Skip to content

chore(deps): bump the cargo group with 4 updates - #15

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-86f4127d29
Closed

chore(deps): bump the cargo group with 4 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-86f4127d29

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 4 updates: clap, base64, webpki-roots and rcgen.

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates webpki-roots from 0.26.11 to 1.0.9

Release notes

Sourced from webpki-roots's releases.

1.0.9

Changes:

What's Changed

New Contributors

Full Changelog: rustls/webpki-roots@v/1.0.8...v/1.0.9

1.0.8

What's Changed

Full Changelog: rustls/webpki-roots@v/1.0.7...v/1.0.8

1.0.7

For their April 2026 root store changes, Mozilla has made more changes than usual:

These changes are part of Mozilla’s ongoing root store maintenance under the Mozilla Root Store Policy (MRSP), including §7.4 (Root CA Lifecycles) and §7.5.3 (Transition Plans). They reflect a combination of lifecycle-based transitions, CA operator requests, and alignment with intended certificate usage, including retiring older or less suitable root certificates, enforcing clear separation of trust purposes (e.g., TLS vs. S/MIME), and reducing unnecessary trust surface in the Web PKI ecosystem. Collectively, these actions help to ensure that root certificates are relied upon only for their intended and actively maintained use cases, or are retired in accordance with established distrust timelines.

This removes:

  • CN=Certigna O=Dhimyotis
  • CN=COMODO Certification Authority O=COMODO CA Limited
  • CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=FIRMAPROFESIONAL CA ROOT-A WEB O=Firmaprofesional SA
  • CN=GTS Root R2 O=Google Trust Services LLC
  • CN=QuoVadis Root CA 2 O=QuoVadis Limited
  • CN=QuoVadis Root CA 3 O=QuoVadis Limited
  • CN=Secure Global CA O=SecureTrust Corporation
  • CN=SecureTrust CA O=SecureTrust Corporation
  • CN=SwissSign Gold CA - G2 O=SwissSign AG
  • CN=TeliaSonera Root CA v1 O=TeliaSonera
  • CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc.
  • CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc.
  • CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc.

... (truncated)

Commits

Updates rcgen from 0.13.2 to 0.14.7

Release notes

Sourced from rcgen's releases.

0.14.7

What's Changed

0.14.6

What's Changed

0.14.5

Implement SigningKey for &impl SigningKey to make Issuer more broadly useful.

What's Changed

0.14.4

What's Changed

0.14.3

What's Changed

0.14.2

  • Add a CertifiedIssuer type (see #363)

What's changed

0.14.1

... (truncated)

Commits
  • ee434c5 Bump version to 0.14.7
  • b370764 Add P521-SHA256 and P521-SHA384 signing algorithms
  • 851c56c update copyright year in LICENSE
  • 26aad71 Implement From\<KeyPair> for PrivateKeyDer\<'static>
  • b250fa3 Bump actions/cache from 4 to 5
  • 5693362 rcgen: bump version to 0.14.6
  • e347b76 Forward selected crypto backend to x509-parser
  • 0f9f5a9 ci: sync cargo-check-external-types nightly
  • 24bd69a Bump actions/checkout from 5 to 6
  • e3f6b5f chore: fix some typos in comments
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo group with 4 updates
aa85510 
Bumps the cargo group with 4 updates: [clap](https://github.com/clap-rs/clap), [base64](https://github.com/marshallpierce/rust-base64), [webpki-roots](https://github.com/rustls/webpki-roots) and [rcgen](https://github.com/rustls/rcgen).


Updates `clap` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `webpki-roots` from 0.26.11 to 1.0.9
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/0.26.11...v/1.0.9)

Updates `rcgen` from 0.13.2 to 0.14.7
- [Release notes](https://github.com/rustls/rcgen/releases)
- [Commits](rustls/rcgen@v0.13.2...v0.14.7)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: webpki-roots
  dependency-version: 1.0.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: rcgen
  dependency-version: 0.14.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 23, 2026
@vbasky

vbasky commented Sep 26, 2026

Copy link
Copy Markdown
Owner

Closing this in favor of applying the bumps directly.

The group update does not compile: rcgen 0.14 renamed CertifiedKey::key_pair to signing_key, which the HTTPS origin test uses. base64 0.23, webpki-roots 1.0, rcgen 0.14, and clap 4.6.7 are being taken with that call site updated.

@vbasky vbasky closed this Sep 26, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-86f4127d29 branch September 26, 2026 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vbasky