8.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Contributors🟢 10project has 10 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected
cargo/zerocopy-derive 0.8.57 🟢 8.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Contributors🟢 10project has 10 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected

Scanned Files

  • Cargo.lock

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants