Skip to content

build(deps): bump the all-deps group across 1 directory with 15 updates - #2509

Merged
tarcieri merged 1 commit into
masterfrom
dependabot/cargo/all-deps-531b075e65
Nov 2, 2026
Merged

build(deps): bump the all-deps group across 1 directory with 15 updates#2509
tarcieri merged 1 commit into
masterfrom
dependabot/cargo/all-deps-531b075e65

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-deps group with 15 updates in the / directory:

Package From To
inout 0.2.2 0.2.5
zeroize 1.9.0 1.9.1
hybrid-array 0.4.13 0.4.15
ctutils 0.4.5 0.4.7
cfg-if 1.0.4 1.0.5
cpufeatures 0.3.0 0.3.1
crypto-bigint 0.7.8 0.7.10
der 0.8.1 0.8.3
libc 0.2.186 0.2.191
serde 1.0.228 1.0.229
serde_core 1.0.228 1.0.229
serde_derive 1.0.228 1.0.229
spki 0.8.0 0.8.1
syn 2.0.118 3.0.9
unicode-ident 1.0.24 1.0.27

Updates inout from 0.2.2 to 0.2.5

Commits

Updates zeroize from 1.9.0 to 1.9.1

Commits

Updates hybrid-array from 0.4.13 to 0.4.15

Changelog

Sourced from hybrid-array's changelog.

0.4.15 (2026-09-08)

Added

  • ArraySize for U513 (#233)

#233: RustCrypto/hybrid-array#233

0.4.14 (2026-07-30)

Added

  • Sizes for sntrup (#231)

#231: RustCrypto/hybrid-array#231

Commits

Updates ctutils from 0.4.5 to 0.4.7

Commits

Updates cfg-if from 1.0.4 to 1.0.5

Release notes

Sourced from cfg-if's releases.

v1.0.5

  • Add a note that this crate is deprecated, suggesting cfg_select! instead
Changelog

Sourced from cfg-if's changelog.

1.0.5 - 2026-09-16

  • Add a note that this crate is deprecated, suggesting cfg_select! instead
Commits
  • 8b0a2b0 Deprecation notice + crate version bump
  • efabe3f Add a changelog entry for the upcoming deprecation notice
  • a66c2d4 Bump actions/checkout from 6 to 7
  • bda9677 Bump actions/checkout from 5 to 6
  • See full diff in compare view

Updates cpufeatures from 0.3.0 to 0.3.1

Commits
  • da1f969 cpufeatures v0.3.1 (#1520)
  • a045008 zeroize-derive: bump syn from v2 to v3 (#1508)
  • e94573d ci: bump keccak from 0.2.0 to 0.2.1 (#1516)
  • 47a4583 cpufeatures: use compile-time target feature detection under Miri (#1513)
  • 26a2ed8 cpufeatures: use u8::MAX constant instead of deprecated u8::max_value() a...
  • 6657f0c cpufeatures: fix avx detection (#1511)
  • a8897c9 Update Cargo.lock (#1503)
  • c83fd59 ci: bump actions/cache from 5 to 6 (#1501)
  • fc6c63d ci: bump actions/checkout from 6 to 7 (#1498)
  • 3e5ece8 inout: fix safety pre-conditions list in InOutBufReserved::from_raw docs (#...
  • Additional commits viewable in compare view

Updates crypto-bigint from 0.7.8 to 0.7.10

Changelog

Sourced from crypto-bigint's changelog.

0.7.10 (2026-10-26)

Fixed

  • Optimize Montgomery multiplication carry propagation (#1376)
  • Replace ctutils primitives with faster internal primitives (#1377)

#1376: RustCrypto/crypto-bigint#1376 #1377: RustCrypto/crypto-bigint#1377

0.7.9 (2026-10-25)

Changed

  • Use shr_vartime in PrimeParams::new_vartime (#1372)

Fixed

  • Fix blanket impl of Mul for NonZero<T> [BREAKING] (#1373)

#1372: RustCrypto/crypto-bigint#1372 #1373: RustCrypto/crypto-bigint#1373

Commits

Updates der from 0.8.1 to 0.8.3

Commits

Updates libc from 0.2.186 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

  • 32-bit Linux-GNU
  • 32-bit Linux-uClibc
  • 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
  • 32-bit Windows-GNU
  • ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...

Note that there may still be some changes to features gated by this config option, hence "unstable"

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

  • 32-bit Linux-GNU
  • 32-bit Linux-uClibc
  • 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
  • 32-bit Windows-GNU
  • ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
</tr></table>

... (truncated)

Commits
  • ccc2ff4 libc: Release 0.2.191
  • bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
  • ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
  • b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
  • 9c7f568 apple: add ifaliasreq and in6_aliasreq
  • 018c7e9 wasi: Add pthread_condattr_{get,set}clock
  • 2c77185 openbsd: add sensordev structure
  • e10813c hurd: Add missing POSIX_SPAWN_* flags
  • 2ea4bc1 Fix FreeBSD/aarch64
  • 6d666fd dragonfly: Parse version from headers rather than CLI
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_core from 1.0.228 to 1.0.229

Release notes

Sourced from serde_core's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_derive from 1.0.228 to 1.0.229

Release notes

Sourced from serde_derive's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates spki from 0.8.0 to 0.8.1

Commits
  • 9e21af6 spki v0.8.1 (#2474)
  • e7cb4ea der: order FlagSet by its BIT STRING encoding (#2451)
  • 16a33d3 der: Option::der_cmp(None, None) is Equal (#2449)
  • 4b943a9 der: order SET OF components by their encoded octets (#2447)
  • 7be020f der: order UTCTime in SET OF by its encoding (#2448)
  • b5ce858 der: require a SEQUENCE in Document::decode (#2442)
  • 61ecb1e der: add negative test for SequenceOf with shorter length than inner data (#2...
  • 6434fe5 cms: tag TimeStampedData / ERS types implicitly, as RFC 5544 and RFC 4998 def...
  • e0acafd cmpv2: PkiFailureInfoValues are bit masks (#2470)
  • 4994d93 cms: CertificateChoices other [3] is IMPLICIT (#2467)
  • Additional commits viewable in compare view

Updates syn from 2.0.118 to 3.0.9

Release notes

Sourced from syn's releases.

3.0.9

  • Add Punctuated::retain (#2088)

3.0.8

  • Fix parsing of <- and -> tokens in expressions (#2086, #2087)

3.0.7

3.0.6

  • Fix parsing interpolated lifetime at statement start (#2082)

3.0.5

3.0.4

  • Allow safe fn in impl Parse for ForeignItemFn (#2078)

3.0.3

  • Documentation improvements

3.0.2

3.0.1

3.0.0

This release contains adjustments to the syntax tree to account for ongoing Rust language development from the 3 years since syn 2.0.0 and to anticipate some in-flight Rust language RFCs.

These include: default values in fields, pinned type sugar, raw lifetimes, generator blocks and functions, unnamed enum variants, attributes in tuple types and tuple patterns, named arguments in parenthesized generic argument lists, lightweight clones, const traits, const function pointers, mutability restricted fields, supertrait auto implementation, final associated functions, trait implementability restrictions, const blocks in path arguments, item-level const blocks, return type notation, never patterns, function delegation, mutable by-reference bindings, in-place initialization, field projections, explicitly dyn-compatible traits, view types, file-level frontmatter, generic const arguments, guard patterns, lazy type aliases, explicitly safe foreign items, super let, unsafe fields, pattern types, heterogeneous try-blocks, function contracts, async function trait bounds, static closure coroutine syntax, unsafe binder types, move expressions, for-await loops, and postfix keywords.

Breaking changes

Modifiers

To reserve more room for language evolution, there are 10 new non-exhaustive structs in the syntax tree having the following commonality:

  • Name ending in Modifiers. {BlockModifiers, ClosureModifiers, ConstModifiers, FieldModifiers, FnModifiers, ImplModifiers, LocalModifiers, TraitBoundModifiers, TraitModifiers, TypeModifiers}

  • Each implements Default. The default value is guaranteed to comprise no tokens.

  • Non-exhaustive. Can only be instantiated by Syn's parser or by creating and then mutating ▁▁Modifiers::default().

... (truncated)

Commits

Updates unicode-ident from 1.0.24 to 1.0.27

Release notes

Sourced from unicode-ident's releases.

1.0.27

  • Optimize trie layout to create headroom for new identifiers in future unicode versions (#54, #56)

1.0.26

  • Use entry within trie as fallback for out-of-range codepoints (#50, thanks @​Marcondiro)

1.0.25

  • Update to Unicode 18.0.0 (#51)
Commits
  • c1ac3af Release 1.0.27
  • ff8907c Merge pull request #56 from dtolnay/segment
  • b57403f Split base address for two different lookups
  • 4e958c4 Merge pull request #55 from dtolnay/indexset
  • 7da4079 Replace chunk layout with IndexSet
  • 97d6034 Merge pull request #54 from dtolnay/overflow
  • c7e447b Defer half-chunk overflow enforcement
  • 639d388 Merge pull request #53 from dtolnay/triestat
  • 662f912 Update trie statistics in readme for Unicode 18.0.0
  • 2bdb95a Merge pull request #52 from dtolnay/naming
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the all-deps group across 1 directory with 15 updates
a3b2df3 
Bumps the all-deps group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [inout](https://github.com/RustCrypto/utils) | `0.2.2` | `0.2.5` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.9.0` | `1.9.1` |
| [hybrid-array](https://github.com/RustCrypto/hybrid-array) | `0.4.13` | `0.4.15` |
| [ctutils](https://github.com/RustCrypto/utils) | `0.4.5` | `0.4.7` |
| [cfg-if](https://github.com/rust-lang/cfg-if) | `1.0.4` | `1.0.5` |
| [cpufeatures](https://github.com/RustCrypto/utils) | `0.3.0` | `0.3.1` |
| [crypto-bigint](https://github.com/RustCrypto/crypto-bigint) | `0.7.8` | `0.7.10` |
| [der](https://github.com/RustCrypto/formats) | `0.8.1` | `0.8.3` |
| [libc](https://github.com/rust-lang/libc) | `0.2.186` | `0.2.191` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_core](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_derive](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [spki](https://github.com/RustCrypto/formats) | `0.8.0` | `0.8.1` |
| [syn](https://github.com/dtolnay/syn) | `2.0.118` | `3.0.9` |
| [unicode-ident](https://github.com/dtolnay/unicode-ident) | `1.0.24` | `1.0.27` |



Updates `inout` from 0.2.2 to 0.2.5
- [Commits](RustCrypto/utils@inout-v0.2.2...inout-v0.2.5)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

Updates `hybrid-array` from 0.4.13 to 0.4.15
- [Changelog](https://github.com/RustCrypto/hybrid-array/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/hybrid-array@v0.4.13...v0.4.15)

Updates `ctutils` from 0.4.5 to 0.4.7
- [Commits](RustCrypto/utils@ctutils-v0.4.5...ctutils-v0.4.7)

Updates `cfg-if` from 1.0.4 to 1.0.5
- [Release notes](https://github.com/rust-lang/cfg-if/releases)
- [Changelog](https://github.com/rust-lang/cfg-if/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cfg-if@v1.0.4...v1.0.5)

Updates `cpufeatures` from 0.3.0 to 0.3.1
- [Commits](RustCrypto/utils@cpufeatures-v0.3.0...cpufeatures-v0.3.1)

Updates `crypto-bigint` from 0.7.8 to 0.7.10
- [Changelog](https://github.com/RustCrypto/crypto-bigint/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/crypto-bigint@v0.7.8...v0.7.10)

Updates `der` from 0.8.1 to 0.8.3
- [Commits](RustCrypto/formats@der/v0.8.1...der/v0.8.3)

Updates `libc` from 0.2.186 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.186...0.2.191)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_core` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_derive` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `spki` from 0.8.0 to 0.8.1
- [Commits](RustCrypto/formats@spki/v0.8.0...spki/v0.8.1)

Updates `syn` from 2.0.118 to 3.0.9
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.118...3.0.9)

Updates `unicode-ident` from 1.0.24 to 1.0.27
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](dtolnay/unicode-ident@1.0.24...1.0.27)

---
updated-dependencies:
- dependency-name: inout
  dependency-version: 0.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: hybrid-array
  dependency-version: 0.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: ctutils
  dependency-version: 0.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: cfg-if
  dependency-version: 1.0.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: cpufeatures
  dependency-version: 0.3.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: crypto-bigint
  dependency-version: 0.7.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: der
  dependency-version: 0.8.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: serde_core
  dependency-version: 1.0.229
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: serde_derive
  dependency-version: 1.0.229
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: spki
  dependency-version: 0.8.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: syn
  dependency-version: 3.0.9
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: all-deps
- dependency-name: unicode-ident
  dependency-version: 1.0.27
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Nov 2, 2026
@tarcieri
tarcieri merged commit ec30ea6 into master Nov 2, 2026
86 checks passed
@tarcieri
tarcieri deleted the dependabot/cargo/all-deps-531b075e65 branch November 2, 2026 23:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tarcieri