Skip to content

chore(deps): bump the dependencies group across 1 directory with 19 updates#8

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/dependencies-9ee0f8c65a
Closed

chore(deps): bump the dependencies group across 1 directory with 19 updates#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/dependencies-9ee0f8c65a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 12 updates in the / directory:

Package From To
cc 1.2.57 1.2.58
compio-buf 0.8.0 0.8.1
compio-driver 0.11.3 0.11.4
compio-quic 0.7.0 0.7.2
itoa 1.0.17 1.0.18
js-sys 0.3.91 0.3.92
rustc-hash 2.1.1 2.1.2
rustls-webpki 0.103.9 0.103.10
synchrony 0.1.6 0.1.7
toml_datetime 1.0.0+spec-1.1.0 1.1.0+spec-1.1.0
toml_edit 0.25.4+spec-1.1.0 0.25.8+spec-1.1.0
zerocopy 0.8.42 0.8.48

Updates cc from 1.2.57 to 1.2.58

Release notes

Sourced from cc's releases.

cc-v1.2.58

Other

  • Update Compile-time Requirements to add info about clang-cl.exe (#1693)
Changelog

Sourced from cc's changelog.

1.2.58 - 2026-03-27

Other

  • Update Compile-time Requirements to add info about clang-cl.exe (#1693)
Commits

Updates compio-buf from 0.8.0 to 0.8.1

Commits

Updates compio-driver from 0.11.3 to 0.11.4

Commits

Updates compio-quic from 0.7.0 to 0.7.2

Commits

Updates itoa from 1.0.17 to 1.0.18

Release notes

Sourced from itoa's releases.

1.0.18

Commits

Updates js-sys from 0.3.91 to 0.3.92

Commits

Updates rustc-hash from 2.1.1 to 2.1.2

Changelog

Sourced from rustc-hash's changelog.

2.1.2

Commits
  • fdb275c Merge pull request #67 from Noratrieb/new-version
  • acafa43 Prepare 2.1.2
  • 140e525 Merge pull request #65 from morrisonlevi/split_first_chunk
  • f061387 style: use consistent range format
  • 211455c refactor!: use split_first_chunk to help optimizer
  • 464a82f Merge pull request #63 from estebank/const-Default
  • 2170d5e On nightly, impl const Default
  • 1a998d5 Merge pull request #62 from CryZe/128-bit-on-more-platforms
  • 6849c16 Use 128-bit Widening Multiply on More Platforms
  • See full diff in compare view

Updates rustls-webpki from 0.103.9 to 0.103.10

Release notes

Sourced from rustls-webpki's releases.

0.103.10

Correct selection of candidate CRLs by Distribution Point and Issuing Distribution Point. If a certificate had more than one distributionPoint, then only the first distributionPoint would be considered against each CRL's IssuingDistributionPoint distributionPoint, and then the certificate's subsequent distributionPoints would be ignored.

The impact was that correctly provided CRLs would not be consulted to check revocation. With UnknownStatusPolicy::Deny (the default) this would lead to incorrect but safe Error::UnknownRevocationStatus. With UnknownStatusPolicy::Allow this would lead to inappropriate acceptance of revoked certificates.

This vulnerability is thought to be of limited impact. This is because both the certificate and CRL are signed -- an attacker would need to compromise a trusted issuing authority to trigger this bug. An attacker with such capabilities could likely bypass revocation checking through other more impactful means (such as publishing a valid, empty CRL.)

More likely, this bug would be latent in normal use, and an attacker could leverage faulty revocation checking to continue using a revoked credential.

This vulnerability is identified by GHSA-pwjx-qhcg-rvj4. Thank you to @​1seal for the report.

What's Changed

Full Changelog: rustls/webpki@v/0.103.9...v/0.103.10

Commits
  • 348ce01 Prepare 0.103.10
  • dbde592 crl: fix authoritative_for() support for multiple URIs
  • 9c4838e avoid std::prelude imports
  • 009ef66 fix rust 1.94 ambiguous panic macro warnings
  • c41360d build(deps): bump taiki-e/cache-cargo-install-action from 2 to 3
  • e401d00 generate.py: reformat for black 2026.1.0
  • 06cedec Take semver-compatible deps
  • See full diff in compare view

Updates synchrony from 0.1.6 to 0.1.7

Commits

Updates toml_datetime from 1.0.0+spec-1.1.0 to 1.1.0+spec-1.1.0

Commits

Updates toml_edit from 0.25.4+spec-1.1.0 to 0.25.8+spec-1.1.0

Commits

Updates toml_parser from 1.0.9+spec-1.1.0 to 1.1.0+spec-1.1.0

Commits

Updates wasm-bindgen from 0.2.114 to 0.2.115

Release notes

Sourced from wasm-bindgen's releases.

0.2.115

Added

  • console.debug/log/info/warn/error output from user-spawned Worker and SharedWorker instances is now forwarded to the CLI test runner during headless browser tests, just like output from the main thread. Works for blob URL workers, module workers, URL-based workers (importScripts), nested workers, and shared workers (including logs emitted before the first port connection). Non-cloneable arguments are serialized via String() rather than crashing the worker. The --nocapture flag is respected. #5037

  • js_sys::Promise<T> now implements IntoFuture, enabling direct .await on any JS promise without a wrapper type. The wasm-bindgen-futures implementation has been moved into js-sys behind an optional futures feature, which is activated automatically when wasm-bindgen-futures is a dependency. All existing wasm_bindgen_futures::* import paths continue to work unchanged via re-exports. js_sys::futures is also available directly for users who want promise.await without depending on wasm-bindgen-futures. #5049

  • Added --target emscripten support, generating a library_bindgen.js file for consumption by Emscripten at link time. Includes support for futures, JS closures, and TypeScript output. A new Emscripten-specific test runner is also included, along with CI integration. #4443

  • Added VideoFrame, VideoColorSpace, and related WebCodecs dictionaries/enums to web-sys. #5008

  • Added wasm_bindgen::handler module with set_on_abort and set_on_reinit hooks for panic=unwind builds. set_on_abort registers a callback invoked after the instance is terminated (hard abort, OOM, stack overflow). set_on_reinit registers a callback invoked after reinit() resets the WebAssembly instance via --experimental-reset-state-function. Handlers are stored as Wasm indirect-function-table indices so dispatch is safe even when linear memory is corrupt.

Changed

  • Replaced per-closure generic destructors with a single __wbindgen_destroy_closure export. #5019

  • Refactored the headless browser test runner logging pipeline for dramatically improved performance (>400x faster on Chrome, >10x on Firefox, ~5x on Safari). Switched to incremental DOM scraping with textContent.slice(offset), append-only output semantics, unified log capture across all log levels on failure, and browser-specific invisible-div optimizations (display:none for Chrome/Firefox, visibility:hidden for Safari). #4960

... (truncated)

Changelog

Sourced from wasm-bindgen's changelog.

0.2.115

Added

  • console.debug/log/info/warn/error output from user-spawned Worker and SharedWorker instances is now forwarded to the CLI test runner during headless browser tests, just like output from the main thread. Works for blob URL workers, module workers, URL-based workers (importScripts), nested workers, and shared workers (including logs emitted before the first port connection). Non-cloneable arguments are serialized via String() rather than crashing the worker. The --nocapture flag is respected. #5037

  • js_sys::Promise<T> now implements IntoFuture, enabling direct .await on any JS promise without a wrapper type. The wasm-bindgen-futures implementation has been moved into js-sys behind an optional futures feature, which is activated automatically when wasm-bindgen-futures is a dependency. All existing wasm_bindgen_futures::* import paths continue to work unchanged via re-exports. js_sys::futures is also available directly for users who want promise.await without depending on wasm-bindgen-futures. #5049

  • Added --target emscripten support, generating a library_bindgen.js file for consumption by Emscripten at link time. Includes support for futures, JS closures, and TypeScript output. A new Emscripten-specific test runner is also included, along with CI integration. #4443

  • Added VideoFrame, VideoColorSpace, and related WebCodecs dictionaries/enums to web-sys. #5008

  • Added wasm_bindgen::handler module with set_on_abort and set_on_reinit hooks for panic=unwind builds. set_on_abort registers a callback invoked after the instance is terminated (hard abort, OOM, stack overflow). set_on_reinit registers a callback invoked after reinit() resets the WebAssembly instance via --experimental-reset-state-function. Handlers are stored as Wasm indirect-function-table indices so dispatch is safe even when linear memory is corrupt.

Changed

  • Replaced per-closure generic destructors with a single __wbindgen_destroy_closure export. #5019

  • Refactored the headless browser test runner logging pipeline for dramatically improved performance (>400x faster on Chrome, >10x on Firefox, ~5x on Safari). Switched to incremental DOM scraping with textContent.slice(offset), append-only output semantics, unified log capture across all log levels on failure, and browser-specific invisible-div optimizations (display:none for Chrome/Firefox, visibility:hidden for Safari).

... (truncated)

Commits
  • 9836458 Release 0.2.115 (#5050)
  • 4a53a1a Add wasm_bindgen::handler — hard-abort callbacks and reinit support (#5059)
  • 5a977d8 feat: forward console output from user-spawned workers (#5037)
  • 791569d deps: update to Walrus 26 (#5057)
  • 3b11e3f Emscripten bug fixes (#5055)
  • adc330d fix: respect skip_typescript when using reexport (#5051)
  • 6e3e7ea fix(js-sys): restore stable FromIterator/Extend for Array to fix type inferen...
  • 30d0551 js-sys: implement IntoFuture for Promise, inline wasm-bindgen-futures (#5049)
  • cc89985 fix: Interpreter pops function arguments in reverse order (#5047)
  • 7fe1ac6 add emscripten support (#4443)
  • Additional commits viewable in compare view

Updates wasm-bindgen-macro from 0.2.114 to 0.2.115

Release notes

Sourced from wasm-bindgen-macro's releases.

0.2.115

Added

  • console.debug/log/info/warn/error output from user-spawned Worker and SharedWorker instances is now forwarded to the CLI test runner during headless browser tests, just like output from the main thread. Works for blob URL workers, module workers, URL-based workers (importScripts), nested workers, and shared workers (including logs emitted before the first port connection). Non-cloneable arguments are serialized via String() rather than crashing the worker. The --nocapture flag is respected. #5037

  • js_sys::Promise<T> now implements IntoFuture, enabling direct .await on any JS promise without a wrapper type. The wasm-bindgen-futures implementation has been moved into js-sys behind an optional futures feature, which is activated automatically when wasm-bindgen-futures is a dependency. All existing wasm_bindgen_futures::* import paths continue to work unchanged via re-exports. js_sys::futures is also available directly for users who want promise.await without depending on wasm-bindgen-futures. #5049

  • Added --target emscripten support, generating a library_bindgen.js file for consumption by Emscripten at link time. Includes support for futures, JS closures, and TypeScript output. A new Emscripten-specific test runner is also included, along with CI integration. #4443

  • Added VideoFrame, VideoColorSpace, and related WebCodecs dictionaries/enums to web-sys. #5008

  • Added wasm_bindgen::handler module with set_on_abort and set_on_reinit hooks for panic=unwind builds. set_on_abort registers a callback invoked after the instance is terminated (hard abort, OOM, stack overflow). set_on_reinit registers a callback invoked after reinit() resets the WebAssembly instance via --experimental-reset-state-function. Handlers are stored as Wasm indirect-function-table indices so dispatch is safe even when linear memory is corrupt.

Changed

  • Replaced per-closure generic destructors with a single __wbindgen_destroy_closure export. #5019

  • Refactored the headless browser test runner logging pipeline for dramatically improved performance (>400x faster on Chrome, >10x on Firefox, ~5x on Safari). Switched to incremental DOM scraping with textContent.slice(offset), append-only output semantics, unified log capture across all log levels on failure, and browser-specific invisible-div optimizations (display:none for Chrome/Firefox, visibility:hidden for Safari). #4960

... (truncated)

Changelog

Sourced from wasm-bindgen-macro's changelog.

0.2.115

Added

  • console.debug/log/info/warn/error output from user-spawned Worker and SharedWorker instances is now forwarded to the CLI test runner during headless browser tests, just like output from the main thread. Works for blob URL workers, module workers, URL-based workers (importScripts), nested workers, and shared workers (including logs emitted before the first port connection). Non-cloneable arguments are serialized via String() rather than crashing the worker. The --nocapture flag is respected. #5037

  • js_sys::Promise<T> now implements IntoFuture, enabling direct .await on any JS promise without a wrapper type. The wasm-bindgen-futures implementation has been moved into js-sys behind an optional futures feature, which is activated automatically when wasm-bindgen-futures is a dependency. All existing wasm_bindgen_futures::* import paths continue to work unchanged via re-exports. js_sys::futures is also available directly for users who want promise.await without depending on wasm-bindgen-futures. #5049

  • Added --target emscripten support, generating a library_bindgen.js file for consumption by Emscripten at link time. Includes support for futures, JS closures, and TypeScript output. A new Emscripten-specific test runner is also included, along with CI integration. #4443

  • Added VideoFrame, VideoColorSpace, and related WebCodecs dictionaries/enums to web-sys. #5008

  • Added wasm_bindgen::handler module with set_on_abort and set_on_reinit hooks for panic=unwind builds. set_on_abort registers a callback invoked after the instance is terminated (hard abort, OOM, stack overflow). set_on_reinit registers a callback invoked after reinit() resets the WebAssembly instance via --experimental-reset-state-function. Handlers are stored as Wasm indirect-function-table indices so dispatch is safe even when linear memory is corrupt.

Changed

  • Replaced per-closure generic destructors with a single __wbindgen_destroy_closure export. #5019

  • Refactored the headless browser test runner logging pipeline for dramatically improved performance (>400x faster on Chrome, >10x on Firefox, ~5x on Safari). Switched to incremental DOM scraping with textContent.slice(offset), append-only output semantics, unified log capture across all log levels on failure, and browser-specific invisible-div optimizations (display:none for Chrome/Firefox, visibility:hidden for Safari).

... (truncated)

Commits
  • 9836458 Release 0.2.115 (#5050)
  • 4a53a1a Add wasm_bindgen::handler — hard-abort callbacks and reinit support (#5059)
  • 5a977d8 feat: forward console output from user-spawned workers (#5037)
  • 791569d deps: update to Walrus 26 (#5057)
  • 3b11e3f Emscripten bug fixes (#5055)
  • adc330d fix: respect skip_typescript when using reexport (#5051)
  • 6e3e7ea fix(js-sys): restore stable FromIterator/Extend for Array to fix type inferen...
  • 30d0551 js-sys: implement IntoFuture for Promise, inline wasm-bindgen-futures (#5049)
  • cc89985 fix: Interpreter pops function arguments in reverse order (#5047)
  • 7fe1ac6 add emscripten support (#4443)
  • Additional commits viewable in compare view

Updates wasm-bindgen-macro-support from 0.2.114 to 0.2.115

Release notes

Sourced from wasm-bindgen-macro-support's releases.

0.2.115

Added

  • console.debug/log/info/warn/error output from user-spawned Worker and SharedWorker instances is now forwarded to the CLI test runner during headless browser tests, just like output from the main thread. Works for blob URL workers, module workers, URL-based workers (importScripts), nested workers, and shared workers (including logs emitted before the first port connection). Non-cloneable arguments are serialized via String() rather than crashing the worker. The --nocapture flag is respected. #5037

  • js_sys::Promise<T> now implements IntoFuture, enabling direct .await on any JS promise without a wrapper type. The wasm-bindgen-futures implementation has been moved into js-sys behind an optional futures feature, which is activated automatically when wasm-bindgen-futures is a dependency. All existing wasm_bindgen_futures::* import paths continue to work unchanged via re-exports. js_sys::futures is also available directly for users who want promise.await without depending on wasm-bindgen-futures. #5049

  • Added --target emscripten support, generating a library_bindgen.js file for consumption by Emscripten at link time. Includes support for futures, JS closures, and TypeScript output. A new Emscripten-specific test runner is also included, along with CI integration. #4443

  • Added VideoFrame, VideoColorSpace, and related WebCodecs dictionaries/enums to web-sys. #5008

  • Added wasm_bindgen::handler module with set_on_abort and set_on_reinit hooks for panic=unwind builds. set_on_abort registers a callback invoked after the instance is terminated (hard abort, OOM, stack overflow). set_on_reinit registers a callback invoked after reinit() resets the WebAssembly instance via --experimental-reset-state-function. Handlers are stored as Wasm indirect-function-table indices so dispatch is safe even when linear memory is corrupt.

Changed

  • Replaced per-closure generic destructors with a single __wbindgen_destroy_closure export. #5019

  • Refactored the headless browser test runner logging pipeline for dramatically improved performance (>400x faster on Chrome, >10x on Firefox, ~5x on Safari). Switched to incremental DOM scraping with textContent.slice(offset), append-only output semantics, unified log capture across all log levels on failure, and browser-specific invisible-div optimizations (display:none for Chrome/Firefox, visibility:hidden for Safari). #4960

... (truncated)

Changelog

Sourced from wasm-bindgen-macro-support's changelog.

0.2.115

Added

  • console.debug/log/info/warn/error output from user-spawned Worker and SharedWorker instances is now forwarded to the CLI test runner during headless browser tests, just like output from the main thread. Works for blob URL workers, module workers, URL-based workers (importScripts), nested workers, and shared workers (including logs emitted before the first port connection). Non-cloneable arguments are serialized via String() rather than crashing the worker. The --nocapture flag is respected. #5037

  • js_sys::Promise<T> now implements IntoFuture, enabling direct .await on any JS promise without a wrapper type. The wasm-bindgen-futures implementation has been moved into js-sys behind an optional futures feature, which is activated automatically when wasm-bindgen-futures is a dependency. All existing wasm_bindgen_futures::* import paths continue to work unchanged via re-exports. js_sys::futures is also available directly for users who want promise.await without depending on wasm-bindgen-futures. #5049

  • Added --target emscripten support, generating a library_bindgen.js file for consumption by Emscripten at link time. Includes support for futures, JS closures, and TypeScript output. A new Emscripten-specific test runner is also included, along with CI integration. #4443

  • Added VideoFrame, VideoColorSpace, and related WebCodecs dictionaries/enums to web-sys. #5008

  • Added wasm_bindgen::handler module with set_on_abort and set_on_reinit hooks for panic=unwind builds. set_on_abort registers a callback invoked after the instance is terminated (hard abort, OOM, stack overflow). set_on_reinit registers a callback invoked after reinit() resets the WebAssembly instance via --experimental-reset-state-function. Handlers are stored as Wasm indirect-function-table indices so dispatch is safe even when linear memory is corrupt.

Changed

  • Replaced per-closure generic destructors with a single __wbindgen_destroy_closure export. #5019

  • Refactored the headless browser test runner logging pipeline for dramatically improved performance (>400x faster on Chrome, >10x on Firefox, ~5x on Safari). Switched to incremental DOM scraping with textContent.slice(offset), append-only output semantics, unified log capture across all log levels on failure, and browser-specific invisible-div optimizations (display:none for Chrome/Firefox, visibility:hidden for Safari).

... (truncated)

Commits
  • 9836458 Release 0.2.115 (#5050)
  • 4a53a1a Add wasm_bindgen::handler — hard-abort callbacks and reinit support (#5059)
  • 5a977d8 feat: forward console output from user-spawned workers (#5037)
  • 791569d deps: update to Walrus 26 (#5057)
  • 3b11e3f Emscripten bug fixes (#5055)
  • adc330d fix: respect skip_typescript when using reexport (#5051)
  • 6e3e7ea fix(js-sys): restore stable FromIterator/Extend for Array to fix type inferen...
  • 30d0551 js-sys: implement IntoFuture for Promise, inline wasm-bindgen-futures (#5049)
  • cc89985 fix: Interpreter pops function arguments in reverse order (#5047)
  • 7fe1ac6 add emscripten support (#4443)
  • Additional commits viewable in compare view

Updates wasm-bindgen-shared from 0.2.114 to 0.2.115

Release notes

Sourced from wasm-bindgen-shared's releases.

0.2.115

Added

  • console.debug/log/info/warn/error output from user-spawned Worker and SharedWorker instances is now forwarded to the CLI test runner during headless browser tests, just like output from the main thread. Works for blob URL workers, module workers, URL-based workers (importScripts), nested workers, and shared workers (including logs emitted before the first port connection). Non-cloneable arguments are serialized via String() rather than crashing the worker. The --nocapture flag is respected. #5037

  • js_sys::Promise<T> now implements IntoFuture, enabling direct .await on any JS promise without a wrapper type. The wasm-bindgen-futures implementation has been moved into js-sys behind an optional futures feature, which is activated automatically when wasm-bindgen-futures is a dependency. All existing wasm_bindgen_futures::* import paths continue to work unchanged via re-exports. js_sys::futures is also available directly for users who want promise.await without depending on wasm-bindgen-futures. #5049

  • Added --target emscripten support, generating a library_bindgen.js file for consumption by Emscripten at link time. Includes support for futures, JS closures, and TypeScript output. A new Emscripten-specific test runner is also included, along with CI integration. #4443

  • Added VideoFrame, VideoColorSpace, and related WebCodecs dictionaries/enums to web-sys. #5008

  • Added wasm_bindgen::handler module with set_on_abort and set_on_reinit hooks for panic=unwind builds. set_on_abort registers a callback invoked after the instance is terminated (hard abort, OOM, stack overflow). set_on_reinit registers a callback invoked after reinit() resets the WebAssembly instance via --experimental-reset-state-function. Handlers are stored as Wasm indirect-function-table indices so dispatch is safe even when linear memory is corrupt.

Changed

  • Replaced per-closure generic destructors with a single __wbindgen_destroy_closure export. #5019

  • Refactored the headless browser test runner logging pipeline for dramatically improved performance (>400x faster on Chrome, >10x on Firefox, ~5x on Safari). Switched to incremental DOM scraping with textContent.slice(offset), append-only output semantics, unified log capture across all log levels on failure, and browser-specific invisible-div optimizations (display:none for Chrome/Firefox, visibility:hidden for Safari). #4960

... (truncated)

Changelog

Sourced from wasm-bindgen-shared's changelog.

0.2.115

Added

  • console.debug/log/info/warn/error output from user-spawned Worker and SharedWorker instances is now forwarded to the CLI test runner during headless browser tests, just like output from the main thread. Works for blob URL workers, module workers, URL-based workers (importScripts), nested workers, and shared workers (including logs emitted before the first port connection). Non-cloneable arguments are serialized via String() rather than crashing the worker. The --nocapture flag is respected. #5037

  • js_sys::Promise<T> now implements IntoFuture, enabling direct .await on any JS promise without a wrapper type. The wasm-bindgen-futures implementation has been moved into js-sys behind an optional futures feature, which is activated automatically when wasm-bindgen-futures is a dependency. All existing wasm_bindgen_futures::* import paths continue to work unchanged via re-exports. js_sys::futures is also available directly for users who want promise.await without depending on wasm-bindgen-futures. #5049

  • Added --target emscripten support, generating a library_bindgen.js file for consumption by Emscripten at link time. Includes support for futures, JS closures, and TypeScript output. A new Emscripten-specific test runner is also included, along with CI integration. #4443

  • Added VideoFrame, VideoColorSpace, and related WebCodecs dictionaries/enums to web-sys. #5008

  • Added wasm_bindgen::handler module with set_on_abort and set_on_reinit hooks for panic=unwind builds. set_on_abort registers a callback invoked after the instance is terminated (hard abort, OOM, stack overflow). set_on_reinit registers a callback invoked after reinit() resets the WebAssembly instance via --experimental-reset-state-function. Handlers are stored as Wasm indirect-function-table indices so dispatch is safe even when linear memory is corrupt.

Changed

  • Replaced per-closure generic destructors with a single __wbindgen_destroy_closure export. #5019

  • Refactored the headless browser test runner logging pipeline for dramatically improved performance (>400x faster on Chrome, >10x on Firefox, ~5x on Safari). Switched to incremental DOM scraping with textContent.slice(offset), append-only output semantics, unified log capture across all log levels on failure, and browser-specific invisible-div optimizations (display:none for Chrome/Firefox, visibility:hidden for Safari).

... (truncated)

Commits
  • 9836458 Release 0.2.115 (#5050)
  • 4a53a1a Add wasm_bindgen::handler — hard-abort callbacks and reinit support (#5059)
  • 5a977d8 feat: forward console output from user-spawned workers (#5037)
  • 791569d deps: update to Walrus 26 (#5057)
  • 3b11e3f Emscripten bug fixes (#5055)
  • adc330d fix: respect skip_typescript when using reexport (#5051)
  • 6e3e7ea fix(js-sys): restore stable FromIterator/Extend for Array to fix type inferen...
  • 30d0551 js-sys: implement IntoFuture for Promise, inline wasm-bindgen-futures (#5049)
  • cc89985 fix: Interpreter pops function arguments in reverse order (#5047)
  • 7fe1ac6 add emscripten support (#4443)
  • Additional commits viewable in compare view

Updates winnow from 0.7.15 to 1.0.0

Changelog

Sourced from winnow's changelog.

[1.0.0] - 2026-03-17

Note: going to v1 is more a reflection of the rate of churn in Winnow's API than the quality of previous releases or any statement against future breaking changes.

Migration Guide

  1. Update to latest v0.7 release
  2. Resolve deprecations
  3. Upgrade to v1
  4. Add ascii, binary, or parser features as needed
  5. Break tuples into tuples-of-tuples as needed

Compatibility

  • Added parser, ascii, and binary feature gates to improve build times
  • Reduce 'impl ContainsToken for Tuple' to 10 elements to improve build times
  • Reduce 'impl Alt for Tuple' to 10 elements to improve build times
  • Reduce 'impl Parser for Tuple' to 10 elements to improve build times
  • Replaced (I, usize) with binary::bits::Bits to clarify intent
  • Moved BitOffsets from stream to binary::bits to consolidate the API
  • Make iterator impure like parsers
  • Replace Stream::raw with Stream::trace
  • Remove deprecated APIs

Performance

Build time

  • Reduce macro-generated code
  • Split off parser, ascii, and binary features

Runtime

  • Optimize hex_uint

Features

  • Add Parser::parse_iter

Fixes

  • Export Needed in stream
  • Correct trace for oct_digit1
  • Allow escaped into a Cow
  • Accept a parser for escaped, take_escaped control character for not-quite unicode parsing
Commits
  • 9072a31 chore: Release
  • 43727aa docs: Update changelog
  • 7900619 Merge pull request #898 from epage/escaped
  • c255e13 fix(ascii): Allow non-unicode control characters
  • 80b9e35 test(ascii): Verify escaped bad behavior
  • 2da9f01 fix(ascii): Be consistent in escaped parameter order
  • 2b1478d Merge pull request #897 from epage/iter
  • 4953b6f feat(parser): Add Parser::parse_iter
  • dd0ab86 Merge pull request #896 from epage/iter
  • 912a150 fix(comb)!: Make iterator impure like parsers
  • Additional commits viewable in compare view

Updates zerocopy from 0.8.42 to 0.8.48

Release notes

Sourced from zerocopy's releases.

v0.8.47

What's Changed

Full Changelog: google/zerocopy@v0.8.46...v0.8.47

v0.8.46

What's Changed

Full Changelog: google/zerocopy@v0.8.45...v0.8.46

v0.8.46-alpha.3

What's Changed

  • [...

    Description has been truncated

@dependabot
chore(deps): bump the dependencies group across 1 directory with 19 u…
21708e7 
…pdates

Bumps the dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.57` | `1.2.58` |
| [compio-buf](https://github.com/compio-rs/compio) | `0.8.0` | `0.8.1` |
| [compio-driver](https://github.com/compio-rs/compio) | `0.11.3` | `0.11.4` |
| [compio-quic](https://github.com/compio-rs/compio) | `0.7.0` | `0.7.2` |
| [itoa](https://github.com/dtolnay/itoa) | `1.0.17` | `1.0.18` |
| [js-sys](https://github.com/wasm-bindgen/wasm-bindgen) | `0.3.91` | `0.3.92` |
| [rustc-hash](https://github.com/rust-lang/rustc-hash) | `2.1.1` | `2.1.2` |
| [rustls-webpki](https://github.com/rustls/webpki) | `0.103.9` | `0.103.10` |
| [synchrony](https://github.com/compio-rs/synchrony) | `0.1.6` | `0.1.7` |
| [toml_datetime](https://github.com/toml-rs/toml) | `1.0.0+spec-1.1.0` | `1.1.0+spec-1.1.0` |
| [toml_edit](https://github.com/toml-rs/toml) | `0.25.4+spec-1.1.0` | `0.25.8+spec-1.1.0` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.42` | `0.8.48` |



Updates `cc` from 1.2.57 to 1.2.58
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.57...cc-v1.2.58)

Updates `compio-buf` from 0.8.0 to 0.8.1
- [Release notes](https://github.com/compio-rs/compio/releases)
- [Changelog](https://github.com/compio-rs/compio/blob/master/release-plz.toml)
- [Commits](https://github.com/compio-rs/compio/commits)

Updates `compio-driver` from 0.11.3 to 0.11.4
- [Release notes](https://github.com/compio-rs/compio/releases)
- [Changelog](https://github.com/compio-rs/compio/blob/master/release-plz.toml)
- [Commits](https://github.com/compio-rs/compio/commits)

Updates `compio-quic` from 0.7.0 to 0.7.2
- [Release notes](https://github.com/compio-rs/compio/releases)
- [Changelog](https://github.com/compio-rs/compio/blob/master/release-plz.toml)
- [Commits](https://github.com/compio-rs/compio/commits)

Updates `itoa` from 1.0.17 to 1.0.18
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](dtolnay/itoa@1.0.17...1.0.18)

Updates `js-sys` from 0.3.91 to 0.3.92
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wasm-bindgen/wasm-bindgen/commits)

Updates `rustc-hash` from 2.1.1 to 2.1.2
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/master/CHANGELOG.md)
- [Commits](rust-lang/rustc-hash@v2.1.1...v2.1.2)

Updates `rustls-webpki` from 0.103.9 to 0.103.10
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](rustls/webpki@v/0.103.9...v/0.103.10)

Updates `synchrony` from 0.1.6 to 0.1.7
- [Commits](https://github.com/compio-rs/synchrony/commits)

Updates `toml_datetime` from 1.0.0+spec-1.1.0 to 1.1.0+spec-1.1.0
- [Commits](toml-rs/toml@toml_datetime-v1.0.0...toml_datetime-v1.1.0)

Updates `toml_edit` from 0.25.4+spec-1.1.0 to 0.25.8+spec-1.1.0
- [Commits](toml-rs/toml@v0.25.4...v0.25.8)

Updates `toml_parser` from 1.0.9+spec-1.1.0 to 1.1.0+spec-1.1.0
- [Commits](toml-rs/toml@toml_parser-v1.0.9...toml_parser-v1.1.0)

Updates `wasm-bindgen` from 0.2.114 to 0.2.115
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](wasm-bindgen/wasm-bindgen@0.2.114...0.2.115)

Updates `wasm-bindgen-macro` from 0.2.114 to 0.2.115
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](wasm-bindgen/wasm-bindgen@0.2.114...0.2.115)

Updates `wasm-bindgen-macro-support` from 0.2.114 to 0.2.115
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](wasm-bindgen/wasm-bindgen@0.2.114...0.2.115)

Updates `wasm-bindgen-shared` from 0.2.114 to 0.2.115
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](wasm-bindgen/wasm-bindgen@0.2.114...0.2.115)

Updates `winnow` from 0.7.15 to 1.0.0
- [Changelog](https://github.com/winnow-rs/winnow/blob/main/CHANGELOG.md)
- [Commits](winnow-rs/winnow@v0.7.15...v1.0.0)

Updates `zerocopy` from 0.8.42 to 0.8.48
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](google/zerocopy@v0.8.42...v0.8.48)

Updates `zerocopy-derive` from 0.8.42 to 0.8.48
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](google/zerocopy@v0.8.42...v0.8.48)

---
updated-dependencies:
- dependency-name: cc
  dependency-version: 1.2.58
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: compio-buf
  dependency-version: 0.8.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: compio-driver
  dependency-version: 0.11.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: compio-quic
  dependency-version: 0.7.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: itoa
  dependency-version: 1.0.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: js-sys
  dependency-version: 0.3.92
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: rustc-hash
  dependency-version: 2.1.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: rustls-webpki
  dependency-version: 0.103.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: synchrony
  dependency-version: 0.1.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: toml_datetime
  dependency-version: 1.1.0+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: toml_edit
  dependency-version: 0.25.8+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: toml_parser
  dependency-version: 1.1.0+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: wasm-bindgen
  dependency-version: 0.2.115
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wasm-bindgen-macro
  dependency-version: 0.2.115
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wasm-bindgen-macro-support
  dependency-version: 0.2.115
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wasm-bindgen-shared
  dependency-version: 0.2.115
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: winnow
  dependency-version: 1.0.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: zerocopy
  dependency-version: 0.8.48
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: zerocopy-derive
  dependency-version: 0.8.48
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Mar 30, 2026

Copy link
Copy Markdown
Contributor Author

Milestone

The specified milestone could not be found on this repository. If you view a milestone, the final part of the page URL, after milestone, is the identifier. For example: https://github.com/<org>/<repo>/milestone/3.

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Apr 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 6, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/dependencies-9ee0f8c65a branch April 6, 2026 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@ararog ararog

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ararog