build(deps): bump the patch-updates group across 1 directory with 98 updates

[dependabot]

Bumps the patch-updates group with 78 updates in the / directory:

Package	From	To
config	0.15.24	0.15.25
serde_qs	1.1.2	1.1.3
async-trait	0.1.89	0.1.92
futures	0.3.32	0.3.34
tokio-stream	0.1.18	0.1.19
thiserror	2.0.18	2.0.20
serde	1.0.228	1.0.229
serde_json	1.0.150	1.0.151
rand	0.10.1	0.10.2
time	0.3.51	0.3.55
rcgen	0.14.8	0.14.9
moka	0.12.15	0.12.16
webpki-roots	1.0.8	1.0.9
clap	4.6.1	4.6.6
aho-corasick	1.1.4	1.1.5
android_system_properties	0.1.5	0.1.6
anyhow	1.0.102	1.0.104
arc-swap	1.9.1	1.9.2
astral-tokio-tar	0.6.2	0.6.4
bitflags	2.13.0	2.13.1
bytes	1.12.0	1.12.1
cfg_aliases	0.2.1	0.2.2
chacha20	0.10.0	0.10.1
crossbeam-channel	0.5.15	0.5.16
crossbeam-queue	0.3.12	0.3.13
crossbeam-utils	0.8.21	0.8.22
crypto-common	0.1.6	0.1.7
data-encoding	2.11.0	2.11.1
der	0.8.0	0.8.1
displaydoc	0.2.6	0.2.7
event-listener	5.4.1	5.4.2
eyre	0.6.12	0.6.14
find-msvc-tools	0.1.9	0.1.11
glob	0.3.3	0.3.4
h2	0.4.15	0.4.18
http-body-util	0.1.3	0.1.5
hybrid-array	0.4.12	0.4.14
hyper-named-pipe	0.1.0	0.1.1
ipnet	2.12.0	2.12.1
jobserver	0.1.34	0.1.35
libc	0.2.186	0.2.189
litemap	0.8.2	0.8.3
memchr	2.8.2	2.8.3
mio	1.2.1	1.2.2
num-integer	0.1.46	0.1.47
num-iter	0.1.45	0.1.46
pkg-config	0.3.33	0.3.34
proc-macro2	1.0.106	1.0.107
quinn-proto	0.11.15	0.11.17
quote	1.0.46	1.0.47
ref-cast	1.0.25	1.0.27
regex-automata	0.4.14	0.4.18
rustc-demangle	0.1.27	0.1.28
rustc-hash	2.1.2	2.1.3
rustls	0.23.41	0.23.43
rustls-webpki	0.103.13	0.103.15
rustversion	1.0.22	1.0.23
schemars	1.2.1	1.2.2
serde_repr	0.1.20	0.1.21
simd-adler32	0.3.9	0.3.10
snap	1.1.1	1.1.2
socket2	0.6.4	0.6.5
syn	2.0.118	2.0.119
thread_local	1.1.9	1.1.10
tinystr	0.8.3	0.8.4
tokio-macros	2.7.0	2.7.2
tokio-util	0.7.18	0.7.19
toml	1.1.2+spec-1.1.0	1.1.4+spec-1.1.0
ureq-proto	0.6.0	0.6.1
validator_derive	0.20.0	0.20.1
webpki-root-certs	1.0.8	1.0.9
whoami	2.1.2	2.1.3
winnow	1.0.3	1.0.4
writeable	0.6.3	0.6.4
xxhash-rust	0.8.15	0.8.18
zerocopy	0.8.52	0.8.56
zerotrie	0.2.4	0.2.5
zmij	1.0.21	1.0.23

Updates config from 0.15.24 to 0.15.25

Changelog

Sourced from config's changelog.

[0.15.25] - 2026-06-26

Fixes

• (ron) Support u64, and not just i64

Commits

• 8fc857f chore: Release config version 0.15.25
• cbf8542 docs: Update changelog
• ac0ee7b fix(ron): map u64 values to ValueKind::U64 instead of lossy I64 cast (#761)
• 55d4418 fix(ron): map u64 values to ValueKind::U64 instead of lossy I64 cast
• See full diff in compare view

Updates serde_qs from 1.1.2 to 1.1.3

Release notes

Sourced from serde_qs's releases.

v1.1.3

Fixed

• percent-encode % in default query-string mode (#173)

Other

• multiple values including null return parsing error (#172)

Changelog

Sourced from serde_qs's changelog.

1.1.3 - 2026-08-07

Fixed

• percent-encode % in default query-string mode (#173)

Other

• multiple values including null return parsing error (#172)

Commits

• 78e7c49 chore: release v1.1.3 (#174)
• cef35c0 Fix: multiple values including null return parsing error (#172)
• 63010ed fix: percent-encode % in default query-string mode (#173)
• See full diff in compare view

Updates async-trait from 0.1.89 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

• Resolve double_must_use clippy lint in generated code (#303)

0.1.91

• Update to syn 3 (#299)
• Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits

• 82e7e9e Release 0.1.92
• 9a35cb8 Merge pull request #303 from dtolnay/mustuse
• 875ceec Resolve double_must_use clippy lint
• 62993a5 Raise minimum tested compiler to rust 1.88
• d049ee0 Release 0.1.91
• 7a0961f Merge pull request #301 from dtolnay/mutability
• 740f86f Ignore mut_mut pedantic clippy lint in test
• 4699cd3 Fix mutability for by-reference receivers
• 6dd3573 Add regression test for issue 300
• 2371797 Release 0.1.90
• Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

0.3.33

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Commits

• 705e6b5 Release 0.3.34
• 616dac7 compat: Inline RawWaker clone function
• 4176369 Inline remaining RawWaker clone functions
• f17a895 Fix cloned FuturesUnordered waker identity
• 51d62ad macro: bump syn to v3 (#3028)
• 9e26177 ci: Reduce timeout-minutes
• b2d0983 tsan: Enable Adaptive Delay
• f733d0e Miri: Ignore compat tests
• e5def2f Rename default branch to main
• 89cc254 Release 0.3.33
• Additional commits viewable in compare view

Updates tokio-stream from 0.1.18 to 0.1.19

Commits

• bc0933c chore: prepare tokio-stream v0.1.19 (#8310)
• e3786d0 readme: remove obsolete TokioConf notices (#8311)
• f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
• 52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
• ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

• Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

• Update to syn 3

Commits

• b1d5db5 Release 2.0.20
• c4c3ebd Merge pull request #454 from dtolnay/clippy
• 2266152 Suppress redundant_field_names clippy lint
• 2901cfd Raise minimum tested compiler to rust 1.88
• aa9d91f Update ui tests for version 2.0.19
• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates time from 0.3.51 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

v0.3.54

See the changelog for details.

v0.3.53

See the changelog for details.

v0.3.52

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

• Avoid underflow in DateIter::nth, ensuring correct behavior.
• Avoid overflow when deserializing timestamps.
• Handle out-of-bounds data when deserializing.
• Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
• No longer silence errors when deserializing UtcOffset.
• OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
• OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

0.3.54 [2026-07-20]

Added

• PrimitiveDateTime has been renamed to PlainDateTime.
• Duration has been renamed to SignedDuration.
• Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

• The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

• More gains when parsing RFC 2822.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

• Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result

... (truncated)

Commits

• 857d9c4 v0.3.55 release
• 2b72fcd Precise feature gating for macro
• c1089eb Run check-targets, miri in parallel
• f377fad Avoid range-validated ordinal => year in cascade
• 2eacb0a Report miscellaneous tasks, overall status
• 29621ac Speed up CI
• 08de7ba Fix nano-timestamp validation
• 3c3f046 Fix copy-paste error
• 3c0c81c Cascade errors when deserializing UtcOffset
• c21acd5 Handle more deserializations of SignedDuration
• Additional commits viewable in compare view

Updates rcgen from 0.14.8 to 0.14.9

Release notes

Sourced from rcgen's releases.

0.14.9

Previous versions generated DER that is strictly incompatible with the spec, writing an explicit false value for IsCa::ExplicitNoCa where this should be omitted (as it's the default).

What's Changed

• doc: amend description to point to CertificateParams for additional explanation by @​mcr in rustls/rcgen#433
• Omit default cA flag value as required by spec by @​djc in rustls/rcgen#444

Commits

• 7ca88d2 rcgen: bump version to 0.14.9
• f3cdedc Omit default cA flag value as required by spec
• 0a2200d Deduplicate CA extensions writing logic
• adaa1a2 Deduplicate eKU writing logic
• edc6bb6 rustls-cert-gen: fix useless_borrows_in_formatting findings
• 86ae909 Bump actions/cache from 5 to 6
• 54082a6 Fix non-compliant PKCS#8 v2 Ed25519 test key encoding
• bee639a Bump actions/checkout from 6 to 7
• d012e2c doc: extend CertificateSigningRequest docs/interinks
• 0c565ed ci: sync cargo-check-external-types nightly
• Additional commits viewable in compare view

Updates moka from 0.12.15 to 0.12.16

Release notes

Sourced from moka's releases.

v0.12.16

Version 0.12.16

Fixed

• Fixed a bug where cache eviction could stall permanently when the cache was configured with the non-default LRU eviction policy (EvictionPolicy::lru()) by a race between insert and remove operations on the same key (#592gh-pull-0592 by @​kim-jhyeon, reported in #590gh-issue-0590):
  • This bug was introduced in v0.12.0 and affected sync::Cache, sync::SegmentedCache and future::Cache.
  • A race between applying a write recording for an entry and concurrently removing that entry from the internal concurrent hash table could leave an orphaned node at the front of the LRU queue. Once present, no entry was ever evicted again and the cache grew unboundedly past max_capacity.
  • The same race also affected the default TinyLFU eviction policy, but with a milder symptom: each occurrence permanently leaked one phantom entry slot, causing entry_count and weighted_size to over-report and the usable capacity to shrink by one entry per occurrence. Fixed by the same change.

Changed

• Worked around a ThreadSanitizer false positive (#602gh-pull-0602):
  • Replaced the standalone fence(Acquire) in the internal MiniArc's drop path with an Acquire load of the reference count, so that downstream projects can now run ThreadSanitizer on code using Moka without hitting this false positive.
  • std::sync::Arc has a similar workaround.
• Raised the minimum version of the crossbeam-epoch crate from v0.9.18 to v0.9.20 to avoid the following advisory (#603gh-pull-0603):
  • [RUSTSEC-2026-0204] crossbeam-epoch: invalid pointer dereference in fmt::Pointer for Atomic and Shared
  • Moka is not affected by this advisory because it never formats these pointer types. However, raising the minimum version prevents downstream lockfiles from resolving to an affected crossbeam-epoch version via Moka.

Changelog

Sourced from moka's changelog.

Version 0.12.16

Fixed

• Fixed a bug where cache eviction could stall permanently when the cache was configured with the non-default LRU eviction policy (EvictionPolicy::lru()) by a race between insert and remove operations on the same key (#592[gh-pull-0592] by [@​kim-jhyeon][gh-kim-jhyeon], reported in #590[gh-issue-0590]):
  • This bug was introduced in v0.12.0 and affected sync::Cache, sync::SegmentedCache and future::Cache.
  • A race between applying a write recording for an entry and concurrently removing that entry from the internal concurrent hash table could leave an orphaned node at the front of the LRU queue. Once present, no entry was ever evicted again and the cache grew unboundedly past max_capacity.
  • The same race also affected the default TinyLFU eviction policy, but with a milder symptom: each occurrence permanently leaked one phantom entry slot, causing entry_count and weighted_size to over-report and the usable capacity to shrink by one entry per occurrence. Fixed by the same change.

Changed

• Worked around a ThreadSanitizer false positive (#602[gh-pull-0602]):
  • Replaced the standalone fence(Acquire) in the internal MiniArc's drop path with an Acquire load of the reference count, so that downstream projects can now run ThreadSanitizer on code using Moka without hitting this false positive.
  • std::sync::Arc has a similar workaround.
• Raised the minimum version of the crossbeam-epoch crate from v0.9.18 to v0.9.20 to avoid the following advisory (#603[gh-pull-0603]):
  • [RUSTSEC-2026-0204] crossbeam-epoch: invalid pointer dereference in fmt::Pointer for Atomic and Shared
  • Moka is not affected by this advisory because it never formats these pointer types. However, raising the minimum version prevents downstream lockfiles from resolving to an affected crossbeam-epoch version via Moka.

Commits

• a616ec1 Merge pull request #604 from moka-rs/chore/bump-v0.12.16
• 3b140a6 Bump the version to v0.12.16
• 51b802d Merge pull request #603 from moka-rs/bump-crossbeam-epoch-floor
• 4f90716 Raise the minimum crossbeam-epoch version to 0.9.20
• 08d0e04 Merge pull request #602 from moka-rs/gh600-tsan-workaround
• 14447a7 Restructure the v0.12.16 TSan workaround CHANGELOG entry
• 7b14c37 Avoid a TSan false positive by replacing the fence in MiniArc::drop
• 05b37c6 Merge pull request #599 from moka-rs/gh590-deterministic-tests
• fc31858 Replace private doc references in gh590 test comments
• 5743592 Improve the v0.12.16 CHANGELOG entry
• Additional commits viewable in compare view

Updates webpki-roots from 1.0.8 to 1.0.9

Release notes

Sourced from webpki-roots's releases.

1.0.9

Changes:

• Add "Telia EC TLS Root CA v3" and "Telia RSA TLS Root CA v3" - https://bugzilla.mozilla.org/show_bug.cgi?id=2047804
• Add "SECOM TLS ECC Root CA 2024" and "SECOM TLS RSA Root CA 2024" - https://bugzilla.mozilla.org/show_bug.cgi?id=1943001
• Remove "Atos TrustedRoot 2011" - https://bugzilla.mozilla.org/show_bug.cgi?id=2017374

What's Changed

• Take webpki-root-certs lockfile update by @​weifanglab in rustls/webpki-roots#125
• 1.0.9: upstream updates by @​ctz in rustls/webpki-roots#126

New Contributors

• @​weifanglab made their first contribution in rustls/webpki-roots#125

Full Changelog: rustls/webpki-roots@v/1.0.8...v/1.0.9

Commits

• 0a553db 1.0.9: upstream updates (#126)
• 1ce667b Take webpki-root-certs lockfile update (#125)
• See full diff in compare view

Updates clap from 4.6.1 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• 348cff3 chore: Release
• d478377 docs: Update changelog
• 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
• 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
• f90a966 fix(complete): Use spaces for indentation in fish
• dd4997b fix(complete): Don't glob-expand bash positionals
• 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
• 8141e11 chore(deps): Update compatible (dev) (#6398)
• 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
• Additional commits viewable in compare view

Updates aho-corasick from 1.1.4 to 1.1.5

Commits

• 5178060 1.1.5
• b68c8d5 api: check for overflow in Match::offset too
• c821786 build(deps): bump actions/checkout in the actions group (#171)
• 8209bb9 Hash-pin all actions, drop persisted credentials (#170)
• 0f3f5da api: document a couple panicking preconditions
• e88e1fc benchmarks: bump dependencies
• 88e4966 ci: use older version of log on pinned build
• See full diff in compare view

Updates android_system_properties from 0.1.5 to 0.1.6

Commits

• See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates arc-swap from 1.9.1 to 1.9.2

Changelog

Sourced from arc-swap's changelog.

1.9.2

• Document RefCnt must not panic (#208).

Commits

• See full diff in compare view

Updates astral-tokio-tar from 0.6.2 to 0.6.4

Release notes

Sourced from astral-tokio-tar's releases.

astral-tokio-tar v0.6.4

What's Changed

• Bump taiki-e/install-action from 2.77.1 to 2.77.6 in the github-actions group by @​dependabot[bot] in astral-sh/tokio-tar#84
• Bump the github-actions group with 2 updates by @​dependabot[bot] in astral-sh/tokio-tar#87
• Remove filetime dependency by @​woodruffw in astral-sh/tokio-tar#86
• Reduce parsing differentials and reject ambiguous cases by @​zanieb in astral-sh/tokio-tar#95
• Bump version to 0.6.3 by @​zanieb in astral-sh/tokio-tar#96
• Update rustix dependency from 0.38 to 1.0 by @​musicinmybrain in astral-sh/tokio-tar#97
• Bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in astral-sh/tokio-tar#89
• Use clear instead of truncate(0) by @​zaniebot in astral-sh/tokio-tar#102
• Fix nanosecond conversion on 32-bit Unix by @​zaniebot in astral-sh/tokio-tar#101
• Align the release workflow with other Astral projects by @​zanieb in astral-sh/tokio-tar#103
• Bump version to 0.6.4 by @​github-actions[bot] in astral-sh/tokio-tar#104

New Contributors

• @​zanieb made their first contribution in astral-sh/tokio-tar#95
• @​musicinmybrain made their first contribution in astral-sh/tokio-tar#97
• @​zaniebot made their first contribution in astral-sh/tokio-tar#102
• @​github-actions[bot] made their first contribution in astral-sh/tokio-tar#104

Full Changelog: astral-sh/tokio-tar@v0.6.2...v0.6.4

v0.6.3

What's Changed

• Remove filetime dependency
• Reject mixed PAX and GNU path metadata
• Reject unterminated PAX records
• Reject mixed PAX and GNU link targets
• Trim GNU long names and links at NUL
• Add a restricted local-PAX input mode
• Parse PAX records by declared length
• Apply PAX owner names to entries
• Apply PAX size overrides to entry headers
• Apply Solaris X metadata only on USTAR carriers
• Report truncated TAR payloads during entry reads
• Reject partial GNU sparse map entries
• Preserve payload access for unknown TAR typeflags
• Reject dangling one-shot TAR extensions
• Reject orphaned GNU sparse PAX metadata
• Reject ambiguous NUL-version USTAR headers
• Require valid carrier classes for TAR extensions
• Require decimal PAX numeric overrides
• Use the last repeated PAX pathname
• Test last-record precedence for PAX owner metadata
• Reject empty local PAX values
• Report sparse data positions after continuation headers

Full Changelog: astral-sh/tokio-tar@v0.6.2...v0.6.3

Commits

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.