Bump the cargo group across 1 directory with 10 updates by dependabot[bot] · Pull Request #7 · tensorspace-ai/gal

dependabot · 2026-08-30T18:23:38Z

Bumps the cargo group with 10 updates in the / directory:

Package	From	To
thiserror	`2.0.19`	`2.0.20`
uuid	`1.24.0`	`1.26.0`
tower-http	`0.6.11`	`0.7.0`
argon2	`0.5.3`	`0.6.0`
password-hash	`0.5.0`	`0.6.1`
rand	`0.8.7`	`0.10.2`
base64	`0.22.1`	`0.23.1`
sha2	`0.10.9`	`0.11.0`
futures	`0.3.33`	`0.3.34`
tokio-tungstenite	`0.29.0`	`0.30.0`

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

Commits

b1d5db5 Release 2.0.20
c4c3ebd Merge pull request #454 from dtolnay/clippy
2266152 Suppress redundant_field_names clippy lint
2901cfd Raise minimum tested compiler to rust 1.88
aa9d91f Update ui tests for version 2.0.19
See full diff in compare view

Updates uuid from 1.24.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

Add ContextV7::with_additional_precision_bits by @ChrisJr404 in uuid-rs/uuid#904

Prepare for 1.26.0 release by @KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

Add a serde::bytes module that encodes a Uuid as a byte string by @ChrisJr404 in uuid-rs/uuid#902

Prepare for 1.25.0 release by @KodrAus in uuid-rs/uuid#903

New Contributors

@ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

Fix non-ASCII character handling in parse diagnostics by @questfever in uuid-rs/uuid#899

Prepare for 1.24.1 release by @KodrAus in uuid-rs/uuid#900

New Contributors

@questfever made their first contribution in uuid-rs/uuid#899

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits

cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
34e4f49 don't test macros under miri
d9e7242 update nightly used for miri
ec16819 prepare for 1.26.0 release
162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
b7ccde8 prepare for 1.25.0 release
c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
8c198b2 Add a serde::bytes module that encodes as a byte string
Additional commits viewable in compare view

Updates tower-http from 0.6.11 to 0.7.0

Release notes

Sourced from tower-http's releases.

tower-http-0.7.0

Changes since 0.6.11

Added
csrf: add cross-site request forgery (CSRF) protection middleware, porting the cross-origin protection scheme introduced in Go 1.25 (#699)
use tower::ServiceBuilder;
use tower_http::csrf::CsrfLayer;
// Rejects cross-origin state-changing requests using Sec-Fetch-Site,
// an Origin allow-list, and an Origin/Host fallback. No per-request
// token state required.
let layer = CsrfLayer::new().add_trusted_origin("https://example.com")?;
let service = ServiceBuilder::new().layer(layer).service_fn(handler);
timeout: add DeadlineBody for non-resetting body timeouts, applied via the new RequestBodyDeadlineLayer and ResponseBodyDeadlineLayer (#688)

Unlike TimeoutBody, which resets its deadline on every frame, DeadlineBody caps the total time of a body transfer. A slow client trickling one byte at a time never trips an idle timeout but will trip a deadline.
use std::time::Duration;
use tower::ServiceBuilder;
use tower_http::timeout::RequestBodyDeadlineLayer;
// Abort the request body transfer after 30s total, regardless of how
// frequently data arrives.
let service = ServiceBuilder::new()
.layer(RequestBodyDeadlineLayer::new(Duration::from_secs(30)))
.service_fn(handler);
fs: add strong ETag support to ServeDir, including If-Match and If-None-Match precondition handling per RFC 9110. 304 Not Modified responses now carry the ETag and Last-Modified validators (#691)
fs: add a Backend trait to make ServeDir work with non-filesystem sources (e.g. embedded assets or object storage). The default TokioBackend preserves existing behavior. Use ServeDir::with_backend() to plug in custom implementations (#684)
use tower_http::services::fs::ServeDir;
// MyBackend implements tower_http::services::fs::Backend.
// The default ServeDir::new() continues to use TokioBackend (local FS).
let service = ServeDir::with_backend("assets", MyBackend::new());
fs: add html_as_default_extension option to ServeDir, appending .html when the request path has no extension (#519)

fs: add redirect_path_prefix option to ServeDir, prepending a prefix on trailing-slash redirects so the service can be mounted under a sub-path (#486)

validate-request: add ValidateRequestHeaderLayer::has_header_value() to reject requests when a header does not have an expected value (#360)

body: UnsyncBoxBody::new() constructor and From<ServeFileSystemResponseBody> conversion to avoid double-boxing when combining ServeDir responses with other body types (#537)

limit: implement Default for limit::ResponseBody when the wrapped body also implements Default (#679)
Changed

... (truncated)

Commits

b194fcf v0.7.0
af828a6 feat(follow_redirect)!: preserve request extensions across redirects (#706)
8cb8d99 feat(ValidateRequestHeaderLayer): add has_header("...").with_value("...") fun...
3b56d2d feat!: Add configurable Backend trait for ServeDir, bump MSRV 1.65 (#684)
8508716 Add redirect_path_prefix option (#486)
56327b2 Add Windows drive-prefix path regression test (#705)
54c6db8 feat(compression)!: upgrade SizeAbove threshold from u16 to u64 (#704)
68cd6d8 Add DeadlineBody for non-resetting body timeouts (#688)
fa8a98c feat(fs): add strong ETag support to ServeDir (#691)
36d2205 fix: Make SetMultiple*Header Clone for !Clone http bodies (#703)
Additional commits viewable in compare view

Updates argon2 from 0.5.3 to 0.6.0

Commits

b1e0ad6 argon2 v0.6.0 (#931)
c0d2aca argon2: bump blake2 to v0.11 (#929)
d9c628b Cargo.lock: bump dependencies (#930)
0b31c1c Cargo.toml: use password-hash crate release (#920)
420cbc9 build(deps): bump rust-lang/crates-io-auth-action from 1.0.4 to 1.0.5 (#912)
3a88540 build(deps): bump actions/checkout from 6 to 7 (#913)
90b974f build(deps): bump the all-deps group with 5 updates (#914)
82c688f build(deps): bump the all-deps group across 1 directory with 18 updates (#911)
b2cef17 build(deps): bump the all-deps group with 6 updates (#902)
2c16e5a build(deps): bump the all-deps group with 7 updates (#901)
Additional commits viewable in compare view

Updates password-hash from 0.5.0 to 0.6.1

Commits

d1954d8 password-hash v0.6.1 (#2371)
2501d4f password-hash: change bounds for PHC verify blanket impl [BREAKING] (#2370)
f18bb80 digest: add dev::initialized_mac_test function (#2367)
adcbc44 build(deps): bump crate-ci/typos from 1.44.0 to 1.45.0 (#2368)
fb3f1ea build(deps): bump the all-deps group across 1 directory with 11 updates (#2369)
23118ea kem v0.3.0 (#2356)
13beea5 kem: add serialization docs (#2355)
ea57736 kem: add basic usage with example (#2354)
1c96506 elliptic-curve: bump hkdf dependency to v0.13 (#2349)
b7c764a Cargo.lock: bump crypto-bigint to v0.7.3 (#2346)
Additional commits viewable in compare view

Updates rand from 0.8.7 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

Document required output order of fn partial_shuffle and apply #[must_use] (#1769)

Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

Document panic behavior of make_rng and add #[track_caller] (#1761)

Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).

Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)

Use Edition 2024 and MSRV 1.85 (#1653)

Let Fill be implemented for element types, not sliceable types (#1652)

Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)

Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)

Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)

Remove Clone support for StdRng, ReseedingRng (#1677)

Use postcard instead of bincode to test the serde feature (#1693)

Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)

Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)

Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)

Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)

Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)

Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

Removed ReseedingRng (#1722)

Removed unused feature "nightly" (#1732)

Removed feature small_rng (#1732)

... (truncated)

Commits

1540ea3 Prepare rand 0.10.2 (#1800)
a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
db14664 Check UniformChar validity on deser (#1790)
bea8620 Bump the all-deps group with 2 updates (#1796)
4f44932 Bump actions/cache from 5 to 6 (#1795)
b999a13 Bump actions/checkout from 6 to 7 (#1794)
aeab810 Avoid unsafe where safety depends on non-local values (#1791)
1896d7c Add typos CI job (#1789)
43eddee Bump the all-deps group with 2 updates (#1788)
Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

Make the tests build again on non-SIMD architectures

0.23.0

Added more consts for preconfigured configs and engines

Make DecodeError::InvalidLastSymbol more clear by including the decoded value

Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.

Update MSRV to 1.71.0

Add support for custom padding symbols

Commits

069bf70 v0.23.1
6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
7cffce6 Fix testing on architectures without unsafe SIMD support
e34f9a0 Merge pull request #308 from atouchet/com
e9240c9 Remove outdated comment
9e9220a v0.23.0
870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
fbec5f1 Document no trailing trailing bits
0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
f10b7e2 Update deps & edition
Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

ffe0939 Release sha2 0.11.0 (#806)
8991b65 Use the standard order of the [package] section fields (#807)
3d2bc57 sha2: refactor backends (#802)
faa55fb sha3: bump keccak to v0.2 (#803)
d3e6489 sha3 v0.11.0-rc.9 (#801)
bbf6f51 sha2: tweak backend docs (#800)
155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
ed514f2 Use published version of keccak v0.2 (#799)
702bcd8 Migrate to closure-based keccak (#796)
827c043 sha3 v0.11.0-rc.8 (#794)
Additional commits viewable in compare view

Updates futures from 0.3.33 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Commits

705e6b5 Release 0.3.34
616dac7 compat: Inline RawWaker clone function
4176369 Inline remaining RawWaker clone functions
f17a895 Fix cloned FuturesUnordered waker identity
51d62ad macro: bump syn to v3 (#3028)
9e26177 ci: Reduce timeout-minutes
b2d0983 tsan: Enable Adaptive Delay
f733d0e Miri: Ignore compat tests
e5def2f Rename default branch to main
See full diff in compare view

Updates tokio-tungstenite from 0.29.0 to 0.30.0

Changelog

Sourced from tokio-tungstenite's changelog.

0.30.0

Update tungstenite to 0.30.0. See tungstenite release.

Commits

4994a07 Bump version
753ca72 Document cancel safety of reading from WebSocketStream (#378)
751d7e2 Update version number listed in Readme (#375)
57fc3d0 docs(CHANGELOG.md): fix tungstenite versions (#374)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.0` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.11` | `0.7.0` | | [argon2](https://github.com/RustCrypto/password-hashes) | `0.5.3` | `0.6.0` | | [password-hash](https://github.com/RustCrypto/traits) | `0.5.0` | `0.6.1` | | [rand](https://github.com/rust-random/rand) | `0.8.7` | `0.10.2` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` | | [tokio-tungstenite](https://github.com/snapview/tokio-tungstenite) | `0.29.0` | `0.30.0` | Updates `thiserror` from 2.0.19 to 2.0.20 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.19...2.0.20) Updates `uuid` from 1.24.0 to 1.26.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.0...v1.26.0) Updates `tower-http` from 0.6.11 to 0.7.0 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.11...tower-http-0.7.0) Updates `argon2` from 0.5.3 to 0.6.0 - [Commits](RustCrypto/password-hashes@argon2-v0.5.3...argon2-v0.6.0) Updates `password-hash` from 0.5.0 to 0.6.1 - [Commits](RustCrypto/traits@password-hash-v0.5.0...password-hash-v0.6.1) Updates `rand` from 0.8.7 to 0.10.2 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.8.7...0.10.2) Updates `base64` from 0.22.1 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1) Updates `sha2` from 0.10.9 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) Updates `futures` from 0.3.33 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.33...0.3.34) Updates `tokio-tungstenite` from 0.29.0 to 0.30.0 - [Changelog](https://github.com/snapview/tokio-tungstenite/blob/master/CHANGELOG.md) - [Commits](snapview/tokio-tungstenite@v0.29.0...v0.30.0) --- updated-dependencies: - dependency-name: thiserror dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: uuid dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tower-http dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: argon2 dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: password-hash dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: rand dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: futures dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio-tungstenite dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 30, 2026

Navigation Menu

Uh oh!

Bump the cargo group across 1 directory with 10 updates - #7

Bump the cargo group across 1 directory with 10 updates#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-6688969c05

dependabot Bot commented on behalf of github Aug 30, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.0.20

v1.26.0

What's Changed

1.25.0

What's Changed

New Contributors

v1.24.1

What's Changed

New Contributors

tower-http-0.7.0

Added

Changed

[0.10.2] — 2026-07-02

Fixes

Changes

[0.10.1] — 2026-02-11

Changes

[0.10.0] - 2026-02-08

Changes

Additions

Removals

0.23.1

0.23.0

0.3.34

0.3.34 - 2026-08-11

0.30.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 30, 2026 •

edited

Loading