Skip to content

build(deps): bump the cargo-deps group across 1 directory with 11 updates#13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-deps-0eaac2f7e8
Open

build(deps): bump the cargo-deps group across 1 directory with 11 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-deps-0eaac2f7e8

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 23, 2026

Bumps the cargo-deps group with 11 updates in the / directory:

Package From To
serde_json 1.0.149 1.0.150
socket2 0.5.10 0.6.3
sha2 0.10.9 0.11.0
sha1 0.10.6 0.11.0
md-5 0.10.6 0.11.0
digest 0.10.7 0.11.3
hmac 0.12.1 0.13.0
bzip2 0.4.4 0.6.1
rusqlite 0.31.0 0.39.0
rustyline 14.0.0 18.0.0
dirs 5.0.1 6.0.0

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Commits
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • dc8003a Raise required compiler for preserve_order feature to 1.85
  • a42fa98 Unpin CI miri toolchain
  • 684a60e Pin CI miri to nightly-2026-02-11
  • 7c7da33 Raise required compiler to Rust 1.71
  • acf4850 Simplify Number::is_f64
  • 6b8ceab Resolve unnecessary_map_or clippy lint
  • Additional commits viewable in compare view

Updates socket2 from 0.5.10 to 0.6.3

Changelog

Sourced from socket2's changelog.

0.6.3

  • Added support for wasm32-wasip2.
  • Added Socket::(set_)ip_transparent_v6.
  • Added Socket::set_tcp_ack_frequency.
  • Support windows-sys v0.61 in addition to v0.60.

POTENTIALLY BREAKING The MSRV of windows-sys v0.61 is 1.71. To use socket2 with its MSRV of 1.70, please downgrade windows-sys to v0.60.x. This can be done using: cargo update windows-sys --precise 0.60.2

0.6.2

  • MsgHdr and MsgHdrMut are marked as transparent meaning both have the same layout as msghdr on Unix and WSAMSG on Windows (rust-lang/socket2#635).
  • Don't set SO_NOSIGPIPE when accepting sockets, this is inherited from the parent socket (rust-lang/socket2#632).
  • Fixes Socket::tcp_notsent_lowat by using the correct argument type (rust-lang/socket2#622).

0.6.1

Added

Changed

0.6.0

Breaking changes

All IPv4 methods now have a _v4 suffix, IPv6 uses _v6. TCP methods have a tcp_ prefix (looked better than a suffix).

Furthermore we removed all types from external libraries (i.e. libc or windows-sys) from the public API, allowing us to update those without breaking the API.

... (truncated)

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates sha1 from 0.10.6 to 0.11.0

Commits

Updates md-5 from 0.10.6 to 0.11.0

Commits

Updates digest from 0.10.7 to 0.11.3

Commits
  • 2fb9ed8 Release digest v0.11.3 (#2402)
  • 086cf38 digest: add TryCustomizedInit trait (#2395)
  • 9488e7e signature v3.0.0 (#2400)
  • 2917d19 build(deps): bump the all-deps group across 1 directory with 4 updates (#2398)
  • 7b029ba signature: add AsyncVerifier, AsyncMultipartVerifier, `AsyncDigestVerifie...
  • c6d4dd7 elliptic-curve v0.14.0-rc.32 (#2399)
  • f2069a2 elliptic-curve: bump pkcs8 to v0.11 (#2397)
  • 8250383 elliptic-curve: bump pkcs8 to v0.11.0-rc.12 (#2396)
  • 54e464f signature: remove long-winded intro section in rustdoc (#2392)
  • 5cb62a4 signature: enable/fix workspace-level lints; reformat docs (#2391)
  • Additional commits viewable in compare view

Updates hmac from 0.12.1 to 0.13.0

Commits

Updates bzip2 from 0.4.4 to 0.6.1

Release notes

Sourced from bzip2's releases.

v0.6.0

Highlights

This release switches to libbz2-rs-sys as the default bzip2 backend. It is written in rust, making it much easier to cross-compile. The new implementation is also more performant.

The rust implementation does not export C symbols by default. An explicit dependency on libbz2-rs-sys and setting the export-symbols feature flag will fix that if needed.

The bzip2-sys feature flag can be used to continue to use the C backend (either the system library of a C version built from source).

This is a breaking release, given that we want this update to be opt-in. We've used the occasion to perform an MSRV bump to 1.82.0. The libbz2-rs-sys crate has the bzip2-1.0.6 license. Arguably, that is the license that bzip2-sys should have had too, given that it is just a wrapper of the original bzip2 (and libbz2-rs-sys is a derivative work). You may need to allow this license when using cargo-deny.

What's Changed

Full Changelog: trifectatechfoundation/bzip2-rs@v0.5.2...v0.6.0

Version 0.5.2 (and 0.1.13 for bzip2-sys)

Some minor fixes this time

  • better wasm support (and we test wasm on CI)
  • make bz_internal_error an extern fn by @​folkertdev in trifectatechfoundation/bzip2-rs#135 fixes a soundness issue. This is technically a semver-breaking change, but major versions for -sys crates create a lot of churn. We don't expect users to run into this

What's Changed

New Contributors

Full Changelog: trifectatechfoundation/bzip2-rs@v0.5.1...v0.5.2

Version 0.5.1 (and 0.1.12 for bzip2-sys)

Highlights

Most changes relate to libbz2-rs-sys: we no longer enable the static feature, and now including different versions, that use either the C or the rust -sys crate, all work together in the same build.

What's Changed

... (truncated)

Commits
  • eebf6e4 release version 0.6.1
  • 1ed41c4 Add MaybeUninit\<u8> (de)compress API
  • a165219 chore: remove redundant word in comment
  • 422ae6d fix(bzip2-sys): license expression to be a valid spdx expression
  • 21db697 ran cargo clippy --fix -- -A clippy::all -W clippy::use_self
  • 71d5b03 Release 0.6.0
  • f5f9d09 Release 0.5.2
  • 6a5073a make bz_internal_error an extern fn
  • 17171c2 remove libc dependency of bzip2-sys
  • bbc4b47 run tests on wasm32-wasip2 on CI
  • Additional commits viewable in compare view

Updates rusqlite from 0.31.0 to 0.39.0

Release notes

Sourced from rusqlite's releases.

0.39.0

What's Changed

  • Fix constraints on VTab Aux data #1778, #1771
  • Fix docs.rs generation #1779
  • Fix a small typo in rollback_hook docstring #1780
  • Fix some warnings from Intellij #1781
  • Minimal doc for features #1783
  • Clear hooks only for owning connections #1785, #1784
  • Fix link to SQLite C Interface, Prepare Flags #1787
  • Comment functions which are not usable from a loadable extension #1789
  • Factorize code #1792
  • Update getrandom to 0.4 #1798
  • Update Cargo.toml #1800
  • Fix appveyor #1807
  • Add support to unix timestamp for chrono, jiff and time #1808, #1803
  • fix(trace): check that the sql string pointer is not NULL #1805
  • Bump bundled SQLite version to 3.51.3 #1818
  • Use TryFrom for Value #1819, #1817
  • Make possible to pass your own pointers #1626, #1602

Full Changelog: rusqlite/rusqlite@v0.38.0...v0.39.0

0.38.0

What's Changed

  • bump sqlcipher to 4.10.0 (sqlite 3.50.4) #1725
  • Use CARGO_CFG_TARGET_FEATURE for crt-static check #1737
  • Disable u64, usize ToSql/FromSql impl by default #1732, ##1722 (breaking change)
  • Make statement cache optional #1682, #1173 (breaking change)
  • Remove shell scripts from the published package #1744
  • Use new interfaces with 64-bit length parameters #1749
  • sqlite3_vtab_rhs_value #1753
  • Handle VTab IN values #1754
  • Give access to Connection from VTabCursor::column #1755
  • Bump minimal SQLite version to 3.34.1 #1733, #1731 (breaking change)
  • Bump bundled SQLite version to 3.51.1 #1758
  • Add support for transaction to the vtab module #1761
  • Check Connection is owned when registering Closure as hook #1764 (breaking change)
  • Turn libsqlite3-sys in a !#[no_std] crate #1767
  • Add wasm32-unknown-unknown support #1769, #488, #827
  • Remove useless Send/Sync on Module #1774

Full Changelog: rusqlite/rusqlite@v0.37.0...v0.38.0

0.37.0

What's Changed

  • Add FromSqlError::other convenience conversion #1703
  • Fix warnings #1705
  • Update bindgen requirement from 0.71 to 0.72 #1707
  • Fix for vtab::parameter parsing #1712
  • Fix clippy warning #1713

... (truncated)

Commits

Updates rustyline from 14.0.0 to 18.0.0

Release notes

Sourced from rustyline's releases.

18.0.0

What's Changed

  • Support minimal repaint #882
  • Fix edit_kill #887, #885
  • On windows, check that prompt is not styled #890, #889, #836, #562, #702, #215
  • Bump windows-sys version #892
  • Check NO_COLOR environment variable #894
  • Fix clippy warning #896
  • Update radix_trie requirement from 0.2 to 0.3 #898
  • Introduce Prompt trait for styling #893
  • Fix partial refresh #899, #897
  • Remove doc_auto_cfg #900
  • Fix vi paste #901, #732
  • Install signal handlers only when actually reading #903, #902
  • Configure cargo deny #904, #637
  • Update rusqlite version #906
  • Update signal-hook to 0.4 #907
  • Replace fd-lock with std File::lock #909, #908
  • Bump nix version to 0.31 #911
  • Refactor code related to signal handling #912
  • Bump signal-hook version #913, #910
  • Update rand to 0.10 #917
  • Update skim from 0.10 to 3.3.0 #919
  • Allow getting handler to fail after partial key event matches. #924, #923
  • Update dependencies #929
  • Clippy #930
  • Add comments on how to debug with PowerShell #933
  • Try to fix a panic related to SIG_PIPE #932, #931

Full Changelog: kkawakam/rustyline@v17.0.2...v18.0.0

17.0.2

Fix partial refresh #899, #897

Full Changelog: kkawakam/rustyline@v17.0.1...v17.0.2

17.0.1

Full Changelog: kkawakam/rustyline@v17.0.0...17.0.1

17.0.0

What's Changed

  • Fix warnings #869
  • Bump windows-sys dependency #870
  • Fix clippy warnings #871, #872
  • Fix configuration #875
  • Impl Hint for AsRef #876
  • Update rusqlite requirement from 0.36.0 to 0.37.0 #878
  • Avoid a full refresh while deleting at the end of the line #877

... (truncated)

Commits

Updates dirs from 5.0.1 to 6.0.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo-deps group across 1 directory with 11 upd…
748db40 
…ates

Bumps the cargo-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` |
| [socket2](https://github.com/rust-lang/socket2) | `0.5.10` | `0.6.3` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [sha1](https://github.com/RustCrypto/hashes) | `0.10.6` | `0.11.0` |
| [md-5](https://github.com/RustCrypto/hashes) | `0.10.6` | `0.11.0` |
| [digest](https://github.com/RustCrypto/traits) | `0.10.7` | `0.11.3` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |
| [bzip2](https://github.com/trifectatechfoundation/bzip2-rs) | `0.4.4` | `0.6.1` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.31.0` | `0.39.0` |
| [rustyline](https://github.com/kkawakam/rustyline) | `14.0.0` | `18.0.0` |
| [dirs](https://github.com/soc/dirs-rs) | `5.0.1` | `6.0.0` |



Updates `serde_json` from 1.0.149 to 1.0.150
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.150)

Updates `socket2` from 0.5.10 to 0.6.3
- [Release notes](https://github.com/rust-lang/socket2/releases)
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/socket2/commits/v0.6.3)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `sha1` from 0.10.6 to 0.11.0
- [Commits](RustCrypto/hashes@sha1-v0.10.6...sha1-v0.11.0)

Updates `md-5` from 0.10.6 to 0.11.0
- [Commits](RustCrypto/hashes@md-5-v0.10.6...md2-v0.11.0)

Updates `digest` from 0.10.7 to 0.11.3
- [Commits](RustCrypto/traits@digest-v0.10.7...digest-v0.11.3)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

Updates `bzip2` from 0.4.4 to 0.6.1
- [Release notes](https://github.com/trifectatechfoundation/bzip2-rs/releases)
- [Commits](trifectatechfoundation/bzip2-rs@0.4.4...v0.6.1)

Updates `rusqlite` from 0.31.0 to 0.39.0
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.31.0...v0.39.0)

Updates `rustyline` from 14.0.0 to 18.0.0
- [Release notes](https://github.com/kkawakam/rustyline/releases)
- [Changelog](https://github.com/kkawakam/rustyline/blob/master/History.md)
- [Commits](kkawakam/rustyline@v14.0.0...v18.0.0)

Updates `dirs` from 5.0.1 to 6.0.0
- [Commits](https://github.com/soc/dirs-rs/commits)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: socket2
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: sha1
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: md-5
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: digest
  dependency-version: 0.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: bzip2
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: rusqlite
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: rustyline
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-deps
- dependency-name: dirs
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants