Skip to content

chore(deps): bump the rust-minor-and-patch group across 1 directory with 15 updates - #700

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-and-patch-2fec6033d0
Open

chore(deps): bump the rust-minor-and-patch group across 1 directory with 15 updates#700
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-and-patch-2fec6033d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the rust-minor-and-patch group with 15 updates in the / directory:

Package From To
thiserror 2.0.19 2.0.20
uuid 1.24.0 1.24.1
time 0.3.54 0.3.55
async-trait 0.1.91 0.1.92
aes 0.9.1 0.9.2
rustls 0.23.42 0.23.43
rustls-webpki 0.103.13 0.103.14
rcgen 0.14.8 0.14.9
futures-util 0.3.33 0.3.34
http-body-util 0.1.4 0.1.5
base64 0.23.0 0.23.1
futures-executor 0.3.32 0.3.34
russh 0.62.4 0.62.7
rasn 0.28.13 0.28.14
http 1.4.2 1.5.0

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)
Commits

Updates uuid from 1.24.0 to 1.24.1

Release notes

Sourced from uuid's releases.

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits
  • 2ea38af Merge pull request #900 from uuid-rs/cargo/v1.24.1
  • 9dbeb04 prepare for 1.24.1 release
  • e113df8 Merge pull request #899 from questfever/main
  • b017765 Fix non-ASCII character handling in parse diagnostics
  • See full diff in compare view

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

  • Avoid underflow in DateIter::nth, ensuring correct behavior.
  • Avoid overflow when deserializing timestamps.
  • Handle out-of-bounds data when deserializing.
  • Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
  • No longer silence errors when deserializing UtcOffset.
  • OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
  • OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
Commits
  • 857d9c4 v0.3.55 release
  • 2b72fcd Precise feature gating for macro
  • c1089eb Run check-targets, miri in parallel
  • f377fad Avoid range-validated ordinal => year in cascade
  • 2eacb0a Report miscellaneous tasks, overall status
  • 29621ac Speed up CI
  • 08de7ba Fix nano-timestamp validation
  • 3c3f046 Fix copy-paste error
  • 3c0c81c Cascade errors when deserializing UtcOffset
  • c21acd5 Handle more deserializations of SignedDuration
  • Additional commits viewable in compare view

Updates async-trait from 0.1.91 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)
Commits

Updates aes from 0.9.1 to 0.9.2

Commits

Updates rustls from 0.23.42 to 0.23.43

Commits
  • fcf61cd Prepare 0.23.43
  • f0dad4c Check server's proposed suite against actual offer
  • b480cc6 Test for server choosing a non-QUIC TLS1.3 suite
  • 883a44d Consider Protocol in ServerConfig::supports_version
  • c2f1fd9 Check suitability of server version in QUIC client
  • d98e1b9 Add test for server Tls13RequiredForQuic
  • e63d9bf Bound ticket age calculation
  • 79cd462 Defensiveness improvement for binder suffix arithmetic
  • 4a9f025 use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt
  • 3131e5c Accept that libcrux deps are vulnerable
  • Additional commits viewable in compare view

Updates rustls-webpki from 0.103.13 to 0.103.14

Release notes

Sourced from rustls-webpki's releases.

v/0.103.14

What's Changed

Full Changelog: rustls/webpki@v/0.103.13...v/0.103.14

Commits
  • 10a1514 Mark ML-DSA algorithms as FIPS submitted
  • 14cbaa1 Bump version to 0.103.14
  • cbb868a Support stable ML-DSA with aws-lc-rs
  • c782fd1 Update to aws-lc-rs 1.18
  • b250e31 Upgrade to base64 0.23
  • 99115b2 ci: sync cargo-check-external-types nightly
  • a82bfae crl: fix clippy::question_mark finding
  • See full diff in compare view

Updates rcgen from 0.14.8 to 0.14.9

Release notes

Sourced from rcgen's releases.

0.14.9

Previous versions generated DER that is strictly incompatible with the spec, writing an explicit false value for IsCa::ExplicitNoCa where this should be omitted (as it's the default).

What's Changed

Commits
  • 7ca88d2 rcgen: bump version to 0.14.9
  • f3cdedc Omit default cA flag value as required by spec
  • 0a2200d Deduplicate CA extensions writing logic
  • adaa1a2 Deduplicate eKU writing logic
  • edc6bb6 rustls-cert-gen: fix useless_borrows_in_formatting findings
  • 86ae909 Bump actions/cache from 5 to 6
  • 54082a6 Fix non-compliant PKCS#8 v2 Ed25519 test key encoding
  • bee639a Bump actions/checkout from 6 to 7
  • d012e2c doc: extend CertificateSigningRequest docs/interinks
  • 0c565ed ci: sync cargo-check-external-types nightly
  • Additional commits viewable in compare view

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates http-body-util from 0.1.4 to 0.1.5

Commits

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures
Commits

Updates futures-executor from 0.3.32 to 0.3.34

Release notes

Sourced from futures-executor's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Changelog

Sourced from futures-executor's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Commits

Updates russh from 0.62.4 to 0.62.7

Release notes

Sourced from russh's releases.

v0.62.7

Features

Fixes

  • don't truncate decompressed packets that expand more than 2x (#750) #750 (Luiz Ribeiro)
  • c9da80c: Pageant WM_COPYDATA protocol fix & token tightening (#624) (vzex) #624
  • fall back to GetUserNameA when GetUserNameExA fails (#726) #726 (cwatanab)

v0.62.6

Security fixes

GHSA-g6xm-f9xp-qq35 - server-side max_auth_attempts was not enforced - f8fd0b1

Config::max_auth_attempts was not being properly enforced by russh server implementation.

Fixes

  • c66837e: Fix deadlock when handling open channel on contended handler (#734) (Eric Rodrigues Pires) #734

Changes

  • c465e3f: accept a single trailing comma in SSH name-lists (#743) (PokAhonTAS911) #743
  • add Motor OS support (#742) #742 (lasiotus)

v0.62.5

Security fixes

GHSA-m65r-rprj-r5rg - Handler channel callbacks called for non-existing channel - 7c5659f

Russh server did not validate channel IDs passed by a client, so if a client constructed a channel message with an invalid ID, the server-side Handler callback would still get called with that non-existing ID. The consequence of this depend on the specific user implementation.

Fixes

  • de96ad1: fixed #725 - add backpressure to Channel::data() (Eugene)

Full Changelog: Eugeny/russh@v0.62.4...v0.62.5

Commits

Updates rasn from 0.28.13 to 0.28.14

Changelog

Sourced from rasn's changelog.

0.28.14 - 2026-08-07

Added

  • use width constant for per codec
  • (per) add encode_buf functions
  • add constraint checking when encoding
  • check integer and bit string constraints in BER
  • check octet string constraints when decoding ber
  • add {ber, cer, der}::encode_buf

Fixed

  • (per) validate decoded value and size constraints
  • (xer) Return XER error on integer overflow

Other

  • fix string alphabet lints
  • fmt
  • add scratchpad worker buffer in PER
  • reuse buffer in SEQUENCE OF encodings
  • pass buffer into child encoder
  • remove integer decoding heap allocation
  • (per) use arrays for set tracking
  • use arrays with index for field tracking
  • add a fast path for encode_constructed
  • fmt
  • reuse buffer for allocating constructed types
  • clippy lints
  • use object_identifier_as_bytes directly
Commits
  • 398c530 chore: release v0.28.14
  • dd4cc68 chore: fix string alphabet lints
  • d70a246 fix(per): validate decoded value and size constraints
  • 0e45728 chore: fmt
  • a7bf641 chore: add scratchpad worker buffer in PER
  • c53fa0e chore: reuse buffer in SEQUENCE OF encodings
  • ff45f60 chore: pass buffer into child encoder
  • 926f8c0 feat: use width constant for per codec
  • 81130b9 chore: remove integer decoding heap allocation
  • 483153e chore(per): use arrays for set tracking
  • Additional commits viewable in compare view

Updates http from 1.4.2 to 1.5.0

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

New Contributors

Full Changelog: hyperium/http@v1.4.2...v1.5.0

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

  • Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
  • Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
  • Fix uri::PathAndQuery parsing to enforce URI max length.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 18, 2026
@dependabot
dependabot Bot requested a review from VerifiedOrganic as a code owner August 18, 2026 03:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-minor-and-patch-2fec6033d0 branch 2 times, most recently from 80d3cac to d77124c Compare August 20, 2026 07:59
@dependabot
chore(deps): bump the rust-minor-and-patch group across 1 directory w…
fd3a02f 
…ith 15 updates

Bumps the rust-minor-and-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.24.1` |
| [time](https://github.com/time-rs/time) | `0.3.54` | `0.3.55` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.91` | `0.1.92` |
| [aes](https://github.com/RustCrypto/block-ciphers) | `0.9.1` | `0.9.2` |
| [rustls](https://github.com/rustls/rustls) | `0.23.42` | `0.23.43` |
| [rustls-webpki](https://github.com/rustls/webpki) | `0.103.13` | `0.103.14` |
| [rcgen](https://github.com/rustls/rcgen) | `0.14.8` | `0.14.9` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.4` | `0.1.5` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` |
| [futures-executor](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` |
| [russh](https://github.com/warp-tech/russh) | `0.62.4` | `0.62.7` |
| [rasn](https://github.com/librasn/rasn) | `0.28.13` | `0.28.14` |
| [http](https://github.com/hyperium/http) | `1.4.2` | `1.5.0` |



Updates `thiserror` from 2.0.19 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.19...2.0.20)

Updates `uuid` from 1.24.0 to 1.24.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...v1.24.1)

Updates `time` from 0.3.54 to 0.3.55
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.54...v0.3.55)

Updates `async-trait` from 0.1.91 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.91...0.1.92)

Updates `aes` from 0.9.1 to 0.9.2
- [Commits](RustCrypto/block-ciphers@aes-v0.9.1...aes-v0.9.2)

Updates `rustls` from 0.23.42 to 0.23.43
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.42...v/0.23.43)

Updates `rustls-webpki` from 0.103.13 to 0.103.14
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](rustls/webpki@v/0.103.13...v/0.103.14)

Updates `rcgen` from 0.14.8 to 0.14.9
- [Release notes](https://github.com/rustls/rcgen/releases)
- [Commits](rustls/rcgen@v0.14.8...v/0.14.9)

Updates `futures-util` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `http-body-util` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.4...http-body-util-v0.1.5)

Updates `base64` from 0.23.0 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1)

Updates `futures-executor` from 0.3.32 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.34)

Updates `russh` from 0.62.4 to 0.62.7
- [Release notes](https://github.com/warp-tech/russh/releases)
- [Commits](Eugeny/russh@v0.62.4...v0.62.7)

Updates `rasn` from 0.28.13 to 0.28.14
- [Release notes](https://github.com/librasn/rasn/releases)
- [Changelog](https://github.com/librasn/rasn/blob/main/CHANGELOG.md)
- [Commits](librasn/rasn@rasn-v0.28.13...rasn-v0.28.14)

Updates `http` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v1.4.2...v1.5.0)

---
updated-dependencies:
- dependency-name: aes
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: futures-executor
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: http
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-and-patch
- dependency-name: http-body-util
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: rasn
  dependency-version: 0.28.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: rcgen
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: russh
  dependency-version: 0.62.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: rustls
  dependency-version: 0.23.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: rustls-webpki
  dependency-version: 0.103.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: time
  dependency-version: 0.3.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: uuid
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-minor-and-patch-2fec6033d0 branch from d77124c to fd3a02f Compare August 21, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@VerifiedOrganic VerifiedOrganic Awaiting requested review from VerifiedOrganic VerifiedOrganic is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants