chore(deps): bump the dependencies group with 11 updates by dependabot[bot] · Pull Request #11 · ararog/xws

dependabot · 2026-04-27T07:16:34Z

Bumps the dependencies group with 11 updates:

Package	From	To
bitflags	`2.11.0`	`2.11.1`
cc	`1.2.60`	`1.2.61`
io-uring	`0.7.11`	`0.7.12`
libc	`0.2.184`	`0.2.186`
rustls	`0.23.38`	`0.23.39`
rustls-pki-types	`1.14.0`	`1.14.1`
rustls-webpki	`0.103.11`	`0.103.13`
tokio	`1.51.1`	`1.52.1`
wasip2	`1.0.2+wasi-0.2.9`	`1.0.3+wasi-0.2.9`
winnow	`1.0.1`	`1.0.2`
wit-bindgen	`0.51.0`	`0.57.1`

Updates bitflags from 2.11.0 to 2.11.1

Release notes

Sourced from bitflags's releases.

2.11.1

What's Changed

Bless compile-fail tests for current beta by @DanielEScherzer in bitflags/bitflags#478

example_generated.rs: add missing third slash for doc comment by @DanielEScherzer in bitflags/bitflags#477

Clarify self and other in method docs by @KodrAus in bitflags/bitflags#481

Prepare for 2.11.1 release by @KodrAus in bitflags/bitflags#482

New Contributors

@DanielEScherzer made their first contribution in bitflags/bitflags#478

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Changelog

Sourced from bitflags's changelog.

2.11.1

What's Changed

Bless compile-fail tests for current beta by @DanielEScherzer in bitflags/bitflags#478

example_generated.rs: add missing third slash for doc comment by @DanielEScherzer in bitflags/bitflags#477

Clarify self and other in method docs by @KodrAus in bitflags/bitflags#481

New Contributors

@DanielEScherzer made their first contribution in bitflags/bitflags#478

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Commits

4ed9ffa Merge pull request #482 from KodrAus/cargo/2.11.1
c53cd57 prepare for 2.11.1 release
a44410a Merge pull request #481 from KodrAus/docs/clarifications
3d671b9 update more compile error messages
5f3adad fix up compile error messages
780765d fix up contains and intersection docs
97b7607 clarify self and other in method docs
88a7a18 Merge pull request #477 from DanielEScherzer/patch-1
f0e4646 example_generated.rs: add missing third slash for doc comment
a31c96f Merge pull request #478 from DanielEScherzer/beta-bless
Additional commits viewable in compare view

Updates cc from 1.2.60 to 1.2.61

Release notes

Sourced from cc's releases.

cc-v1.2.61

Other

fix OutputKind::Capture documentation (#1705)

Changelog

Sourced from cc's changelog.

1.2.61 - 2026-04-24

Other

fix OutputKind::Capture documentation (#1705)

Commits

360f691 chore(cc): release v1.2.61 (#1707)
17a2788 Bump taiki-e/install-action from 2.75.16 to 2.75.17 (#1706)
da52db7 command_helpers.rs: fix OutputKind::Capture documentation (#1705)
ee64d58 Bump taiki-e/install-action from 2.75.4 to 2.75.5 (#1703)
78cf7e4 CI: Hash-pin all actions, apply other suggestions from zizmor (#1702)
See full diff in compare view

Updates io-uring from 0.7.11 to 0.7.12

Commits

44c9320 release 0.7.12 (#393)
d7008ee Add setup_no_sqarray builder method (#384)
b405b48 Add missing len field to RecvMulti (#392)
1c0c411 Doc example for constructing Entry (#387)
7ec7ae9 Support set addr for UringCmd (#374) (#375)
See full diff in compare view

Updates libc from 0.2.184 to 0.2.186

Release notes

Sourced from libc's releases.

0.2.186

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185

Added

EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)

Hexagon: add missing constants and fix types for linux-musl (#5042)

Redox: Add semaphore functions (#5051)

Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

Hexagon: Decouple time64 types from musl symbol redirects (#5040)

Horizon: Change POLL constants from c_short to c_int (#5045)

Changelog

Sourced from libc's changelog.

0.2.186 - 2026-04-24

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185 - 2026-04-13

Added

EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)

Hexagon: add missing constants and fix types for linux-musl (#5042)

Redox: Add semaphore functions (#5051)

Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

Hexagon: Decouple time64 types from musl symbol redirects (#5040)

Horizon: Change POLL constants from c_short to c_int (#5045)

Commits

42620ff [0.2] libc: Release 0.2.186
9db2eaa apple: add KEVENT_FLAG_* constants
3840939 Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE for linux
f697deb chore: migrate from Cirrus CI to GHA
71d5bfc libc: Release 0.2.185
1027d1c Revert "ci: Pin nightly to 2026-04-01"
0e9c6e5 redox: Add semaphore functions
24ef457 feat: add back support for gnu windows x86 in ci
aa75caf horizon: Change POLL constants from c_short to c_int
b7eda5a hexagon: add missing constants and fix types for linux-musl
Additional commits viewable in compare view

Updates rustls from 0.23.38 to 0.23.39

Commits

0541605 Cargo: version 0.23.38 -> 0.23.39
860798e Cargo: update semver compat deps
7b37468 Take semver-compatible dependency updates
6134204 Adapt to updated nightly features
d4b3ec5 Apply suggestions from clippy 1.95
See full diff in compare view

Updates rustls-pki-types from 1.14.0 to 1.14.1

Release notes

Sourced from rustls-pki-types's releases.

1.14.1

Parsing PEM will now error for PEM sections larger than 256 MB in size, to avoid running out of memory during parsing. The limit was chosen based on historical data from large certificate revocation lists from the web PKI.

What's Changed

Remove mention of rustls-pemfile from docs by @ranile in rustls/pki-types#103

Update ECH reference to RFC9849 by @ctz in rustls/pki-types#104

pem: error for sections that are too large by @djc in rustls/pki-types#106

Update ECH reference to RFC 9849 by @ctz in rustls/pki-types#107

Adjust PEM size limit to account for huge CRLs by @ctz in rustls/pki-types#108

Commits

bb3c1da Adjust PEM size limit to account for huge CRLs
20bcfe1 Bump version to 1.14.1
b796d3d pem: error for sections that are too large
422d8cf Update ECH reference to RFC 9849
14ce65c Remove mention of rustls-pemfile from docs
See full diff in compare view

Updates rustls-webpki from 0.103.11 to 0.103.13

Release notes

Sourced from rustls-webpki's releases.

0.103.13

Fix reachable panic in parsing a CRL. This was reported to us as GHSA-82j2-j2ch-gfr8. Users who don't use CRLs are not affected.

For name constraints on URI names, we incorrectly processed excluded subtrees in a way which inverted the desired meaning. See rustls/webpki#471. This was a case missing in the fix for GHSA-965h-392x-2mh5.

What's Changed

Actually fail closed for URI matching against excluded subtrees by @djc in rustls/webpki#473

Prepare 0.103.13 by @ctz in rustls/webpki#474

Full Changelog: rustls/webpki@v/0.103.12...v/0.103.13

0.103.12

This release fixes two bugs in name constraint enforcement:

GHSA-965h-392x-2mh5: name constraints for URI names were ignored and therefore accepted. URI name constraints are now rejected unconditionally. Note this library does not provide an API for asserting URI names, and URI name constraints are otherwise not implemented.

GHSA-xgp8-3hg3-c2mh: permitted subtree name constraints for DNS names were accepted for certificates asserting a wildcard name. This was incorrect because, given a name constraint of accept.example.com, *.example.com could feasibly allow a name of reject.example.com which is outside the constraint. This is very similar to CVE-2025-61727.

Since name constraints are restrictions on otherwise properly-issued certificates, these bugs are reachable only after signature verification and require misissuance to exploit.

What's Changed

Prepare 0.103.12 by @djc in rustls/webpki#470

Full Changelog: rustls/webpki@v/0.103.11...v/0.103.12

Commits

2879b2c Prepare 0.103.13
2c49773 Improve tests for padding of BitStringFlags
4e3c0b3 Correct validation of BIT STRING constraints
39c91d2 Actually fail closed for URI matching against excluded subtrees
27131d4 Bump version to 0.103.12
6ecb876 Clean up stuttery enum variant names
318b3e6 Ignore wildcard labels when matching name constraints
1219622 Rewrite constraint matching to avoid permissive catch-all branch
See full diff in compare view

Updates tokio from 1.51.1 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)

net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)

taskdump: add trace_with() for customized task dumps (#8025)

taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)

fs: support io_uring in AsyncRead for File (#7907)

Changed

runtime: improve spawn_blocking scalability with sharded queue (#7757)

runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

docs: fix typo in oneshot::Sender::send docs (#8026)

docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)

net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits

905c146 chore: prepare to release v1.52.1 (#8059)
56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
5f7be0a chore: perpare 1.52.0 (#8045)
36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
f943312 fs: support io-uring in AsyncRead for File (#7907)
Additional commits viewable in compare view

Updates wasip2 from 1.0.2+wasi-0.2.9 to 1.0.3+wasi-0.2.9

Commits

660ee06 Bump version numbers of wasip2/wasip3 (#155)
ad7e8f6 Update wit-bindgen to 0.57.1 (#154)
a6fa3f1 Update wit-bindgen, make wasip3 no_std compatible (#153)
9d39023 Implement the missing debug functionality (#152)
c09f642 Allow activating wit-bindgen/macros (#151)
ad3c5cc Re-export spawn from wit-bindgen (#150)
277c0a6 ci: wasmtime v43 and latest wasm-tools (#149)
3a8f1b2 Include license files in packages (#148)
2700044 Update to 0.3.0-rc-2026-03-15 (#146)
26a820c Update wasip3 snapshot (#144)
Additional commits viewable in compare view

Updates winnow from 1.0.1 to 1.0.2

Changelog

Sourced from winnow's changelog.

[1.0.2] - 2026-04-21

Fixes

Support TreeError in binary::bits (regression from 1.0.0)

Commits

05d3cd2 chore: Release
7ac7c0f docs: Update changelog
ac12806 Merge pull request #909 from epage/tree
6ed2d5f fix(error): Support Bits with TreeError
f09c7a4 chore(deps): Update Rust Stable to v1.95 (#906)
7f8c41c Merge pull request #905 from winnow-rs/renovate/j178-prek-action-2.x
c40231c Merge pull request #904 from winnow-rs/renovate/codecov-codecov-action-6.x
93b12c0 chore(deps): Update j178/prek-action action to v2
7780f54 chore(deps): Update codecov/codecov-action action to v6
See full diff in compare view

Updates wit-bindgen from 0.51.0 to 0.57.1

Commits

2e00369 Release wit-bindgen 0.57.1 (#1596)
f2c3e9f Remove async feature of wit-bindgen-rust-macros (#1595)
8e9087b Release wit-bindgen 0.57.0 (#1593)
50cdab6 Perform some CI/dependency maintenance (#1594)
2f767a5 Remove dependency on std for async feature (#1591)
be1402f Add --enable-method-chaining for the Rust generator. (#1586)
9f20dc3 Release wit-bindgen 0.56.0 (#1589)
d1eab2f Limit async stream read/write lengths (#1588)
a4b3eb1 feat(moonbit): add map type support (#1584)
7b5c1c6 feat(go): add map type support (#1583)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [bitflags](https://github.com/bitflags/bitflags) | `2.11.0` | `2.11.1` | | [cc](https://github.com/rust-lang/cc-rs) | `1.2.60` | `1.2.61` | | [io-uring](https://github.com/tokio-rs/io-uring) | `0.7.11` | `0.7.12` | | [libc](https://github.com/rust-lang/libc) | `0.2.184` | `0.2.186` | | [rustls](https://github.com/rustls/rustls) | `0.23.38` | `0.23.39` | | [rustls-pki-types](https://github.com/rustls/pki-types) | `1.14.0` | `1.14.1` | | [rustls-webpki](https://github.com/rustls/webpki) | `0.103.11` | `0.103.13` | | [tokio](https://github.com/tokio-rs/tokio) | `1.51.1` | `1.52.1` | | [wasip2](https://github.com/bytecodealliance/wasi-rs) | `1.0.2+wasi-0.2.9` | `1.0.3+wasi-0.2.9` | | [winnow](https://github.com/winnow-rs/winnow) | `1.0.1` | `1.0.2` | | [wit-bindgen](https://github.com/bytecodealliance/wit-bindgen) | `0.51.0` | `0.57.1` | Updates `bitflags` from 2.11.0 to 2.11.1 - [Release notes](https://github.com/bitflags/bitflags/releases) - [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md) - [Commits](bitflags/bitflags@2.11.0...2.11.1) Updates `cc` from 1.2.60 to 1.2.61 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@cc-v1.2.60...cc-v1.2.61) Updates `io-uring` from 0.7.11 to 0.7.12 - [Commits](tokio-rs/io-uring@v0.7.11...v0.7.12) Updates `libc` from 0.2.184 to 0.2.186 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.184...0.2.186) Updates `rustls` from 0.23.38 to 0.23.39 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.38...v/0.23.39) Updates `rustls-pki-types` from 1.14.0 to 1.14.1 - [Release notes](https://github.com/rustls/pki-types/releases) - [Commits](rustls/pki-types@v/1.14.0...v/1.14.1) Updates `rustls-webpki` from 0.103.11 to 0.103.13 - [Release notes](https://github.com/rustls/webpki/releases) - [Commits](rustls/webpki@v/0.103.11...v/0.103.13) Updates `tokio` from 1.51.1 to 1.52.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.51.1...tokio-1.52.1) Updates `wasip2` from 1.0.2+wasi-0.2.9 to 1.0.3+wasi-0.2.9 - [Commits](bytecodealliance/wasi-rs@wasip2-1.0.2...wasip2-1.0.3) Updates `winnow` from 1.0.1 to 1.0.2 - [Changelog](https://github.com/winnow-rs/winnow/blob/main/CHANGELOG.md) - [Commits](winnow-rs/winnow@v1.0.1...v1.0.2) Updates `wit-bindgen` from 0.51.0 to 0.57.1 - [Release notes](https://github.com/bytecodealliance/wit-bindgen/releases) - [Commits](bytecodealliance/wit-bindgen@v0.51.0...v0.57.1) --- updated-dependencies: - dependency-name: bitflags dependency-version: 2.11.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: cc dependency-version: 1.2.61 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io-uring dependency-version: 0.7.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: libc dependency-version: 0.2.186 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: rustls dependency-version: 0.23.39 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: rustls-pki-types dependency-version: 1.14.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: rustls-webpki dependency-version: 0.103.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tokio dependency-version: 1.52.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: wasip2 dependency-version: 1.0.3+wasi-0.2.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: winnow dependency-version: 1.0.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: wit-bindgen dependency-version: 0.57.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-27T07:16:35Z

Milestone

The specified milestone could not be found on this repository. If you view a milestone, the final part of the page URL, after milestone, is the identifier. For example: https://github.com/<org>/<repo>/milestone/3.

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-05-04T07:30:10Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot assigned ararog Apr 27, 2026

dependabot Bot closed this May 4, 2026

dependabot Bot deleted the dependabot/cargo/dependencies-603907634e branch May 4, 2026 07:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the dependencies group with 11 updates#11

chore(deps): bump the dependencies group with 11 updates#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/dependencies-603907634e

dependabot Bot commented on behalf of github Apr 27, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 27, 2026

Uh oh!

dependabot Bot commented on behalf of github May 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.11.1

What's Changed

New Contributors

2.11.1

What's Changed

New Contributors

cc-v1.2.61

Other

1.2.61 - 2026-04-24

Other

0.2.186

Added

Changed

0.2.185

Added

Fixed

0.2.186 - 2026-04-24

Added

Changed

0.2.185 - 2026-04-13

Added

Fixed

1.14.1

What's Changed

0.103.13

What's Changed

0.103.12

What's Changed

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

Changed

Fixed

Documented

[1.0.2] - 2026-04-21

Fixes

Uh oh!

dependabot Bot commented on behalf of github Apr 27, 2026

Milestone

Labels

Uh oh!

dependabot Bot commented on behalf of github May 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Apr 27, 2026 •

edited

Loading