Skip to content

chore(deps): bump the rust-minor group with 11 updates - #48

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-eef4cbbc2d
Closed

chore(deps): bump the rust-minor group with 11 updates#48
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-eef4cbbc2d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the rust-minor group with 11 updates:

Package From To
thiserror 2.0.20 2.0.21
encoding_rs 0.8.41 0.8.42
hyper-rustls 0.27.9 0.27.10
hyper-util 0.1.20 0.1.21
rustls-platform-verifier 0.7.0 0.7.1
rustls-platform-verifier-android 0.1.1 0.2.0
siphasher 1.0.3 1.0.4
smallvec 1.16.1 1.16.2
thiserror-impl 2.0.20 2.0.21
zerocopy 0.8.57 0.8.58
zerocopy-derive 0.8.57 0.8.59

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates encoding_rs from 0.8.41 to 0.8.42

Commits
  • a155adc Increment version number to 0.8.42
  • 6603aed Attach the multiversion crate to the std feature instead
  • f718b07 docs: multiversion is compiled only with simd-accel
  • 4434afa chore: pull in multiversion only when it is actually used
  • 96138f6 Update main branch in URLs
  • See full diff in compare view

Updates hyper-rustls from 0.27.9 to 0.27.10

Release notes

Sourced from hyper-rustls's releases.

0.27.10

Maintenance release, principally fixing #344

What's Changed

Full Changelog: rustls/hyper-rustls@v/0.27.9...v/0.27.10

Commits
  • ce45b6b Bump rustls from 0.23.44 to 0.23.45
  • a3a1838 Bump rustls from 0.23.43 to 0.23.44
  • 6e1d602 Bump tokio-rustls from 0.26.4 to 0.26.5
  • 96e3b92 Bump hyper from 1.11.0 to 1.11.1
  • 3989e37 Bump log from 0.4.33 to 0.4.34
  • eed79ba Bump http-body-util from 0.1.4 to 0.1.5
  • fadbc9e Bump http from 1.4.2 to 1.5.0
  • 9519052 Bump rustls from 0.23.42 to 0.23.43
  • a2f1a60 Bump webpki-roots from 1.0.8 to 1.0.9
  • acce69f Bump tokio from 1.53.0 to 1.53.1
  • Additional commits viewable in compare view

Updates hyper-util from 0.1.20 to 0.1.21

Release notes

Sourced from hyper-util's releases.

v0.1.21

Additions

  • Add crate-level documentation. (#327)
  • Add client::legacy::Builder::http2_header_table_size() method. (#274)
  • Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
  • Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
  • Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
  • Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

  • Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
  • Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
  • Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
  • Fix client::pool::cache to preserve readiness with clones. (#297)
  • Fix client::pool::cache to wake its waiters in FIFO order. (#298)
  • Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
  • Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
  • Fix client::proxy::matcher handling for IP wildcards. (#309)
  • The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
  • Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.21 (2026-09-24)

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

Additions

  • Add crate-level documentation. (#327)
  • Add client::legacy::Builder::http2_header_table_size() method. (#274)
  • Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
  • Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
  • Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
  • Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

  • Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
  • Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
  • Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
  • Fix client::pool::cache to preserve readiness with clones. (#297)
  • Fix client::pool::cache to wake its waiters in FIFO order. (#298)
  • Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
  • Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
  • Fix client::proxy::matcher handling for IP wildcards. (#309)
  • The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
  • Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

Commits
  • 23a8689 v0.1.21
  • cdb2346 doc(client/pool): add broken_intra_doc_links allowance (#326)
  • 13b6110 chore(error): remove disabled hyper_util::error submodule (#325)
  • b9ee451 docs(lib): add crate-level documentation (#327)
  • d6b7d7e feat(rt/tracing): introduce tracing executors (#323)
  • f2da915 feat(client): add HttpConnector::set_mark for SO_MARK (#303)
  • 4dbd494 feat(rt): change TokioExecutor to not trace, add rt-tracing-exec-force feat...
  • d480d9f fix(client): parse proxy CONNECT response with httparse (#315)
  • 7e0958b chore(ci): simplify msrv check (#317)
  • 0734568 chore(ci): update to actions/checkout@v7 (#316)
  • Additional commits viewable in compare view

Updates rustls-platform-verifier from 0.7.0 to 0.7.1

Release notes

Sourced from rustls-platform-verifier's releases.

0.7.1

About

This version contains Windows and Android bugfixes, but its headline feature is a migration to an improved distribution strategy for the Android component of the crate, which must be included by Gradle for Android application/library builds. If you don't build for Android, no need to worry these changes don't affect you. But if you do, please continue reading to understand the required migration steps and benefits. 0.7.1 requires the Android migration to be performed once manually.

Android Revocation

The biggest improvement to functionality in this release is proper support for revocation on Android. As OCSP moves to deprecation, more CAs are exclusively using CRLs to distribute revocation data. Previously this failed to work on Android without workarounds since by default the network fetches for this were blocked. As of 0.2.0 of rustls-platform-verifier-android, this works again as expected. We now bundle an Android App manifest with the library, which Android Studio merges into the main manifest of the app being built.

Android Distribution

As of this release, we have stopped bundling pre-compiled .aar artifacts and a local Maven repository inside each release of rustls-platform-verifier-android. Instead, all future (and past!) Maven artifacts are now hosted on GitHub under the maven-archive branch. The branch's structure creates a remote Maven repository that Gradle can download and synchronize with just like any other. Importantly, this now means that the Android library can be downloaded and resolved independently of cargo's own downloads.

0.2.0 of the Android component is exclusively distributed through this new mechanism, but the 0.1.0 and 0.1.1 releases were also backported to the new repository. This means that no matter what version of rustls-platform-verifier you are using, its possible to migrate your Gradle build configuration to the more modern approach. Once again we have included out-of-the-box Gradle and Kotlin script snippets to configure the repository. See our README guide for more info.

What's Changed

New Contributors

Full Changelog: rustls/rustls-platform-verifier@v/0.7.0...v/0.7.1

Commits
  • 252e251 Release 0.7.1
  • 18f5c53 Bump Maven release to 0.2.0
  • 2885f2f Bump android-release-support to 0.2.0
  • 0e76b93 Update Android documentation and release process for GitHub-published artifacts
  • c87abb8 Remove Cargo-bundled Maven repository to setup for GitHub-published artifacts
  • 7c3e664 Bundle generated CRL networkSecurityConfig into release manifest
  • f4d7c89 Update Android build tooling and associated versions
  • f48a4b9 Fix groupId in POM template
  • 027c029 Update Android network security config
  • a8aa23d Take semver-compatible dependency updates
  • Additional commits viewable in compare view

Updates rustls-platform-verifier-android from 0.1.1 to 0.2.0

Release notes

Sourced from rustls-platform-verifier-android's releases.

0.2.0

  • Rustls version updated from 0.21 to 0.22

What's Changed

Full Changelog: rustls/rustls-platform-verifier@v/0.1.0...v/0.2.0

v/0.1.2

Fix an error in the handling of allowed EKUs on Windows; see rustls/rustls-platform-verifier#126

What's Changed

Full Changelog: rustls/rustls-platform-verifier@v/0.1.1...v/0.1.2

Commits
  • 9188474 Cargo: rustls-platform-verifier 0.1.0 -> 0.2.0
  • c18a7e2 Cargo: update to rustls 0.22, associated updates
  • b51d933 ci: add FreeBSD cargo test job
  • 52b8b61 proj: relax cfg gates to allow FreeBSD
  • abb3710 Fix README extra roots documentation on other OSes
  • 5df10ea Fix incorrect platform-specific Verifier documentation
  • a586af9 Update release documentation and scripts to record flushed-out steps
  • 09be880 docs: clarify Linux certificate store
  • 0da4cd6 docs: fix broken ServerCertVerifier link
  • dc8de0a verification_real_world: update 1password test data comments
  • Additional commits viewable in compare view

Updates siphasher from 1.0.3 to 1.0.4

Commits

Updates smallvec from 1.16.1 to 1.16.2

Release notes

Sourced from smallvec's releases.

v1.16.2

What's Changed

New Contributors

Full Changelog: servo/rust-smallvec@v1.16.1...v1.16.2

Commits
  • ccf5fc7 chore: bump version (#617)
  • af207cc Merge pull request #608 from Rayan-and-beyond/fix/manual-readme-warning-606
  • cda4b73 Merge pull request #594 from astral-sh/charlie/codex-fix-may-dangle
  • d0556cb Merge pull request #596 from astral-sh/charlie/codex-v1-compact
  • f73914c Flatten retain tests into the unit test module
  • 954d599 Move retain tests into the unit test module
  • 8d93633 Remove added retain benchmark harness
  • 88c6bfa Limit compaction optimization to retain
  • b9ef17d Fix element ownership tracking with may_dangle
  • 42029c2 Compact retained elements directly in retain and dedup_by
  • See full diff in compare view

Updates thiserror-impl from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror-impl's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates zerocopy from 0.8.57 to 0.8.58

Release notes

Sourced from zerocopy's releases.

v0.8.58

What's Changed

Full Changelog: google/zerocopy@v0.8.57...v0.8.58

Commits
  • 2bf9c7b Release 0.8.58 (#3718)
  • bd0956b Reorganize agent-facing documentation into skills (#3715)
  • 54aa994 Introduce unstable #[zerocopy(invariant(...))] library invariant checking (...
  • 7f96331 [CI] Bump the all-actions group with 6 updates (#3708)
  • a06acb0 [anneal] Add shared design contract (#3700)
  • 7e9de53 [anneal] Add top-level principles (#3698)
  • 1f5c93a [pointer] Clarify exact reinterpretation documentation (#3692)
  • 47a899d [pointer] Clarify transmute validity documentation (#3690)
  • d3b20a1 [pointer] Rename InvariantsEq to SharedCompatible (#3687)
  • 4fbb0b6 [CI] Bump the all-actions group with 2 updates (#3684)
  • Additional commits viewable in compare view

Updates zerocopy-derive from 0.8.57 to 0.8.59

Release notes

Sourced from zerocopy-derive's releases.

v0.8.59

What's Changed

Full Changelog: google/zerocopy@v0.8.58...v0.8.59

v0.8.58

What's Changed

Full Changelog: google/zerocopy@v0.8.57...v0.8.58

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the rust-minor group with 11 updates
adb9278 
Bumps the rust-minor group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.41` | `0.8.42` |
| [hyper-rustls](https://github.com/rustls/hyper-rustls) | `0.27.9` | `0.27.10` |
| [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.20` | `0.1.21` |
| [rustls-platform-verifier](https://github.com/rustls/rustls-platform-verifier) | `0.7.0` | `0.7.1` |
| [rustls-platform-verifier-android](https://github.com/rustls/rustls-platform-verifier) | `0.1.1` | `0.2.0` |
| [siphasher](https://github.com/jedisct1/rust-siphash) | `1.0.3` | `1.0.4` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.1` | `1.16.2` |
| [thiserror-impl](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.57` | `0.8.58` |
| [zerocopy-derive](https://github.com/google/zerocopy) | `0.8.57` | `0.8.59` |


Updates `thiserror` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `encoding_rs` from 0.8.41 to 0.8.42
- [Commits](hsivonen/encoding_rs@v0.8.41...v0.8.42)

Updates `hyper-rustls` from 0.27.9 to 0.27.10
- [Release notes](https://github.com/rustls/hyper-rustls/releases)
- [Commits](rustls/hyper-rustls@v/0.27.9...v/0.27.10)

Updates `hyper-util` from 0.1.20 to 0.1.21
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.20...v0.1.21)

Updates `rustls-platform-verifier` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/rustls/rustls-platform-verifier/releases)
- [Changelog](https://github.com/rustls/rustls-platform-verifier/blob/main/CHANGELOG)
- [Commits](rustls/rustls-platform-verifier@v/0.7.0...v/0.7.1)

Updates `rustls-platform-verifier-android` from 0.1.1 to 0.2.0
- [Release notes](https://github.com/rustls/rustls-platform-verifier/releases)
- [Changelog](https://github.com/rustls/rustls-platform-verifier/blob/main/CHANGELOG)
- [Commits](rustls/rustls-platform-verifier@v/0.1.1...v/0.2.0)

Updates `siphasher` from 1.0.3 to 1.0.4
- [Commits](jedisct1/rust-siphash@1.0.3...1.0.4)

Updates `smallvec` from 1.16.1 to 1.16.2
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.1...v1.16.2)

Updates `thiserror-impl` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `zerocopy` from 0.8.57 to 0.8.58
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.57...v0.8.58)

Updates `zerocopy-derive` from 0.8.57 to 0.8.59
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.57...v0.8.59)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: encoding_rs
  dependency-version: 0.8.42
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: hyper-rustls
  dependency-version: 0.27.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: hyper-util
  dependency-version: 0.1.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: rustls-platform-verifier
  dependency-version: 0.7.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: rustls-platform-verifier-android
  dependency-version: 0.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: rust-minor
- dependency-name: siphasher
  dependency-version: 1.0.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: smallvec
  dependency-version: 1.16.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: thiserror-impl
  dependency-version: 2.0.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: zerocopy
  dependency-version: 0.8.58
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: zerocopy-derive
  dependency-version: 0.8.59
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from mlevkov as a code owner September 28, 2026 09:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 5, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-minor-eef4cbbc2d branch October 5, 2026 09:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mlevkov mlevkov Awaiting requested review from mlevkov mlevkov is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants