Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 29, 2025

Bumps the cargo group with 2 updates in the /examples/tauri-dynamic-lib/src-tauri directory: glib and tracing-subscriber.
Bumps the cargo group with 11 updates in the /tooling/cli directory:

Package From To
anstream 0.6.4 0.6.20
h2 0.3.22 0.3.27
mio 0.8.9 0.8.11
rustix 0.37.27 0.37.28
tokio 1.34.0 1.38.2
curve25519-dalek 4.1.1 4.1.3
openssl 0.10.59 0.10.73
ring 0.17.5 0.17.14
rsa 0.9.6 0.9.8
rustls 0.21.9 0.21.12
zerocopy 0.7.26 0.7.35

Bumps the cargo group with 1 update in the /tooling/webdriver directory: mio.

Updates glib from 0.15.12 to 0.18.5

Release notes

Sourced from glib's releases.

0.18.5

Guillaume Desmottes:
      glib: improve message on deprecated channel API

Paolo Borelli: macros: generate GlibPtrDefault when deriving Boxed and SharedBoxed

Sebastian Dröge: Fix / work around a couple of new clippy 1.75 warnings Update versions to 0.18.5

0.18.4

Guillaume Gomez :
      Fix new clippy lints

Sebastian Dröge: glib: Deprecate main context channel gio: Don't wrongly cast DataInputStream byte arrays to a const pointer Update versions to 0.18.4

Zander Brown: gio: return NULL from spawn_blocking's underlying gtask

0.18.3

Aaron Erhardt:
      glib-macros: Mark property getters as #[must_use]

Bilal Elmoussaoui: Fix nightly clippy warnings

Brian Vincent: fix glyph string analysis methods that don't need &mut

Colin Walters: glib/GStringPtr: Add as_str() and Deref<Target=&str>

Desuwa: Add _full and _local_full methods for idle and timeout callbacks.

Eva Pace: glib-macros: Remove unused imports from Properties doc test

Julian Hofer: Add spawn_future and spawn_future_local convenience functions

</tr></table>

... (truncated)

Commits
  • 42b9caf Update versions to 0.18.5
  • 22c0f50 Merge pull request #1264 from sdroege/0.18-backports
  • f21c9da Fix / work around a couple of new clippy 1.75 warnings
  • 574908c macros: generate GlibPtrDefault when deriving Boxed and SharedBoxed
  • 5a17fef glib: improve message on deprecated channel API
  • c245700 Update versions to 0.18.4
  • a44ab02 Merge pull request #1240 from sdroege/0.18-backports
  • eba8f9d gio: return NULL from spawn_blocking's underlying gtask
  • 5e14a8d gio: Don't wrongly cast DataInputStream byte arrays to a const pointer
  • a7af9c0 Fix new clippy lints
  • Additional commits viewable in compare view

Updates idna from 0.3.0 to 1.1.0

Release notes

Sourced from idna's releases.

idna v1.0.3

What's Changed

New Contributors

Full Changelog: servo/rust-url@v2.5.2...idna-v1.0.3

idna v1.0.1

What's Changed

Full Changelog: servo/rust-url@v2.5.1...idna-v1.0.1

Commits

Updates tokio from 1.24.2 to 1.29.1

Release notes

Sourced from tokio's releases.

Tokio v1.38.2

This release fixes a soundness issue in the broadcast channel. The channel accepts values that are Send but !Sync. Previously, the channel called clone() on these values without synchronizing. This release fixes the channel by synchronizing calls to .clone() (Thanks Austin Bonander for finding and reporting the issue).

Fixed

  • sync: synchronize clone() call in broadcast channel (#7232)

#7232: tokio-rs/tokio#7232

Tokio v1.38.1

1.38.1 (July 16th, 2024)

This release fixes the bug identified as (#6682), which caused timers not to fire when they should.

Fixed

  • time: update wake_up while holding all the locks of sharded time wheels (#6683)

#6682: tokio-rs/tokio#6682 #6683: tokio-rs/tokio#6683

Tokio v1.38.0

This release marks the beginning of stabilization for runtime metrics. It stabilizes RuntimeMetrics::worker_count. Future releases will continue to stabilize more metrics.

Added

  • fs: add File::create_new (#6573)
  • io: add copy_bidirectional_with_sizes (#6500)
  • io: implement AsyncBufRead for Join (#6449)
  • net: add Apple visionOS support (#6465)
  • net: implement Clone for NamedPipeInfo (#6586)
  • net: support QNX OS (#6421)
  • sync: add Notify::notify_last (#6520)
  • sync: add mpsc::Receiver::{capacity,max_capacity} (#6511)
  • sync: add split method to the semaphore permit (#6472, #6478)
  • task: add tokio::task::join_set::Builder::spawn_blocking (#6578)
  • wasm: support rt-multi-thread with wasm32-wasi-preview1-threads (#6510)

Changed

  • macros: make #[tokio::test] append #[test] at the end of the attribute list (#6497)
  • metrics: fix blocking_threads count (#6551)
  • metrics: stabilize RuntimeMetrics::worker_count (#6556)
  • runtime: move task out of the lifo_slot in block_in_place (#6596)
  • runtime: panic if global_queue_interval is zero (#6445)
  • sync: always drop message in destructor for oneshot receiver (#6558)
  • sync: instrument Semaphore for task dumps (#6499)

... (truncated)

Commits

Updates tracing-subscriber from 0.3.16 to 0.3.18

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.18

This release of tracing-subscriber adds support for the NO_COLOR environment variable (an informal standard to disable emitting ANSI color escape codes) in fmt::Layer, reintroduces support for the chrono crate, and increases the minimum supported Rust version (MSRV) to Rust 1.63.0.

It also introduces several minor API improvements.

Added

  • chrono: Add chrono implementations of FormatTime (#2690)
  • subscriber: Add support for the NO_COLOR environment variable in fmt::Layer (#2647)
  • fmt: make format::Writer::new() public (#2680)
  • filter: Implement layer::Filter for Option<Filter> (#2407)

Changed

  • log: bump version of tracing-log to 0.2 (#2772)
  • Increased minimum supported Rust version (MSRV) to 1.63.0+.

#2690: tokio-rs/tracing#2690 #2647: tokio-rs/tracing#2647 #2680: tokio-rs/tracing#2680 #2407: tokio-rs/tracing#2407 #2772: tokio-rs/tracing#2772

Thanks to @​shayne-fletcher, @​dmlary, @​kaifastromai, and @​jsgf for contributing!

tracing-subscriber 0.3.17

This release of tracing-subscriber fixes a build error when using env-filter with recent versions of the regex crate. It also introduces several minor API improvements.

Fixed

  • env-filter: Add "unicode-case" and "unicode-perl" to the regex dependency, fixing a build error with recent versions of regex (#2566)
  • A number of minor documentation typos and other fixes (#2384, #2378, #2368, #2548)

Added

  • filter: Add fmt::Display impl for filter::Targets (#2343)
  • fmt: Made with_ansi(false) no longer require the "ansi" feature, so that ANSI formatting escapes can be disabled without requiring ANSI-specific dependencies (#2532)

... (truncated)

Commits

Updates anstream from 0.6.4 to 0.6.20

Commits

Updates h2 from 0.3.22 to 0.3.27

Release notes

Sourced from h2's releases.

v0.3.26

What's Changed

  • Limit number of CONTINUATION frames for misbehaving connections.

See https://seanmonstar.com/blog/hyper-http2-continuation-flood/ for more info.

v0.3.25

What's Changed

Full Changelog: hyperium/h2@v0.3.24...v0.3.25

v0.3.24

Fixed

  • Limit error resets for misbehaving connections.

v0.3.23

What's Changed

Changelog

Sourced from h2's changelog.

0.3.27 (July 11, 2025)

  • Fix notifying wakers when detecting local stream errors.

0.3.26 (April 3, 2024)

  • Limit number of CONTINUATION frames for misbehaving connections.

0.3.25 (March 15, 2024)

  • Improve performance decoding many headers.

0.3.24 (January 17, 2024)

  • Limit error resets for misbehaving connections.

0.3.23 (January 10, 2024)

  • Backport fix from 0.4.1 for stream capacity assignment.
Commits
  • f6237ac v0.3.27
  • f61332e refactor: change local reset counter to use type system more
  • 3f1a8e3 style: fix anonymous lifetime syntax
  • 778aa7e fix: notify_recv after send_reset() in reset_on_recv_stream_err() to ensure l...
  • be10b77 ci: pin more deps for MSRV job (#817)
  • c0d9feb ci: pin deps for MSRV
  • 5ccd9cf lints: fix unexpected cfgs warnings
  • e6e3e9c fix: return a WriteZero error if frames cannot be written (#783)
  • 357127e v0.3.26
  • 1a357aa fix: limit number of CONTINUATION frames allowed
  • Additional commits viewable in compare view

Updates mio from 0.8.9 to 0.8.11

Changelog

Sourced from mio's changelog.

0.8.11

0.8.10

Added

Commits

Updates rustix from 0.37.27 to 0.37.28

Commits

Updates tokio from 1.34.0 to 1.38.2

Release notes

Sourced from tokio's releases.

Tokio v1.38.2

This release fixes a soundness issue in the broadcast channel. The channel accepts values that are Send but !Sync. Previously, the channel called clone() on these values without synchronizing. This release fixes the channel by synchronizing calls to .clone() (Thanks Austin Bonander for finding and reporting the issue).

Fixed

  • sync: synchronize clone() call in broadcast channel (#7232)

#7232: tokio-rs/tokio#7232

Tokio v1.38.1

1.38.1 (July 16th, 2024)

This release fixes the bug identified as (#6682), which caused timers not to fire when they should.

Fixed

  • time: update wake_up while holding all the locks of sharded time wheels (#6683)

#6682: tokio-rs/tokio#6682 #6683: tokio-rs/tokio#6683

Tokio v1.38.0

This release marks the beginning of stabilization for runtime metrics. It stabilizes RuntimeMetrics::worker_count. Future releases will continue to stabilize more metrics.

Added

  • fs: add File::create_new (#6573)
  • io: add copy_bidirectional_with_sizes (#6500)
  • io: implement AsyncBufRead for Join (#6449)
  • net: add Apple visionOS support (#6465)
  • net: implement Clone for NamedPipeInfo (#6586)
  • net: support QNX OS (#6421)
  • sync: add Notify::notify_last (#6520)
  • sync: add mpsc::Receiver::{capacity,max_capacity} (#6511)
  • sync: add split method to the semaphore permit (#6472, #6478)
  • task: add tokio::task::join_set::Builder::spawn_blocking (#6578)
  • wasm: support rt-multi-thread with wasm32-wasi-preview1-threads (#6510)

Changed

  • macros: make #[tokio::test] append #[test] at the end of the attribute list (#6497)
  • metrics: fix blocking_threads count (#6551)
  • metrics: stabilize RuntimeMetrics::worker_count (#6556)
  • runtime: move task out of the lifo_slot in block_in_place (#6596)
  • runtime: panic if global_queue_interval is zero (#6445)
  • sync: always drop message in destructor for oneshot receiver (#6558)
  • sync: instrument Semaphore for task dumps (#6499)

... (truncated)

Commits

Updates curve25519-dalek from 4.1.1 to 4.1.3

Commits
  • 5312a03 curve: Bump version to 4.1.3 (#660)
  • b4f9e4d SECURITY: fix timing variability in backend/serial/u32/scalar.rs (#661)
  • 415892a SECURITY: fix timing variability in backend/serial/u64/scalar.rs (#659)
  • 56bf398 Updates license field to valid SPDX format (#647)
  • 9252fa5 Mitigate check-cfg until MSRV 1.77 (#652)
  • 1efe6a9 Fix a minor typo in signing.rs (#649)
  • cc3421a Indicate that the rand_core feature is required (#641)
  • 858c4ca Address new nightly clippy unnecessary qualifications (#639)
  • 31ccb67 Remove platforms in favor using CARGO_CFG_TARGET_POINTER_WIDTH (#636)
  • 19c7f4a Fix new nightly redundant import lint warns (#638)
  • Additional commits viewable in compare view

Updates openssl from 0.10.59 to 0.10.73

Release notes

Sourced from openssl's releases.

openssl-v0.10.73

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.72...openssl-v0.10.73

openssl-v0.10.72

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.71...openssl-v0.10.72

openssl-v0.10.71

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.70...openssl-v0.10.71

openssl v0.10.70

What's Changed

... (truncated)

Commits

Updates ring from 0.17.5 to 0.17.14

Changelog

Sourced from ring's changelog.

Version 0.17.14 (2025-03-11)

Fixed a performance bug in the AVX2-based AES-GCM implementation added in ring 0.17.13. This will be another notable performance improvement for most newish x86-64 systems. The performance issue impacted not just AES-GCM.

Compatibility with GNU binutils 2.29 (used on Amazon Linux 2), and probably even earlier versions, was restored. It is expected that ring 0.17.14 will build on all the systems that 0.17.12 would build on.

Version 0.17.13 (2025-03-06)

Increased MSRV to 1.66.0 to avoid bugs in earlier versions so that we can safely use core::arch::x86_64::__cpuid and core::arch::x86::__cpuid from Rust in future releases.

AVX2-based VAES-CLMUL implementation. This will be a notable performance improvement for most newish x86-64 systems. This will likely raise the minimum binutils version supported for very old Linux distros.

Version 0.17.12 (2025-03-05)

Bug fix: briansmith/ring#2447 for denial of service (DoS).

  • Fixes a panic in ring::aead::quic::HeaderProtectionKey::new_mask() when integer overflow checking is enabled. In the QUIC protocol, an attacker can induce this panic by sending a specially-crafted packet. Even unintentionally it is likely to occur in 1 out of every 2**32 packets sent and/or received.

  • Fixes a panic on 64-bit targets in ring::aead::{AES_128_GCM, AES_256_GCM} when overflow checking is enabled, when encrypting/decrypting approximately 68,719,476,700 bytes (about 64 gigabytes) of data in a single chunk. Protocols like TLS and SSH are not affected by this because those protocols break large amounts of data into small chunks. Similarly, most applications will not attempt to encrypt/decrypt 64GB of data in one chunk.

Overflow checking is not enabled in release mode by default, but RUSTFLAGS="-C overflow-checks" or overflow-checks = true in the Cargo.toml profile can override this. Overflow checking is usually enabled by default in debug mode.

Commits

Updates rsa from 0.9.6 to 0.9.8

Changelog

Sourced from rsa's changelog.

0.9.8 (2025-03-12)

Added

  • Doc comments to specify the rand version (#473)

#473: RustCrypto/RSA#473

0.9.7 (2024-11-26)

Fixed

  • Always validate keys in RsaPrivateKey::from_components (#459)
  • Do not crash when handling tiny keys in PKCS1v15 (#459)

#459: RustCrypto/RSA#459

Commits

Updates rustls from 0.21.9 to 0.21.12

Commits
  • 3633152 Cargo: v0.21.11 -> v0.21.12
  • 0baaeba proj: MSRV 1.61 -> 1.63
  • 6fd691a tls13: fix clippy::unnecessary_lazy_evaluations finding
  • 6da5337 Test for illegal IP address in server name extension
  • 75f8857 Ignore server_name extension containing IP address
  • 7b8d1db Prepare 0.21.11
  • ebcb478 complete_io: bail out if progress is impossible
  • 20f35df Regression test for complete_io infinite loop bug
  • 2f2aae1 Don't specially handle unauthenticated close_notify alerts
  • e163587 Don't deny warnings from nightly clippy
  • Additional commits viewable in compare view

Updates zerocopy from 0.7.26 to 0.7.35

Release notes

Sourced from zerocopy's releases.

v0.7.35

What's Changed

Bumps the cargo group with 2 updates in the /examples/tauri-dynamic-lib/src-tauri directory: [glib](https://github.com/gtk-rs/gtk-rs-core) and [tracing-subscriber](https://github.com/tokio-rs/tracing).
Bumps the cargo group with 11 updates in the /tooling/cli directory:

| Package | From | To |
| --- | --- | --- |
| [anstream](https://github.com/rust-cli/anstyle) | `0.6.4` | `0.6.20` |
| [h2](https://github.com/hyperium/h2) | `0.3.22` | `0.3.27` |
| [mio](https://github.com/tokio-rs/mio) | `0.8.9` | `0.8.11` |
| [rustix](https://github.com/bytecodealliance/rustix) | `0.37.27` | `0.37.28` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.34.0` | `1.38.2` |
| [curve25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) | `4.1.1` | `4.1.3` |
| [openssl](https://github.com/sfackler/rust-openssl) | `0.10.59` | `0.10.73` |
| [ring](https://github.com/briansmith/ring) | `0.17.5` | `0.17.14` |
| [rsa](https://github.com/RustCrypto/RSA) | `0.9.6` | `0.9.8` |
| [rustls](https://github.com/rustls/rustls) | `0.21.9` | `0.21.12` |
| [zerocopy](https://github.com/google/zerocopy) | `0.7.26` | `0.7.35` |

Bumps the cargo group with 1 update in the /tooling/webdriver directory: [mio](https://github.com/tokio-rs/mio).


Updates `glib` from 0.15.12 to 0.18.5
- [Release notes](https://github.com/gtk-rs/gtk-rs-core/releases)
- [Changelog](https://github.com/gtk-rs/gtk-rs-core/blob/main/CHANGELOG.md)
- [Commits](gtk-rs/gtk-rs-core@0.15.12...0.18.5)

Updates `idna` from 0.3.0 to 1.1.0
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](https://github.com/servo/rust-url/commits)

Updates `tokio` from 1.24.2 to 1.29.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.34.0...tokio-1.38.2)

Updates `tracing-subscriber` from 0.3.16 to 0.3.18
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.16...tracing-subscriber-0.3.18)

Updates `anstream` from 0.6.4 to 0.6.20
- [Commits](rust-cli/anstyle@anstream-v0.6.4...anstream-v0.6.20)

Updates `h2` from 0.3.22 to 0.3.27
- [Release notes](https://github.com/hyperium/h2/releases)
- [Changelog](https://github.com/hyperium/h2/blob/v0.3.27/CHANGELOG.md)
- [Commits](hyperium/h2@v0.3.22...v0.3.27)

Updates `mio` from 0.8.9 to 0.8.11
- [Release notes](https://github.com/tokio-rs/mio/releases)
- [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/mio@v0.8.9...v0.8.11)

Updates `rustix` from 0.37.27 to 0.37.28
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v0.37.27...v0.37.28)

Updates `tokio` from 1.34.0 to 1.38.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.34.0...tokio-1.38.2)

Updates `curve25519-dalek` from 4.1.1 to 4.1.3
- [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases)
- [Commits](dalek-cryptography/curve25519-dalek@curve25519-4.1.1...curve25519-4.1.3)

Updates `openssl` from 0.10.59 to 0.10.73
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.59...openssl-v0.10.73)

Updates `ring` from 0.17.5 to 0.17.14
- [Changelog](https://github.com/briansmith/ring/blob/main/RELEASES.md)
- [Commits](https://github.com/briansmith/ring/commits)

Updates `rsa` from 0.9.6 to 0.9.8
- [Changelog](https://github.com/RustCrypto/RSA/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/RSA@v0.9.6...v0.9.8)

Updates `rustls` from 0.21.9 to 0.21.12
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.21.9...v/0.21.12)

Updates `zerocopy` from 0.7.26 to 0.7.35
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](google/zerocopy@v0.7.26...v0.7.35)

Updates `mio` from 0.8.8 to 0.8.11
- [Release notes](https://github.com/tokio-rs/mio/releases)
- [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/mio@v0.8.9...v0.8.11)

---
updated-dependencies:
- dependency-name: glib
  dependency-version: 0.18.5
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: idna
  dependency-version: 1.1.0
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.29.1
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: tracing-subscriber
  dependency-version: 0.3.18
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: anstream
  dependency-version: 0.6.20
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: h2
  dependency-version: 0.3.27
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: mio
  dependency-version: 0.8.11
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: rustix
  dependency-version: 0.37.28
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.38.2
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: curve25519-dalek
  dependency-version: 4.1.3
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: openssl
  dependency-version: 0.10.73
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: ring
  dependency-version: 0.17.14
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: rsa
  dependency-version: 0.9.8
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: rustls
  dependency-version: 0.21.12
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: zerocopy
  dependency-version: 0.7.35
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: mio
  dependency-version: 0.8.11
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant