[dependabot]

Bumps the cargo group with 21 updates in the /src directory:

Package	From	To
serde_json	1.0.151	1.0.154
thiserror	2.0.20	2.0.21
clap	4.6.6	4.6.7
pollster	0.4.0	1.0.1
ort	2.0.0-rc.13	2.0.0-rc.14
toml	1.1.5+spec-1.1.0	1.1.6+spec-1.1.0
dirs	6.0.0	7.0.0
opener	0.8.5	0.9.0
libc	0.2.189	0.2.191
objc2	0.6.4	0.6.5
winresource	0.1.31	0.1.34
png	0.17.16	0.18.1
base64	0.22.1	0.23.1
ureq	2.12.1	3.4.1
sha2	0.10.9	0.11.1
cpal	0.16.0	0.18.2
getrandom	0.3.4	0.4.3
tokio	1.53.1	1.53.3
protox	0.9.1	0.10.0
sherpa-onnx	1.13.7	1.13.8
fontdb	0.23.0	0.24.0

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates pollster from 0.4.0 to 1.0.1

Changelog

Sourced from pollster's changelog.

[1.0.1] - 2026-07-10

Fixed

• Use doc_cfg instead of doc_auto_cfg for docsrs builds

[1.0.0] - 2026-07-09

Changed

• FutureExt is now implemented for IntoFuture, not just Future

Commits

• See full diff in compare view

Updates ort from 2.0.0-rc.13 to 2.0.0-rc.14

Release notes

Sourced from ort's releases.

v2.0.0-rc.14

2.0.0-rc.14

💖 If you find ort useful, please consider supporting us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

✨ Supporters get priority (<24h) issue resolution & support!

---

⚠️ Manual environments

ort replaced the manual Environment struct with ort::init all the way back in Nov 2023 with 2.0.0-alpha.1 (yes, before rc hell, we used to be in alpha hell). This was done because only one environment was allowed per process anyway. However, almost every other release since then, there has been some kind of issue stemming from the environment being stored as a global variable.

The trouble caused by this now far outweighs the inconvenience of lugging around another variable everywhere, so in rc.14, you must always first create an Environment to start building sessions:

// pre-rc.14
{
    // optional, even!
    ort::init().commit()?;
let mut model = Session::builder()?
    .with_optimization_level(GraphOptimizationLevel::Level3)?
    .with_intra_threads(4)?
    .commit_from_file("yolov8m.onnx")?;

}
// rc.14
{
let env = ort::init().build()?; // <-- must build an environment first
let mut model = Session::builder(&env)?
.with_optimization_level(GraphOptimizationLevel::Level3)?
.with_intra_threads(4)?
.commit_from_file("yolov8m.onnx")?;
}

Note that you don't need to hold onto env unless you intend to create more sessions. Please refrain from storing environments or sessions as global variables -- we can't fix the issues that causes within ONNX Runtime! And library authors, please remember to allow the user to pass their own Environment.

✨ Rust 1.100 compatibility

rc.14 adds support for the upcoming v2 build dir layout that will ship in Rust 1.100. If you intend to update to Rust 1.100, you should upgrade to rc.14 as soon as possible, since older ort versions will fail to build when copy-dylibs is enabled.

Note that, due to the new layout, tests will no longer be able to see dylibs copied by copy-dylibs; you can try to use ort::util::preload_dylib to manually set the path to provider dylibs instead.

📦 You get a binary! You get a binary! Everyone gets binaries!

🟩 rc.14's prebuilt CUDA binaries add support for RTX 50xx/Blackwell cards on x64. We now also ship aarch64 builds for Jetson Orin/Thor, Grace Hopper/Blackwell, & DGX Spark! Turing & Ampere GPUs remain fully supported.

... (truncated)

Commits

• 1ee1f84 2.0.0-rc.14
• 75021e8 chore: remove deprecated execution_providers alias
• b774fea feat(sys): add model package API
• 7fdadd1 fix: hold onto the right allocator; target correct device when copying
• f2a5f73 chore(sys): update to ONNX Runtime v1.31.0
• 085eb2a fix(training): fix a leak on error & hold onto session builder extras (#659)
• beb1b2f perf: extract tensor shape without allocating
• 9dfd75b fix: prevent tensors from outliving the allocator that allocated them (#656)
• 5dc34f8 refactor(operator): share the inplace and alias index list helpers (#660)
• 7b8ba57 fix: guard async run result and waker with one lock so a completion can't be ...
• Additional commits viewable in compare view

Updates toml from 1.1.5+spec-1.1.0 to 1.1.6+spec-1.1.0

Commits

• 572c005 chore: Release
• 66d0c53 docs: Update changelog
• 07af4e7 perf: Reduce allocations in toml_edit parsing and dumping (#1215)
• 0ff90db perf(display): Write encoded strings directly
• efb2536 perf(display): Move generated representation strings
• 075c444 refactor(display): Consolidate key-path encoding
• b48f338 perf(display): Borrow table keys during document output
• c6c1de3 perf(parser): Move completed table header keys
• ec90463 perf(parser): Borrow input when creating editable documents
• d76a48a test: Benchmark rendering generated keys and values
• Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates opener from 0.8.5 to 0.9.0

Changelog

Sourced from opener's changelog.

[0.9.0] - 2026-09-29

Changed

• The minimum supported Rust version (MSRV) is now 1.77, and is declared in Cargo.toml.
• On WSL, open() now uses the Windows shell via PowerShell instead of the discontinued wslview, and reports when Windows cannot open the target. xdg-open is used only if PowerShell is unavailable.
• Updated the bundled xdg-open to xdg-utils 1.2.1, with a fix so that file URLs for other hosts aren't treated as local relative paths.
• Clarified that open() and open_browser() do not wait for the opened application to exit, but may block while preparing or dispatching the launch.
• Documented that a program installed with Flatpak, such as a browser, is given access only to the opened file, and how users can let it read the files that file refers to.
• OpenError::Io now displays the underlying error's message instead of just "IO error". Its source() is now that error's own source, so error reports don't repeat the message.

Fixed

• On Linux and other platforms that use xdg-open, open() now returns an error for a path that doesn't exist, instead of Ok(()). Other xdg-open failures are still not reported, since it may not exit until the opened application does.
• On Windows and WSL, open_browser() now correctly handles percent-encoded file URLs and preserves queries and fragments when BROWSER is unset.
• On Windows, open() now handles percent-encoded non-ASCII characters in file URLs.
• On WSL, open_browser() no longer mangles URLs when BROWSER names a Windows executable.
• open_browser() no longer closes the stderr pipe of the BROWSER program, which could kill it with SIGPIPE.
• The bundled xdg-open script now handles paths that start with -.
• On Linux and other Unix platforms, programs launched without waiting, such as xdg-open and the BROWSER program, no longer remain as zombie processes after they exit.

Commits

• e1e3495 Release v0.9.0
• 446bc2a Declare an MSRV of 1.77 and check it in CI
• 5463029 Add a justfile for running CI checks locally
• 4b2f065 Name release commits after the version again
• c77ca6a Gate releases on CI and use trusted publishing
• 664fc0a Overhaul the CI workflow
• c50ec95 Document Flatpak's single-file access when opening
• de5dc8a Report missing files when opening with xdg-open
• cfcdaa4 Document the reveal feature on docs.rs again
• 2b33026 Keep remote file URLs intact in bundled xdg-open
• Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

• Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

• Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
• Apple: add ifaliasreq and in6_aliasreq (#5557)
• FreeBSD: Add PT_* constants (#5625)
• Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
• Hurd: Add POSIX_SPAWN_* flags (#5578)
• NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
• OpenBSD: Add sensordev (#5534)
• QuRT: Add isatty (#5618)
• WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

• FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

• AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
• Android: Make prop_info an extern type (#5561)
• Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
• FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

• 32-bit Linux-GNU
• 32-bit Linux-uClibc
• 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
• 32-bit Windows-GNU
• ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...

Note that there may still be some changes to features gated by this config option, hence "unstable"

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

• Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

• Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
• Apple: add ifaliasreq and in6_aliasreq (#5557)
• FreeBSD: Add PT_* constants (#5625)
• Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
• Hurd: Add POSIX_SPAWN_* flags (#5578)
• NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
• OpenBSD: Add sensordev (#5534)
• QuRT: Add isatty (#5618)
• WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

• FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

• AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
• Android: Make prop_info an extern type (#5561)
• Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
• FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

• 32-bit Linux-GNU
• 32-bit Linux-uClibc
• 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
• 32-bit Windows-GNU
• ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
</tr></table> 

... (truncated)

Commits

• ccc2ff4 libc: Release 0.2.191
• bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
• ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
• b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
• 9c7f568 apple: add ifaliasreq and in6_aliasreq
• 018c7e9 wasi: Add pthread_condattr_{get,set}clock
• 2c77185 openbsd: add sensordev structure
• e10813c hurd: Add missing POSIX_SPAWN_* flags
• 2ea4bc1 Fix FreeBSD/aarch64
• 6d666fd dragonfly: Parse version from headers rather than CLI
• Additional commits viewable in compare view

Updates objc2 from 0.6.4 to 0.6.5

Commits

• d7d2fa2 Bump objc2 0.6.4 -> 0.6.5
• ed5d37c Cherry-pick #862 for objc2 v0.6.5
• See full diff in compare view

Updates winresource from 0.1.31 to 0.1.34

Commits

• See full diff in compare view

Updates png from 0.17.16 to 0.18.1

Changelog

Sourced from png's changelog.

0.18.1

Additions

• Added Filter::MinEntropy for encoding, which selects the filter that minimizes the Shannon entropy of the filtered row. (#647)
• Made ScaledFloat::SCALING constant public. (#650)
• Support skipping chunks without loading them into memory. (#630)
• Allow full unfiltering for partial data, enabling progressive decoding use cases. (#664)

Changes

• Improved Paeth unfilter auto-vectorization by changing how loop state is maintained. (#635)
• Added portable_simd Paeth unfiltering for 3bpp and 4bpp images on nightly. (#632, #633)
• Add early exit for adaptive filter selection when a perfect filter is found. (#646)
• Ignore duplicate acTL chunks instead of producing errors. (#651)
• Require IDAT chunk(s) before fdAT chunks, as mandated by PNG specification. (#653)
• Enforce acTL frame counts to be valid PNG 4-byte integers (capped at 2^31-1). (#673)

Fixes

• Fixed and improved intra-doc links in documentation comments. (#665)
• Fixed nightly portable_simd build. (#675)

#630: image-rs/image-png#630 #632: image-rs/image-png#632 #633: image-rs/image-png#633 #635: image-rs/image-png#635 #645: image-rs/image-png#645 #646: image-rs/image-png#646 #647: image-rs/image-png#647 #650: image-rs/image-png#650 #651: image-rs/image-png#651 #653: image-rs/image-png#653 #664: image-rs/image-png#664 #665: image-rs/image-png#665 #673: image-rs/image-png#673 #675: image-rs/image-png#675

0.18.0

API Breaking Changes

• Removed deprecated Info::encode and Encoder::set_srgb methods.

... (truncated)

Commits

• See full diff in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

0.23.0

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• 9e9220a v0.23.0
• 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
• fbec5f1 Document no trailing trailing bits
• 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
• f10b7e2 Update deps & edition
• Additional commits viewable in compare view

Updates ureq from 2.12.1 to 3.4.1

Changelog

Sourced from ureq's changelog.

3.4.1

• Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
• Do not pool connections with unconsumed buffered input #1198
• Fix timeout budgets restarting and applying to later phases #1194
• Complete TLS handshake during connect so timeout_connect covers it #1193
• Speed up read_json for responses with a known, small body size #1191

3.4.0

• Seal RequestExt (technically breaking) #1189
• Send canonical Basic authentication scheme to CONNECT proxies #1185
• Establish target TLS through HTTPS CONNECT proxies #1183
• Update rustls-platform-verifier to 0.7.0 #1174
• Fix pooled connections never aging out according to max_idle_age #1172
• Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #1171
• RequestExt::middleware_config for conf inside middleware #1169

3.3.0

• Bump MSRV 1.71 -> 1.85, edition 2024 #1167

3.2.1

• Switch archived utf-8 crate for utf8-zero #1163

3.2.0

• Strip Content-Encoding/Content-Length headers after decompression #1156
• Timeout per resolved ip for try_connect #1152
• Fix body header bug on redirect #1140
• ureq-proto 0.5.3 to fix unsolicited 100-continue #1139
• Make socks5:// locally resolve before calling proxy #1138
• Add socks5h:// which DOESN'T locally resolve before calling proxy #1138

3.1.4

• Set content-type with new Multipart form #1133

3.1.3

• Fix short read with multi-byte charset #1131
• Replace rustls-pemfile usage with rustls-pki-types #1122
• Support for env NO_PROXY and proxy config #1118
• Experimental multi-part form support #1102

3.1.2

• Fix bug when query is after host "example.com?query" #1115

... (truncated)

Commits

• cf4a3cd 3.4.1
• 9559d7b Bump ureq-proto to 0.6.2 (#1199)
• 9eb654c Do not pool a connection with unconsumed input (#1198)
• 5b81318 Anchor timeout budgets to phase boundaries (#1194)
• d480543 Complete TLS handshakes while connecting (#1193)
• 662410b Buffer read_json into memory when Content-Length is below the limit (#1191)
• 5e803fc 3.4.0
• 82b37b5 Update changelog for 3.4.0
• 07b8ea2 Seal RequestExt (#1189)
• 0df28a1 Update changelog
• Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.1

Commits

• 138dc5a Release sha2 v0.11.1 (#927)
• cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
• 7c59cad Update Cargo.lock (#921)
• f57b947 streebog: tweak internal implementation (#925)
• 336611f Fix cargo::manual_readme lint (#924)
• 1df8877 md2: fix clippy::needless_range_loop lint (#923)
• 6075989 sha2: fix loading of round constants on AArch64 backends (#922)
• eadfd90 Update Cargo.lock (#913)
• fa30840 blake2 v0.11.0 (#911)
• f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
• Additional commits viewable in compare view

Updates cpal from 0.16.0 to 0.18.2

Release notes

Sourced from cpal's releases.

cpal 0.18.2

Added

• AAudio: Xruns are now reported as ErrorKind::Xrun.
• CoreAudio: Xruns are now reported as ErrorKind::Xrun.
• PipeWire: Xruns are now reported as ErrorKind::Xrun.
• WASAPI: Capture xruns are now reported as ErrorKind::Xrun.

Changed

• BSD: Clarify that realtime-dbus has no effect there.
• CoreAudio: Bump objc2-core-foundation dependency lower bound to 0.3.1.
• iOS: Timestamps now include hardware latency and update when the audio route changes.
• JACK: Timestamps now include port latency.
• Linux: Clarify that realtime alone is a no-op without realtime-dbus.
• PipeWire: Devices with multiple ports now get distinct, localized, per-port names.
• WASAPI: The windows and windows-core dependencies are now both pinned to 0.62.

Fixed

• Timestamps now stay monotonic across device and graph changes.
• ALSA: A nonzero but sub-millisecond stream timeout is no longer treated as a non-blocking poll.
• ALSA: Fix compilation on FreeBSD, DragonFly, and NetBSD.
• ASIO: Fix duplex streams silently dropping audio when built from separate Device handles.
• AudioWorklet: Fix Stream operations to work when called from any thread.
• AudioWorklet: Fix stale audio output when a data callback wrote a partial buffer.
• CoreAudio: Fix stale audio output when a data callback wrote a partial buffer.
• CoreAudio: Default-output streams now report xrun status.
• iOS: Streams now resume automatically when an audio session interruption ends.
• JACK: Streams with more channels than physical system ports no longer fail to build.
• JACK: Channel enumeration is no longer capped at the physical system port count.
• JACK: Device::id no longer embeds the process ID, so DeviceId is now stable across application restarts.
• PipeWire: Fix streams starting audio before play() is called.
• PipeWire: Fix real-time promotion blocking the audio callback thread on Linux.
• PipeWire: Fix rtkit burst limit errors from repeated real-time promotion on quantum jitter.
• PipeWire: Fix 24-bit sample format mapping.
• PipeWire: Nodes with an /Internal media class are now enumerated as devices.
• PipeWire: Streams for a specific device no longer auto-reroute if it disappears.
• PipeWire: Build on 32-bit targets without native 64-bit atomics.
• PulseAudio: NoData errors are no longer misreported as buffer xruns.
• PulseAudio: Build on 32-bit targets without native 64-bit atomics.
• visionOS: The CoreAudio backend now builds.
• WASAPI: Stream::drop, play, and pause no longer panic when the device is lost.
• WASAPI: Output streams no longer reject formats that the built-in resampler can convert.
• WASAPI: Fix 24-bit samples not being packed into the upper bits of their sample container.
• WASAPI: Reported buffer sizes are no longer off by one frame.
• WASAPI: Default device changes no longer report DeviceChanged, which wrongly implied the stream had rerouted automatically.
• WebAudio: Fix stale audio output when a data callback wrote a partial buffer.
• WebAudio: Fix unsound Send + Sync on Stream when compiled with +atomics.
• WebAudio: Fix Host::is_available() always returning true, even in non-window contexts.

... (truncated)

Changelog

Sourced from cpal's changelog.

[0.18.2] - 2026-08-16

Added

• AAudio: Xruns are now reported as ErrorKind::Xrun.
• CoreAudio: Xruns are now reported as ErrorKind::Xrun.
• PipeWire: Xruns are now reported as ErrorKind::Xrun.
• WASAPI: Capture xruns are now reported as ErrorKind::Xrun.

Changed

• BSD: Clarify that realtime-dbus has no effect there.
• CoreAudio: Bump objc2-core-foundation dependency lower bound to 0.3.1.
• iOS: Timestamps now include hardware latency and update when the audio route changes.
• JACK: Timestamps now include port latency.
• Linux: Clarify that realtime alone is a no-op without realtime-dbus.
• PipeWire: Devices with multiple ports now get distinct, localized, per-port names.
• WASAPI: The windows and windows-core dependencies are now both pinned to 0.62.

Fixed

• Timestamps now stay monotonic across device and graph changes.
• ALSA: A nonzero but sub-millisecond stream timeout is no longer treated as a non-blocking poll.
• ALSA: Fix compilation on FreeBSD, DragonFly, and NetBSD.
• ASIO: Fix duplex streams silently dropping audio when built from separate Device handles.
• AudioWorklet: Fix Stream operations to work when called from any thread.
• AudioWorklet: Fix stale audio output when a data callback wrote a partial buffer.
• CoreAudio: Default-output streams now report xrun status.
• CoreAudio: Fix stale audio output when a data callback wrote a partial buffer.
• iOS: Streams now resume automatically when an audio session interruption ends.
• JACK: Streams with more channels than physical system ports no longer fail to build.
• JACK: Channel enumeration is no longer capped at the physical system port count.
• JACK: Device::id no longer embeds the process ID, so DeviceId is now stable across application restarts.
• PipeWire: Fix streams starting audio before play() is called.
• PipeWire: Fix rtkit burst limit errors from repeated real-time promotion on quantum jitter.
• PipeWire: Fix real-time promotion blocking the audio callback thread on Linux.
• PipeWire: Fix 24-bit sample format mapping.
• PipeWire: Nodes with an /Internal media class are now enumerated as devices.
• PipeWire: Streams for a specific device no longer auto-reroute if it disappears.
• PipeWire: Build on 32-bit targets without native 64-bit atomics.
• PulseAudio: NoData errors are no longer misreported as buffer xruns.
• PulseAudio: Build on 32-bit targets without native 64-bit atomics.
• visionOS: The CoreAudio backend now builds.
• WASAPI: Default device changes no longer report DeviceChanged, which wrongly implied the stream had rerouted automatically.
• WASAPI: Reported buffer sizes are no longer off by one frame.
• WASAPI: Stream::drop, play, and pause no longer panic when the device is lost.
• WASAPI: Capture streams no longer report a spurious xrun on the first buffer after starting.
• WASAPI: Output streams no longer reject formats that the built-in resampler can convert.
• WASAPI: Fix 24-bit samples not being packed into the upper bits of their sample container.
• WebAudio: Fix stale audio output when a data callback wrote a partial buffer.

... (truncated)

Commits

• e1612d5 chore: prepare cpal 0.18.2 and asio-sys 0.4.0 release
• 8806724 fix(wasapi): shift i24 to/from top bits (#1309) (#1311)
• 8846425 fix(asio): share duplex buffer state across Device handles for the same drive...
• 9d05a73 docs: alphabetize error variants in supported-configs docs
• d733d51 doc: record UnsupportedConfig on the supported-configs queries
• 9f6f47a fix(ci): pin mipsel to no forced frame pointers
• b87721d fix(pipewire): fix 24-bit sample format mapping
• e0893c3 doc: realtime-dbus has never worked on BSD
• 11014e4 ios: recover the stream after an audio session interruption (#1295)
• c4a92cb fix: include *BSD in frames_to_duration gate
• Additional commits viewable in compare view

Updates getrandom from 0.3.4 to 0.4.3

Changelog

Sourced from getrandom's changelog.

0.4.3 - 2026-06-17

Added

• wasm64-unknown-unknown target support for wasm_js backend #848

Changed

• Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

#830: rust-random/getrandom#830 #848: rust-random/getrandom#848

0.4.2 - 2026-03-03

Changed

• Bump r-efi dependency to v6 #814

Fixed

• Read errno only when it is set #810
• Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

0.4.1 - 2026-02-03

Fixed

• Documentation build on docs.rs #801

#801: rust-random/getrandom#801

0.4.0 - 2026-02-02

Added

• RawOsError type alias #739
• SysRng behind new feature sys_rng #751
• WASIp3 support