chore(deps): bump the cargo group across 1 directory with 11 updates#3
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump the cargo group across 1 directory with 11 updates#3dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the cargo group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.66` | `0.10.72` | | [aws-sdk-s3](https://github.com/awslabs/aws-sdk-rust) | `1.63.0` | `1.64.0` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.19` | `0.3.20` | | [bytes](https://github.com/tokio-rs/bytes) | `1.9.0` | `1.11.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.39.2` | `1.43.1` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `8.3.0` | `10.3.0` | | [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam) | `0.5.13` | `0.5.15` | | [lru](https://github.com/jeromefroe/lru-rs) | `0.12.4` | `0.12.5` | | [quinn-proto](https://github.com/quinn-rs/quinn) | `0.11.3` | `0.11.14` | | [rsa](https://github.com/RustCrypto/RSA) | `0.9.6` | `0.9.10` | | [time](https://github.com/time-rs/time) | `0.3.36` | `0.3.47` | Updates `openssl` from 0.10.66 to 0.10.72 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.66...openssl-v0.10.72) Updates `aws-sdk-s3` from 1.63.0 to 1.64.0 - [Release notes](https://github.com/awslabs/aws-sdk-rust/releases) - [Commits](https://github.com/awslabs/aws-sdk-rust/commits) Updates `tracing-subscriber` from 0.3.19 to 0.3.20 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.19...tracing-subscriber-0.3.20) Updates `bytes` from 1.9.0 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.9.0...v1.11.1) Updates `tokio` from 1.39.2 to 1.43.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.39.2...tokio-1.43.1) Updates `jsonwebtoken` from 8.3.0 to 10.3.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v8.3.0...v10.3.0) Updates `crossbeam-channel` from 0.5.13 to 0.5.15 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/master/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-channel-0.5.13...crossbeam-channel-0.5.15) Updates `lru` from 0.12.4 to 0.12.5 - [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md) - [Commits](jeromefroe/lru-rs@0.12.4...0.12.5) Updates `quinn-proto` from 0.11.3 to 0.11.14 - [Release notes](https://github.com/quinn-rs/quinn/releases) - [Commits](quinn-rs/quinn@quinn-proto-0.11.3...quinn-proto-0.11.14) Updates `rsa` from 0.9.6 to 0.9.10 - [Changelog](https://github.com/RustCrypto/RSA/blob/v0.9.10/CHANGELOG.md) - [Commits](RustCrypto/RSA@v0.9.6...v0.9.10) Updates `time` from 0.3.36 to 0.3.47 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.36...v0.3.47) --- updated-dependencies: - dependency-name: openssl dependency-version: 0.10.72 dependency-type: direct:production dependency-group: cargo - dependency-name: aws-sdk-s3 dependency-version: 1.64.0 dependency-type: direct:production dependency-group: cargo - dependency-name: tracing-subscriber dependency-version: 0.3.20 dependency-type: direct:production dependency-group: cargo - dependency-name: bytes dependency-version: 1.11.1 dependency-type: direct:production dependency-group: cargo - dependency-name: tokio dependency-version: 1.43.1 dependency-type: direct:production dependency-group: cargo - dependency-name: jsonwebtoken dependency-version: 10.3.0 dependency-type: direct:production dependency-group: cargo - dependency-name: crossbeam-channel dependency-version: 0.5.15 dependency-type: indirect dependency-group: cargo - dependency-name: lru dependency-version: 0.12.5 dependency-type: indirect dependency-group: cargo - dependency-name: quinn-proto dependency-version: 0.11.14 dependency-type: indirect dependency-group: cargo - dependency-name: rsa dependency-version: 0.9.10 dependency-type: indirect dependency-group: cargo - dependency-name: time dependency-version: 0.3.47 dependency-type: indirect dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>
This was referenced Mar 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the cargo group with 11 updates in the / directory:
0.10.660.10.721.63.01.64.00.3.190.3.201.9.01.11.11.39.21.43.18.3.010.3.00.5.130.5.150.12.40.12.50.11.30.11.140.9.60.9.100.3.360.3.47Updates
opensslfrom 0.10.66 to 0.10.72Release notes
Sourced from openssl's releases.
... (truncated)
Commits
87085bdMerge pull request #2390 from alex/uaf-fixd1a12e2Fixed two UAFs and bumped versions for release7c7b2e6Merge pull request #2389 from skmcgrail/aws-lc-follow-up34a477bUse --experimental with bindgen-cli with aws-lc buildd4bf071Merge pull request #2386 from skmcgrail/aws-lc-follow-upa86bf67Remove comment705dbfbFix teste0df413Skip final call for LibreSSL 4.1.0 for CCM mode2f1164bEnable additional capabilities for AWS-LCdde9ffbMerge pull request #1805 from skmcgrail/aws-lc-support-finalUpdates
aws-sdk-s3from 1.63.0 to 1.64.0Commits
Updates
tracing-subscriberfrom 0.3.19 to 0.3.20Release notes
Sourced from tracing-subscriber's releases.
Commits
4c52ca5fmt: fix ANSI escape sequence injection vulnerability (#3368)f71cebesubscriber: impl Clone for EnvFilter (#3360)3a1f571Fix CI (#3361)e63ef57chore: prepare tracing-attributes 0.1.30 (#3316)6e59a13attributes: fix tracing::instrument regression around shadowing (#3311)e4df761tracing: update core to 0.1.34 and attributes to 0.1.29 (#3305)643f392chore: prepare tracing-attributes 0.1.29 (#3304)d08e7a6chore: prepare tracing-core 0.1.34 (#3302)6e70c57tracing-subscriber: count numbers of enters inTimings(#2944)c01d4fdfix docs and enable CI onmainbranch (#3295)Updates
bytesfrom 1.9.0 to 1.11.1Release notes
Sourced from bytes's releases.
Changelog
Sourced from bytes's changelog.
Commits
417dccdRelease bytes v1.11.1 (#820)d0293b0Merge commit from forka7952fbchore: prepare bytes v1.11.0 (#804)60cbb77fix:BytesMutonly reuse if src has remaining (#803)7ce330fMove drop_fn of from_owner into vtable (#801)4b53a29Tweak BytesMut::remaining_mut (#795)016fdbdReserve capacity in BytesMut::put (#794)ef7f257Specialize BytesMut::put::<Bytes> (#793)8b4f54dIgnore BytesMut::freeze doctest on wasm (#790)16132adFix latest clippy warnings (#787)Updates
tokiofrom 1.39.2 to 1.43.1Release notes
Sourced from tokio's releases.
... (truncated)
Commits
a7b658cchore: prepare Tokio v1.43.1 releasec1c8d10Merge remote-tracking branch 'origin/tokio-1.38.x' into forward-port-1.38.xaa303bcchore: prepare Tokio v1.38.2 release7b6ccb5chore: backport CI fixes4b174cesync: fix cloning value when receiving from broadcast channel5f3296dchore: prepare Tokio v1.43.0 (#7079)cc974a6chore: prepare tokio-macros v2.5.0 (#7078)15495fdmetrics: improve flexibility of H2Histogram Configuration (#6963)ad41834io: don't callset_lenbefore initializing vector inBlocking(#7054)bd3e857runtime: moveis_join_waker_setassertion inunset_waker(#7072)Updates
jsonwebtokenfrom 8.3.0 to 10.3.0Changelog
Sourced from jsonwebtoken's changelog.
Commits
abbc307Fix type confusione99740dfix: bump minimal version requirements (#481)50d15e0Use try_sign to avoid panics (#479)245858fBump some dep122c2edBump action number in CI72e0c7fExpose cryptography backends via CryptoProvider (#452)53a3fc2Do not fail for clippy3226cfcPrepare for releasedfe58f9Remove unnecessary Clone bounds from decode functions (#458)9b3e19cFix function names in README (#457)Updates
crossbeam-channelfrom 0.5.13 to 0.5.15Release notes
Sourced from crossbeam-channel's releases.
Commits
d35ffdePrepare for the next release6ec74eccrossbeam-channel: prevent double free on Drop (#1187)ccd83acPrepare for the next release54988ebCalculate layout in const context761d0b6Port #1146 & #1147 to deque::Injector and queue::SegQueue8144fbbRemove optimistic spinning from Context::wait_untila92f6c4Bump peter-evans/create-pull-request from 5 to 7 (#1153)66d41a9channel: Add new_biased constructor for biased channel selection (#1150)d0d0a80CachePadded: Use 128-byte alignment on arm64ecf757eefAdd comment about fixed rustc bugUpdates
lrufrom 0.12.4 to 0.12.5Changelog
Sourced from lru's changelog.
Commits
2d18d2dMerge pull request #203 from jeromefroe/jerome/prepare-0-12-5-releaseb424869Prepare 0.12.5 release1ba5130Merge pull request #202 from torokati44/hashbrown-0.1560a7e71Use top-level DefaultHashBuilder type alias12ed995Update hashbrown to 0.15Updates
quinn-protofrom 0.11.3 to 0.11.14Release notes
Sourced from quinn-proto's releases.
... (truncated)
Commits
2c315aaproto: bump version to 0.11.148ad47f4Use newer rustls-pki-types PEM parser APIc81c028ci: fix workflow syntax0050172ci: pin wasm-bindgen-cli version8a6f82cTake semver-compatible dependency updatese52db4aApply suggestions from clippy 1.916df7275chore: Fixunnecessary_unwrapclippyc8eefa0proto: avoid unwrapping varint decoding during parameters parsing9723a97fuzz: add fuzzing target for parsing transport parameterseaf0ef3Fix over-permissive proto dependency edge (#2385)Updates
rsafrom 0.9.6 to 0.9.10Changelog
Sourced from rsa's changelog.
Commits
da2af9achore: release v0.9.102926c91fix: do not panic on a prime being 1 when loading a secret key (#624)488d2adchore: release 0.9.9c1f00a3Support for cryptographic operations with larger keys (#594)85f03b5Release v0.9.8 (#495)bd3575bAdd comment to specify the rand version (#473)551f6e5release: v0.9.72edd479fix: always validate keys in from_components201ad81fix: handle tiny keysUpdates
timefrom 0.3.36 to 0.3.47Release notes
Sourced from time's releases.
Changelog
Sourced from time's changelog.
... (truncated)
Commits
d5144cdv0.3.47 releasef6206b0Guard against integer overflow in release mode1c63dc7Avoid denial of service when parsing Rfc28225940df6Add builder methods to avoid verbose construction00881a4Manually format macros everywherebb723b6Addtrailing_inputmodifier toend31c4f8ePermitW12indate!macro490a17bMark error paths in well-known formats as cold6cb1896OptimizeRfc2822parsing6d264d5Remove erroneous#[inline(never)]attributesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.