[dependabot]

Bumps the all-deps group with 7 updates in the / directory:

Package	From	To
proptest	1.11.0	1.12.0
sha2	0.11.0	0.11.1
syn	2.0.119	3.0.9
bit-set	0.8.0	0.11.1
bit-vec	0.8.0	0.10.1
r-efi	5.3.0	6.0.0
rand_xorshift	0.4.0	0.5.0

Updates proptest from 1.11.0 to 1.12.0

Commits

• 70cf37d Merge pull request #675 from proptest-rs/prep-1.12
• 729e0ff prepare next releases and fix panic handling
• 28c1fad Merge pull request #664 from Expyron/main
• 5ddd9a4 Merge pull request #668 from toddATavail/fix-fork-persisted-failure
• a6a9ac7 Merge pull request #673 from glaziermag/fix-book-deploy
• d57d88b Replace rand_chacha with chacha20
• 9411213 Deploy the book on pushes to main
• 1719745 fix: terminate the fork replay when a persisted failure fails
• 0f55b7a test: a persisted failure in a forked test must be reported
• 4b0594e Merge pull request #669 from proptest-rs/no-fail-fast
• Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

• 138dc5a Release sha2 v0.11.1 (#927)
• cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
• 7c59cad Update Cargo.lock (#921)
• f57b947 streebog: tweak internal implementation (#925)
• 336611f Fix cargo::manual_readme lint (#924)
• 1df8877 md2: fix clippy::needless_range_loop lint (#923)
• 6075989 sha2: fix loading of round constants on AArch64 backends (#922)
• eadfd90 Update Cargo.lock (#913)
• fa30840 blake2 v0.11.0 (#911)
• f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
• Additional commits viewable in compare view

Updates syn from 2.0.119 to 3.0.9

Release notes

Sourced from syn's releases.

3.0.9

• Add Punctuated::retain (#2088)

3.0.8

• Fix parsing of <- and -> tokens in expressions (#2086, #2087)

3.0.7

• Fix parsing absolute path expr in labeled break (#2085, thanks @​A4-Tacks)

3.0.6

• Fix parsing interpolated lifetime at statement start (#2082)

3.0.5

• Report correct span for lex errors from LitStr::parse_with (#2080, thanks @​sunshowers)

3.0.4

• Allow safe fn in impl Parse for ForeignItemFn (#2078)

3.0.3

• Documentation improvements

3.0.2

• Add Error::new_range(start..end, "msg") (#2068, #2070)
• Add Cursor::prev_span

3.0.1

• Parse const traits (#2056, #2057, #2058, #2063, #2064)
• Parse unsafe binder types (#2065)
• Parse impl restrictions (#2066)

3.0.0

This release contains adjustments to the syntax tree to account for ongoing Rust language development from the 3 years since syn 2.0.0 and to anticipate some in-flight Rust language RFCs.

These include: default values in fields, pinned type sugar, raw lifetimes, generator blocks and functions, unnamed enum variants, attributes in tuple types and tuple patterns, named arguments in parenthesized generic argument lists, lightweight clones, const traits, const function pointers, mutability restricted fields, supertrait auto implementation, final associated functions, trait implementability restrictions, const blocks in path arguments, item-level const blocks, return type notation, never patterns, function delegation, mutable by-reference bindings, in-place initialization, field projections, explicitly dyn-compatible traits, view types, file-level frontmatter, generic const arguments, guard patterns, lazy type aliases, explicitly safe foreign items, super let, unsafe fields, pattern types, heterogeneous try-blocks, function contracts, async function trait bounds, static closure coroutine syntax, unsafe binder types, move expressions, for-await loops, and postfix keywords.

Breaking changes

Modifiers

To reserve more room for language evolution, there are 10 new non-exhaustive structs in the syntax tree having the following commonality:

• Name ending in Modifiers. {BlockModifiers, ClosureModifiers, ConstModifiers, FieldModifiers, FnModifiers, ImplModifiers, LocalModifiers, TraitBoundModifiers, TraitModifiers, TypeModifiers}

• Each implements Default. The default value is guaranteed to comprise no tokens.

• Non-exhaustive. Can only be instantiated by Syn's parser or by creating and then mutating ▁▁Modifiers::default().

... (truncated)

Commits

• 7c44a55 Release 3.0.9
• 13234ab Merge pull request #2088 from dtolnay/retain
• b617dc9 Add Punctuated::retain
• f18a083 Release 3.0.8
• e1eab98 Merge pull request #2087 from dtolnay/rightarrow
• 5345ee5 Allow end of expr before ->
• 5631c74 Merge pull request #2086 from dtolnay/leftarrow
• c5b3cf0 Fix left arrow being split into less-than and negative-sign
• ec4c2da Release 3.0.7
• f947cf7 Merge pull request #2085 from A4-Tacks/break-label-abs-path
• Additional commits viewable in compare view

Updates bit-set from 0.8.0 to 0.11.1

Changelog

Sourced from bit-set's changelog.

Version 0.11.0 (TO BE RELEASED)

Version 0.10.1

• indexing into a BitVec has simpler codegen (contain-rs/bit-vec#153)

Version 0.10.0 (VULNERABILITY FIX)

• fixed a soundness issue where deserializeing from an untrusted source could make fn get_unchecked perform undefined behavior, and could make other functions return incorrect results
• removed nanoserde support
• moved all the crates into a workspace

Version 0.9.1

• Fixed issue with the serde feature

Version 0.9.0

• Minimal Supported Rust Version is now 1.82
• fn remove is implemented
• fn fill is implemented
• fn remove_all is implemented
• fn clear is deprecated. Please use .fill(false) instead!
• fn push_within_capacity is implemented
• bug fix: .skip(n) on our iterators is now O(1) instead of O(n) time
• fn to_bytes is optimized with a lookup table
• some clippy lints are enabled
• nanoserde version is now 0.2

Commits

• See full diff in compare view

Updates bit-vec from 0.8.0 to 0.10.1

Changelog

Sourced from bit-vec's changelog.

Version 0.10.1

• indexing into a BitVec has simpler codegen (contain-rs/bit-vec#153)

Version 0.10.0 (VULNERABILITY FIX)

• fixed a soundness issue where deserializeing from an untrusted source could make fn get_unchecked perform undefined behavior, and could make other functions return incorrect results
• removed nanoserde support
• moved all the crates into a workspace

Version 0.9.1

• Fixed issue with the serde feature

Version 0.9.0

• Minimal Supported Rust Version is now 1.82
• fn remove is implemented
• fn fill is implemented
• fn remove_all is implemented
• fn clear is deprecated. Please use .fill(false) instead!
• fn push_within_capacity is implemented
• bug fix: .skip(n) on our iterators is now O(1) instead of O(n) time
• fn to_bytes is optimized with a lookup table
• some clippy lints are enabled
• nanoserde version is now 0.2

Commits

• See full diff in compare view

Updates r-efi from 5.3.0 to 6.0.0

Release notes

Sourced from r-efi's releases.

r-efi-6.0.0

# r-efi - UEFI Reference Specification Protocol Constants and Definitions
CHANGES WITH 6.0.0:
* Change all function prototypes to use `unsafe fn`. This is a major
  change, but reflects what all downstream users have already assumed.


Drop the obsolete efiapi and examples feature flags. The former

was unused, and the latter is an alias for native.


The eficall!{} macro is now fully inline in all of r-efi. It is

still provided for external users, but will no longer be used by

r-efi. All users are recommended to use extern "efiapi" directly.


Contributions from: Alan Egerton, David Rheinsberg

Dußlingen, 2026-02-03

Changelog

Sourced from r-efi's changelog.

CHANGES WITH 6.0.0:

    * Change all function prototypes to use `unsafe fn`. This is a major
      change, but reflects what all downstream users have already assumed.
* Drop the obsolete `efiapi` and `examples` feature flags. The former
  was unused, and the latter is an alias for `native`.

The eficall!{} macro is now fully inline in all of r-efi. It is

still provided for external users, but will no longer be used by

r-efi. All users are recommended to use extern "efiapi" directly.

Contributions from: Alan Egerton, David Rheinsberg

Dußlingen, 2026-02-03

Commits

• 7e1b032 r-efi: prepare v6.0.0
• 96504bb r-efi: inline eficall!{}
• ea21433 build: drop unused feature flags
• 48b1a11 r-efi: extend the transpose guidelines
• e701536 build: synchronize AUTHORS
• 6f2330e r-efi: update remaining prototypes to unsafe fn
• 60793e0 Fix signatures of most EFI functions to be unsafe
• See full diff in compare view

Updates rand_xorshift from 0.4.0 to 0.5.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions