chore(deps): bump the dependencies group across 1 directory with 15 updates by dependabot[bot] · Pull Request #58 · ararog/easyhttpmock

dependabot · 2026-07-02T17:22:24Z

Bumps the dependencies group with 12 updates in the / directory:

Package	From	To
caramelo	`0.1.1-beta.2`	`0.1.1-beta.4`
rand	`0.10.1`	`0.10.2`
vetis-smol	`0.1.0-beta.3`	`0.1.0-beta.4`
deboa	`0.1.0-beta.17`	`0.1.0-beta.18`
vetis-tokio	`0.1.0-beta.3`	`0.1.0-beta.4`
anyhow	`1.0.102`	`1.0.103`
aws-lc-rs	`1.17.0`	`1.17.1`
env_logger	`0.11.10`	`0.11.11`
hybrid-array	`0.4.12`	`0.4.13`
jiff	`0.2.29`	`0.2.31`
rustls-pki-types	`1.14.1`	`1.15.0`
xxhash-rust	`0.8.15`	`0.8.16`

Updates caramelo from 0.1.1-beta.2 to 0.1.1-beta.4

Commits

See full diff in compare view

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

Document required output order of fn partial_shuffle and apply #[must_use] (#1769)

Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

1540ea3 Prepare rand 0.10.2 (#1800)
a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
db14664 Check UniformChar validity on deser (#1790)
bea8620 Bump the all-deps group with 2 updates (#1796)
4f44932 Bump actions/cache from 5 to 6 (#1795)
b999a13 Bump actions/checkout from 6 to 7 (#1794)
aeab810 Avoid unsafe where safety depends on non-local values (#1791)
1896d7c Add typos CI job (#1789)
43eddee Bump the all-deps group with 2 updates (#1788)
Additional commits viewable in compare view

Updates vetis-smol from 0.1.0-beta.3 to 0.1.0-beta.4

Commits

See full diff in compare view

Updates deboa from 0.1.0-beta.17 to 0.1.0-beta.18

Commits

See full diff in compare view

Updates vetis-tokio from 0.1.0-beta.3 to 0.1.0-beta.4

Commits

See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates aws-lc-rs from 1.17.0 to 1.17.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

[Certificate #5314](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314) (static)

[Certificate #5298](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298) (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

Support linking against a system-installed AWS-LC:

Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @justsmth in aws/aws-lc-rs#1129

Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @justsmth in aws/aws-lc-rs#1143

Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @justsmth in aws/aws-lc-rs#1156

Gate system AWS-LC on a declared minimum version by @justsmth in aws/aws-lc-rs#1152

Implement Send/Sync for RSA hazmat encryption key types by @justsmth in aws/aws-lc-rs#1128

Add Salt::none constructor for HKDF by @justsmth in aws/aws-lc-rs#1135

Add wasm32-unknown-emscripten build and test support by @justsmth in aws/aws-lc-rs#1059

Report specific key rejection reasons for invalid RSA key sizes by @justsmth in aws/aws-lc-rs#1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @jakemas in aws/aws-lc#3195 and aws/aws-lc#3219

Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

Fix memcmp_check build failure when CFLAGS contains LTO flags by @justsmth in aws/aws-lc-rs#1134

Fix missing poly_Rq_mul symbol in Linux x86_64 build by @Lebei2046 in aws/aws-lc-rs#1130

Apply -ffile-prefix-map to jitterentropy builder by @justsmth in aws/aws-lc-rs#1139

Select compiler flag dialect by driver mode, not target ABI by @justsmth in aws/aws-lc-rs#1147

Issues Being Closed

RSA hazmat encryption key types missing Send/Sync -- aws/aws-lc-rs#1125

RSA key rejection reports generic Unspecified for invalid key sizes -- aws/aws-lc-rs#1082

Build failure when CFLAGS contains LTO flags (Windows/clang) -- aws/aws-lc-rs#1132

cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- aws/aws-lc-rs#1146

Support system-provided AWS-LC library -- aws/aws-lc-rs#936

cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- aws/aws-lc-rs#1108

jitterentropy embeds absolute paths to files -- aws/aws-lc-rs#1137

Other Merged PRs

Add ML-DSA aarch64 native assembly to CC builder scripts by @jakemas in aws/aws-lc-rs#1113

Clarify HKDF info concatenation and encoding responsibility by @justsmth in aws/aws-lc-rs#1145

CI: support zig cross compile for arm32 by @justsmth in aws/aws-lc-rs#1124

fix(clippy): fix truncate warnings by @justsmth in aws/aws-lc-rs#1126

ci: replace dtolnay/rust-toolchain with direct rustup invocations by @justsmth in aws/aws-lc-rs#1133

... (truncated)

Commits

741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
00e016a Bump actions/checkout from 6 to 7 (#1157)
e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
26838da rsa: report specific key rejection for invalid sizes (#1153)
Additional commits viewable in compare view

Updates aws-lc-sys from 0.41.0 to 0.42.0

Commits

741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
00e016a Bump actions/checkout from 6 to 7 (#1157)
e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
26838da rsa: report specific key rejection for invalid sizes (#1153)
Additional commits viewable in compare view

Updates env_logger from 0.11.10 to 0.11.11

Release notes

Sourced from env_logger's releases.

v0.11.11

[0.11.11] - 2026-06-25

Internal

Updated env_filter

Changelog

Sourced from env_logger's changelog.

[0.11.11] - 2026-06-25

Internal

Updated env_filter

Commits

b4d3f2b chore: Release
cc2b2ef chore: Release
69e27d1 docs: Update changelog
166880d Merge pull request #411 from epage/parse
0a580d0 fix(filter): Remove 'parse' on no_std
78d8ef1 Merge pull request #404 from cagatay-y/feature/filter-no_std
132fe86 feat(filter): Add support for no_std environments
4feafa4 refactor(env_filter): Fix unreachable pub warning
92f8d8d Merge pull request #410 from rust-cli/renovate/crate-ci-typos-1.x
4e57784 chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
Additional commits viewable in compare view

Updates hybrid-array from 0.4.12 to 0.4.13

Changelog

Sourced from hybrid-array's changelog.

0.4.13 (2026-06-27)

Added

ArraySize for U521 and U522 for NIST P-521 (#228)

#228: RustCrypto/hybrid-array#228

Commits

e9042b5 v0.4.13 (#229)
a319242 Impl ArraySize for U521 and U522 (#228)
ad08c53 Bump actions/checkout from 6 to 7 (#227)
af4e58b Bump zeroize from 1.8.2 to 1.9.0 (#226)
2709318 Bump codecov/codecov-action from 6 to 7 (#225)
See full diff in compare view

Updates jiff from 0.2.29 to 0.2.31

Changelog

Sourced from jiff's changelog.

0.2.31 (2026-06-29)

This release fixes a minor bug in tests that prevents the crate from running through standard build processes in Linux distributions downstream.

#594: Fix imports in recently added tests.

0.2.30 (2026-06-29)

This release fixes a safety soundness bug in Jiff's lower level printing APIs. There is also a nice performance improvement to civil::Date::weekday, which also improves downstread routines like civil::Date::nth_weekday and datetime<-->timestamp conversions in some cases.

Enhancements:

#591: Improve the performance of weekday calculations from Gregorian dates by 30-50%.

Bug fixes:

#592: Fix safety soundness bug when using a non-empty String destination buffer with lower level printing APIs inside of jiff::fmt.

Commits

8fb795f 0.2.31
528207f changelog: 0.2.31
91ee475 test: use crate::… instead of jiff::… in a couple of lib tests
4c3a86e 0.2.30
5cb4c43 changelog: 0.2.30
9e8f1fc fmt: add missing SAFETY comment
90823a4 tz: beef up the safety comment in the emscripten call
fadac1c tz: drop use of dlerror
62db326 fmt: fix soundness bug
df6885d civil: fast weekday calculation
Additional commits viewable in compare view

Updates jiff-static from 0.2.29 to 0.2.31

Changelog

Sourced from jiff-static's changelog.

0.2.31 (2026-06-29)

This release fixes a minor bug in tests that prevents the crate from running through standard build processes in Linux distributions downstream.

#594: Fix imports in recently added tests.

0.2.30 (2026-06-29)

This release fixes a safety soundness bug in Jiff's lower level printing APIs. There is also a nice performance improvement to civil::Date::weekday, which also improves downstread routines like civil::Date::nth_weekday and datetime<-->timestamp conversions in some cases.

Enhancements:

#591: Improve the performance of weekday calculations from Gregorian dates by 30-50%.

Bug fixes:

#592: Fix safety soundness bug when using a non-empty String destination buffer with lower level printing APIs inside of jiff::fmt.

Commits

8fb795f 0.2.31
528207f changelog: 0.2.31
91ee475 test: use crate::… instead of jiff::… in a couple of lib tests
4c3a86e 0.2.30
5cb4c43 changelog: 0.2.30
9e8f1fc fmt: add missing SAFETY comment
90823a4 tz: beef up the safety comment in the emscripten call
fadac1c tz: drop use of dlerror
62db326 fmt: fix soundness bug
df6885d civil: fast weekday calculation
Additional commits viewable in compare view

Updates rustls-pki-types from 1.14.1 to 1.15.0

Release notes

Sourced from rustls-pki-types's releases.

v/1.15.0

New feature: add a constructor for FipsStatus::Certified.

What's Changed

ci: sync cargo-check-external-types nightly by @cpu in rustls/pki-types#109

1.15.0: ensure FipsStatus::Certified is usable by @ctz in rustls/pki-types#110

Full Changelog: rustls/pki-types@v/1.14.1...v/1.15.0

Commits

ab46a65 Prepare 1.15.0
13d2dee Ensure FipsStatus::Certified is usable
23bc39f ci: sync cargo-check-external-types nightly
See full diff in compare view

Updates vetis from 0.1.4-beta.8 to 0.1.4-beta.9

Commits

See full diff in compare view

Updates xxhash-rust from 0.8.15 to 0.8.16

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [caramelo](https://github.com/ararog/caramelo) | `0.1.1-beta.2` | `0.1.1-beta.4` | | [rand](https://github.com/rust-random/rand) | `0.10.1` | `0.10.2` | | [vetis-smol](https://github.com/vetis-server/vetis) | `0.1.0-beta.3` | `0.1.0-beta.4` | | [deboa](https://github.com/ararog/deboa) | `0.1.0-beta.17` | `0.1.0-beta.18` | | [vetis-tokio](https://github.com/vetis-server/vetis) | `0.1.0-beta.3` | `0.1.0-beta.4` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.17.0` | `1.17.1` | | [env_logger](https://github.com/rust-cli/env_logger) | `0.11.10` | `0.11.11` | | [hybrid-array](https://github.com/RustCrypto/hybrid-array) | `0.4.12` | `0.4.13` | | [jiff](https://github.com/BurntSushi/jiff) | `0.2.29` | `0.2.31` | | [rustls-pki-types](https://github.com/rustls/pki-types) | `1.14.1` | `1.15.0` | | [xxhash-rust](https://github.com/DoumanAsh/xxhash-rust) | `0.8.15` | `0.8.16` | Updates `caramelo` from 0.1.1-beta.2 to 0.1.1-beta.4 - [Commits](https://github.com/ararog/caramelo/commits) Updates `rand` from 0.10.1 to 0.10.2 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.1...0.10.2) Updates `vetis-smol` from 0.1.0-beta.3 to 0.1.0-beta.4 - [Commits](https://github.com/vetis-server/vetis/commits) Updates `deboa` from 0.1.0-beta.17 to 0.1.0-beta.18 - [Release notes](https://github.com/ararog/deboa/releases) - [Commits](https://github.com/ararog/deboa/commits) Updates `vetis-tokio` from 0.1.0-beta.3 to 0.1.0-beta.4 - [Commits](https://github.com/vetis-server/vetis/commits) Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `aws-lc-rs` from 1.17.0 to 1.17.1 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.17.0...v1.17.1) Updates `aws-lc-sys` from 0.41.0 to 0.42.0 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@aws-lc-sys/v0.41.0...aws-lc-sys/v0.42.0) Updates `env_logger` from 0.11.10 to 0.11.11 - [Release notes](https://github.com/rust-cli/env_logger/releases) - [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md) - [Commits](rust-cli/env_logger@v0.11.10...v0.11.11) Updates `hybrid-array` from 0.4.12 to 0.4.13 - [Changelog](https://github.com/RustCrypto/hybrid-array/blob/master/CHANGELOG.md) - [Commits](RustCrypto/hybrid-array@v0.4.12...v0.4.13) Updates `jiff` from 0.2.29 to 0.2.31 - [Release notes](https://github.com/BurntSushi/jiff/releases) - [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md) - [Commits](BurntSushi/jiff@jiff-static-0.2.29...jiff-static-0.2.31) Updates `jiff-static` from 0.2.29 to 0.2.31 - [Release notes](https://github.com/BurntSushi/jiff/releases) - [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md) - [Commits](BurntSushi/jiff@jiff-static-0.2.29...jiff-static-0.2.31) Updates `rustls-pki-types` from 1.14.1 to 1.15.0 - [Release notes](https://github.com/rustls/pki-types/releases) - [Commits](rustls/pki-types@v/1.14.1...v/1.15.0) Updates `vetis` from 0.1.4-beta.8 to 0.1.4-beta.9 - [Commits](https://github.com/vetis-server/vetis/commits) Updates `xxhash-rust` from 0.8.15 to 0.8.16 - [Commits](https://github.com/DoumanAsh/xxhash-rust/commits) --- updated-dependencies: - dependency-name: caramelo dependency-version: 0.1.1-beta.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: rand dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: vetis-smol dependency-version: 0.1.0-beta.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: deboa dependency-version: 0.1.0-beta.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: vetis-tokio dependency-version: 0.1.0-beta.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: aws-lc-rs dependency-version: 1.17.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: aws-lc-sys dependency-version: 0.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: env_logger dependency-version: 0.11.11 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: hybrid-array dependency-version: 0.4.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: jiff dependency-version: 0.2.31 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: jiff-static dependency-version: 0.2.31 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: rustls-pki-types dependency-version: 1.15.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: vetis dependency-version: 0.1.4-beta.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: xxhash-rust dependency-version: 0.8.16 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-02T17:22:25Z

Milestone

The specified milestone could not be found on this repository. If you view a milestone, the final part of the page URL, after milestone, is the identifier. For example: https://github.com/<org>/<repo>/milestone/3.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-07-03T21:10:52Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot assigned ararog Jul 2, 2026

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 2, 2026

dependabot Bot closed this Jul 3, 2026

dependabot Bot deleted the dependabot/cargo/dependencies-9aa842b02f branch July 3, 2026 21:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 15 updates#58

chore(deps): bump the dependencies group across 1 directory with 15 updates#58
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/dependencies-9aa842b02f

dependabot Bot commented on behalf of github Jul 2, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

[0.10.2] — 2026-07-02

Fixes

Changes

1.0.103

aws-lc-rs v1.17.1

What's Changed

Upstream AWS-LC (v5.1.0)

Build Improvements

Issues Being Closed

Other Merged PRs

v0.11.11

[0.11.11] - 2026-06-25

Internal

[0.11.11] - 2026-06-25

Internal

0.4.13 (2026-06-27)

Added

0.2.31 (2026-06-29)

0.2.30 (2026-06-29)

0.2.31 (2026-06-29)

0.2.30 (2026-06-29)

v/1.15.0

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Jul 2, 2026

Milestone

Uh oh!

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 2, 2026 •

edited

Loading