Skip to content

deps: bump the cargo group across 1 directory with 16 updates - #23

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-3730369b57
Closed

deps: bump the cargo group across 1 directory with 16 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-3730369b57

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 16 updates in the / directory:

Package From To
cfb 0.14.0 0.16.0
serde-saphyr 1.3.0 2.0.0
simd-json 0.17.3 0.19.0
rusqlite 0.39.0 0.41.1
aes-gcm 0.10.3 0.11.1
scrypt 0.11.0 0.12.0
des 0.8.1 0.9.0
chacha20poly1305 0.10.1 0.11.0
md-5 0.10.6 0.11.0
lru 0.18.5 0.19.0
base64 0.22.1 0.23.1
dirs 6.0.0 7.0.0
parking_lot 0.12.5 0.13.0
stng 72e68ea 0cdf49e
windows-sys 0.59.0 0.61.2
syn 2.0.119 3.0.9

Updates cfb from 0.14.0 to 0.16.0

Commits
  • 7099260 Bump version number to 0.16.0
  • 9b4e647 Merge pull request #96 from francisdb/perf/read-fat-sectors-at-once
  • b8b8ed4 perf: read the DIFAT, FAT and MiniFAT in whole sectors on open
  • 2e50b0e bench: open a file from disk
  • e4b5766 Bump version number to 0.15.0
  • 8b6d2ef Update Cargo.lock
  • 9dca630 Merge pull request #95 from francisdb/bench/reuse-buffers
  • 68b9d8d bench: use 256 x 1 MiB so it carries the same bytes as 1 x 256 MiB
  • 7fb54c6 bench: reuse the buffers across iterations
  • a43f745 Merge pull request #94 from francisdb/bench/read-disk
  • Additional commits viewable in compare view

Updates serde-saphyr from 1.3.0 to 2.0.0

Release notes

Sourced from serde-saphyr's releases.

2.0.0 Performance and compliance release

Breaking changes

  • There is a new capture_comments feature that is default on and can be disabled, winning about 10 % percent of performance. This feature was the main reason to advance the first version digit, because formally this is a breaking change.
  • Preserving inner error in alias errors in the newly added field in AliasError. The old field (text representation) is still present, but deprecated. Another formally breaking change, even if unlikely to be a problem.
  • from_multiple, from_multiple_with_options, from_slice_multiple, and from_slice_multiple_with_options now accept T: Deserialize<'de> instead of T: DeserializeOwned, allowing values to borrow from the input. Direct calls require no changes. Function pointers or callbacks may need adjustments.
  • granit_parser 2.0.0 has some corner formally breaking changes, but mostly in very obscure parts (see its changelog for details).

All other changes are backward compatible:

  • For projects aiming for very strict YAML compliance rather than drop-in compatibility with mainstream libraries, it is not possible to disable all compromises with strict_indentation flag in Options.
  • Value serialization target can now receive Inf and NaN if so configured. Even if most common serde_json::Value cannot take them (produces null instead), many other abstract value receivers can.
  • Made huge_documents and serde_derived_types enable deserialize, fixing isolated feature builds with --no-default-features, including autopkgtests of Debian team (as observed).
  • Fix borrow support for untagged enum (PR #195, thanks @​Guiguiprim ).
  • Added SerializerOptions::no_lang_directive (default false) to suppress the %YAML 1.2 directive independently of yaml_12's quoting (requirement obvious from Nushell code work work arrounds).
  • Property interpolation can now be configured to be fully Docker Compose compliant if preferred (we are not fans of undefined property defaulting to empty but may be opinion-based).
  • It is possible to deserialize multiple documents into collection other than vector: serde_saphyr::from_str_multiple supports any collection implementing Default + Extend<T>, such as Vec<T>, VecDeque<T>, BTreeSet<T>, or custom storage like SmallVec<T>.

Other fixes

  • Keep span offsets relative to the caller's input after a BOM (#212)
  • Compare mapping keys regardless of entry order (#211)
  • Report a collection where &str is expected, not end of input (#210)
  • Replace non-printable characters in Commented comments (#209)
  • Implement dedicated YAML trim (#206). Default Rust trim() considers special Unicode whitespace chars that YAML calls to be ignored.
  • Improve multi-snippet error rendering (#208). Do not rely on error texts for functionallity.
  • Fix serializer indentation after - and ? so output reads back- #207
  • Report a parser error after an implicit document end in single-document entry points- #220 #220, thanks @​pcshrosbree
Changelog

Sourced from serde-saphyr's changelog.

2.0.0

YAML changes

  • Tags selecting unit enum variants now reject non-null payloads instead of silently discarding them (#236). Use a bare variant name, a tag with empty content, or a tag followed by ~ or null; quoted strings and collections are rejected.
  • Composite mapping keys are not compared regardless of entry order (thanks @​yuxi-liu-wired) .
  • Commented now writes its output replacing characters not allowed in comments (non printable) by spaces.

Added

  • Added public path_map::PathKind, PathKey::segments(), and PathMap::locations_for() for inspecting validation paths and resolving their YAML use/definition locations, including best-effort spelling matches and recorded ancestor/root fallback.
  • Added RenderOptions::line_offset and RenderOptions::source_name for displaying embedded YAML diagnostics at their containing document's line numbers and naming the root source in snippet headers, including the new miette::to_miette_report_with_options entry point. Included files retain their own names and coordinates, and stored error locations and spans are unchanged.
  • Added PropertySyntax::DockerCompose for Compose-compatible property interpolation.
  • Added the default-enabled comments feature, forwarding to granit-parser's matching feature. Builds with default-features = false must enable it to use Commented<T>, CommentPosition, comment options, or comment budget fields and reports. Without it, YAML comments are still accepted and validated, but their text is not retained.
  • Added Options::non_finite_float_policy with NonFiniteFloatPolicy::{PassThrough, Reject, AsString} to configure non-finite floats delivered through deserialize_any. Explicit policies override the legacy boolean; leaving the field unconfigured preserves its behavior.
  • Added the borrowed_context example showing recursive Serialize adapters that borrow an existing value tree and per-call formatting context, composing with Tagged<T> and style wrappers without building a second container tree or using thread-local state.
  • Added SerializerOptions::no_lang_directive (default false) to suppress the %YAML 1.2 directive and its leading --- marker independently of yaml_12's quoting.
  • Added from_str_multiple, from_bytes_multiple, and their _with_options variants to deserialize multiple YAML documents into any C: Default + Extend<T>, including vectors, queues, sets, and custom accumulators. Values can borrow from the input string or UTF-8 byte slice. Explicit type arguments specify both the document and collection types, for example from_str_multiple::<String, Vec<_>>(input).
  • Added an error: Box<Error> field to Error::AliasError, which keeps the original error when an aliased value fails to deserialize. A custom MessageFormatter or Localizer now applies to that error, and std::error::Error::source returns it (#199).

Changed

  • Breaking: from_multiple, from_multiple_with_options, from_slice_multiple, and from_slice_multiple_with_options now accept T: Deserialize<'de> so values can borrow from the input. They retain their names, single type parameter, and Vec<T> returns and are not deprecated. Ordinary calls, including from_multiple::<Config>(input) and generic callers with T: DeserializeOwned, continue to work. Function pointers or callbacks accepting arbitrary input lifetimes may need forwarding closures, such as |input| from_multiple::<String>(input).

... (truncated)

Commits
  • e3a4566 Clarified borrowing usage and fixed borrowing test.
  • fc4c875 Merge remote-tracking branch 'origin/master'
  • e2f8eb3 Make fuzz and miri mandatory steps for release workflow. use granit-parser fr...
  • 9728ccb Report a parser error after an implicit document end in single-document entry...
  • fb50b1b Improve documentation
  • f3f3786 Improve documentation
  • d43a925 Removed some too aggressive deprecations, this is not required with the major...
  • 2db1993 bw/i205 (#215)
  • c09c094 Bump granit-parser from 03889c5 to f4bf73a (#216)
  • 70272b7 Update cargo to use granit parser 2.0.0
  • Additional commits viewable in compare view

Updates simd-json from 0.17.3 to 0.19.0

Commits
  • 00a71f6 chore: Release simd-json version 0.19.0
  • 77ec801 Allow typed deserialization to reuse a tape (#495)
  • 0af2fec add exports
  • 2afa0be cleanup
  • 5d030ac don't write duplicate keys into the hashmap when decoding fixes #491
  • 266140b Integer map keys: JSON integer syntax, i128/u128, and from a Value (#485)
  • 767014a bump value trait to ensrue correct encoding of non finites
  • 3376838 fix serializer bug that could stay open
  • 9168335 Reject invalid digits for unicode codeoiint early
  • e5403c3 test: reject \u escapes with invalid hex digits
  • Additional commits viewable in compare view

Updates rusqlite from 0.39.0 to 0.41.1

Release notes

Sourced from rusqlite's releases.

0.41.1

What's Changed

  • No check of PRAGMA name with SQLCipher #1923 (#1924)
  • Fix panic with a zero-argument deterministic scalar function #1925 (#1927)

Full Changelog: rusqlite/rusqlite@v0.41.0...v0.41.1

0.41.0

What's Changed

  • Check PRAGMA is valid with the help of pragma_list #1857
  • Fix UtcDateTime #1859
  • Bump sqlite3-parser version #1864
  • Edition 2024 #1863
  • Use u64 for zeroblob #1867
  • Fix virtual table set_result #1868
  • Bump bundled SQLCipher to version 4.17.0 #1870
  • Refactor bind_parameter and set_result #1871
  • Update prettyplease requirement from 0.2.20 to 0.3.0 #1872
  • Update syn requirement from 2.0.89 to 3.0.1 #1873
  • Fix Connection::serialize #1874 (#1875)
  • Make Statement::column_names,columns,columns_with_metadata return Iterator #1877
  • Introduce DEFAULT_NAME #1883
  • Expose sqlite3_file_control #1881 (#1882)
  • Replace assert!(matches! with assert_matches! #1851
  • Lower MSRV to 1.88.0 #1885
  • Fix clippy warnings #1888
  • Apply and check MSRV #1890
  • Bump minimal SQLite version to 3.45.3 #1894
  • sqlite3_set_clientdata / sqlite3_get_clientdata #977, #1708 (#1791)
  • Fix discrepancy between backup and restore #1893
  • Don't enable SQLITE_ENABLE_MEMORY_MANAGEMENT in the bundled build #1900
  • create_aggregate_function / create_window_function are missing a Send bound #1898
  • use-after-free from safe code in trace_v2 / busy_handler / ... #1899
  • feat: add Values::get_subtype to read SQLite value subtype in vtab callbacks #1879
  • Bump bindgen version to 0.73 #1903
  • Bump sqlite-wasm-rs to 0.6.1 #1904
  • Relax sqlite-wasm-rs version #1906
  • Rerun bundled-sqlcipher build when OPENSSL_* env changes #1910
  • Bump bundled SQLite version to 3.54.0 #1913
  • Fix possible memory leak on error in deserialize_read_exact #1909
  • Move sqlite3_wal_checkpoint_v2 binding #1667 (#1915)
  • Bump uuid version to 1.28 #1916

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.41.0

0.40.2

What's Changed

  • Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

... (truncated)

Commits
  • 18ee76d Prepare next release
  • 11ac8f5 Merge pull request #1924 from gwenn/pragma_name_check
  • 4d2be94 Merge pull request #1927 from gwenn/from_raw_parts
  • a60e76b Merge pull request #1919 from gwenn/0.41.0
  • f652850 Prepare release
  • 661107f Merge pull request #1917 from LucaCappelletti94/feat/sqlcipher-src
  • dd770f6 Fix the SQLCipher license link and match upstream style
  • 2daf10a Select the SQLCipher source with cfg_select
  • bb40153 Merge pull request #1916 from gwenn/uuid
  • 92a7d49 Bump uuid version to 1.28
  • Additional commits viewable in compare view

Updates aes-gcm from 0.10.3 to 0.11.1

Commits

Updates scrypt from 0.11.0 to 0.12.0

Commits

Updates des from 0.8.1 to 0.9.0

Commits

Updates chacha20poly1305 from 0.10.1 to 0.11.0

Commits

Updates md-5 from 0.10.6 to 0.11.0

Commits

Updates lru from 0.18.5 to 0.19.0

Changelog

Sourced from lru's changelog.

v0.19.0 - 2026-10-18

  • Require Sync for sendable shared iterators.
Commits
  • 3ed2e28 Prepare 0.19.0 release
  • 16b1783 Merge pull request #251 from jadenfix/fix/iter-send-sync-bounds
  • f7921b0 Require Sync for sendable shared iterators
  • See full diff in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates parking_lot from 0.12.5 to 0.13.0

Release notes

Sourced from parking_lot's releases.

parking_lot-v0.13.0

  • Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
  • Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
  • Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
  • Removed the hardware-lock-elision feature. (#533)
  • Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
  • Removed the no-op lock_api/nightly feature. (#533)
  • Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
  • Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
  • Added Once::new_completed for constructing a Once in the completed state. (#520)
  • Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
  • Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
  • Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
  • Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
  • Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
  • Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
  • Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
  • Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
  • Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
  • Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
  • Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
  • Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)
  • Documented that parking-lot-based synchronization primitives must not be used

... (truncated)

Changelog

Sourced from parking_lot's changelog.

0.13.0 (parking_lot), 0.10.0 (parking_lot_core), 0.5.0 (lock_api) - 2026-10-21

  • Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
  • Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
  • Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
  • Removed the hardware-lock-elision feature. (#533)
  • Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
  • Removed the no-op lock_api/nightly feature. (#533)
  • Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
  • Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
  • Added Once::new_completed for constructing a Once in the completed state. (#520)
  • Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
  • Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
  • Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
  • Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
  • Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
  • Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
  • Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
  • Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
  • Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
  • Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
  • Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
  • Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)

... (truncated)

Commits
  • 1a5c3dd Update changelog
  • ec07063 chore: release
  • f369d24 Merge pull request #538 from napi-rs/wasi-threads-parker
  • 2f4103f Remove the WASI backend note from stable restrictions
  • a3e8717 Reuse existing CI jobs for WASI coverage
  • c2bfc7b Merge pull request #549 from Amanieu/fix-l4re-condvar-clock
  • 696f28b Don't use pthread_condattr_setclock on L4RE
  • 52941c0 Share the libc dependency between Unix and WASI
  • 4fde6a7 Align the Rust setup action with existing workflows
  • f0ce547 Reuse the pthread backend for WASI on stable
  • Additional commits viewable in compare view

Updates stng from 72e68ea to 0cdf49e

Commits

Updates windows-sys from 0.59.0 to 0.61.2

Release notes

Sourced from windows-sys's releases.

61

Major crate updates:

  • windows 0.59.0
  • windows-core 0.59.0
    • windows-implement 0.59.0
    • windows-interface 0.59.0
  • windows-targets 0.53.0
    • windows_i686_msvc 0.53.0
    • windows_x86_64_msvc 0.53.0
    • windows_aarch64_msvc 0.53.0
    • windows_i686_gnu 0.53.0
    • windows_x86_64_gnu 0.53.0
    • windows_i686_gnullvm 0.53.0
    • windows_x86_64_gnullvm 0.53.0
    • windows_aarch64_gnullvm 0.53.0
  • windows-bindgen 0.59.0
  • windows-registry 0.4.0
  • windows-result 0.3.0
  • windows-strings 0.3.0
  • cppwinrt 0.2.0

Minor crate updates:

  • windows-version 0.1.2

Excluded:

  • windows-sys 0.59.0

Things to keep in mind:

  • The tag/release names no longer map directly to the crate versions, so to find samples for a particular release requires looking at the releases page and finding the release that most recently updated a particular crate.

  • The windows-bindgen crate includes the major code generation overhaul that brings many improvements - be sure to check out the PR description for more information. The resulting code gen depends on the new version of windows-core and its dependencies, unless you include the --sys option. #3359

  • The cppwinrt crate constitutes a major update due to streamlining the error handling. #3415

  • The windows-registry, windows-strings, and windows-result crates are also major version updates since they include small breaking changes.

  • The windows-targets crate finally receives a major version update, the first in over a year. This is due to #3359 and #3342 potentially introducing breaking changes. Although unlikely, these updates introduced sufficient changes that make it hard to ensure that the windows-targets libs don't break existing code. As we're updating windows-targets anyway, I took the liberty to bump the MSRV to 1.60 - to match the latest version of windows-sys - and remove the old but unused doc macro feature. Both remained for compatibility with very old dependents of the windows-targets crate.

  • The windows-version crate receives a minor update to update its dependency on the windows-targets crate.

  • Beyond these specifics, this update is the culmination of around 6 months worth of work on the windows-rs project. The biggest improvements comes from the new code generation engine, but many other improvements are now also available for production. This includes support for many new lints, warnings, and suggestions provided by the Rust toolchain; much smaller code gen thanks to deriving many more traits; more efficient code gen; major improvements to WinRT type system and implementation support; more robust and consistent error handling; stock collection and async support; improved support for class hierarchies; and much more!

In addition to "what's changed" below, check out what's changed for notes for 0.60.0 and 0.59.0 for additional changes that roll up to the crates published as part of this release.

What's Changed

... (truncated)

Commits

Updates syn from 2.0.119 to 3.0.9

Release notes

Sourced from syn's releases.

3.0.9

  • Add Punctuated::retain (#2088)

3.0.8

  • Fix parsing of <- and -> tokens in expressions (#2086, #2087)

3.0.7

3.0.6

  • Fix parsing interpolated lifetime at statement start (#2082)

3.0.5

3.0.4

  • Allow safe fn in impl Parse for Forei...

    Description has been truncated

@dependabot
deps: bump the cargo group across 1 directory with 16 updates
216d4e1 
Bumps the cargo group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cfb](https://github.com/mdsteele/rust-cfb) | `0.14.0` | `0.16.0` |
| [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `1.3.0` | `2.0.0` |
| [simd-json](https://github.com/simd-lite/simd-json) | `0.17.3` | `0.19.0` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.39.0` | `0.41.1` |
| [aes-gcm](https://github.com/RustCrypto/AEADs) | `0.10.3` | `0.11.1` |
| [scrypt](https://github.com/RustCrypto/password-hashes) | `0.11.0` | `0.12.0` |
| [des](https://github.com/RustCrypto/block-ciphers) | `0.8.1` | `0.9.0` |
| [chacha20poly1305](https://github.com/RustCrypto/AEADs) | `0.10.1` | `0.11.0` |
| [md-5](https://github.com/RustCrypto/hashes) | `0.10.6` | `0.11.0` |
| [lru](https://github.com/jeromefroe/lru-rs) | `0.18.5` | `0.19.0` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| dirs | `6.0.0` | `7.0.0` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.5` | `0.13.0` |
| [stng](https://github.com/atomdrift-project/stng) | ``72e68ea`` | ``0cdf49e`` |
| [windows-sys](https://github.com/microsoft/windows-rs) | `0.59.0` | `0.61.2` |
| [syn](https://github.com/dtolnay/syn) | `2.0.119` | `3.0.9` |



Updates `cfb` from 0.14.0 to 0.16.0
- [Commits](mdsteele/rust-cfb@v0.14.0...v0.16.0)

Updates `serde-saphyr` from 1.3.0 to 2.0.0
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Changelog](https://github.com/bourumir-wyngs/serde-saphyr/blob/master/CHANGELOG.md)
- [Commits](bourumir-wyngs/serde-saphyr@1.3.0...2.0.0)

Updates `simd-json` from 0.17.3 to 0.19.0
- [Commits](simd-lite/simd-json@v0.17.3...v0.19.0)

Updates `rusqlite` from 0.39.0 to 0.41.1
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.39.0...v0.41.1)

Updates `aes-gcm` from 0.10.3 to 0.11.1
- [Commits](RustCrypto/AEADs@aes-gcm-v0.10.3...aes-gcm-v0.11.1)

Updates `scrypt` from 0.11.0 to 0.12.0
- [Commits](RustCrypto/password-hashes@scrypt-v0.11.0...scrypt-v0.12.0)

Updates `des` from 0.8.1 to 0.9.0
- [Commits](RustCrypto/block-ciphers@des-v0.8.1...des-v0.9.0)

Updates `chacha20poly1305` from 0.10.1 to 0.11.0
- [Commits](RustCrypto/AEADs@chacha20poly1305-v0.10.1...chacha20poly1305-v0.11.0)

Updates `md-5` from 0.10.6 to 0.11.0
- [Commits](RustCrypto/hashes@md-5-v0.10.6...md2-v0.11.0)

Updates `lru` from 0.18.5 to 0.19.0
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.18.5...0.19.0)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `dirs` from 6.0.0 to 7.0.0

Updates `parking_lot` from 0.12.5 to 0.13.0
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@parking_lot-v0.12.5...parking_lot-v0.13.0)

Updates `stng` from `72e68ea` to `0cdf49e`
- [Release notes](https://github.com/atomdrift-project/stng/releases)
- [Commits](atomdrift-project/stng@72e68ea...0cdf49e)

Updates `windows-sys` from 0.59.0 to 0.61.2
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits)

Updates `syn` from 2.0.119 to 3.0.9
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.119...3.0.9)

---
updated-dependencies:
- dependency-name: cfb
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde-saphyr
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: simd-json
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rusqlite
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: aes-gcm
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: scrypt
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: des
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: chacha20poly1305
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: md-5
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: lru
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: dirs
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: parking_lot
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: stng
  dependency-version: 0cdf49e6471366209d200f38375eb5502bb7c698
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: windows-sys
  dependency-version: 0.61.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: syn
  dependency-version: 3.0.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 5, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-3730369b57 branch November 5, 2026 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants