Skip to content

Bump the cargo group across 1 directory with 3 updates - #14

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/packages/solana/cargo-51d8018d70
Open

Bump the cargo group across 1 directory with 3 updates#14
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/packages/solana/cargo-51d8018d70

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 20, 2026

Copy link
Copy Markdown

Bumps the cargo group with 3 updates in the /packages/solana directory: borsh, curve25519-dalek and keccak.

Updates borsh from 0.9.1 to 0.9.3

Changelog

Sourced from borsh's changelog.

[0.9.3] - 2022-02-03

  • Fix no_std compatibility.
  • Reduce code bloat in derived BorshSerialize impl for enums.

[0.9.2] - 2022-01-25

  • Upgrade hashbrown from 0.9 to 0.11. This can breakage in the rare case that you use borsh schema together with no-std support and rely on a specific version hashbrown of SchemaContainer. This is considered to be obscure enough to not warrant a semver bump.
Commits
  • eeb969c ci: publish macros crates even without changes (#80)
  • 5ff9c6f fix no_std compatability (#79)
  • f341871 Tweak enum serialization to generate better LLVM IR and more compact code (#77)
  • 36e63e7 conditionally push and create release only if a tag is created (#74)
  • 5c89866 fix(infra): checkout: set fetch-depth to pull tags (#72)
  • c88de8b escape git_tag_message body (#73)
  • 5c10694 ensure to contain git body in git_tag_message (#70)
  • d1edc1e fix(infra): env variables (#69)
  • 41ca49e add git author name (#68)
  • ef2cf84 feat(infra): introduce automated publishing (#67)
  • Additional commits viewable in compare view

Updates curve25519-dalek from 3.2.0 to 3.2.1

Commits
  • 29e5c29 Bump curve25519-dalek version to 3.2.1.
  • 3829ad0 Merge branch 'main' into release/3.2
  • 0d49dfa Merge remote-tracking branch 'dalek/main' into main
  • f7381ac Pin zeroize dependency to >=1, <1.4 to relax bounds for downstreams.
  • 6820eff Merge pull request #381 from bitmold/patch-1
  • b6a7406 Pin zeroize dependency to =1.3.0 to maintain MSRV 1.41.
  • b06df03 Update README.md
  • 076cf34 Fix non-unique benchmark IDs for newer criterion versions.
  • b87fdda Merge branch 'feature/github-actions' into main
  • 897f526 Run Github actions on any push, and PRs to main and develop.
  • Additional commits viewable in compare view

Updates keccak from 0.1.0 to 0.1.6

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the cargo group with 3 updates in the /packages/solana directory: [borsh](https://github.com/near/borsh-rs), [curve25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) and [keccak](https://github.com/RustCrypto/sponges).


Updates `borsh` from 0.9.1 to 0.9.3
- [Release notes](https://github.com/near/borsh-rs/releases)
- [Changelog](https://github.com/near/borsh-rs/blob/master/CHANGELOG.md)
- [Commits](near/borsh-rs@v0.9.1...v0.9.3)

Updates `curve25519-dalek` from 3.2.0 to 3.2.1
- [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases)
- [Commits](dalek-cryptography/curve25519-dalek@3.2.0...3.2.1)

Updates `keccak` from 0.1.0 to 0.1.6
- [Commits](RustCrypto/sponges@keccak-v0.1.0...keccak-v0.1.6)

---
updated-dependencies:
- dependency-name: borsh
  dependency-version: 0.9.3
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: curve25519-dalek
  dependency-version: 3.2.1
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: keccak
  dependency-version: 0.1.6
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Feb 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants