Skip to content

Bump the cargo group across 1 directory with 13 updates - #6

Merged
samarthmn merged 2 commits into
mainfrom
dependabot/cargo/cargo-c3b16ba495
Nov 3, 2026
Merged

Bump the cargo group across 1 directory with 13 updates#6
samarthmn merged 2 commits into
mainfrom
dependabot/cargo/cargo-c3b16ba495

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 13 updates in the / directory:

Package From To
serde_json 1.0.151 1.0.154
gloo-net 0.6.0 0.7.0
rusqlite 0.32.1 0.41.1
uuid 1.27.0 1.29.0
base64 0.22.1 0.23.1
sha2 0.10.9 0.11.1
tower-http 0.6.11 0.7.1
libc 0.2.190 0.2.191
aes-gcm 0.10.3 0.11.1
hkdf 0.12.4 0.13.0
rand 0.8.8 0.10.3
zeroize 1.9.0 1.9.1
bip39 2.2.2 3.0.0

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates gloo-net from 0.6.0 to 0.7.0

Release notes

Sourced from gloo-net's releases.

gloo-net 0.7.0

MSRV updated to 1.82

Breaking

  • Remove Clone implementation for EventSource (#417) by @​vpochapuis Cloning had a bug where dropping any clone would disconnect all instances.

New Features

  • Add EventSourceBuilder for configuring EventSource with credentials (#530) by @​zn3x
  • Add WebSocket::buffered_amount (#510) by @​vi
  • Add PartialEq, Eq, Hash derives to CloseEvent (#504) by @​Alexi24601

Fixes

Maintenance

Changelog

Sourced from gloo-net's changelog.

Version 0.7.0

Commits
  • d69fcff chore: release gloo-net 0.7.0
  • 7a57df3 chore: release gloo-file 0.4.0
  • 2685476 fix: correct gloo-history category slugs
  • b1d5129 fix: correct gloo-storage category slugs
  • 8316f33 fix: correct gloo-render category slugs
  • 0734551 chore: release gloo-console 0.4.0, gloo-dialogs 0.3.0, gloo-events 0.3.0, glo...
  • e6280d4 chore: release gloo-utils 0.3.0
  • cca8089 chore: release gloo-worker-macros 0.2.0 and gloo-worker 0.6.0
  • a8af99c chore: update rust dependencies (#536)
  • 0de5865 fix(net)!: remove EventSource Clone implementation (#417)
  • Additional commits viewable in compare view

Updates rusqlite from 0.32.1 to 0.41.1

Release notes

Sourced from rusqlite's releases.

0.41.1

What's Changed

  • No check of PRAGMA name with SQLCipher #1923 (#1924)
  • Fix panic with a zero-argument deterministic scalar function #1925 (#1927)

Full Changelog: rusqlite/rusqlite@v0.41.0...v0.41.1

0.41.0

What's Changed

  • Check PRAGMA is valid with the help of pragma_list #1857
  • Fix UtcDateTime #1859
  • Bump sqlite3-parser version #1864
  • Edition 2024 #1863
  • Use u64 for zeroblob #1867
  • Fix virtual table set_result #1868
  • Bump bundled SQLCipher to version 4.17.0 #1870
  • Refactor bind_parameter and set_result #1871
  • Update prettyplease requirement from 0.2.20 to 0.3.0 #1872
  • Update syn requirement from 2.0.89 to 3.0.1 #1873
  • Fix Connection::serialize #1874 (#1875)
  • Make Statement::column_names,columns,columns_with_metadata return Iterator #1877
  • Introduce DEFAULT_NAME #1883
  • Expose sqlite3_file_control #1881 (#1882)
  • Replace assert!(matches! with assert_matches! #1851
  • Lower MSRV to 1.88.0 #1885
  • Fix clippy warnings #1888
  • Apply and check MSRV #1890
  • Bump minimal SQLite version to 3.45.3 #1894
  • sqlite3_set_clientdata / sqlite3_get_clientdata #977, #1708 (#1791)
  • Fix discrepancy between backup and restore #1893
  • Don't enable SQLITE_ENABLE_MEMORY_MANAGEMENT in the bundled build #1900
  • create_aggregate_function / create_window_function are missing a Send bound #1898
  • use-after-free from safe code in trace_v2 / busy_handler / ... #1899
  • feat: add Values::get_subtype to read SQLite value subtype in vtab callbacks #1879
  • Bump bindgen version to 0.73 #1903
  • Bump sqlite-wasm-rs to 0.6.1 #1904
  • Relax sqlite-wasm-rs version #1906
  • Rerun bundled-sqlcipher build when OPENSSL_* env changes #1910
  • Bump bundled SQLite version to 3.54.0 #1913
  • Fix possible memory leak on error in deserialize_read_exact #1909
  • Move sqlite3_wal_checkpoint_v2 binding #1667 (#1915)
  • Bump uuid version to 1.28 #1916

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.41.0

0.40.2

What's Changed

  • Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

... (truncated)

Commits
  • 18ee76d Prepare next release
  • 11ac8f5 Merge pull request #1924 from gwenn/pragma_name_check
  • 4d2be94 Merge pull request #1927 from gwenn/from_raw_parts
  • a60e76b Merge pull request #1919 from gwenn/0.41.0
  • f652850 Prepare release
  • 661107f Merge pull request #1917 from LucaCappelletti94/feat/sqlcipher-src
  • dd770f6 Fix the SQLCipher license link and match upstream style
  • 2daf10a Select the SQLCipher source with cfg_select
  • bb40153 Merge pull request #1916 from gwenn/uuid
  • 92a7d49 Bump uuid version to 1.28
  • Additional commits viewable in compare view

Updates uuid from 1.27.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

Commits
  • 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
  • a3631fd prepare for 1.29.0 release
  • 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
  • d49f963 Reuse existing version tests for NonNilUuid constructors
  • 2f02404 Add versioned constructors to NonNilUuid
  • 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
  • 4b3b9f5 prepare for 1.28.0 release
  • cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
  • 784a022 Inline expected tokens in optional compact serde test
  • a5678c3 Simplify optional serde adapter tests to option tokens
  • Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.1

Commits

Updates tower-http from 0.6.11 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

  • fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)
  • fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)
  • request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

  • fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

  • behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)
  • decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)
  • decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)
  • fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)
  • fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)
  • set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

... (truncated)

Commits
  • c941451 chore(release): prepare 0.7.1 (#729)
  • 9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
  • e2582e2 Allow ignoring multi-range requests (#727)
  • 888f7fe feat(services): configure directory redirects (#728)
  • 5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
  • d154adb fix: reject multipart ranges before validation (#661)
  • d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
  • 90c072b Propagate ServeDir::try_call I/O errors (#718)
  • 860922e fix(decompression): don't end the body on an empty data frame (#722)
  • 8532252 docs(example)/custom future with multiple bodies (#711)
  • Additional commits viewable in compare view

Updates libc from 0.2.190 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)
Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)
Commits
  • ccc2ff4 libc: Release 0.2.191
  • bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
  • ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
  • b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
  • 9c7f568 apple: add ifaliasreq and in6_aliasreq
  • 018c7e9 wasi: Add pthread_condattr_{get,set}clock
  • 2c77185 openbsd: add sensordev structure
  • e10813c hurd: Add missing POSIX_SPAWN_* flags
  • 2ea4bc1 Fix FreeBSD/aarch64
  • 6d666fd dragonfly: Parse version from headers rather than CLI
  • Additional commits viewable in compare view

Updates aes-gcm from 0.10.3 to 0.11.1

Commits

Updates hkdf from 0.12.4 to 0.13.0

Commits

Updates rand from 0.8.8 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)

... (truncated)

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates zeroize from 1.9.0 to 1.9.1

Commits

Updates bip39 from 2.2.2 to 3.0.0

Changelog

Sourced from bip39's changelog.

v3.0.0 - Sep. 17, 2026

  • Add WordCount for mnemonic generation (#98)
  • Use the operating system RNG for mnemonic generation and require rand v0.7 or newer (#105)
  • Add complete multilingual prefix lookup and deprecate the incomplete slice-based API (#104)
  • Preserve ambiguous mnemonic languages through entropy recovery and serde round trips (#108)
Commits
  • 4f182f0 Merge pull request #110 from tnull/2026-09-release-3.0.0
  • bb32cc6 Bump version to v3.0.0
  • 440c2d2 Merge pull request #109 from tnull/2026-08-release-2.3.0
  • 6af6278 Merge pull request #108 from tnull/2026-08-fix-chinese-mnemonic-roundtrips
  • 4b75324 Prepare v2.3.0 minor release
  • de2bcb2 Preserve mnemonic language through serde
  • 5c87fc1 Prevent ambiguous mnemonic entropy panics
  • 1a63bd4 Merge pull request #104 from tnull/2026-08-add-complete-prefix-lookup
  • 514584d Merge pull request #98 from coreyphillips/feat/wordcount-enum
  • eb76e31 Add WordCount for mnemonic generation
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2026
@dependabot
dependabot Bot requested a review from samarthmn as a code owner November 1, 2026 09:11
@dependabot dependabot Bot added the rust Pull requests that update rust code label Nov 1, 2026
@coderabbitai

coderabbitai Bot commented Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 18827fb8-0ad2-4190-b15c-3649561a4ef5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@dependabot
Bump the cargo group across 1 directory with 13 updates
174727f 
Bumps the cargo group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [gloo-net](https://github.com/rustwasm/gloo) | `0.6.0` | `0.7.0` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.32.1` | `0.41.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.27.0` | `1.29.0` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.1` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.11` | `0.7.1` |
| [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` |
| [aes-gcm](https://github.com/RustCrypto/AEADs) | `0.10.3` | `0.11.1` |
| [hkdf](https://github.com/RustCrypto/KDFs) | `0.12.4` | `0.13.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.8` | `0.10.3` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.9.0` | `1.9.1` |
| [bip39](https://github.com/rust-bitcoin/rust-bip39) | `2.2.2` | `3.0.0` |



Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `gloo-net` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/rustwasm/gloo/releases)
- [Changelog](https://github.com/ranile/gloo/blob/master/CHANGELOG.md)
- [Commits](ranile/gloo@0.6.0...gloo-net-v0.7.0)

Updates `rusqlite` from 0.32.1 to 0.41.1
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.32.1...v0.41.1)

Updates `uuid` from 1.27.0 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.27.0...v1.29.0)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `sha2` from 0.10.9 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.1)

Updates `tower-http` from 0.6.11 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.11...tower-http-0.7.1)

Updates `libc` from 0.2.190 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.190...0.2.191)

Updates `aes-gcm` from 0.10.3 to 0.11.1
- [Commits](RustCrypto/AEADs@aes-gcm-v0.10.3...aes-gcm-v0.11.1)

Updates `hkdf` from 0.12.4 to 0.13.0
- [Commits](RustCrypto/KDFs@hkdf-v0.12.4...hkdf-v0.13.0)

Updates `rand` from 0.8.8 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.8...0.10.3)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

Updates `bip39` from 2.2.2 to 3.0.0
- [Changelog](https://github.com/rust-bitcoin/rust-bip39/blob/master/CHANGELOG.md)
- [Commits](rust-bitcoin/rust-bip39@v2.2.2...v3.0.0)

---
updated-dependencies:
- dependency-name: aes-gcm
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: bip39
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: gloo-net
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: hkdf
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rusqlite
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the cargo group with 13 updates Bump the cargo group across 1 directory with 13 updates Nov 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-c3b16ba495 branch from 542086e to 174727f Compare November 1, 2026 20:50
@vercel

vercel Bot commented Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
echo-voice-web Ready Ready Preview Nov 2, 2026 4:54pm UTC

@samarthmn samarthmn mentioned this pull request Nov 2, 2026
Merged
@samarthmn @claude
Port echo-server to the new rusqlite, rand and RustCrypto majors
f6cdf88 
- rusqlite 0.41: enable `fallible_uint`, which restores the checked
  u64/usize conversions 0.32 had; schema names are plain `&str` now.
- rand 0.10: `OsRng` is now the fallible `SysRng`; `UnwrapErr` keeps
  the old panic-on-entropy-failure behaviour.
- sha2 0.11: digests no longer implement `LowerHex`; a small `digest`
  module produces the same lowercase hex, pinned by FIPS 180-2 vectors.
- aes-gcm 0.11: build nonces from arrays instead of `from_slice`.
- cargo-deny: SQLCipher's source now ships as `sqlcipher-src`, declaring
  SQLite's public-domain blessing and libtomcrypt's WTFPL; allow those
  for that crate only.

Compatibility with data users already have is pinned by fixtures sealed
with the previously shipped crates: a recovery envelope and phrase, and
an encrypted library file, both of which must still open. A database
written by SQLCipher 4.5.7 was also checked to open under 4.19.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@samarthmn
samarthmn merged commit d301835 into main Nov 3, 2026
6 checks passed
@samarthmn
samarthmn deleted the dependabot/cargo/cargo-c3b16ba495 branch November 3, 2026 08:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@samarthmn samarthmn Awaiting requested review from samarthmn samarthmn is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@samarthmn