Skip to content

deps(deps): bump the cargo-minor-and-patch group across 1 directory with 12 updates - #10314

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-f530701bfb
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-f530701bfb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-and-patch group with 12 updates in the / directory:

Package From To
aho-corasick 1.1.4 1.1.5
toml 1.1.4+spec-1.1.0 1.1.5+spec-1.1.0
tokio-rustls 0.26.4 0.26.5
rustls 0.23.43 0.23.44
hickory-proto 0.26.1 0.26.2
cc 1.4.4 1.4.5
encoding_rs 0.8.35 0.8.41
lru 0.18.3 0.18.4
redis 1.6.0 1.7.0
mongodb 3.8.2 3.9.0
der 0.8.1 0.8.2
indexmap 2.14.1 2.14.2

Updates aho-corasick from 1.1.4 to 1.1.5

Commits
  • 5178060 1.1.5
  • b68c8d5 api: check for overflow in Match::offset too
  • c821786 build(deps): bump actions/checkout in the actions group (#171)
  • 8209bb9 Hash-pin all actions, drop persisted credentials (#170)
  • 0f3f5da api: document a couple panicking preconditions
  • e88e1fc benchmarks: bump dependencies
  • 88e4966 ci: use older version of log on pinned build
  • See full diff in compare view

Updates toml from 1.1.4+spec-1.1.0 to 1.1.5+spec-1.1.0

Commits
  • e93ed4e chore: Release
  • d23436d docs: Update changelog
  • 151afcd fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat (#1211)
  • 26a4050 fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat
  • 232f136 chore(deps): Update Prek to v0.5.1 (#1209)
  • 9ee4b4e chore(deps): Update crate-ci/typos digest to 4d9c206 (#1208)
  • 525f352 chore(deps): Update crate-ci/committed digest to 800a04e (#1207)
  • 46043ed chore(deps): Update crate-ci/typos digest to 4d9c206
  • c00e894 chore(deps): Update crate-ci/committed digest to 800a04e
  • 1ae0158 chore(deps): Update Prek to v0.5.0 (#1205)
  • Additional commits viewable in compare view

Updates tokio-rustls from 0.26.4 to 0.26.5

Release notes

Sourced from tokio-rustls's releases.

0.26.5

What's Changed

Commits
  • f8832d2 Bump version to 0.26.5
  • c0fad2f return more data at once from TlsStream::poll_read (#198)
  • edc7306 build(deps): bump futures-util from 0.3.33 to 0.3.34
  • baeadaa build(deps): bump rcgen from 0.14.8 to 0.14.9
  • 1e138ad build(deps): bump taiki-e/cache-cargo-install-action from 3.0.7 to 3.0.8
  • b4ecff6 build(deps): bump taiki-e/cache-cargo-install-action from 3 to 3.0.7
  • f47a689 build(deps): bump rustls from 0.23.42 to 0.23.43
  • e25578e build(deps): bump tokio from 1.53.0 to 1.53.1
  • d2a6d98 server: add rustdoc hinting towards timeout wrapping
  • c2e9b4a client: add rustdoc hinting towards timeout wrapping
  • Additional commits viewable in compare view

Updates rustls from 0.23.43 to 0.23.44

Commits
  • 64ad386 Bump version to 0.23.44
  • 1efbf66 bogo: remove PostQuantum setup
  • e78162f aws-lc-rs: add support for ML-DSA signatures
  • d880772 bogo: extract Options::provider() helper
  • 87201d6 bogo: force all callers to get provider from Options
  • 93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
  • bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
  • eb57688 tls12: require known signature algorithm
  • e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
  • 06a546d bogo: take latest
  • Additional commits viewable in compare view

Updates hickory-proto from 0.26.1 to 0.26.2

Release notes

Sourced from hickory-proto's releases.

v0.26.2

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in parsers. Other issues were related to UDP spoofing defenses, caching issues, and general DNS protocol correctness issues.

This is our first post-vulnpocalypse release, and most of these vulnerabilities were discovered through LLM-based workflows. The sheer volume of reports has been a challenge for our volunteer maintainers.

Resolved advisories:

Special thanks go out to @​qifan-sailboat and Palo Alto Networks for their research and for reporting the bulk of these vulnerabilities. Thanks to @​ATinyShoe, @​kirk-baird, @​thesmartshadow, @​BeaCox, @​jpds, @​N0zoM1z0, and @​JasonPap for reporting vulnerabilities as well.

If your organization is interested in coordinated disclosure of future security vulnerabilities, please contact @​djc for commercial support.

What's Changed

... (truncated)

Commits
  • 48323ef Bump version to 0.26.2
  • ccd6952 Only follow one CNAME record from each response
  • c04ad2b Better distinguish NODATA response and wildcards
  • 64b4291 Add test for bogus wildcard expansion
  • 478998b proto: constrain peer-controlled allocation sizes
  • 8392769 resolver: avoid caching empty nameserver pools
  • e2d21d8 Replace use of SOA name with NSEC3 record parents
  • 84fa8ab Check for correct zone name in covering NSEC3s too
  • 09803ba Look for correct zone name in matching NSEC3s
  • 26f45d3 Rename Nsec3RecordPair to Nsec3RecordInfo
  • Additional commits viewable in compare view

Updates cc from 1.4.4 to 1.4.5

Release notes

Sourced from cc's releases.

cc-v1.4.5

Fixed

  • probe flag support without OUT_DIR via tempfile (#1875)

Other

  • simplify conditional logic using then method (#1860)

Fixed

  • Probe flag support without OUT_DIR via tempfile, so flag_if_supported no longer silently drops flags outside Cargo build scripts (#1875)
Changelog

Sourced from cc's changelog.

1.4.5 - 2026-09-04

Fixed

  • probe flag support without OUT_DIR via tempfile (#1875)

Other

  • simplify conditional logic using then method (#1860)

Fixed

  • Probe flag support without OUT_DIR via tempfile, so flag_if_supported no longer silently drops flags outside Cargo build scripts (#1875)
Commits

Updates encoding_rs from 0.8.35 to 0.8.41

Commits
  • 0860491 Increment version number to 0.8.41
  • 2e9ea61 Document multiversion 0.9.0 and syn version
  • 6667988 build(deps): accept multiversion 0.9.0
  • 662cb42 Allow split_u16_stride_mut as dead code
  • 55f2530 Increment version number to 0.8.40
  • 71ae1c0 Mention defense in depth when writing to &mut str
  • 12790ab Remove remarks about a standard library bug that has been worked around
  • d477c2a Inline asm not stable on powerpc/powerpc64 at MSRV
  • 6c2fb49 Work around slow _mm_packus_epi16 in Rust 1.96 through 1.98, inclusive
  • 9451175 Zero the output slice upon panic in functions that write to &mut str
  • Additional commits viewable in compare view

Updates lru from 0.18.3 to 0.18.4

Changelog

Sourced from lru's changelog.

v0.18.4 - 2026-09-02

  • Add retain method.
Commits
  • 2504ad0 Merge pull request #245 from jeromefroe/jerome/prepare-0-18-4-release
  • 419b047 Prepare 0.18.4 release
  • 05ba36e Merge pull request #241 from ChrisJr404/add-retain
  • d84bc5e Revert retain to the simpler removal implementation
  • 36a810e Potential fix for pull request finding
  • e0d578c Merge remote-tracking branch 'up/master' into add-retain
  • 6e6ff26 retain: free the node returned by the map to avoid a dangling entry
  • 349676f Add retain method
  • See full diff in compare view

Updates redis from 1.6.0 to 1.7.0

Release notes

Sourced from redis's releases.

redis-1.7.0

1.7.0 (2026-09-05)

Changes & Bug fixes

CI & operational improvements

Commits

Updates mongodb from 3.8.2 to 3.9.0

Release notes

Sourced from mongodb's releases.

v3.9.0

The MongoDB Rust driver team is pleased to announce the v3.9.0 release of the mongodb crate, now available for download from crates.io.

This release adds support for the new baseBackoffMS server error field. The driver now uses the value for baseBackoffMS reported by the server in its retry backoff calculations. This new feature is part of MongoDB's Intelligent Workload Management (IWM) and is available on MongoDB Atlas server versions 9.0+.

Full Release Notes

New Features

Improvements

Bugfixes

Commits
  • e72eafb RUST-2443 Update version numbers for 3.9.0 (#1789)
  • 4406554 RUST-2133 Allow custom aws credential provider (#1781)
  • fe6a8cd RUST-2492 Check for inherited unacknowledged write concerns (#1787)
  • 01cdcf0 RUST-1740 Break up rest of evergreen config (#1786)
  • 7b6e67c RUST-2491 Fix libmongocrypt unversioned install and failing tests (#1785)
  • af37d75 Bump the rust-dependencies group across 1 directory with 21 updates (#1784)
  • 74eb7bb RUST-2411 Remove support for MongoDB 4.2 (#1770)
  • 9a0639e minor: pin rustfmt to a specific nightly release (#1783)
  • 57d51e9 RUST-2467 Validate database and collection name arguments against "." and NUL...
  • 3f2d25b minor: fix rustdoc errors (#1777)
  • Additional commits viewable in compare view

Updates der from 0.8.1 to 0.8.2

Commits

Updates indexmap from 2.14.1 to 2.14.2

Changelog

Sourced from indexmap's changelog.

2.14.2 (2026-09-04)

  • Fix item hygiene in map and set macros. Previously, an internal const CAP could shadow the same name in the caller's namespace.
  • Allow const initialization of empty indexmap_with_default! and indexset_with_default!. The hasher may also be omitted if it's inferrable.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 15, 2026
@coderabbitai

coderabbitai Bot commented Sep 15, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 0058b177-8a66-4165-a4c5-2105f98372a7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot dependabot Bot changed the title deps(deps): bump the cargo-minor-and-patch group with 12 updates deps(deps): bump the cargo-minor-and-patch group across 1 directory with 12 updates Sep 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-minor-and-patch-f530701bfb branch 3 times, most recently from 6c07251 to f8e1b59 Compare September 16, 2026 10:10
…ith 12 updates

Bumps the cargo-minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aho-corasick](https://github.com/BurntSushi/aho-corasick) | `1.1.4` | `1.1.5` |
| [toml](https://github.com/toml-rs/toml) | `1.1.4+spec-1.1.0` | `1.1.5+spec-1.1.0` |
| [tokio-rustls](https://github.com/rustls/tokio-rustls) | `0.26.4` | `0.26.5` |
| [rustls](https://github.com/rustls/rustls) | `0.23.43` | `0.23.44` |
| [hickory-proto](https://github.com/hickory-dns/hickory-dns) | `0.26.1` | `0.26.2` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.4.4` | `1.4.5` |
| [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.35` | `0.8.41` |
| [lru](https://github.com/jeromefroe/lru-rs) | `0.18.3` | `0.18.4` |
| [redis](https://github.com/redis-rs/redis-rs) | `1.6.0` | `1.7.0` |
| [mongodb](https://github.com/mongodb/mongo-rust-driver) | `3.8.2` | `3.9.0` |
| [der](https://github.com/RustCrypto/formats) | `0.8.1` | `0.8.2` |
| [indexmap](https://github.com/indexmap-rs/indexmap) | `2.14.1` | `2.14.2` |



Updates `aho-corasick` from 1.1.4 to 1.1.5
- [Commits](BurntSushi/aho-corasick@1.1.4...1.1.5)

Updates `toml` from 1.1.4+spec-1.1.0 to 1.1.5+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.4...toml-v1.1.5)

Updates `tokio-rustls` from 0.26.4 to 0.26.5
- [Release notes](https://github.com/rustls/tokio-rustls/releases)
- [Commits](rustls/tokio-rustls@v/0.26.4...v/0.26.5)

Updates `rustls` from 0.23.43 to 0.23.44
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.43...v/0.23.44)

Updates `hickory-proto` from 0.26.1 to 0.26.2
- [Release notes](https://github.com/hickory-dns/hickory-dns/releases)
- [Changelog](https://github.com/hickory-dns/hickory-dns/blob/main/CHANGELOG.md)
- [Commits](hickory-dns/hickory-dns@v0.26.1...v0.26.2)

Updates `cc` from 1.4.4 to 1.4.5
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.4.4...cc-v1.4.5)

Updates `encoding_rs` from 0.8.35 to 0.8.41
- [Commits](hsivonen/encoding_rs@v0.8.35...v0.8.41)

Updates `lru` from 0.18.3 to 0.18.4
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.18.3...0.18.4)

Updates `redis` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/redis-rs/redis-rs/releases)
- [Commits](redis-rs/redis-rs@redis-1.6.0...redis-1.7.0)

Updates `mongodb` from 3.8.2 to 3.9.0
- [Release notes](https://github.com/mongodb/mongo-rust-driver/releases)
- [Commits](mongodb/mongo-rust-driver@v3.8.2...v3.9.0)

Updates `der` from 0.8.1 to 0.8.2
- [Commits](RustCrypto/formats@der/v0.8.1...der/v0.8.2)

Updates `indexmap` from 2.14.1 to 2.14.2
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.14.1...2.14.2)

---
updated-dependencies:
- dependency-name: aho-corasick
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: cc
  dependency-version: 1.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: der
  dependency-version: 0.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: encoding_rs
  dependency-version: 0.8.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: hickory-proto
  dependency-version: 0.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: indexmap
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: lru
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: mongodb
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: redis
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: rustls
  dependency-version: 0.23.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: tokio-rustls
  dependency-version: 0.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: toml
  dependency-version: 1.1.5+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@proggeramlug

Copy link
Copy Markdown
Contributor

Landed via merge train #10393 (v0.5.1582). All source commits preserve authorship; merged main matches the validated train exactly.

@dependabot @github

dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-minor-and-patch-f530701bfb branch September 16, 2026 21:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant