Skip to content

chore(deps): bump the cargo-dependencies group with 3 updates - #30

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-3c6c2ea020
Closed

chore(deps): bump the cargo-dependencies group with 3 updates#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-3c6c2ea020

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-dependencies group with 3 updates: lopdf, napi and napi-derive.

Updates lopdf from 0.42.0 to 0.44.0

Release notes

Sourced from lopdf's releases.

v0.44.0

What's Changed

New Contributors

Full Changelog: J-F-Liu/lopdf@v0.43.0...v0.44.0

v0.43.0

What's Changed

New Contributors

Full Changelog: J-F-Liu/lopdf@v0.42.0...v0.43.0

Changelog

Sourced from lopdf's changelog.

v0.44.0 (2026-07-10)

Add

  • Add back assets/test.pdf

Feat

  • Support incremental save of encrypted documents (#522)
  • Bound text extraction against decompression bombs
  • Bound load-time decompression via LoadOptions.max_decompressed_size
  • Bound stream decompression to guard against bombs
  • Make ttf-parser optional behind font_embedding feature

Fix

  • Reject incremental save of encrypted documents (#521)
  • Fix Document::get_toc() dropping entries when outline titles repeat (#517)
  • Add feature flag to font test
  • Only use criterion for non-wasm tests/benches

Move

  • Move resource files in tests to assets

Refactor

  • Make Document::get_page_content return Vec<u8> since it cannot fail

Test

  • Add tests demonstrating unbounded stream decompression

CI

  • CI skip performance test
  • Actually pass --no-default-features in the no-default-features matrix cell (#510)

v0.43.0 (2026-06-25)

Feat

  • Report encryption status in PdfMetadata

Commits
  • 8c454dd release v0.44.0 (#524)
  • 27a896b feat(writer): support incremental save of encrypted documents (#522)
  • 54742e0 fix(writer): reject incremental save of encrypted documents (#521)
  • 29435ab Fix Document::get_toc() dropping entries when outline titles repeat (#517)
  • 05072cb feat: bound text extraction against decompression bombs
  • 54018f6 feat: bound load-time decompression via LoadOptions.max_decompressed_size
  • abe5ad5 feat(object): bound stream decompression to guard against bombs
  • 89a6ef4 test: add tests demonstrating unbounded stream decompression
  • 78717ec CI skip performance test
  • 1e89efa refactor(document): make Document::get_page_content return Vec\<u8> since ...
  • Additional commits viewable in compare view

Updates napi from 3.9.4 to 3.10.5

Release notes

Sourced from napi's releases.

napi-v3.10.5

Fixed

  • (napi) release FunctionRef off the JS thread via the custom-GC TSFN (#3394)

napi-v3.10.4

Fixed

  • (cli) align build and project configuration (#3387)

Other

  • (readme) point sponsors image at napi.rs/sponsors.svg (#3379)

napi-v3.10.3

Fixed

  • (napi) preserve the JS error object when cloning an Error off-thread (#3375)

napi-v3.10.2

Fixed

  • (napi) keep message and cause when cloning a JS-exception Error off-thread (#3373)

napi-v3.10.1

Fixed

  • (napi) release Error's exception reference via the custom GC when dropped off-thread. (#3370)
  • (napi) stop ref exception object in ThreadsafeFunction sync-throw path on wasm targets (#3369)

Other

  • (napi) share class accessor trampolines (#3364)
  • optimize object field raw property access (#3365)

napi-v3.10.0

Added

  • (napi) implement To/FromNapiValue for OsString, OsStr, Path and PathBuf (#3339)

Fixed

  • (napi) route custom-GC Buffer/TypedArray cross-thread drops through the owning isolate (#3357) (#3360)
Commits
  • 9709883 chore(napi): release v3.10.5 (#3395)
  • c931c97 fix(napi): release FunctionRef off the JS thread via the custom-GC TSFN (#3394)
  • 3812aa7 chore: release (#3380)
  • ce56779 chore(release): publish
  • b9825c7 fix(derive): defer receiver borrow until argument conversion (#3392)
  • aa49714 fix(cli): align build and project configuration (#3387)
  • 68cbb8d chore(deps): update yarn to v4.17.1 (#3385)
  • 3069f44 fix(sys): fall back to libnode.dll for symbol loading on MSVC targets (#3384)
  • b015713 fix(cli): validate cross-compilation flags upfront and document them accurate...
  • 81a35ce chore(deps): update dependency oxc-parser to ^0.139.0 (#3382)
  • Additional commits viewable in compare view

Updates napi-derive from 3.5.7 to 3.5.10

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.5.10

Other

  • updated the following local packages: napi-derive-backend

napi-derive-v3.5.9

Other

  • updated the following local packages: napi-derive-backend

napi-derive-v3.5.8

Other

  • updated the following local packages: napi-derive-backend
Commits
  • 3812aa7 chore: release (#3380)
  • ce56779 chore(release): publish
  • b9825c7 fix(derive): defer receiver borrow until argument conversion (#3392)
  • aa49714 fix(cli): align build and project configuration (#3387)
  • 68cbb8d chore(deps): update yarn to v4.17.1 (#3385)
  • 3069f44 fix(sys): fall back to libnode.dll for symbol loading on MSVC targets (#3384)
  • b015713 fix(cli): validate cross-compilation flags upfront and document them accurate...
  • 81a35ce chore(deps): update dependency oxc-parser to ^0.139.0 (#3382)
  • 4bff127 docs(readme): point sponsors image at napi.rs/sponsors.svg (#3379)
  • 1ac467e chore(napi): release v3.10.3 (#3376)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo-dependencies group with 3 updates
3d78947 
Bumps the cargo-dependencies group with 3 updates: [lopdf](https://github.com/J-F-Liu/lopdf), [napi](https://github.com/napi-rs/napi-rs) and [napi-derive](https://github.com/napi-rs/napi-rs).


Updates `lopdf` from 0.42.0 to 0.44.0
- [Release notes](https://github.com/J-F-Liu/lopdf/releases)
- [Changelog](https://github.com/J-F-Liu/lopdf/blob/main/CHANGELOG.md)
- [Commits](J-F-Liu/lopdf@v0.42.0...v0.44.0)

Updates `napi` from 3.9.4 to 3.10.5
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-v3.9.4...napi-v3.10.5)

Updates `napi-derive` from 3.5.7 to 3.5.10
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-derive-v3.5.7...napi-derive-v3.5.10)

---
updated-dependencies:
- dependency-name: lopdf
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: napi
  dependency-version: 3.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: napi-derive
  dependency-version: 3.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 15, 2026
@dependabot
dependabot Bot requested a review from diomalta as a code owner July 15, 2026 21:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 29, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-dependencies-3c6c2ea020 branch July 29, 2026 21:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@diomalta diomalta Awaiting requested review from diomalta diomalta is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants