build(deps): bump the rust-patch-and-minor group across 1 directory with 6 updates by dependabot[bot] · Pull Request #65 · sambai-dev/rookhold

dependabot · 2026-09-23T14:25:15Z

Bumps the rust-patch-and-minor group with 6 updates in the / directory:

Package	From	To
hyper	`1.11.0`	`1.11.1`
tower-http	`0.7.0`	`0.7.1`
uuid	`1.26.0`	`1.26.1`
clap	`4.6.6`	`4.6.7`
rustix	`1.1.4`	`1.1.5`
aws-lc-rs	`1.18.0`	`1.18.1`

Updates hyper from 1.11.0 to 1.11.1

Release notes

Sourced from hyper's releases.

v1.11.1

Bug Fixes

http1:

detect TE: trailers caselessly and with other values (#4152) (72fcf545)

recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)

flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)

evict pooled conn on request-side Connection: close (#4110) (da19be08)

What's Changed

fix(http1): evict pooled conn on request-side Connection: close by @samlandfried in hyperium/hyper#4110

test(http1): rewrite disabled old 0.1-futures conn tests by @seanmonstar in hyperium/hyper#4138

Update CONTRIBUTING.md by @Catwoman08 in hyperium/hyper#4140

refactor(error/upgrade): move from the use of ref patterns to & and remove allow for lint ref_patterns by @logan-bobo in hyperium/hyper#4141

fix(http1): flush bytes buffered by the write re-check before yielding by @ricochet in hyperium/hyper#4143

Fix documentation typo by @latent-9 in hyperium/hyper#4146

perf(http2): reserve minimal send capacity when piping request bodies by @sandersaares in hyperium/hyper#4149

chore(lib): cleanup old commented code by @dswij in hyperium/hyper#4151

fix(http1): recognize \n\r\n as a head terminator in the partial-read fast path by @nam2ee in hyperium/hyper#4147

docs(body): add streaming read examples by @fzlzjerry in hyperium/hyper#4148

fix(http1): detect TE: trailers caselessly and with other values by @seanmonstar in hyperium/hyper#4152

fix missing_errors_doc lint by @CinisBorn in hyperium/hyper#4154

refactor: drop redundant continue and remove needless_continue allow by @MsfPablo in hyperium/hyper#4157

docs: expand crate-level cancel safety section with HTTP/1 vs HTTP/2 by @MsfPablo in hyperium/hyper#4156

style(lib): temporarily allow some new clippy lints by @seanmonstar in hyperium/hyper#4165

Add an initial COLLABORATORS guide by @seanmonstar in hyperium/hyper#4158

clippy: remove lints removed in newer clippy versions by @tangaac in hyperium/hyper#4167

Prepare v1.11.1 by @seanmonstar in hyperium/hyper#4169

New Contributors

@samlandfried made their first contribution in hyperium/hyper#4110

@Catwoman08 made their first contribution in hyperium/hyper#4140

@logan-bobo made their first contribution in hyperium/hyper#4141

@ricochet made their first contribution in hyperium/hyper#4143

@latent-9 made their first contribution in hyperium/hyper#4146

@sandersaares made their first contribution in hyperium/hyper#4149

@nam2ee made their first contribution in hyperium/hyper#4147

@fzlzjerry made their first contribution in hyperium/hyper#4148

@CinisBorn made their first contribution in hyperium/hyper#4154

@MsfPablo made their first contribution in hyperium/hyper#4157

@tangaac made their first contribution in hyperium/hyper#4167

Full Changelog: hyperium/hyper@v1.11.0...v1.11.1

Changelog

Sourced from hyper's changelog.

v1.11.1 (2026-08-27)

Bug Fixes

http1:

detect TE: trailers caselessly and with other values (#4152) (72fcf545)

recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)

flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)

evict pooled conn on request-side Connection: close (#4110) (da19be08)

Commits

6371cd4 v1.11.1
37c9d0c style(lib): remove lints that have been removed in newer clippy (#4167)
08a2881 docs(contrib): add initial COLLABORATORS guide (#4158)
8b2e533 style(lib): temporarily allow some new clippy lints (#4165)
8fcaf1a docs(lib): expand crate-level cancel safety section with HTTP/1 vs HTTP/2 (#4...
d32b294 style(lib): fix needless_continue lint (#4157)
fca07bd style(lib): fix missing_errors_doc lint (#4154)
72fcf54 fix(http1): detect TE: trailers caselessly and with other values (#4152)
af432e9 docs(body): add streaming read examples (#4148)
3534d75 fix(http1): recognize \n\r\n as a head terminator in the partial-read fast ...
Additional commits viewable in compare view

Updates tower-http from 0.7.0 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)

fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)

request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)

decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)

decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)

fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)

fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)

set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in tower-rs/tower-http#708

fix(compression): reject non-empty data frames after codec is EOF by @seanmonstar in tower-rs/tower-http#712

Remove Clone derivations from SetMultipleResponseHeader* types by @skeet70 in tower-rs/tower-http#714

feat(request-id): Allow request-id constructor in const context by @tottoto in tower-rs/tower-http#716

fs: Avoid unnecessary conversions between SystemTime and HttpDate by @tottoto in tower-rs/tower-http#717

fs: Use HeaderValue::is_empty to check for empty values by @tottoto in tower-rs/tower-http#720

fs: Use HeaderValue::to_str for date headers by @tottoto in tower-rs/tower-http#721

... (truncated)

Commits

c941451 chore(release): prepare 0.7.1 (#729)
9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
e2582e2 Allow ignoring multi-range requests (#727)
888f7fe feat(services): configure directory redirects (#728)
5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
d154adb fix: reject multipart ranges before validation (#661)
d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
90c072b Propagate ServeDir::try_call I/O errors (#718)
860922e fix(decompression): don't end the body on an empty data frame (#722)
8532252 docs(example)/custom future with multiple bodies (#711)
Additional commits viewable in compare view

Updates uuid from 1.26.0 to 1.26.1

Release notes

Sourced from uuid's releases.

v1.26.1

What's Changed

Seat the v7 counter below the version nibble by @lenamonj in uuid-rs/uuid#907

Don't panic in overflowing Timestamp to SystemTime conversion by @KodrAus in uuid-rs/uuid#909

Prepare for 1.26.1 release by @KodrAus in uuid-rs/uuid#910

New Contributors

@lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

Commits

9f92712 Merge pull request #910 from uuid-rs/cargo/v1.26.1
d4df8f0 prepare for 1.26.1 release
5613f23 Merge pull request #909 from uuid-rs/fix/ts-conversion-overflow
fda00eb don't panic in overflowing Timestamp to SystemTime conversion
c82e88c Merge pull request #907 from lenamonj/v7-counter-placement
ac065a6 Align the counter diagram
34ec102 Seat the v7 counter below the version nibble
See full diff in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates rustix from 1.1.4 to 1.1.5

Commits

287214b chore: Release rustix version 1.1.5
0cea188 fix(bug): ns->us overflow handling (#1655)
a99fd26 build: Remove OUT_DIR probe artifact (#1628)
1e2954a fix build errors for horizon target (#1671)
4cecb72 Mangle the name of rustix::runtime to discourage users. (#1633)
ded795b Fix compile errors for next libc version (#1676)
9640071 Expose the O_SYMLINK & O_NOFOLLOW_ANY flags on Apple platforms (#1666)
cf67411 Fix debug printing of abstract socket addrs (#1615)
aab9464 Completely remove rustc_attrs. (#1663)
a9620e8 ci: fix syn pin (#1647)
Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.0 to 1.18.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.1

What's Changed

Add ECDSA P-256 SHA-1 ASN.1 signature verification by @assafvayner in aws/aws-lc-rs#1214

Adds ECDSA_P256_SHA1_ASN1 for verifying ASN.1 DER-encoded ECDSA P-256 signatures over SHA-1, so applications can verify legacy signatures such as CloudFront signed URLs using ECDSA P-256 with the default SHA-1 hash.

SHA-1 remains available for legacy verification only. This release does not add a corresponding signing algorithm.

Tighten AEAD, cipher IV, HKDF, ECDH, and RSA API contracts by @justsmth in aws/aws-lc-rs#1215

In-place AEAD sealing now verifies that Extend produced exactly enough space for the plaintext and authentication tag before passing the buffer to AWS-LC. Non-conforming custom buffers now return Err(Unspecified).

Streaming cipher constructors now reject missing or mismatched IV contexts, matching the validation already performed by the one-shot APIs.

Salt::from(Okm) now uses the output algorithm selected by the Okm, rather than the algorithm from the source PRK.

ECDH shared-secret storage is now zeroized on fallible derive paths.

RSA verify_digest_sig now requires the supplied digest to match the digest configured by RsaParameters, for both parsed and unparsed public keys.

Valid inputs are unaffected. Calls using inconsistent algorithms, IV contexts, or custom AEAD buffers now fail closed with Err(Unspecified).

Upstream AWS-LC

aws-lc-sys v0.45.0 aligns with AWS-LC v5.7.0 (previously v5.5.0). See also the release notes for v5.6.0.

v5.7.0 corrects EVP_DecryptUpdate for padded block ciphers so it modifies only the output range reported through out_len. aws-lc-rs now includes canary-based regression coverage around the documented minimum output-buffer sizes.

aws-lc-fips-sys v0.14.2 moves to AWS-LC FIPS v4.2.0.

Includes the equivalent EVP_DecryptUpdate correction for FIPS builds.

Restores FIPS builds with Clang 20 and newer.

Removes the FIPS compiler wrapper's dependency on /usr/bin/env, fixing builds in Nix and similar sandboxed environments.

Build Improvements

Export cargo:root metadata when linking against a system-installed AWS-LC by @weihanglo in aws/aws-lc-rs#1208

The system-library path now exposes the installation prefix through DEP_AWS_LC_*_ROOT, consistently with the CC and CMake builders, so downstream build scripts can rely on the metadata regardless of how AWS-LC was built.

Fix -Wa,--debug-prefix-map handling with Clang and LTO by @justsmth in aws/aws-lc-rs#1212

Fixes Clang builds when CFLAGS contains -flto or -flto=thin. The assembler-specific flag is now used only with GCC; Clang's integrated assembler uses -ffile-prefix-map directly.

Filter raw target-triple CFLAGS spellings when compiling jitterentropy by @justsmth in aws/aws-lc-rs#1207

Prevents inherited optimization flags from overriding jitterentropy's required -O0, including when environment variables are set by a parent process using raw or legacy-normalized target triples.

Issues Being Closed

aws-lc-fips-sys v0.14.0 fails to build with Clang newer than 19 -- aws/aws-lc-rs#1202

FIPS compiler wrapper fails in Nix build environments -- aws/aws-lc-rs#1204

Raw target-triple CFLAGS should be filtered for jitterentropy -- aws/aws-lc-rs#1205

aws-lc-sys fails to build with Clang when CFLAGS includes -flto -- aws/aws-lc-rs#1211

Other Merged PRs

Prepare aws-lc-fips-sys v0.14.1 by @justsmth in aws/aws-lc-rs#1203

fix(publish): verify packaged crate with cargo build instead of cargo test by @justsmth in aws/aws-lc-rs#1201

fix: address clippy::assert_is_empty lints in ECB cipher modes by @justsmth in aws/aws-lc-rs#1210

ci: replace removed llvm-devel-lite package in FreeBSD jobs by @justsmth in aws/aws-lc-rs#1213

Prepare aws-lc-sys v0.45.0 by @justsmth in aws/aws-lc-rs#1220

Prepare aws-lc-fips-sys v0.14.2 by @justsmth in aws/aws-lc-rs#1221

Prepare v1.18.1 by @justsmth in aws/aws-lc-rs#1224

... (truncated)

Commits

22e629d Prepare v1.18.1 (#1224)
c4fde5c Prepare aws-lc-fips-sys v0.14.2 (#1221)
7943223 Prepare aws-lc-sys v0.45.0 (#1220)
8ea2229 fix: tighten AEAD, cipher IV, and digest API contracts (#1215)
bcca4d1 Add ECDSA P-256 SHA-1 ASN.1 verification algorithm (#1214)
32338a5 fix(builder): filter the raw-triple CFLAGS spelling for jitterentropy (#1207)
af422bd Fix -Wa,--debug-prefix-map probe (#1212)
749b26f ci: replace removed llvm-devel-lite package in FreeBSD jobs (#1213)
36c7a68 fix(publish): verify packaged crate with cargo build, not cargo test (#1201)
c71ab00 fix: address clippy::assert_is_empty lints in ECB cipher modes (#1210)
Additional commits viewable in compare view

coderabbitai · 2026-09-23T14:25:21Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: sambai-dev/rookhold/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 2a922e12-8235-4f01-a337-d32427467148

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

…ith 6 updates Bumps the rust-patch-and-minor group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [hyper](https://github.com/hyperium/hyper) | `1.11.0` | `1.11.1` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.7.0` | `0.7.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.26.0` | `1.26.1` | | [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` | | [rustix](https://github.com/bytecodealliance/rustix) | `1.1.4` | `1.1.5` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.0` | `1.18.1` | Updates `hyper` from 1.11.0 to 1.11.1 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.11.0...v1.11.1) Updates `tower-http` from 0.7.0 to 0.7.1 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1) Updates `uuid` from 1.26.0 to 1.26.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.26.0...v1.26.1) Updates `clap` from 4.6.6 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7) Updates `rustix` from 1.1.4 to 1.1.5 - [Release notes](https://github.com/bytecodealliance/rustix/releases) - [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md) - [Commits](bytecodealliance/rustix@v1.1.4...v1.1.5) Updates `aws-lc-rs` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.18.0...v1.18.1) --- updated-dependencies: - dependency-name: aws-lc-rs dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch-and-minor - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch-and-minor - dependency-name: hyper dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch-and-minor - dependency-name: rustix dependency-version: 1.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch-and-minor - dependency-name: tower-http dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch-and-minor - dependency-name: uuid dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-patch-and-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-30T14:25:04Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 23, 2026

dependabot Bot force-pushed the dependabot/cargo/rust-patch-and-minor-61b970b7fb branch from e82b1c0 to 11fb4b6 Compare September 26, 2026 11:03

dependabot Bot closed this Sep 30, 2026

dependabot Bot deleted the dependabot/cargo/rust-patch-and-minor-61b970b7fb branch September 30, 2026 14:25

Navigation Menu

Repository navigation

build(deps): bump the rust-patch-and-minor group across 1 directory with 6 updates - #65

build(deps): bump the rust-patch-and-minor group across 1 directory with 6 updates#65
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-patch-and-minor-61b970b7fb

dependabot Bot commented on behalf of github Sep 23, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 23, 2026 •

edited

Loading

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Sep 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.11.1

Bug Fixes

What's Changed

New Contributors

v1.11.1 (2026-08-27)

Bug Fixes

tower-http-0.7.1

Added

Changed

Fixed

All the changes

v1.26.1

What's Changed

New Contributors

v4.6.7

[4.6.7] - 2026-09-14

Features

[4.6.7] - 2026-09-14

Features

aws-lc-rs v1.18.1

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

Uh oh!

coderabbitai Bot commented Sep 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Sep 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 23, 2026 •

edited

Loading

coderabbitai Bot commented Sep 23, 2026 •

edited

Loading