Skip to content

Bump the minor-and-patch group across 1 directory with 17 updates#110

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/minor-and-patch-2d28db620b
Open

Bump the minor-and-patch group across 1 directory with 17 updates#110
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/minor-and-patch-2d28db620b

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 5, 2026

Bumps the minor-and-patch group with 17 updates in the / directory:

Package From To
chrono 0.4.43 0.4.44
zip 8.0.0 8.5.0
sha2 0.11.0-rc.5 0.11.0
sha3 0.11.0-rc.7 0.11.0
blake3 1.8.3 1.8.4
p256 0.14.0-rc.7 0.14.0-rc.8
p384 0.14.0-rc.7 0.14.0-rc.8
rsa 0.10.0-rc.15 0.10.0-rc.17
ml-dsa 0.1.0-rc.7 0.1.0-rc.8
getrandom 0.4.1 0.4.2
tempfile 3.25.0 3.27.0
proptest 1.10.0 1.11.0
clap 4.5.58 4.6.0
clap_complete 4.5.66 4.6.0
anyhow 1.0.101 1.0.102
tokio 1.49.0 1.51.0
assert_cmd 2.1.2 2.2.0

Updates chrono from 0.4.43 to 0.4.44

Release notes

Sourced from chrono's releases.

0.4.44

What's Changed

Commits
  • c14b459 Bump version to 0.4.44
  • ea832c5 Add track_caller to non-deprecated functions
  • cfae889 Fix panic message in to_rfc2822
  • f8900b5 docs: match MSRV with Cargo.toml contents
  • See full diff in compare view

Updates zip from 8.0.0 to 8.5.0

Release notes

Sourced from zip's releases.

v8.5.0

🐛 Bug Fixes

  • remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

  • remove useless magic in struct (#730)
  • change extra_field from Arc<Vec> to Arc<[u8]> (#741)

⚙️ Miscellaneous Tasks

  • cleanup README (#758)

v8.4.0

🚀 Features

  • add a check for building benches (#748)

🚜 Refactor

  • split part of read.rs for code readability (#744)
  • remove unused allow (#745)

⚡ Performance

  • skip BufReader for Stored files in make_reader (#739)

⚙️ Miscellaneous Tasks

  • move pull request template to correct folder (#749)

v8.3.1

🚜 Refactor

  • use AexEncryption::new (#736)
  • update tests to add big endian miri check (#735)

⚙️ Miscellaneous Tasks

  • cleanup repository files (#743)

v8.3.0

🚀 Features

  • add must_use (#727)
  • improve and fix extended timestamp extra field parsing (#713)
  • add crc32 ignore option (#710)
  • path related code in single file (#712)

... (truncated)

Changelog

Sourced from zip's changelog.

8.5.0 - 2026-04-01

🐛 Bug Fixes

  • remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

  • remove useless magic in struct (#730)
  • change extra_field from Arc<Vec> to Arc<[u8]> (#741)

⚙️ Miscellaneous Tasks

  • cleanup README (#758)

8.4.0 - 2026-03-23

🚀 Features

  • add a check for building benches (#748)

🚜 Refactor

  • split part of read.rs for code readability (#744)
  • remove unused allow (#745)

⚡ Performance

  • skip BufReader for Stored files in make_reader (#739)

⚙️ Miscellaneous Tasks

  • move pull request template to correct folder (#749)

8.3.1 - 2026-03-21

🚜 Refactor

  • use AexEncryption::new (#736)
  • update tests to add big endian miri check (#735)

⚙️ Miscellaneous Tasks

  • cleanup repository files (#743)

8.3.0 - 2026-03-19

🚀 Features

  • add must_use (#727)

... (truncated)

Commits
  • 93ea679 chore: release v8.5.0 (#762)
  • fbd0d41 refactor: remove useless magic in struct (#730)
  • 1043e92 refactor: change extra_field from Arc<Vec> to Arc<[u8]> (#741)
  • 2eb28b6 fix: remove zip64 comment and add zip64 extensible data sector (#747)
  • 5f4a644 ci(deps): bump rust-lang/crates-io-auth-action from 1.0.3 to 1.0.4 (#761)
  • 6469720 ci: Add static.crates.io to allowed hosts in CodeQL workflow (#759)
  • 404c530 chore: cleanup README (#758)
  • 8fb7436 ci: Allowlist extra endpoints for Dependency Review and CodeQL actions (#756)
  • 609b821 ci: Restrict allowed remote endpoints for most workflows (#753)
  • 6244796 ci(deps): bump actions/cache from 5.0.3 to 5.0.4 (#752)
  • Additional commits viewable in compare view

Updates sha2 from 0.11.0-rc.5 to 0.11.0

Commits

Updates sha3 from 0.11.0-rc.7 to 0.11.0

Commits

Updates blake3 from 1.8.3 to 1.8.4

Release notes

Sourced from blake3's releases.

1.8.4

version 1.8.4

Changes since 1.8.3:

  • Updated the digest dependency from v0.10 to v0.11. THIS IS A POTENTIALLY BREAKING CHANGE for callers using the traits-preview Cargo feature. But this is not considered a breaking change for the blake3 crate itself; see the docs for traits-preview.
  • Performance for WASM SIMD targets is improved by ~20% when the wasm32_simd feature is enabled. Contributed by @​lamb356.
Commits
  • b97a24f version 1.8.4
  • 0ebe469 update to new rustcrypto trait releases
  • d4b005a wasm32_simd: use i8x16_shuffle for rot8 and rot16
  • 6eebbbd fix a struct size mismatch in tests
  • fb1411e c: use SIZE_MAX instead of -1 for size_t sentinels, add <stdint.h>
  • See full diff in compare view

Updates p256 from 0.14.0-rc.7 to 0.14.0-rc.8

Commits

Updates p384 from 0.14.0-rc.7 to 0.14.0-rc.8

Commits

Updates rsa from 0.10.0-rc.15 to 0.10.0-rc.17

Commits

Updates ml-dsa from 0.1.0-rc.7 to 0.1.0-rc.8

Commits
  • ecfc95e ml-dsa v0.1.0-rc.8 (#1272)
  • 4deba8e ml-dsa: bump module-lattice to v0.2 (#1271)
  • f2a7431 build(deps): bump crate-ci/typos from 1.43.4 to 1.44.0 (#1239)
  • 8d862f2 build(deps): bump actions/upload-artifact from 6 to 7 (#1240)
  • 7b0ffd0 ml-dsa: use ctutils for constant-time selection; avoid branches (#1245)
  • cdc9506 Bump pkcs8 to v0.11.0-rc.11 (#1270)
  • 4288c59 ml-dsa: bump module-lattice to v0.2.0-rc.0 (#1269)
  • 846ed70 build(deps): bump crypto-bigint from 0.7.2 to 0.7.3 (#1268)
  • c5989c9 ml-dsa: lower stack size of KeyGen::from_seed by up to 207kb (#1261)
  • 81645dc build(deps): bump proptest from 1.10.0 to 1.11.0 (#1266)
  • Additional commits viewable in compare view

Updates getrandom from 0.4.1 to 0.4.2

Changelog

Sourced from getrandom's changelog.

0.4.2 - 2026-03-03

Changed

  • Bump r-efi dependency to v6 #814

Fixed

  • Read errno only when it is set #810
  • Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

Commits

Updates tempfile from 3.25.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

3.26.0

Commits

Updates proptest from 1.10.0 to 1.11.0

Commits

Updates clap from 4.5.58 to 4.6.0

Release notes

Sourced from clap's releases.

v4.5.60

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

v4.5.59

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands
Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands
Commits

Updates clap_complete from 4.5.66 to 4.6.0

Changelog

Sourced from clap_complete's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

... (truncated)

Commits

Updates anyhow from 1.0.101 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

Commits
  • 5c657b3 Release 1.0.102
  • e737fb6 Merge pull request #442 from dtolnay/backtrace
  • 7fe62b5 Further simply backtrace conditional compilation
  • c8cb5ca Merge pull request #441 from dtolnay/backtrace
  • de27df7 Delete CI use of --features=backtrace
  • 9b67e5d Merge pull request #440 from dtolnay/backtrace
  • efdb11a Simplify std_backtrace conditional code
  • b8a9a70 Merge pull request #439 from dtolnay/backtrace
  • a42fc2c Remove feature = "backtrace" conditional code
  • 2a2a3ce Re-word backtrace feature comment
  • Additional commits viewable in compare view

Updates tokio from 1.49.0 to 1.51.0

Release notes

Sourced from tokio's releases.

Tokio v1.51.0

1.51.0 (April 3rd, 2026)

Added

  • net: implement get_peer_cred on Hurd (#7989)
  • runtime: add tokio::runtime::worker_index() (#7921)
  • runtime: add runtime name (#7924)
  • runtime: stabilize LocalRuntime (#7557)
  • wasm: add wasm32-wasip2 networking support (#7933)

Changed

  • runtime: steal tasks from the LIFO slot (#7431)

Fixed

  • docs: do not show "Available on non-loom only." doc label (#7977)
  • macros: improve overall macro hygiene (#7997)
  • sync: fix notify_waiters priority in Notify (#7996)
  • sync: fix panic in Chan::recv_many when called with non-empty vector on closed channel (#7991)

#7431: tokio-rs/tokio#7431 #7557: tokio-rs/tokio#7557 #7921: tokio-rs/tokio#7921 #7924: tokio-rs/tokio#7924 #7933: tokio-rs/tokio#7933 #7977: tokio-rs/tokio#7977 #7989: tokio-rs/tokio#7989 #7991: tokio-rs/tokio#7991 #7996: tokio-rs/tokio#7996 #7997: tokio-rs/tokio#7997

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

... (truncated)

Commits

Updates assert_cmd from 2.1.2 to 2.2.0

Changelog

Sourced from assert_cmd's changelog.

[2.2.0] - 2026-03-10

Compatibility

  • Change cargo_bin bad paths to panics

[2.1.3] - 2026-03-10

Fixes

  • Un-deprecate cargo_bin
Commits
  • d935ff8 chore: Release assert_cmd version 2.2.0
  • 1631cf4 docs: Changelog
  • 3137b55 Merge pull request #283 from epage/panic
  • ebd79f1 fix(cargo): Panic, rather than return bad path
  • 79c9b0d chore: Release assert_cmd version 2.1.3
  • 90cb0dd docs: Update changelog
  • 7af59b9 Merge pull request #282 from epage/deprecated
  • 80fe94c docs(cargo): Specify support for different versions
  • 0246aa6 test: Close markdown quotes
  • cb3b590 Revert "fix: Deprecate cargo_bin (runtime version)"
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [chrono](https://github.com/chronotope/chrono) | `0.4.43` | `0.4.44` |
| [zip](https://github.com/zip-rs/zip2) | `8.0.0` | `8.5.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0-rc.5` | `0.11.0` |
| [sha3](https://github.com/RustCrypto/hashes) | `0.11.0-rc.7` | `0.11.0` |
| [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.4` |
| [p256](https://github.com/RustCrypto/elliptic-curves) | `0.14.0-rc.7` | `0.14.0-rc.8` |
| [p384](https://github.com/RustCrypto/elliptic-curves) | `0.14.0-rc.7` | `0.14.0-rc.8` |
| [rsa](https://github.com/RustCrypto/RSA) | `0.10.0-rc.15` | `0.10.0-rc.17` |
| [ml-dsa](https://github.com/RustCrypto/signatures) | `0.1.0-rc.7` | `0.1.0-rc.8` |
| [getrandom](https://github.com/rust-random/getrandom) | `0.4.1` | `0.4.2` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.25.0` | `3.27.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.10.0` | `1.11.0` |
| [clap](https://github.com/clap-rs/clap) | `4.5.58` | `4.6.0` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.5.66` | `4.6.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.101` | `1.0.102` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.51.0` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.2` | `2.2.0` |



Updates `chrono` from 0.4.43 to 0.4.44
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.43...v0.4.44)

Updates `zip` from 8.0.0 to 8.5.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v8.0.0...v8.5.0)

Updates `sha2` from 0.11.0-rc.5 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.11.0-rc.5...sha2-v0.11.0)

Updates `sha3` from 0.11.0-rc.7 to 0.11.0
- [Commits](RustCrypto/hashes@sha3-v0.11.0-rc.7...sha3-v0.11.0)

Updates `blake3` from 1.8.3 to 1.8.4
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases)
- [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.4)

Updates `p256` from 0.14.0-rc.7 to 0.14.0-rc.8
- [Commits](RustCrypto/elliptic-curves@p256/v0.14.0-rc.7...p256/v0.14.0-rc.8)

Updates `p384` from 0.14.0-rc.7 to 0.14.0-rc.8
- [Commits](RustCrypto/elliptic-curves@p384/v0.14.0-rc.7...p384/v0.14.0-rc.8)

Updates `rsa` from 0.10.0-rc.15 to 0.10.0-rc.17
- [Changelog](https://github.com/RustCrypto/RSA/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/RSA@v0.10.0-rc.15...v0.10.0-rc.17)

Updates `ml-dsa` from 0.1.0-rc.7 to 0.1.0-rc.8
- [Commits](RustCrypto/signatures@ml-dsa/v0.1.0-rc.7...ml-dsa/v0.1.0-rc.8)

Updates `getrandom` from 0.4.1 to 0.4.2
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.4.1...v0.4.2)

Updates `tempfile` from 3.25.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits/v3.27.0)

Updates `proptest` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.10.0...v1.11.0)

Updates `clap` from 4.5.58 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.58...clap_complete-v4.6.0)

Updates `clap_complete` from 4.5.66 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.66...clap_complete-v4.6.0)

Updates `anyhow` from 1.0.101 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.101...1.0.102)

Updates `tokio` from 1.49.0 to 1.51.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.51.0)

Updates `assert_cmd` from 2.1.2 to 2.2.0
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.1.2...v2.2.0)

---
updated-dependencies:
- dependency-name: chrono
  dependency-version: 0.4.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zip
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sha3
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: blake3
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: p256
  dependency-version: 0.14.0-rc.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: p384
  dependency-version: 0.14.0-rc.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: rsa
  dependency-version: 0.10.0-rc.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ml-dsa
  dependency-version: 0.1.0-rc.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: getrandom
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: proptest
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: clap_complete
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tokio
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: assert_cmd
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants