Skip to content

deps(deps): bump the rust-minor-patch group across 1 directory with 32 updates#56

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-f876509534
Closed

deps(deps): bump the rust-minor-patch group across 1 directory with 32 updates#56
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-f876509534

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the rust-minor-patch group with 22 updates in the / directory:

Package From To
crossbeam-channel 0.5.15 0.5.16
aws-lc-rs 1.17.0 1.17.1
cc 1.2.65 1.2.66
console 0.16.3 0.16.4
crossbeam-deque 0.8.6 0.8.7
crossbeam-epoch 0.9.18 0.9.20
crossbeam-utils 0.8.21 0.8.22
cxx 1.0.194 1.0.196
dbus 0.9.11 0.9.12
defmt 1.1.0 1.1.1
indicatif 0.18.5 0.18.6
jobserver 0.1.34 0.1.35
libredox 0.1.17 0.1.18
pest 2.8.6 2.8.7
pest_derive 2.8.6 2.8.7
quinn-proto 0.11.15 0.11.16
rustc-hash 2.1.2 2.1.3
rustls-pki-types 1.14.1 1.15.0
rustversion 1.0.22 1.0.23
tendril 0.5.0 0.5.1
time 0.3.51 0.3.53
zerocopy 0.8.52 0.8.53

Updates crossbeam-channel from 0.5.15 to 0.5.16

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.16

  • Improve support for rust-analyzer auto-completion of code inside select!/select_biased! macro. (#1240)
  • Make never const. (#1250)
Commits
  • 9b56303 Prepare for the next release
  • a078b17 ci: Sync config with main
  • 508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
  • 6a20e57 tests: Fix mismatched_lifetime_syntaxes
  • c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
  • bd6563e Update no_atomic.rs
  • d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
  • c0c466e channel: Use non-poison Mutex
  • 8b3940f Add missing word to docs (#1208)
  • df6eec0 docs: Link select_biased! from select! macro (#1202)
  • Additional commits viewable in compare view

Updates aws-lc-rs from 1.17.0 to 1.17.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

  • In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

Build Improvements

Issues Being Closed

Other Merged PRs

... (truncated)

Commits
  • 741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
  • e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
  • bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
  • 93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
  • 7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
  • a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
  • 00e016a Bump actions/checkout from 6 to 7 (#1157)
  • e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
  • dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
  • 26838da rsa: report specific key rejection for invalid sizes (#1153)
  • Additional commits viewable in compare view

Updates aws-lc-sys from 0.41.0 to 0.42.0

Commits
  • 741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
  • e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
  • bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
  • 93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
  • 7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
  • a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
  • 00e016a Bump actions/checkout from 6 to 7 (#1157)
  • e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
  • dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
  • 26838da rsa: report specific key rejection for invalid sizes (#1153)
  • Additional commits viewable in compare view

Updates cc from 1.2.65 to 1.2.66

Release notes

Sourced from cc's releases.

cc-v1.2.66

Other

  • Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
  • Support new QNX targets (#1775)
  • Add kache to the supported compiler wrappers (#1770)
Changelog

Sourced from cc's changelog.

1.2.66 - 2026-07-05

Other

  • Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
  • Support new QNX targets (#1775)
  • Add kache to the supported compiler wrappers (#1770)
Commits

Updates console from 0.16.3 to 0.16.4

Release notes

Sourced from console's releases.

0.16.4

What's Changed

Commits
  • 598eca9 Bump version to 0.16.4
  • 0f22c35 feat: add is_dumb public function
  • 1426649 Bump actions/checkout from 3 to 7
  • d2d89ad ignore non-ascii input in Style::from_dotted_str
  • 6cff3e0 document current panic in Style::from_dotted_str via test cases
  • dd4334f Apply suggestions from clippy 1.95
  • 586efad Remove redundant as_handle helper
  • be20e85 Add TermInner::new constructors
  • See full diff in compare view

Updates crossbeam-deque from 0.8.6 to 0.8.7

Release notes

Sourced from crossbeam-deque's releases.

crossbeam-deque 0.8.7

  • Optimize Worker::push, Stealer::steal_batch*, Injector::steal_batch*. (#1233)
Commits
  • 9b56303 Prepare for the next release
  • a078b17 ci: Sync config with main
  • 508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
  • 6a20e57 tests: Fix mismatched_lifetime_syntaxes
  • c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
  • bd6563e Update no_atomic.rs
  • d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
  • c0c466e channel: Use non-poison Mutex
  • 8b3940f Add missing word to docs (#1208)
  • df6eec0 docs: Link select_biased! from select! macro (#1202)
  • Additional commits viewable in compare view

Updates crossbeam-epoch from 0.9.18 to 0.9.20

Release notes

Sourced from crossbeam-epoch's releases.

crossbeam-epoch 0.9.20

  • Fix invalid pointer dereference in fmt::Pointer impl for Atomic/Shared when the underlying pointer is invalid. This fixes unsoundness that was not fully addressed in 0.9.19's fix. (#1276)

crossbeam-epoch 0.9.19

  • Fix null pointer dereference in fmt::Pointer impl for Atomic/Shared when it is a null pointer. (#1273)
  • Fix return value of Atomic::fetch_update. (#1197)
  • Improve compatibility with ThreadSanitizer. (#998)
  • Allow unsized types in Guard::defer_destroy. (#1201)
  • Use 64-bit integer for epoch representation on 32-bit platforms if AtomicU64 is available. (#1230)
Commits
  • 239bae0 Prepare for the next release
  • 2d5276a epoch: Do not dereference pointer in fmt::Pointer
  • 9b56303 Prepare for the next release
  • a078b17 ci: Sync config with main
  • 508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
  • 6a20e57 tests: Fix mismatched_lifetime_syntaxes
  • c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
  • bd6563e Update no_atomic.rs
  • d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
  • c0c466e channel: Use non-poison Mutex
  • Additional commits viewable in compare view

Updates crossbeam-utils from 0.8.21 to 0.8.22

Release notes

Sourced from crossbeam-utils's releases.

crossbeam-utils 0.8.22

  • Make AtomicCell::{as_ptr,into_inner} const. (#1237)
  • Make CachePadded repr(C). (#1270)
  • Optimize WaitGroup. (#1195)
Commits
  • 9b56303 Prepare for the next release
  • a078b17 ci: Sync config with main
  • 508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
  • 6a20e57 tests: Fix mismatched_lifetime_syntaxes
  • c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
  • bd6563e Update no_atomic.rs
  • d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
  • c0c466e channel: Use non-poison Mutex
  • 8b3940f Add missing word to docs (#1208)
  • df6eec0 docs: Link select_biased! from select! macro (#1202)
  • Additional commits viewable in compare view

Updates cxx from 1.0.194 to 1.0.196

Release notes

Sourced from cxx's releases.

1.0.196

1.0.195

  • Fix use of uninitialized value in let_cxx_string! on panic inside initialization expression (#1729, #1731)
Commits
  • eae54e0 Release 1.0.196
  • 328eaca Merge pull request #1737 from dtolnay/edition
  • ab7d7f4 Reformat with rustfmt 2024 style edition
  • 95ce0dc Update to Rust 2024 edition
  • 0d337d2 Merge pull request #1736 from dtolnay/edition
  • 8789c04 Resolve unsafe_op_in_unsafe_fn for 2024 edition
  • 47a82d1 Merge pull request #1735 from dtolnay/edition
  • f1f1532 Make no_mangle attributes unsafe
  • 80c8e15 Merge pull request #1734 from dtolnay/edition
  • 725f5b1 Make export_name attributes unsafe
  • Additional commits viewable in compare view

Updates cxx-build from 1.0.194 to 1.0.196

Release notes

Sourced from cxx-build's releases.

1.0.196

1.0.195

  • Fix use of uninitialized value in let_cxx_string! on panic inside initialization expression (#1729, #1731)
Commits
  • eae54e0 Release 1.0.196
  • 328eaca Merge pull request #1737 from dtolnay/edition
  • ab7d7f4 Reformat with rustfmt 2024 style edition
  • 95ce0dc Update to Rust 2024 edition
  • 0d337d2 Merge pull request #1736 from dtolnay/edition
  • 8789c04 Resolve unsafe_op_in_unsafe_fn for 2024 edition
  • 47a82d1 Merge pull request #1735 from dtolnay/edition
  • f1f1532 Make no_mangle attributes unsafe
  • 80c8e15 Merge pull request #1734 from dtolnay/edition
  • 725f5b1 Make export_name attributes unsafe
  • Additional commits viewable in compare view

Updates cxxbridge-cmd from 1.0.194 to 1.0.196

Release notes

Sourced from cxxbridge-cmd's releases.

1.0.196

1.0.195

  • Fix use of uninitialized value in let_cxx_string! on panic inside initialization expression (#1729, #1731)
Commits
  • eae54e0 Release 1.0.196
  • 328eaca Merge pull request #1737 from dtolnay/edition
  • ab7d7f4 Reformat with rustfmt 2024 style edition
  • 95ce0dc Update to Rust 2024 edition
  • 0d337d2 Merge pull request #1736 from dtolnay/edition
  • 8789c04 Resolve unsafe_op_in_unsafe_fn for 2024 edition
  • 47a82d1 Merge pull request #1735 from dtolnay/edition
  • f1f1532 Make no_mangle attributes unsafe
  • 80c8e15 Merge pull request #1734 from dtolnay/edition
  • 725f5b1 Make export_name attributes unsafe
  • Additional commits viewable in compare view

Updates cxxbridge-flags from 1.0.194 to 1.0.196

Release notes

Sourced from cxxbridge-flags's releases.

1.0.196

1.0.195

  • Fix use of uninitialized value in let_cxx_string! on panic inside initialization expression (#1729, #1731)
Commits
  • eae54e0 Release 1.0.196
  • 328eaca Merge pull request #1737 from dtolnay/edition
  • ab7d7f4 Reformat with rustfmt 2024 style edition
  • 95ce0dc Update to Rust 2024 edition
  • 0d337d2 Merge pull request #1736 from dtolnay/edition
  • 8789c04 Resolve unsafe_op_in_unsafe_fn for 2024 edition
  • 47a82d1 Merge pull request #1735 from dtolnay/edition
  • f1f1532 Make no_mangle attributes unsafe
  • 80c8e15 Merge pull request #1734 from dtolnay/edition
  • 725f5b1 Make export_name attributes unsafe
  • Additional commits viewable in compare view

Updates cxxbridge-macro from 1.0.194 to 1.0.196

Release notes

Sourced from cxxbridge-macro's releases.

1.0.196

1.0.195

  • Fix use of uninitialized value in let_cxx_string! on panic inside initialization expression (#1729, #1731)
Commits
  • eae54e0 Release 1.0.196
  • 328eaca Merge pull request #1737 from dtolnay/edition
  • ab7d7f4 Reformat with rustfmt 2024 style edition
  • 95ce0dc Update to Rust 2024 edition
  • 0d337d2 Merge pull request #1736 from dtolnay/edition
  • 8789c04 Resolve unsafe_op_in_unsafe_fn for 2024 edition
  • 47a82d1 Merge pull request #1735 from dtolnay/edition
  • f1f1532 Make no_mangle attributes unsafe
  • 80c8e15 Merge pull request #1734 from dtolnay/edition
  • 725f5b1 Make export_name attributes unsafe
  • Additional commits viewable in compare view

Updates dbus from 0.9.11 to 0.9.12

Commits

Updates defmt from 1.1.0 to 1.1.1

Release notes

Sourced from defmt's releases.

defmt v1.1.1

What's Changed

New Contributors

Full Changelog: knurling-rs/defmt@defmt-v1.1.0...defmt-v1.1.1

Changelog

Sourced from defmt's changelog.

[defmt-v1.1.1] (2026-06-26)

  • #1070 Swap from proc-macro-error2 to syn::Error
Commits

Updates defmt-macros from 1.1.0 to 1.1.1

Release notes

Sourced from defmt-macros's releases.

defmt v1.1.1

What's Changed

New Contributors

Full Changelog: knurling-rs/defmt@defmt-v1.1.0...defmt-v1.1.1

Changelog

Sourced from defmt-macros's changelog.

[defmt-v1.1.1] (2026-06-26)

  • #1070 Swap from proc-macro-error2 to syn::Error
Commits

Updates indicatif from 0.18.5 to 0.18.6

Release notes

Sourced from indicatif's releases.

0.18.6

What's Changed

Commits

Updates jobserver from 0.1.34 to 0.1.35

Commits
  • 85ba04e chore: bump to 0.1.35
  • 89f2303 Merge pull request #122 from weihanglo/nix-0.31.3
  • c539363 chore: bump to nix@0.31.3
  • 6753b4d Merge pull request #120 from kpcyrd/getrandom-0.4
  • 922f23b chore: bump MSRV to 1.85
  • c28a13d Merge pull request #121 from weihanglo/ci-native-make
  • d51b4bb ci: use native GNU Make instead of building from source
  • 2195928 test: exercise both jobserver styles in make-as-server tests
  • 18d138c Update getrandom to 0.4
  • See full diff in compare view

Updates libredox from 0.1.17 to 0.1.18

Updates pest from 2.8.6 to 2.8.7

Release notes

Sourced from pest's releases.

v2.8.7

What's Changed

New Contributors

Full Changelog: pest-parser/pest@v2.8.6...v2.8.7

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:

...
pest_derive = { version = "2.8", features = ["grammar-extras"] }
Commits
  • 24ed7bc fmt fix + bump version
  • 75a1348 fix(macro): resolve parses_to! and fails_with! compiler errors in integration...
  • ad3c254 ci: bump nightly
  • f3f2eea fix: reject unescaped quote inside char literal in meta grammar (#1175)
  • b24fa55 docs: add missing # Panics sections to public API (#1174)
  • 02c5ad8 docs: add Panics sections to line_col() and PrattParser::parse() (#1167)
  • 2a69a98 fix(test): make miette_error test independent of terminal (#1164)
  • d1a5bef fix doc indentation check (#1166)
  • 52f49b1 bump default CI toolchain to 1.86 (#1165)
  • 64111e5 Keep grammar.rs in tree (#1159)
  • Additional commits viewable in compare view

Updates pest_derive from 2.8.6 to 2.8.7

Release notes

Sourced from pest_derive's releases.

v2.8.7

What's Changed

@dependabot
deps(deps): bump the rust-minor-patch group across 1 directory with 3…
19880b6 
…2 updates

Bumps the rust-minor-patch group with 22 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam) | `0.5.15` | `0.5.16` |
| [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.17.0` | `1.17.1` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.65` | `1.2.66` |
| [console](https://github.com/console-rs/console) | `0.16.3` | `0.16.4` |
| [crossbeam-deque](https://github.com/crossbeam-rs/crossbeam) | `0.8.6` | `0.8.7` |
| [crossbeam-epoch](https://github.com/crossbeam-rs/crossbeam) | `0.9.18` | `0.9.20` |
| [crossbeam-utils](https://github.com/crossbeam-rs/crossbeam) | `0.8.21` | `0.8.22` |
| [cxx](https://github.com/dtolnay/cxx) | `1.0.194` | `1.0.196` |
| [dbus](https://github.com/diwic/dbus-rs) | `0.9.11` | `0.9.12` |
| [defmt](https://github.com/knurling-rs/defmt) | `1.1.0` | `1.1.1` |
| [indicatif](https://github.com/console-rs/indicatif) | `0.18.5` | `0.18.6` |
| [jobserver](https://github.com/rust-lang/jobserver-rs) | `0.1.34` | `0.1.35` |
| libredox | `0.1.17` | `0.1.18` |
| [pest](https://github.com/pest-parser/pest) | `2.8.6` | `2.8.7` |
| [pest_derive](https://github.com/pest-parser/pest) | `2.8.6` | `2.8.7` |
| [quinn-proto](https://github.com/quinn-rs/quinn) | `0.11.15` | `0.11.16` |
| [rustc-hash](https://github.com/rust-lang/rustc-hash) | `2.1.2` | `2.1.3` |
| [rustls-pki-types](https://github.com/rustls/pki-types) | `1.14.1` | `1.15.0` |
| [rustversion](https://github.com/dtolnay/rustversion) | `1.0.22` | `1.0.23` |
| [tendril](https://github.com/servo/html5ever) | `0.5.0` | `0.5.1` |
| [time](https://github.com/time-rs/time) | `0.3.51` | `0.3.53` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.52` | `0.8.53` |



Updates `crossbeam-channel` from 0.5.15 to 0.5.16
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-channel-0.5.15...crossbeam-channel-0.5.16)

Updates `aws-lc-rs` from 1.17.0 to 1.17.1
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@v1.17.0...v1.17.1)

Updates `aws-lc-sys` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@aws-lc-sys/v0.41.0...aws-lc-sys/v0.42.0)

Updates `cc` from 1.2.65 to 1.2.66
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.65...cc-v1.2.66)

Updates `console` from 0.16.3 to 0.16.4
- [Release notes](https://github.com/console-rs/console/releases)
- [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md)
- [Commits](console-rs/console@0.16.3...0.16.4)

Updates `crossbeam-deque` from 0.8.6 to 0.8.7
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-deque-0.8.6...crossbeam-deque-0.8.7)

Updates `crossbeam-epoch` from 0.9.18 to 0.9.20
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-epoch-0.9.18...crossbeam-epoch-0.9.20)

Updates `crossbeam-utils` from 0.8.21 to 0.8.22
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-utils-0.8.21...crossbeam-utils-0.8.22)

Updates `cxx` from 1.0.194 to 1.0.196
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.194...1.0.196)

Updates `cxx-build` from 1.0.194 to 1.0.196
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.194...1.0.196)

Updates `cxxbridge-cmd` from 1.0.194 to 1.0.196
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.194...1.0.196)

Updates `cxxbridge-flags` from 1.0.194 to 1.0.196
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.194...1.0.196)

Updates `cxxbridge-macro` from 1.0.194 to 1.0.196
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.194...1.0.196)

Updates `dbus` from 0.9.11 to 0.9.12
- [Commits](diwic/dbus-rs@dbus-v0.9.11...dbus-v0.9.12)

Updates `defmt` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/knurling-rs/defmt/releases)
- [Changelog](https://github.com/knurling-rs/defmt/blob/main/CHANGELOG.md)
- [Commits](knurling-rs/defmt@defmt-v1.1.0...defmt-v1.1.1)

Updates `defmt-macros` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/knurling-rs/defmt/releases)
- [Changelog](https://github.com/knurling-rs/defmt/blob/main/CHANGELOG.md)
- [Commits](knurling-rs/defmt@defmt-macros-v1.1.0...defmt-macros-v1.1.1)

Updates `indicatif` from 0.18.5 to 0.18.6
- [Release notes](https://github.com/console-rs/indicatif/releases)
- [Commits](console-rs/indicatif@0.18.5...0.18.6)

Updates `jobserver` from 0.1.34 to 0.1.35
- [Commits](rust-lang/jobserver-rs@0.1.34...0.1.35)

Updates `libredox` from 0.1.17 to 0.1.18

Updates `pest` from 2.8.6 to 2.8.7
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](pest-parser/pest@v2.8.6...v2.8.7)

Updates `pest_derive` from 2.8.6 to 2.8.7
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](pest-parser/pest@v2.8.6...v2.8.7)

Updates `pest_generator` from 2.8.6 to 2.8.7
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](pest-parser/pest@v2.8.6...v2.8.7)

Updates `pest_meta` from 2.8.6 to 2.8.7
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](pest-parser/pest@v2.8.6...v2.8.7)

Updates `quinn-proto` from 0.11.15 to 0.11.16
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.15...quinn-proto-0.11.16)

Updates `rustc-hash` from 2.1.2 to 2.1.3
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md)
- [Commits](rust-lang/rustc-hash@v2.1.2...v2.1.3)

Updates `rustls-pki-types` from 1.14.1 to 1.15.0
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](rustls/pki-types@v/1.14.1...v/1.15.0)

Updates `rustversion` from 1.0.22 to 1.0.23
- [Release notes](https://github.com/dtolnay/rustversion/releases)
- [Commits](dtolnay/rustversion@1.0.22...1.0.23)

Updates `tendril` from 0.5.0 to 0.5.1
- [Release notes](https://github.com/servo/html5ever/releases)
- [Commits](https://github.com/servo/html5ever/commits/v0.5.1)

Updates `time` from 0.3.51 to 0.3.53
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.51...v0.3.53)

Updates `time-macros` from 0.2.30 to 0.2.31
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](https://github.com/time-rs/time/commits)

Updates `zerocopy` from 0.8.52 to 0.8.53
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.52...v0.8.53)

Updates `zerocopy-derive` from 0.8.52 to 0.8.53
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.52...v0.8.53)

---
updated-dependencies:
- dependency-name: crossbeam-channel
  dependency-version: 0.5.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: aws-lc-rs
  dependency-version: 1.17.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: aws-lc-sys
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: cc
  dependency-version: 1.2.66
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: console
  dependency-version: 0.16.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: crossbeam-deque
  dependency-version: 0.8.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: crossbeam-epoch
  dependency-version: 0.9.20
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: crossbeam-utils
  dependency-version: 0.8.22
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxx
  dependency-version: 1.0.196
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxx-build
  dependency-version: 1.0.196
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-cmd
  dependency-version: 1.0.196
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-flags
  dependency-version: 1.0.196
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxxbridge-macro
  dependency-version: 1.0.196
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: dbus
  dependency-version: 0.9.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: defmt
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: defmt-macros
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: indicatif
  dependency-version: 0.18.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: jobserver
  dependency-version: 0.1.35
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: libredox
  dependency-version: 0.1.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: pest
  dependency-version: 2.8.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: pest_derive
  dependency-version: 2.8.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: pest_generator
  dependency-version: 2.8.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: pest_meta
  dependency-version: 2.8.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: quinn-proto
  dependency-version: 0.11.16
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: rustc-hash
  dependency-version: 2.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: rustls-pki-types
  dependency-version: 1.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: rustversion
  dependency-version: 1.0.23
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: tendril
  dependency-version: 0.5.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: time
  dependency-version: 0.3.53
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: time-macros
  dependency-version: 0.2.31
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: zerocopy
  dependency-version: 0.8.53
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: zerocopy-derive
  dependency-version: 0.8.53
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Jul 7, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 4 package(s) with unknown licenses.
See the Details below.

License Issues

Cargo.lock

PackageVersionLicenseIssue Type
aws-lc-rs1.17.1NullUnknown License
aws-lc-sys0.42.0NullUnknown License
console0.16.4NullUnknown License
rustversion1.0.23NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
cargo/aws-lc-rs 1.17.1 UnknownUnknown
cargo/aws-lc-sys 0.42.0 UnknownUnknown
cargo/cc 1.2.66 🟢 7.6
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/chacha20 0.10.1 🟢 4.7
Details
CheckScoreReason
Maintained🟢 78 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7
Security-Policy🟢 10security policy file detected
Code-Review🟢 5Found 13/24 approved changesets -- score normalized to 5
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License⚠️ 0license file not detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/console 0.16.4 UnknownUnknown
cargo/cpufeatures 0.3.0 🟢 4.6
Details
CheckScoreReason
Security-Policy🟢 10security policy file detected
Code-Review⚠️ 1Found 3/25 approved changesets -- score normalized to 1
Maintained🟢 1029 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License⚠️ 0license file not detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/crossbeam-channel 0.5.16 🟢 6.7
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/22 approved changesets -- score normalized to 2
Maintained🟢 1021 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/crossbeam-deque 0.8.7 🟢 6.7
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/22 approved changesets -- score normalized to 2
Maintained🟢 1021 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/crossbeam-epoch 0.9.20 🟢 6.7
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/22 approved changesets -- score normalized to 2
Maintained🟢 1021 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/crossbeam-utils 0.8.22 🟢 6.7
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/22 approved changesets -- score normalized to 2
Maintained🟢 1021 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 10all dependencies are pinned
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/cxx 1.0.196 🟢 5
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/21 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1027 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
cargo/cxx-build 1.0.196 🟢 5
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/21 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1027 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
cargo/cxxbridge-cmd 1.0.196 🟢 5
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/21 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1027 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
cargo/cxxbridge-flags 1.0.196 🟢 5
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/21 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1027 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
cargo/cxxbridge-macro 1.0.196 🟢 5
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/21 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1027 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases🟢 105 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 3security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
cargo/dbus 0.9.12 🟢 3.3
Details
CheckScoreReason
Maintained🟢 44 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 4
Code-Review⚠️ 2Found 6/24 approved changesets -- score normalized to 2
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy⚠️ 0security policy file not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/defmt 1.1.1 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 9security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/defmt-macros 1.1.1 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 9security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/indicatif 0.18.6 UnknownUnknown
cargo/jobserver 0.1.35 UnknownUnknown
cargo/libredox 0.1.18 UnknownUnknown
cargo/pest 2.8.7 🟢 5.7
Details
CheckScoreReason
Code-Review🟢 5Found 17/30 approved changesets -- score normalized to 5
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/pest_derive 2.8.7 🟢 5.7
Details
CheckScoreReason
Code-Review🟢 5Found 17/30 approved changesets -- score normalized to 5
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/pest_generator 2.8.7 🟢 5.7
Details
CheckScoreReason
Code-Review🟢 5Found 17/30 approved changesets -- score normalized to 5
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/pest_meta 2.8.7 🟢 5.7
Details
CheckScoreReason
Code-Review🟢 5Found 17/30 approved changesets -- score normalized to 5
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/quinn-proto 0.11.16 🟢 5.9
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/rand 0.10.2 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1024 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/rand_core 0.10.1 UnknownUnknown
cargo/rand_pcg 0.10.2 🟢 4.7
Details
CheckScoreReason
Code-Review🟢 6Found 7/11 approved changesets -- score normalized to 6
Maintained🟢 1020 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/rustc-hash 2.1.3 UnknownUnknown
cargo/rustls-pki-types 1.15.0 UnknownUnknown
cargo/rustversion 1.0.23 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/26 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained⚠️ 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 3security policy file detected
cargo/tendril 0.5.1 🟢 3.9
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 8Found 26/29 approved changesets -- score normalized to 8
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Maintained🟢 67 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
cargo/time 0.3.53 🟢 4.6
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Packaging⚠️ -1packaging workflow not detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 1branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
cargo/time-macros 0.2.31 🟢 4.6
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Packaging⚠️ -1packaging workflow not detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 1branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
cargo/zerocopy 0.8.53 🟢 8.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Contributors🟢 10project has 10 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected
cargo/zerocopy-derive 0.8.53 🟢 8.1
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Contributors🟢 10project has 10 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected

Scanned Files

  • Cargo.lock

@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 8, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-minor-patch-f876509534 branch July 8, 2026 03:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants