Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps the rust-dependencies group with 14 updates in the / directory:

Package From To
flate2 1.1.4 1.1.5
rand 0.9.1 0.9.2
serde_with 3.15.0 3.15.1
thiserror 2.0.12 2.0.17
pbkdf2 0.11.0 0.12.2
rustls 0.23.33 0.23.34
socket2 0.6.0 0.6.1
windows-sys 0.60.2 0.61.0
home 0.5.11 0.5.12
cc 1.2.41 1.2.43
deranged 0.5.4 0.5.5
proc-macro2 1.0.101 1.0.103
rustls-pki-types 1.12.0 1.13.0
unicode-ident 1.0.19 1.0.20

Updates flate2 from 1.1.4 to 1.1.5

Release notes

Sourced from flate2's releases.

1.1.5

This bugfix release fixes #508, as flush didn't always work anymore in conjunction with miniz_oxide.

What's Changed

Full Changelog: rust-lang/flate2-rs@1.1.4...1.1.5

Commits
  • 2661fbb Merge pull request #509 from fintelia/revert-flush-change
  • bc36cf4 Bump patch version
  • 4341fe2 Revert "Use partial flushes with miniz_oxide backend"
  • See full diff in compare view

Updates rand from 0.9.1 to 0.9.2

Changelog

Sourced from rand's changelog.

[0.9.2 — 2025-07-20]

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)
Commits

Updates serde_with from 3.15.0 to 3.15.1

Release notes

Sourced from serde_with's releases.

serde_with v3.15.1

Fixed

  • Fix building of the documentation by updating references to use serde_core.
Commits
  • d5ccc10 Bump version to v3.15.1 (#898)
  • 341fbc1 Bump version to v3.15.1
  • 18ca8f2 Update the documentation to refer to serde_core instead of serde (#897)
  • f5deae3 Update the documentation to refer to serde_core instead of serde
  • e8ad178 Bump github/codeql-action from 3 to 4 in the github-actions group (#893)
  • dcfb20f Bump regex from 1.11.2 to 1.12.1 (#894)
  • cb2fddd Bump regex from 1.11.2 to 1.12.1
  • 6a8cb9e Bump github/codeql-action from 3 to 4 in the github-actions group
  • See full diff in compare view

Updates thiserror from 2.0.12 to 2.0.17

Release notes

Sourced from thiserror's releases.

2.0.17

  • Use differently named __private module per patch release (#434)

2.0.16

  • Add to "no-std" crates.io category (#429)

2.0.15

  • Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

  • Documentation improvements
Commits
  • 72ae716 Release 2.0.17
  • 599fdce Merge pull request #434 from dtolnay/private
  • 9ec05f6 Use differently named __private module per patch release
  • d2c492b Raise minimum tested compiler to rust 1.76
  • fc3ab95 Opt in to generate-macro-expansion when building on docs.rs
  • 819fe29 Update ui test suite to nightly-2025-09-12
  • 259f48c Enforce trybuild >= 1.0.108
  • 470e6a6 Update ui test suite to nightly-2025-08-24
  • 544e191 Update actions/checkout@v4 -> v5
  • cbc1eba Delete duplicate cap-lints flag from build script
  • Additional commits viewable in compare view

Updates pbkdf2 from 0.11.0 to 0.12.2

Commits

Updates rustls from 0.23.33 to 0.23.34

Commits

Updates socket2 from 0.6.0 to 0.6.1

Changelog

Sourced from socket2's changelog.

0.6.1

Added

Changed

Commits
  • d0ba3d3 Release v0.6.1
  • 3a8b7ed Add example to create SockAddr from libc::sockaddr_storage (#615)
  • b54e2e6 Disable armv7-sony-vita-newlibeabihf CI check
  • 2d4a2f7 Update feature doc_auto_cfg to doc_cfg
  • 11aa102 Add missing components when installing Rust in CI
  • 528ba2b Add TCP_NOTSENT_LOWAT socketopt support
  • 1fdd293 Correct rename in CHANGELOG.md (#610)
  • 600ff0d Add support for Windows Registered I/O
  • f083696 Allow SockFilter::new in const contexts
  • 15ade51 Refactor for cargo fmt
  • Additional commits viewable in compare view

Updates windows-sys from 0.60.2 to 0.61.0

Release notes

Sourced from windows-sys's releases.

61

Major crate updates:

  • windows 0.59.0
  • windows-core 0.59.0
    • windows-implement 0.59.0
    • windows-interface 0.59.0
  • windows-targets 0.53.0
    • windows_i686_msvc 0.53.0
    • windows_x86_64_msvc 0.53.0
    • windows_aarch64_msvc 0.53.0
    • windows_i686_gnu 0.53.0
    • windows_x86_64_gnu 0.53.0
    • windows_i686_gnullvm 0.53.0
    • windows_x86_64_gnullvm 0.53.0
    • windows_aarch64_gnullvm 0.53.0
  • windows-bindgen 0.59.0
  • windows-registry 0.4.0
  • windows-result 0.3.0
  • windows-strings 0.3.0
  • cppwinrt 0.2.0

Minor crate updates:

  • windows-version 0.1.2

Excluded:

  • windows-sys 0.59.0

Things to keep in mind:

  • The tag/release names no longer map directly to the crate versions, so to find samples for a particular release requires looking at the releases page and finding the release that most recently updated a particular crate.

  • The windows-bindgen crate includes the major code generation overhaul that brings many improvements - be sure to check out the PR description for more information. The resulting code gen depends on the new version of windows-core and its dependencies, unless you include the --sys option. #3359

  • The cppwinrt crate constitutes a major update due to streamlining the error handling. #3415

  • The windows-registry, windows-strings, and windows-result crates are also major version updates since they include small breaking changes.

  • The windows-targets crate finally receives a major version update, the first in over a year. This is due to #3359 and #3342 potentially introducing breaking changes. Although unlikely, these updates introduced sufficient changes that make it hard to ensure that the windows-targets libs don't break existing code. As we're updating windows-targets anyway, I took the liberty to bump the MSRV to 1.60 - to match the latest version of windows-sys - and remove the old but unused doc macro feature. Both remained for compatibility with very old dependents of the windows-targets crate.

  • The windows-version crate receives a minor update to update its dependency on the windows-targets crate.

  • Beyond these specifics, this update is the culmination of around 6 months worth of work on the windows-rs project. The biggest improvements comes from the new code generation engine, but many other improvements are now also available for production. This includes support for many new lints, warnings, and suggestions provided by the Rust toolchain; much smaller code gen thanks to deriving many more traits; more efficient code gen; major improvements to WinRT type system and implementation support; more robust and consistent error handling; stock collection and async support; improved support for class hierarchies; and much more!

In addition to "what's changed" below, check out what's changed for notes for 0.60.0 and 0.59.0 for additional changes that roll up to the crates published as part of this release.

What's Changed

... (truncated)

Commits

Updates home from 0.5.11 to 0.5.12

Commits
  • 4f15cc8 Make shell completion variables private. (#16144)
  • f71caeb More warning conversions (#16143)
  • fcd0c86 Make shell completion variables private.
  • 1f9d059 Convert RUST_FLAGS and RUSTDOC_FLAGS warnings
  • 5e6929f Convert cargo tree warning
  • 36bf7f6 Add a test for the cargo tree --all warning.
  • b118df4 Bump openssl-src to 300.3.5.4+3.5.4 (#16140)
  • 85a3813 Bump openssl-src to 300.3.5.4+3.5.4
  • 211aad4 build: remove duplicate dependency, consolidate over unicode-ident (#16137)
  • 391c970 Bump unicode-ident to 1.0.20
  • Additional commits viewable in compare view

Updates cc from 1.2.41 to 1.2.43

Release notes

Sourced from cc's releases.

cc-v1.2.43

Other

  • Fix check-semver-checks (#1600)
  • minor improvement for docs (#1598)
  • Fix linker-plugin-lto: use -flto=thin (#1594)
  • Disable check-buildstd for armv7k-apple-watchos (#1599)
  • Add elf abi to ppc64 targets (#1596)

cc-v1.2.42

Other

  • Fix check-semver-checks (#1600)
  • minor improvement for docs (#1598)
  • Fix linker-plugin-lto: use -flto=thin (#1594)
  • Disable check-buildstd for armv7k-apple-watchos (#1599)
  • Add elf abi to ppc64 targets (#1596)
Changelog

Sourced from cc's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

1.2.42 - 2025-10-24

Other

  • Fix check-semver-checks (#1600)
  • minor improvement for docs (#1598)
  • Fix linker-plugin-lto: use -flto=thin (#1594)
  • Disable check-buildstd for armv7k-apple-watchos (#1599)
  • Add elf abi to ppc64 targets (#1596)
Commits

Updates deranged from 0.5.4 to 0.5.5

Commits

Updates proc-macro2 from 1.0.101 to 1.0.103

Release notes

Sourced from proc-macro2's releases.

1.0.103

  • Add semver-exempt Literal methods str_value, cstr_value, byte_str_value (#525)

1.0.102

  • Fix interaction of Display impls for TokenStream and Ident with formatting specifiers for padding, alignment, width (#523, #524)
Commits
  • d1bf13a Release 1.0.103
  • 29e08c0 Merge pull request #525 from dtolnay/literalvalue
  • f9eec24 Restore support for rustc older than 1.74
  • cc983fc Restore support for rustc older than 1.79
  • 465f781 Restore support for rustc older than 1.89
  • ab5231c Add string literal value tests
  • 4c039a8 Add Literal methods from proc_macro_value feature
  • 885fde9 Vendor rustc_literal_escaper v0.0.5
  • 39b016a Release 1.0.102
  • c3870f1 Add raw identifier Debug test
  • Additional commits viewable in compare view

Updates rustls-pki-types from 1.12.0 to 1.13.0

Release notes

Sourced from rustls-pki-types's releases.

v/1.13.0

What's Changed

New Contributors

Full Changelog: rustls/pki-types@v/1.12.0...v/1.13.0

Commits
  • b8c04aa Prepare 1.13
  • 841b3b0 impl core::hash::Hash for non-secret types
  • 2b9f662 Add From<[u8; 4]> for Ipv4Addr
  • 1bc73dc add ed448 support
  • 1471268 ci: take updated nightly for cargo-check-external-types
  • f7604db pem: hold on to buffer while reading slice
  • 67e6eb8 pem: use SliceIter constructor
  • c008654 pem: move from_slice() to SliceIter::read_section()
  • d9f1404 pem: hold on to buffers while reading file
  • 368e753 pem: use ReadIter constructor
  • Additional commits viewable in compare view

Updates serde_with_macros from 3.15.0 to 3.15.1

Release notes

Sourced from serde_with_macros's releases.

serde_with v3.15.1

Fixed

  • Fix building of the documentation by updating references to use serde_core.
Commits
  • d5ccc10 Bump version to v3.15.1 (#898)
  • 341fbc1 Bump version to v3.15.1
  • 18ca8f2 Update the documentation to refer to serde_core instead of serde (#897)
  • f5deae3 Update the documentation to refer to serde_core instead of serde
  • e8ad178 Bump github/codeql-action from 3 to 4 in the github-actions group (#893)
  • dcfb20f Bump regex from 1.11.2 to 1.12.1 (#894)
  • cb2fddd Bump regex from 1.11.2 to 1.12.1
  • 6a8cb9e Bump github/codeql-action from 3 to 4 in the github-actions group
  • See full diff in compare view

Updates unicode-ident from 1.0.19 to 1.0.20

Release notes

Sourced from unicode-ident's releases.

1.0.20

  • Store ascii start/continue bitmaps in u128 instead of slices of bool (#40, thanks @​Marcondiro)
Commits
  • 12f0a68 Release 1.0.20
  • 940104c Update asm snippet
  • ad5a6cf Merge pull request #41 from dtolnay/zero
  • 4d75a0e Extract const promoted zero to a named static
  • eb553bf Disable unreadable_literal pedantic clippy lint
  • 75d45cd Update benchmark for PR 40
  • 0cf482e Update unicode-ident static storage size for PR 40
  • 0325fd8 Merge remote-tracking branch 'pr/40' into HEAD
  • 2820323 Update benchmark table using Rust 1.90.0
  • 62dfaa1 store ascii start/continue bitmaps in u128 instead of slices of bool
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.4` | `1.1.5` |
| [rand](https://github.com/rust-random/rand) | `0.9.1` | `0.9.2` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.15.0` | `3.15.1` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.12` | `2.0.17` |
| [pbkdf2](https://github.com/RustCrypto/password-hashes) | `0.11.0` | `0.12.2` |
| [rustls](https://github.com/rustls/rustls) | `0.23.33` | `0.23.34` |
| [socket2](https://github.com/rust-lang/socket2) | `0.6.0` | `0.6.1` |
| [windows-sys](https://github.com/microsoft/windows-rs) | `0.60.2` | `0.61.0` |
| [home](https://github.com/rust-lang/cargo) | `0.5.11` | `0.5.12` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.41` | `1.2.43` |
| [deranged](https://github.com/jhpratt/deranged) | `0.5.4` | `0.5.5` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.101` | `1.0.103` |
| [rustls-pki-types](https://github.com/rustls/pki-types) | `1.12.0` | `1.13.0` |
| [unicode-ident](https://github.com/dtolnay/unicode-ident) | `1.0.19` | `1.0.20` |



Updates `flate2` from 1.1.4 to 1.1.5
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.4...1.1.5)

Updates `rand` from 0.9.1 to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@rand_core-0.9.1...rand_core-0.9.2)

Updates `serde_with` from 3.15.0 to 3.15.1
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.15.0...v3.15.1)

Updates `thiserror` from 2.0.12 to 2.0.17
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.12...2.0.17)

Updates `pbkdf2` from 0.11.0 to 0.12.2
- [Commits](RustCrypto/password-hashes@pbkdf2-v0.11.0...pbkdf2-v0.12.2)

Updates `rustls` from 0.23.33 to 0.23.34
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.33...v/0.23.34)

Updates `socket2` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/rust-lang/socket2/releases)
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md)
- [Commits](rust-lang/socket2@v0.6.0...v0.6.1)

Updates `windows-sys` from 0.60.2 to 0.61.0
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits/0.61.0)

Updates `home` from 0.5.11 to 0.5.12
- [Changelog](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md)
- [Commits](rust-lang/cargo@home-0.5.11...home-0.5.12)

Updates `cc` from 1.2.41 to 1.2.43
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.41...cc-v1.2.43)

Updates `deranged` from 0.5.4 to 0.5.5
- [Commits](https://github.com/jhpratt/deranged/commits)

Updates `proc-macro2` from 1.0.101 to 1.0.103
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.101...1.0.103)

Updates `rustls-pki-types` from 1.12.0 to 1.13.0
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](rustls/pki-types@v/1.12.0...v/1.13.0)

Updates `serde_with_macros` from 3.15.0 to 3.15.1
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.15.0...v3.15.1)

Updates `unicode-ident` from 1.0.19 to 1.0.20
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](dtolnay/unicode-ident@1.0.19...1.0.20)

---
updated-dependencies:
- dependency-name: flate2
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: serde_with
  dependency-version: 3.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: pbkdf2
  dependency-version: 0.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rustls
  dependency-version: 0.23.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: socket2
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: windows-sys
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: home
  dependency-version: 0.5.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: cc
  dependency-version: 1.2.43
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: deranged
  dependency-version: 0.5.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: proc-macro2
  dependency-version: 1.0.103
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rustls-pki-types
  dependency-version: 1.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: serde_with_macros
  dependency-version: 3.15.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: unicode-ident
  dependency-version: 1.0.20
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 27, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 27, 2025 20:30
@dependabot dependabot bot requested a review from isabelatkinson October 27, 2025 20:30
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 27, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 28, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 28, 2025
@dependabot dependabot bot deleted the dependabot/cargo/rust-dependencies-54c9378a77 branch October 28, 2025 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant