chore(deps): bump the rust-dependencies group across 1 directory with 18 updates by dependabot[bot] · Pull Request #174 · richardikeda/SPEX

dependabot · 2026-10-19T05:11:50Z

Bumps the rust-dependencies group with 18 updates in the / directory:

Package	From	To
sha2	`0.11.0`	`0.11.1`
blake3	`1.8.5`	`1.8.7`
ed25519-dalek	`2.2.0`	`3.0.0`
thiserror	`2.0.18`	`2.0.21`
serde	`1.0.228`	`1.0.229`
base64	`0.22.1`	`0.23.1`
proptest	`1.11.0`	`1.12.0`
mls-rs	`0.55.2`	`0.56.0`
mls-rs-crypto-rustcrypto	`0.22.0`	`0.22.1`
chacha20poly1305	`0.10.1`	`0.11.0`
futures	`0.3.32`	`0.3.34`
rand	`0.10.2`	`0.10.3`
serde_json	`1.0.150`	`1.0.154`
tokio	`1.52.4`	`1.53.3`
rusqlite	`0.39.0`	`0.40.2`
clap	`4.6.2`	`4.6.7`
dirs	`6.0.0`	`7.0.0`
keyring	`4.1.5`	`4.2.0`

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates blake3 from 1.8.5 to 1.8.7

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

1.8.6

version 1.8.6

Changes since 1.8.5:

update_mmap and update_mmap_rayon (and by extension b3sum) now use seek rather than metadata to get the length of a file/mapping, and they tolerate mmap failures. That means b3sum will now memory map e.g. Linux block devices, which support mapping despite reporting length 0 in metadata. Hashing NUL files on Windows also works now, where previously it was an error unless you used --no-mmap or <. This change was originally proposed by @nabijaczleweli.

Commits

f3149ec version 1.8.7
b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
483a220 fix warnings related to not using MAX constants
ba02549 Codex: remove arrayref
77b257e version 1.8.6
83b1746 use seek instead of metadata to establish mmap length (#570)
9eac279 use vswhere to find Visual Studio in CI
fc3d0e9 Fix path to Visual Studio toolchain in CI
8aa5145 a few more colons
6bb9773 use cargo:: build script syntax
Additional commits viewable in compare view

Updates ed25519-dalek from 2.2.0 to 3.0.0

Changelog

Sourced from ed25519-dalek's changelog.

3.0.0

Update the digest dependency to 0.9. This requires a major version because the digest traits are part of the public API, but there are otherwise no changes to the API.

2.1.0

Make Scalar::from_bits a const fn, allowing its use in const contexts.

2.0.0

Fix a data modeling error in the serde feature pointed out by Trevor Perrin which caused points and scalars to be serialized with length fields rather than as fixed-size 32-byte arrays. This is a breaking change, but it fixes compatibility with serde-json and ensures that the serde-bincode encoding matches the conventional encoding for X/Ed25519.

Update rand_core to 0.5, allowing use with new rand versions.

Switch from clear_on_drop to zeroize (by Tony Arcieri).

Require subtle = ^2.2.1 and remove the note advising nightly Rust, which is no longer required as of that version of subtle. See the subtle changelog for more details.

Update README.md for 2.x series.

Remove the build.rs hack which loaded the entire crate into its own build.rs to generate constants, and keep the constants in the source code.

The only significant change is the data model change to the serde feature; besides the rand_core version bump, there are no other user-visible changes.

1.2.4

Specify a semver bound for clear_on_drop rather than an exact version, addressing an issue where changes to inline assembly in rustc prevented clear_on_drop from working without an update.

1.2.3

Fix an issue identified by a Quarkslab audit (and Jack Grigg), where manually constructing unreduced Scalar values, as needed for X/Ed25519, and then performing scalar/scalar arithmetic could compute incorrect results.

Switch to upstream Rust intrinsics for the IFMA backend now that they exist in Rust and don't need to be defined locally.

Ensure that the NAF computation works correctly, even for parameters never used elsewhere in the codebase.

Minor refactoring to EdwardsPoint decompression.

Fix broken links in documentation.

Fix compilation on nightly broken due to changes to the #[doc(include)] path root (not quite correctly done in 1.2.2).

1.2.2

... (truncated)

Commits

6d96eb7 Bump version to 3.0.0.
c68b30f Merge pull request #330 from isislovecruft/fix/move-coc
2ee6193 Merge pull request #327 from huitseeker/digests-0.9
91a0fae Move CoC section from CONTRIBUTING.md to new file.
5038fcf Merge pull request #308 from isislovecruft/fix/pippenger-typo
6afd8ff Update sha2, digest to 0.9
3cc13a7 Merge branch 'master' into develop
c4824e1 Merge branch 'release/2.1.0'
3fc47ef Bump version to 2.1.0
f04b830 Merge branch 'master' into develop
Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

Update to syn 3

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

Make the tests build again on non-SIMD architectures

0.23.0

Added more consts for preconfigured configs and engines

Make DecodeError::InvalidLastSymbol more clear by including the decoded value

Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.

Update MSRV to 1.71.0

Add support for custom padding symbols

Commits

069bf70 v0.23.1
6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
7cffce6 Fix testing on architectures without unsafe SIMD support
e34f9a0 Merge pull request #308 from atouchet/com
e9240c9 Remove outdated comment
9e9220a v0.23.0
870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
fbec5f1 Document no trailing trailing bits
0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
f10b7e2 Update deps & edition
Additional commits viewable in compare view

Updates proptest from 1.11.0 to 1.12.0

Commits

70cf37d Merge pull request #675 from proptest-rs/prep-1.12
729e0ff prepare next releases and fix panic handling
28c1fad Merge pull request #664 from Expyron/main
5ddd9a4 Merge pull request #668 from toddATavail/fix-fork-persisted-failure
a6a9ac7 Merge pull request #673 from glaziermag/fix-book-deploy
d57d88b Replace rand_chacha with chacha20
9411213 Deploy the book on pushes to main
1719745 fix: terminate the fork replay when a persisted failure fails
0f55b7a test: a persisted failure in a forked test must be reported
4b0594e Merge pull request #669 from proptest-rs/no-fail-fast
Additional commits viewable in compare view

Updates mls-rs from 0.55.2 to 0.56.0

Commits

8f1b43f Reapply "chore: pass custom proposal to custom_proposal_requires_update_path"...
39c3eb4 Rever breaking change (#382)
6fc9223 chore: bump rustcrypto to 0.22.1 (#375)
b4cba1f fix(rust crypto x509): validate basic constraints, path length, key usage (#371)
ed53ab7 feat: add zero-copy exported_tree accessor to ExternalGroup (#372)
4e56ee6 feat: Expose the UpdatePath leaf node of a commit on MlsMessage (#369)
d047182 feat: allow creating groups with an arbitrary start epoch (#327) (#366)
fc54539 chore: make LeafNodeSource public, make internal functions private (#365)
09761fa feat: implement fluent GroupBuilder for group creation (#367)
688d8d6 feat(proposal rules): Allow applications to decide if a custom proposal requi...
See full diff in compare view

Updates mls-rs-crypto-rustcrypto from 0.22.0 to 0.22.1

Commits

See full diff in compare view

Updates chacha20poly1305 from 0.10.1 to 0.11.0

Commits

e37a978 chacha20poly1305 v0.11.0 (#853)
a10b56f aes-gcm v0.11.0 (#852)
f042e9c aead-stream v0.6.0 (#851)
b29735a Adopt Trusted Publishing (#854)
a1fe43f xaes-256-gcm: enable and fix workspace level lints (#850)
8cf876f eax: remove toplevel lint attributes (#849)
4661ddf ocb3: enable and fix workspace-level lints (#848)
c821431 eax: enable and fix workspace-level lints (#847)
d3684bb deoxys: enable and fix workspace-level lints (#846)
5e016e2 chacha20poly1305: enable and fix workspace-level lints (#845)
Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

0.3.33

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Commits

705e6b5 Release 0.3.34
616dac7 compat: Inline RawWaker clone function
4176369 Inline remaining RawWaker clone functions
f17a895 Fix cloned FuturesUnordered waker identity
51d62ad macro: bump syn to v3 (#3028)
9e26177 ci: Reduce timeout-minutes
b2d0983 tsan: Enable Adaptive Delay
f733d0e Miri: Ignore compat tests
e5def2f Rename default branch to main
89cc254 Release 0.3.33
Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)

Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)

Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

9e7d328 Prepare rand 0.10.3 (#1840)
f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
c994eb1 docs: fix angle unit in quick start example (#1839)
33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
521fab6 Stop pinning dependencies (#1820)
3f7c433 Stop pinning dependencies
cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates tokio from 1.52.4 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

io: wake and drop DuplexStream wakers outside the lock (#8618)

macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)

runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)

sync: wake waiters outside the lock when closing a semaphore (#8529)

test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits

a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
482eadd runtime: record time wake when unparking tasks on current thread (#8595)
55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
0448618 sync: make tracing_sync tests synchronous (#8427)
2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
Additional commits viewable in compare view

Updates rusqlite from 0.39.0 to 0.40.2

Release notes

Sourced from rusqlite's releases.

0.40.2

What's Changed

Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

0.40.1

What's Changed

Fix clippy warnings #1852

Bump bundled SQLite version to 3.53.2 #1853

Bump hashlink version #1855

Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

Breaking changes: Replace VTab macros by constructors #1823

Breaking changes: Fix VTab::best_index #1824

Asserts on VTab::connect aux and args #1825

Breaking changes: Fix VTab::connect / create #1826

Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829

Derive Default for SeriesTabCursor/ArrayTabCursor #1830

Update link to pre-update hook #1831

Breaking changes: Fix VTab::connect #1832

impl From for FromSqlError #1833

Breaking changes: Fix vtab::dequote #1835

Bump bundled SQLCipher to version 4.14.0 #1837

sqlite3_set_errmsg #1752

Bump sqlite3-parser version #1838

Fix UB in ToSqlOutput::from_rc #1839

Ensure miri doesn't complain #1840

Bump to actions/checkout@v6 #1842

Add support to UtcDateTime #1843, #1844

Bump bundled SQLite version to 3.53.1 #1848

Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

Commits

e88f112 Prepare release
d11c76e Update main.yml
c922ca5 Lower MSRV to 1.88.0
6d3c282 Merge pull request #1856 from gwenn/0.40.1
2ba28b7 Prepare next release
a021dc7 Merge pull request #1854 from gwenn/savepoint
534a149 Merge pull request #1855 from gwenn/hashlink
6d9764f Bump hashlink version
fa574eb Use sqlite3_keyword_check
15385cc Fix SQL injection when SAVEPOINT name is tainted
Additional commits viewable in compare view

Updates clap from 4.6.2 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

Update to syn v3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates keyring from 4.1.5 to 4.2.0

Release notes

Sourced from keyring's releases.

v4.2.0: update the CLI dependencies

This release updates the dependencies of the CLI feature so that it builds appropriate credential stores on each platform. In particular, the db-keystore requires 64-bit platforms and the Android keystore is included on Android.

What's Changed

Bump base64 from 0.23.0 to 0.23.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#346

Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#349

Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#348

Remove mimalloc feature from db-keystore. by @brotskydotcom in open-source-cooperative/keyring-rs#350

Restore the android-native-keyring-store dependency for the cli. by @brotskydotcom in open-source-cooperative/keyring-rs#351

Full Changelog: open-source-cooperative/keyring-rs@v4.1.6...v4.2.0

v4.1.6: fix concurrent initialization bug

This release fixes #343, a bug in concurrent initialization of the v1 default credential store (thanks @bbmediaco for reporting this). As part of this fix, there's an added feature: you can now query the exact result of the default credential store creation, as well as force it to happen without creating an entry.

What's Changed

Bump dependencies by @stevelr in open-source-cooperative/keyring-rs#344

Prepare the release of v4.1.6 by @brotskydotcom in open-source-cooperative/keyring-rs#345

Full Changelog: open-source-cooperative/keyring-rs@v4.1.5...v4.1.6

Commits

d18b5c8 Restore the android-native-keyring-store dependency for the cli. (#351)
ef30fb8 Restore the android-native-keyring-store dependency for the cli.
a0a5a7f Remove mimalloc feature from db-keystore. (#350)
36981e5 Remove mimalloc feature from db-keystore.
6db16c4 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#348)
19d5b62 Merge branch 'main' into dependabot/cargo/dbus-secret-service-keyring-store-1...
6ea8273 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#349)
6a3ac80 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1
659caf5 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1

… 18 updates Bumps the rust-dependencies group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.5` | `1.8.7` | | [ed25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) | `2.2.0` | `3.0.0` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.21` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` | | [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` | | [mls-rs](https://github.com/awslabs/mls-rs) | `0.55.2` | `0.56.0` | | [mls-rs-crypto-rustcrypto](https://github.com/awslabs/mls-rs) | `0.22.0` | `0.22.1` | | [chacha20poly1305](https://github.com/RustCrypto/AEADs) | `0.10.1` | `0.11.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` | | [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.154` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.4` | `1.53.3` | | [rusqlite](https://github.com/rusqlite/rusqlite) | `0.39.0` | `0.40.2` | | [clap](https://github.com/clap-rs/clap) | `4.6.2` | `4.6.7` | | dirs | `6.0.0` | `7.0.0` | | [keyring](https://github.com/open-source-cooperative/keyring-rs) | `4.1.5` | `4.2.0` | Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `blake3` from 1.8.5 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.5...1.8.7) Updates `ed25519-dalek` from 2.2.0 to 3.0.0 - [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases) - [Changelog](https://github.com/dalek-cryptography/curve25519-dalek/blob/3.0.0/CHANGELOG.md) - [Commits](dalek-cryptography/curve25519-dalek@ed25519-2.2.0...3.0.0) Updates `thiserror` from 2.0.18 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.21) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `base64` from 0.22.1 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1) Updates `proptest` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.11.0...v1.12.0) Updates `mls-rs` from 0.55.2 to 0.56.0 - [Commits](awslabs/mls-rs@0.55.2...0.56.0) Updates `mls-rs-crypto-rustcrypto` from 0.22.0 to 0.22.1 - [Commits](https://github.com/awslabs/mls-rs/commits) Updates `chacha20poly1305` from 0.10.1 to 0.11.0 - [Commits](RustCrypto/AEADs@chacha20poly1305-v0.10.1...chacha20poly1305-v0.11.0) Updates `futures` from 0.3.32 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.34) Updates `rand` from 0.10.2 to 0.10.3 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.2...0.10.3) Updates `serde_json` from 1.0.150 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.154) Updates `tokio` from 1.52.4 to 1.53.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.4...tokio-1.53.3) Updates `rusqlite` from 0.39.0 to 0.40.2 - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.39.0...v0.40.2) Updates `clap` from 4.6.2 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.2...clap_complete-v4.6.7) Updates `dirs` from 6.0.0 to 7.0.0 Updates `keyring` from 4.1.5 to 4.2.0 - [Release notes](https://github.com/open-source-cooperative/keyring-rs/releases) - [Commits](open-source-cooperative/keyring-rs@v4.1.5...v4.2.0) --- updated-dependencies: - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: ed25519-dalek dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: proptest dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: mls-rs dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: mls-rs-crypto-rustcrypto dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: chacha20poly1305 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: futures dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rand dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tokio dependency-version: 1.53.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: rusqlite dependency-version: 0.40.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: dirs dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: keyring dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-26T05:17:55Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot requested a review from richardikeda as a code owner October 19, 2026 05:11

dependabot Bot added automated dependencies labels Oct 19, 2026

dependabot Bot closed this Oct 26, 2026

dependabot Bot deleted the dependabot/cargo/rust-dependencies-274aea601d branch October 26, 2026 05:18

Navigation Menu

Repository navigation

chore(deps): bump the rust-dependencies group across 1 directory with 18 updates - #174

chore(deps): bump the rust-dependencies group across 1 directory with 18 updates#174
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-274aea601d

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.8.7

1.8.6

3.0.0

2.1.0

2.0.0

1.2.4

1.2.3

1.2.2

2.0.21

2.0.20

2.0.19

v1.0.229

0.23.1

0.23.0

0.3.34

0.3.33

0.3.34 - 2026-08-11

0.3.33 - 2026-07-18

[0.10.3] — 2026-09-20

Fixes

Changes

v1.0.154

v1.0.153

v1.0.152

v1.0.151

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

Changed

Fixed

Fixed (unstable)

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

0.40.2

What's Changed

0.40.1

What's Changed

0.40.0

What's Changed

v4.6.7

[4.6.7] - 2026-09-14

Features

v4.6.6

[4.6.6] - 2026-08-06

Features

v4.6.5

[4.6.5] - 2026-07-31

Fixes

v4.6.4

[4.6.4] - 2026-07-21

Internal

v4.6.3

[4.6.3] - 2026-07-20

Fixes

[4.6.7] - 2026-09-14

Features

[4.6.6] - 2026-08-06

Features

[4.6.5] - 2026-07-31

Fixes

[4.6.4] - 2026-07-21

Internal

[4.6.3] - 2026-07-20

Fixes

v4.2.0: update the CLI dependencies

What's Changed

v4.1.6: fix concurrent initialization bug

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading