Bump the rust-dependencies group across 1 directory with 8 updates #5927

dependabot · 2025-10-06T22:52:00Z

Bumps the rust-dependencies group with 8 updates in the /quickwit directory:

Package	From	To
bytestring	`1.4.0`	`1.5.0`
hostname	`0.3.1`	`0.4.1`
humantime	`2.2.0`	`2.3.0`
proptest	`1.7.0`	`1.8.0`
pulsar	`6.3.1`	`6.4.1`
rand	`0.8.5`	`0.9.2`
serde_with	`3.14.0`	`3.15.0`
tempfile	`3.22.0`	`3.23.0`

Updates bytestring from 1.4.0 to 1.5.0

Release notes

Sourced from bytestring's releases.

bytestring: v1.5.0

Migrate serde dependency to serde_core.

Minimum supported Rust version (MSRV) is now 1.75.

Commits

d22774f chore(bytestring): prepare release 1.5.0
da9db22 Switch serde dependency to serde_core (#728)
a9d98ca build(deps): bump bitflags from 2.9.3 to 2.9.4 (#725)
23d19cf build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 (#726)
b3406dc build(deps): bump taiki-e/install-action from 2.59.1 to 2.60.0 (#727)
0e1604e build(deps): bump taiki-e/install-action from 2.58.21 to 2.58.30 (#723)
63f8e96 build(deps): bump actions-rust-lang/setup-rust-toolchain (#724)
d1d45f1 ci: pin time crate in msrv
5267bc2 chore(rt): include correct tokio features
3c0702c chore(actix-rt): prepare release 2.11.0
Additional commits viewable in compare view

Updates hostname from 0.3.1 to 0.4.1

Changelog

Sourced from hostname's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[0.4.0] - 2024-04-01

Added

CI setup now covers almost all supported Tier 1 and Tier 2 platform targets

Changed

Minimum Supported Rust version set to 1.67.0

Rust edition set to "2021"

Fixed

Handle edge cases for POSIX systems (#14)

docs.rs documentation build

Commits

See full diff in compare view

Updates humantime from 2.2.0 to 2.3.0

Release notes

Sourced from humantime's releases.

2.3.0

What's Changed

Add 'wk', 'wks' for weeks and 'yr', 'yrs' for years by @ryo1kato in chronotope/humantime#50

Allow parsing zero durations with no units by @RobertGauld in chronotope/humantime#43

Use µs not us by @RobertGauld in chronotope/humantime#45

feat: parse_duration("0") by @aatifsyed in chronotope/humantime#55

Support fractional durations (with precision safeguards, without any new dependency) by @TheElectronWill in chronotope/humantime#56

feat: Accept "+00:00" as an alternative way to specify the UTC timezone by @TheElectronWill in chronotope/humantime#59

Fractional tweaks by @djc in chronotope/humantime#60

Commits

7994b71 ci: disable for non-main pushes
1b59068 Bump version to 2.3.0
cacdb93 ci: add audit job
5cc8dc5 ci: add job to check semver compatibility
0d5fe2d Bump version to 2.2.1
fc0e7ea duration: move current value out of Parser
1febd52 duration: track current value as Duration
0adba12 duration: track current nanoseconds as u32
786218f Extract unit parsing
9ff48bf Re-order duration parser methods in top-down order
Additional commits viewable in compare view

Updates proptest from 1.7.0 to 1.8.0

Commits

2885bc2 new releases for proptest, proptest-macro, and state-machine
a85563f Merge pull request #584 from wojciech-graj/main
5331517 Merge pull request #596 from alexanderkjall/fix-arithmetic-overflow
157f3c0 Merge pull request #595 from ebegumisa/main
02fa1fc changelog: add #595
27fd76f fix for 32 bit processors
d1716ca Add ReferenceStateMachine arg to SystemUnderTest::teardown
ea4ddeb Merge pull request #594 from proptest-rs/attr-macro-preserve-arg-names
f80c1e6 fix shorthand struct initialization lint
b7590fa add new test for complex patterns
Additional commits viewable in compare view

Updates pulsar from 6.3.1 to 6.4.1

Commits

5923a04 Release 6.4.1
77fa24b fix: producer is not closed at server side when batching is enabled (#363)
b4a67b8 chore: bump version to 6.4.1 (#364)
afdf6d0 fix: restore the Send trait for Producer (#359)
51b93ed feat: support blocking send_non_blocking() and other RPCs (#355)
f8c31e9 feat: refactor producer batching with timeout supported (#354)
3b89071 ci: harden and optimize rust.yml (#353)
fc27cbc fix(consumer): add recv_within helper and timeouts to prevent infinite hangs ...
ed1e87c test(producer): add unit tests for producer.rs (#350)
520643d refactor(producer): remove unnecessary lock contention (#351)
Additional commits viewable in compare view

Updates rand from 0.8.5 to 0.9.2

Changelog

Sourced from rand's changelog.

[0.9.2 — 2025-07-20]

Deprecated

Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

Revise "not a crypto library" policy again (#1565)

Remove zerocopy dependency from rand (#1579)

Fixes

Fix feature simd_support for recent nightly rust (#1586)

Changes

Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

Add rand::distr::Alphabetic distribution. (#1587)

Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

Policy: "rand is not a crypto library" (#1514)

Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)

Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version

Update to rand_core v0.9.0 (#1558)

Features

Support std feature without getrandom or rand_chacha (#1354)

Enable feature small_rng by default (#1455)

Remove implicit feature rand_chacha; use std_rng instead. (#1473)

Rename feature serde1 to serde (#1477)

Rename feature getrandom to os_rng (#1537)

Add feature thread_rng (#1547)

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read (#1267)

Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)

Add traits TryRngCore, TryCryptoRng (#1424, #1499)

Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)

Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)

Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)

... (truncated)

Commits

d3dd415 Prepare rand_core 0.9.2 (#1605)
99fabd2 Prepare rand_core 0.9.2
c7fe1c4 rand: re-export rand_core (#1604)
db2b1e0 rand: re-export rand_core
ee1d96f rand_core: implement reborrow for UnwrapMut (#1595)
e0eb2ee rand_core: implement reborrow for UnwrapMut
975f602 fixup clippy 1.85 warnings
775b05b Relax Sized requirements for blanket impls (#1593)
ec6d5c0 Prepare rand_core v0.9.1 (#1591)
6a06056 rand_core: introduce an UnwrapMut wrapper (#1589)
Additional commits viewable in compare view

Updates serde_with from 3.14.0 to 3.15.0

Release notes

Sourced from serde_with's releases.

serde_with v3.15.0

Added
Added error inspection to VecSkipError and MapSkipError by @michelhe (#878) This allows interacting with the previously hidden error, for example for logging. Checkout the newly added example to both types.
Allow documenting the types generated by serde_conv!. The serde_conv! macro now acceps outer attributes before the optional visibility modifier. This allow adding doc comments in the shape of #[doc = "..."] or any other attributes, such as lint modifiers.
serde_conv!(
    #[doc = "Serialize bools as string"]
    #[allow(dead_code)]
    pub BoolAsString,
    bool,
    |x: &bool| ::std::string::ToString::to_string(x),
    |x: ::std::string::String| x.parse()
);
Add support for hashbrown v0.16 (#877)

This extends the existing support for hashbrown v0.14 and v0.15 to the newly released version.
Changed

Bump MSRV to 1.76, since that is required for toml dev-dependency.

serde_with v3.14.1

Fixed

Show macro expansion in the docs.rs generated rustdoc. Since macros are used to generate trait implementations, this is useful to understand the exact generated code.

Commits

ea38dce Bump version to 3.15.0 (#892)
a3da8e6 Bump version to 3.15.0
c36e692 Bump dev-dependencies (#891)
ae8466d Bump dev-dependencies
f7337ff Support serde_core and remove dependencies on serde_derive (#889)
c1d73b3 Replace serde with serde_core in all files
320d292 Remove dependency on serde_derive
dca6df8 Remove version-sync crate and reimplement needed functionality with regex and...
6c6e53f Remove version-sync crate and reimplement needed functionality with regex and...
f64ea40 Add support for hashbrown v0.16 (#888)
Additional commits viewable in compare view

Updates tempfile from 3.22.0 to 3.23.0

Changelog

Sourced from tempfile's changelog.

3.23.0

Remove need for the "nightly" feature to compile with "wasip2".

Commits

fe9f4a3 chore: release v3.23.0 (#381)
006c3fd fix: use std::os::fd instead of std::os::wasi (#380)
b0e6309 doc: Update COPYRIGHT link (#377)
2d6fc3f Fix formatting in Builder::disable_cleanup documentation (#375)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 8 updates in the /quickwit directory: | Package | From | To | | --- | --- | --- | | [bytestring](https://github.com/actix/actix-net) | `1.4.0` | `1.5.0` | | [hostname](https://github.com/svartalf/hostname) | `0.3.1` | `0.4.1` | | [humantime](https://github.com/chronotope/humantime) | `2.2.0` | `2.3.0` | | [proptest](https://github.com/proptest-rs/proptest) | `1.7.0` | `1.8.0` | | [pulsar](https://github.com/streamnative/pulsar-rs) | `6.3.1` | `6.4.1` | | [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.2` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.14.0` | `3.15.0` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.22.0` | `3.23.0` | Updates `bytestring` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/actix/actix-net/releases) - [Commits](actix/actix-net@bytestring-v1.4.0...bytestring-v1.5.0) Updates `hostname` from 0.3.1 to 0.4.1 - [Release notes](https://github.com/svartalf/hostname/releases) - [Changelog](https://github.com/djc/hostname/blob/main/CHANGELOG.md) - [Commits](https://github.com/svartalf/hostname/commits) Updates `humantime` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/chronotope/humantime/releases) - [Commits](chronotope/humantime@v2.2.0...v2.3.0) Updates `proptest` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.7.0...v1.8.0) Updates `pulsar` from 6.3.1 to 6.4.1 - [Release notes](https://github.com/streamnative/pulsar-rs/releases) - [Commits](streamnative/pulsar-rs@v6.3.1...v6.4.1) Updates `rand` from 0.8.5 to 0.9.2 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.8.5...rand_core-0.9.2) Updates `serde_with` from 3.14.0 to 3.15.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.14.0...v3.15.0) Updates `tempfile` from 3.22.0 to 3.23.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.22.0...v3.23.0) --- updated-dependencies: - dependency-name: bytestring dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: hostname dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: humantime dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: proptest dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: pulsar dependency-version: 6.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: rand dependency-version: 0.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: serde_with dependency-version: 3.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: tempfile dependency-version: 3.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 6, 2025

dependabot bot force-pushed the dependabot/cargo/quickwit/rust-dependencies-0e250b573f branch from e068d96 to df2e743 Compare October 7, 2025 09:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the rust-dependencies group across 1 directory with 8 updates #5927

Bump the rust-dependencies group across 1 directory with 8 updates #5927

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the rust-dependencies group across 1 directory with 8 updates #5927

Are you sure you want to change the base?

Bump the rust-dependencies group across 1 directory with 8 updates #5927

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

bytestring: v1.5.0

Changelog

[0.4.0] - 2024-04-01

Added

Changed

Fixed

2.3.0

What's Changed

[0.9.2 — 2025-07-20]

Deprecated

Additions

[0.9.1] - 2025-04-17

Security and unsafe

Fixes

Changes

Additions

[0.9.0] - 2025-01-27

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

serde_with v3.15.0

Added

Changed

serde_with v3.14.1

Fixed

3.23.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading