Skip to content

chore(deps): bump the cargo-dependencies group across 1 directory with 11 updates - #487

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-6480a43863
Open

chore(deps): bump the cargo-dependencies group across 1 directory with 11 updates#487
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-6480a43863

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-dependencies group with 11 updates in the / directory:

Package From To
stellar-strkey 0.0.18 1.0.0
stellar-xdr 28.0.0 30.0.0
sha2 0.11.0 0.11.1
serde_json 1.0.151 1.0.154
zstd 0.14.0 0.14.3
tokio 1.53.1 1.53.3
jsonschema 0.58.2 0.59.0
wasmparser 0.259.0 0.262.0
syn 3.0.6 3.0.9
extism 1.30.0 1.41.0
soroban-env-host 29.0.0 30.0.0

Updates stellar-strkey from 0.0.18 to 1.0.0

Release notes

Sourced from stellar-strkey's releases.

v1.0.0

What's Changed

New Contributors

Full Changelog: stellar/rs-stellar-strkey@v0.0.18...v1.0.0

Commits

Updates stellar-xdr from 28.0.0 to 30.0.0

Release notes

Sourced from stellar-xdr's releases.

30.0.0

What's Changed

New Contributors

Full Changelog: stellar/rs-stellar-xdr@v28.0.0...v30.0.0

28.0.1

What's Changed

Full Changelog: stellar/rs-stellar-xdr@v28.0.0...v28.0.1

Commits
  • 3c2aa43 Update fuzz lockfile for stellar-strkey 1.0.0 and stellar-xdr 30.0.0 (#608)
  • 3bf3c1d Bump version to 30.0.0 (#607)
  • c3016ad Remove unused xdr-parser method and lockfile (#597)
  • 541ca7e check ContractInstance storage in ScVal::validate (#600)
  • 28f34cf Ungate CAP-0084 and CAP-0087 (#606)
  • 05bacd6 Regenerate XDR from upstream stellar-xdr (b77bea0) (#603)
  • be4d0ab Add PartialEq for StringM with byte strings (#601)
  • 97510f6 Regenerate XDR from upstream stellar-xdr (4f3303c) (#602)
  • a7018f6 enforce VecM max length on serde deserialize (#594) (#598)
  • 26e690e remove unused CfgExpr::and and its test (#596)
  • Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates zstd from 0.14.0 to 0.14.3

Commits
  • 75bc740 Release zstd 0.14.3, zstd-safe 8.2.0, and zstd-sys 2.1.2
  • 1c580b6 zstd-safe: keep the one-shot reset check inline
  • 502ee2f zstd-safe: only reset after one-shot decompression if a stream may be open
  • 5ded6e0 zstd-safe: apply rustfmt
  • e224018 zstd-safe: refuse to unload a dictionary under unfinished zstdmt jobs
  • 6a1065b Stop a single_frame() decoder when finish_frame() ends the frame
  • c7156df Don't let finish_frame() start a frame nothing was read from
  • b0fb8a7 Add write::Decoder::finish() to report incomplete frames
  • ab34d01 Don't retry a panicked writer when dropping AutoFlushDecoder/AutoFinishEncoder
  • 74ace2d Reset the borrowed context's session in raw::{Encoder,Decoder}::with_context
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

  • io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

  • io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

  • io: wake and drop DuplexStream wakers outside the lock (#8618)
  • macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
  • runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
  • sync: wake waiters outside the lock when closing a semaphore (#8529)
  • test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

  • rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits
  • a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
  • df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
  • f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
  • 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
  • 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
  • c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
  • 0448618 sync: make tracing_sync tests synchronous (#8427)
  • 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
  • bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
  • 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
  • Additional commits viewable in compare view

Updates jsonschema from 0.58.2 to 0.59.0

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.59.0

Changed

  • macOS arm64 wheel replaces the universal2 wheel.

Fixed

  • Canonicalizing several subschemas of one prepared document, where a $ref in a later output could point at another subschema.
  • canonicalize leaving unevaluatedProperties or unevaluatedItems beside anyOf or oneOf raw.
  • canonicalize giving a different form for a oneOf depending on the order of its branches.
  • canonicalize output changing when canonicalized again, for a not over a $ref it cannot fully negate.
  • canonicalize output changing when canonicalized again, for a oneOf whose branches reduce to the same $ref.
  • canonicalize leaving an anyOf over many overlapping objects raw.
  • canonicalize leaving dependencies or dependentRequired raw when their keys form a long chain or cycle.
  • Regex matches the engine cannot finish, such as on reaching the backtrack limit, counted as non-matches, letting not or patternProperties accept invalid instances. #1715
  • canonicalize treating regex matches the engine cannot finish as non-matches.

Performance

  • canonicalize giving up sooner on an allOf over unions too wide to model.

[Ruby] Release 0.59.0

Fixed

  • Canonicalizing several subschemas of one prepared document, where a $ref in a later output could point at another subschema.
  • canonicalize leaving unevaluatedProperties or unevaluatedItems beside anyOf or oneOf raw.
  • canonicalize giving a different form for a oneOf depending on the order of its branches.
  • canonicalize output changing when canonicalized again, for a not over a $ref it cannot fully negate.
  • canonicalize output changing when canonicalized again, for a oneOf whose branches reduce to the same $ref.
  • canonicalize leaving an anyOf over many overlapping objects raw.
  • canonicalize leaving dependencies or dependentRequired raw when their keys form a long chain or cycle.
  • Regex matches the engine cannot finish, such as on reaching the backtrack limit, counted as non-matches, letting not or patternProperties accept invalid instances. #1715
  • canonicalize treating regex matches the engine cannot finish as non-matches.

Performance

  • canonicalize giving up sooner on an allOf over unions too wide to model.

[Rust] Release 0.59.0

Added

  • CLI: - as a path reads the schema or an instance from stdin.
  • CLI: -V as the version flag; -v stays as an alias.

Changed

  • CLI: Exit status 3 for errors that prevent a verdict and 2 for usage errors, so 1 always means an invalid instance or schema.
  • CLI: Errors print to stderr instead of stdout.
  • CLI: --version prints jsonschema-cli <VERSION> instead of Version: <VERSION>.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.59.0] - 2026-10-16

Added

  • CLI: - as a path reads the schema or an instance from stdin.
  • CLI: -V as the version flag; -v stays as an alias.

Changed

  • CLI: Exit status 3 for errors that prevent a verdict and 2 for usage errors, so 1 always means an invalid instance or schema.
  • CLI: Errors print to stderr instead of stdout.
  • CLI: --version prints jsonschema-cli <VERSION> instead of Version: <VERSION>.

Fixed

  • CLI: Panic when stdout is closed early, as in jsonschema-cli validate ... | head.
  • CLI: Missing file path in the error for an unreadable instance in text output.
  • CLI: jsonschema-cli bundle, jsonschema-cli dereference and jsonschema-cli canonicalize truncating the --output file when the write fails partway.
  • CLI: jsonschema-cli validate --help describing --offline in terms of --resource, which validate does not accept.
  • CLI: Error and warning messages suggesting jsonschema commands instead of the installed jsonschema-cli binary.
  • Canonicalizing several subschemas of one prepared document, where a $ref in a later output could point at another subschema.
  • canonicalize leaving unevaluatedProperties or unevaluatedItems beside anyOf or oneOf raw.
  • canonicalize giving a different form for a oneOf depending on the order of its branches.
  • canonicalize output changing when canonicalized again, for a not over a $ref it cannot fully negate.
  • canonicalize output changing when canonicalized again, for a oneOf whose branches reduce to the same $ref.
  • canonicalize leaving an anyOf over many overlapping objects raw.
  • canonicalize leaving dependencies or dependentRequired raw when their keys form a long chain or cycle.
  • canonicalize treating -0 as a value distinct from 0 under arbitrary-precision.
  • Regex matches the engine cannot finish, such as on reaching the backtrack limit, counted as non-matches, letting not or patternProperties accept invalid instances. #1715
  • canonicalize treating regex matches the engine cannot finish as non-matches.

Performance

  • canonicalize giving up sooner on an allOf over unions too wide to model.

[0.58.6] - 2026-10-06

Fixed

  • \s in pattern missing most Unicode space separators and U+2028.
  • ECMA regex character class literals being interpreted as Rust set operators.

[0.58.5] - 2026-10-02

Fixed

  • canonicalize keeping a reference to a cycle of bare references under not or oneOf instead of treating it as accepting every value.

[0.58.4] - 2026-10-01

... (truncated)

Commits
  • bcaa7bd chore(ruby): Release 0.59.0
  • d59ab79 chore(rust): Release 0.59.0
  • dbd0a21 test: Unfinished regex matches in the Python and Ruby bindings
  • 016982a fix: canonicalize treating regex matches the engine cannot finish as non-ma...
  • ce96b23 fix: Generated validator errors from unfinished property-name pattern matches...
  • 9578d4e fix: Generated validators counting unfinished pattern matches as non-matches
  • 4fd30be fix: Unfinished regex match errors pointing at the root when only a later run...
  • dba7cf7 fix: Unfinished patternProperties matches beside unevaluatedProperties co...
  • b770233 fix: Unfinished patternProperties matches beside additionalProperties cou...
  • 58282fa fix: Unfinished patternProperties matches skipping the property's subschema
  • Additional commits viewable in compare view

Updates wasmparser from 0.259.0 to 0.262.0

Commits

Updates syn from 3.0.6 to 3.0.9

Release notes

Sourced from syn's releases.

3.0.9

  • Add Punctuated::retain (#2088)

3.0.8

  • Fix parsing of <- and -> tokens in expressions (#2086, #2087)

3.0.7

Commits

Updates extism from 1.30.0 to 1.41.0

Release notes

Sourced from extism's releases.

v1.41.0

What's Changed

Full Changelog: extism/extism@v1.40.0...v1.41.0

v1.40.0

What's Changed

New Contributors

Full Changelog: extism/extism@v1.30.0...v1.40.0

Commits
  • 051b765 Upgrade wasmtime to v49 (#919)
  • 7df9941 Pin cbindgen so crates.io publish stops rewriting extism.h (#921)
  • d5da297 Upgrade to Wasmtime 48 (LTS) (#912)
  • 461e758 fix(ci): publish extism_sys wheels after the build finishes (#908)
  • ea21512 Add anyhow to wasmtime to enable compilation with no-default-fea… (#904)
  • See full diff in compare view

Updates soroban-env-host from 29.0.0 to 30.0.0

Release notes

Sourced from soroban-env-host's releases.

v30.0.0

What's Changed

Full Changelog: stellar/rs-soroban-env@v29.0.2...v30.0.0

v29.0.2

What's Changed

Full Changelog: stellar/rs-soroban-env@v29.0.1...v29.0.2

v29.0.1

What's Changed

Full Changelog: stellar/rs-soroban-env@v29.0.0...v29.0.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo-dependencies group across 1 directory wit…
d55abf5 
…h 11 updates

Bumps the cargo-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [stellar-strkey](https://github.com/stellar/rs-stellar-strkey) | `0.0.18` | `1.0.0` |
| [stellar-xdr](https://github.com/stellar/rs-stellar-xdr) | `28.0.0` | `30.0.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [zstd](https://github.com/gyscos/zstd-rs) | `0.14.0` | `0.14.3` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.3` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.58.2` | `0.59.0` |
| [wasmparser](https://github.com/bytecodealliance/wasm-tools) | `0.259.0` | `0.262.0` |
| [syn](https://github.com/dtolnay/syn) | `3.0.6` | `3.0.9` |
| [extism](https://github.com/extism/extism) | `1.30.0` | `1.41.0` |
| [soroban-env-host](https://github.com/stellar/rs-soroban-env) | `29.0.0` | `30.0.0` |



Updates `stellar-strkey` from 0.0.18 to 1.0.0
- [Release notes](https://github.com/stellar/rs-stellar-strkey/releases)
- [Commits](stellar/rs-stellar-strkey@v0.0.18...v1.0.0)

Updates `stellar-xdr` from 28.0.0 to 30.0.0
- [Release notes](https://github.com/stellar/rs-stellar-xdr/releases)
- [Commits](stellar/rs-stellar-xdr@v28.0.0...v30.0.0)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `zstd` from 0.14.0 to 0.14.3
- [Release notes](https://github.com/gyscos/zstd-rs/releases)
- [Commits](gyscos/zstd-rs@v0.14.0...v0.14.3)

Updates `tokio` from 1.53.1 to 1.53.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.3)

Updates `jsonschema` from 0.58.2 to 0.59.0
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.58.2...ruby-v0.59.0)

Updates `wasmparser` from 0.259.0 to 0.262.0
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

Updates `syn` from 3.0.6 to 3.0.9
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.6...3.0.9)

Updates `extism` from 1.30.0 to 1.41.0
- [Release notes](https://github.com/extism/extism/releases)
- [Commits](extism/extism@v1.30.0...v1.41.0)

Updates `soroban-env-host` from 29.0.0 to 30.0.0
- [Release notes](https://github.com/stellar/rs-soroban-env/releases)
- [Commits](stellar/rs-soroban-env@v29.0.0...v30.0.0)

---
updated-dependencies:
- dependency-name: stellar-strkey
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-dependencies
- dependency-name: stellar-xdr
  dependency-version: 30.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-dependencies
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: zstd
  dependency-version: 0.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: tokio
  dependency-version: 1.53.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: jsonschema
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: wasmparser
  dependency-version: 0.262.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: syn
  dependency-version: 3.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: extism
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: soroban-env-host
  dependency-version: 30.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from naninu123 as a code owner October 22, 2026 11:36
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 22, 2026
@coderabbitai

coderabbitai Bot commented Oct 22, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@naninu123 naninu123 Awaiting requested review from naninu123 naninu123 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants