Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 17, 2025

Bumps the all-dependencies group with 10 updates in the / directory:

Package From To
bytes 1.10.1 1.11.0
hyper 1.7.0 1.8.1
openssl 0.10.74 0.10.75
aho-corasick 1.1.3 1.1.4
bitflags 2.9.4 2.10.0
cc 1.2.41 1.2.46
proc-macro2 1.0.101 1.0.103
quote 1.0.41 1.0.42
syn 2.0.106 2.0.110
unicode-ident 1.0.19 1.0.22

Updates bytes from 1.10.1 to 1.11.0

Release notes

Sourced from bytes's releases.

Bytes v1.11.0

1.11.0 (November 14th, 2025)

  • Bump MSRV to 1.57 (#788)

Fixed

  • fix: BytesMut only reuse if src has remaining (#803)
  • Specialize BytesMut::put::<Bytes> (#793)
  • Reserve capacity in BytesMut::put (#794)
  • Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

  • Guarantee address in slice() for empty slices. (#780)
  • Rename Vtable::to_* -> Vtable::into_* (#776)
  • Fix latest clippy warnings (#787)
  • Ignore BytesMut::freeze doctest on wasm (#790)
  • Move drop_fn of from_owner into vtable (#801)
Changelog

Sourced from bytes's changelog.

1.11.0 (November 14th, 2025)

  • Bump MSRV to 1.57 (#788)

Fixed

  • fix: BytesMut only reuse if src has remaining (#803)
  • Specialize BytesMut::put::<Bytes> (#793)
  • Reserve capacity in BytesMut::put (#794)
  • Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

  • Guarantee address in slice() for empty slices. (#780)
  • Rename Vtable::to_* -> Vtable::into_* (#776)
  • Fix latest clippy warnings (#787)
  • Ignore BytesMut::freeze doctest on wasm (#790)
  • Move drop_fn of from_owner into vtable (#801)
Commits

Updates hyper from 1.7.0 to 1.8.1

Release notes

Sourced from hyper's releases.

v1.8.1

Bug Fixes

  • http1: fix consuming extra CPU from previous change (#3977) (4492f31e)

Full Changelog: hyperium/hyper@v1.8.0...v1.8.1

v1.8.0

Highlights

Features

  • rt: add Timer::now() method to allow overriding the instant returned (#3965) (5509ebe6)

Bug Fixes

Breaking Changes

While technically breaking, it's assumed you will not need to do anything or be affected.

  • The HTTP/2 client connection no longer allows an executor that can not spawn itself.

    This was an oversight originally. The client connection will now include spawning a future that keeps a copy of the executor to spawn other futures. Thus, if it is !Send, it needs to spawn !Send futures. The likelihood of executors that match the previously allowed behavior should be very remote.

    There is also technically a semver break in here, which is that the Http2ClientConnExec trait no longer dyn-compatible, because it now expects to be Clone. This should not break usage of the conn builder, because it already separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec, that will break. However, there is no purpose for doing so, and it is not usable otherwise, since the trait only exists to propagate bounds into hyper. Thus, the breakage should not affect anyone. (58e0e7dc)

What's Changed

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.8.1 (2025-11-13)

Bug Fixes

  • http1: fix consuming extra CPU from previous change (#3977) (4492f31e)

v1.8.0 (2025-11-11)

Bug Fixes

Features

  • rt: add Timer::now() method to allow overriding the instant returned (#3965) (5509ebe6)

Breaking Changes

  • The HTTP/2 client connection no longer allows an executor that can not spawn itself.

    This was an oversight originally. The client connection will now include spawning a future that keeps a copy of the executor to spawn other futures. Thus, if it is !Send, it needs to spawn !Send futures. The likelihood of executors that match the previously allowed behavior should be very remote.

    There is also technically a semver break in here, which is that the Http2ClientConnExec trait no longer dyn-compatible, because it now expects to be Clone. This should not break usage of the conn builder, because it already separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec, that will break. However, there is no purpose for doing so, and it is not usable otherwise, since the trait only exists to propagate bounds into hyper. Thus, the breakage should not affect anyone. (58e0e7dc)

Commits
  • 166c6ca v1.8.1
  • 4492f31 fix(http1): fix consuming extra CPU from previous change (#3977)
  • dbe6f25 v1.8.0
  • 58e0e7d fix(http2): fix internals of HTTP/2 CONNECT upgrades (#3967)
  • 0a37a8c test(ready_stream): replace tracing with printlns (#3973)
  • 2377b89 fix(http1): fix rare missed write wakeup on connections (#3952)
  • 5509ebe feat(rt): add Timer::now() method to allow overriding the instant returned ...
  • f9f8f44 tests(client): port tests to in-memory socket (#3947)
  • 5803a9c docs(server): update default values for http1::Builder (#3938)
  • e1e1f2b refactor(ffi): specify "C" ABI explicitly in ffi_fn! macro (#3937)
  • Additional commits viewable in compare view

Updates openssl from 0.10.74 to 0.10.75

Release notes

Sourced from openssl's releases.

openssl-v0.10.75

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.74...openssl-v0.10.75

Commits
  • 09b90d0 Merge pull request #2518 from alex/bump-for-release
  • 26533f3 Release openssl v0.10.75 and openssl-sys v0.9.111
  • 395ecca Merge pull request #2517 from alex/claude/fix-ocsp-find-status-011CUqcGFNKeKJ...
  • cc26867 Fix unsound OCSP find_status handling of optional next_update field
  • 95aa8e8 Merge pull request #2513 from botovq/libressl-stable
  • e735a32 CI: bump LibreSSL 4.x branches to latest releases
  • 21ab91d Merge pull request #2510 from huwcbjones/huw/sys/evp-mac
  • d9161dc sys/evp: add EVP_MAC symbols
  • 3fd4bf2 Merge pull request #2508 from goffrie/oaep-label
  • 52022fd Implement set_rsa_oaep_label for AWS-LC/BoringSSL
  • Additional commits viewable in compare view

Updates openssl-sys from 0.9.110 to 0.9.111

Release notes

Sourced from openssl-sys's releases.

openssl-sys-v0.9.111

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.110...openssl-sys-v0.9.111

Commits
  • 09b90d0 Merge pull request #2518 from alex/bump-for-release
  • 26533f3 Release openssl v0.10.75 and openssl-sys v0.9.111
  • 395ecca Merge pull request #2517 from alex/claude/fix-ocsp-find-status-011CUqcGFNKeKJ...
  • cc26867 Fix unsound OCSP find_status handling of optional next_update field
  • 95aa8e8 Merge pull request #2513 from botovq/libressl-stable
  • e735a32 CI: bump LibreSSL 4.x branches to latest releases
  • 21ab91d Merge pull request #2510 from huwcbjones/huw/sys/evp-mac
  • d9161dc sys/evp: add EVP_MAC symbols
  • 3fd4bf2 Merge pull request #2508 from goffrie/oaep-label
  • 52022fd Implement set_rsa_oaep_label for AWS-LC/BoringSSL
  • Additional commits viewable in compare view

Updates aho-corasick from 1.1.3 to 1.1.4

Commits

Updates bitflags from 2.9.4 to 2.10.0

Release notes

Sourced from bitflags's releases.

2.10.0

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.9.4...2.10.0

Changelog

Sourced from bitflags's changelog.

2.10.0

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.9.4...2.10.0

Commits
  • 7cc8595 Merge pull request #468 from bitflags/cargo/2.10.0
  • ea9b2f7 prepare for 2.10.0 release
  • 7fdc68c Merge pull request #467 from KodrAus/feat/serde_core
  • fdc1d4a depend on serde_core instead of serde
  • 7922585 Merge pull request #466 from KodrAus/chore/iter-named-tests
  • 409666e rename iter_named to iter_defined_names
  • 50fab91 Merge pull request #465 from ssrlive/main
  • f886489 Fix bitflags_custom_bits.stderr & bitflags_trait_custom.stderr
  • 39bd761 rename all_named_flags to iter_named
  • 3e52578 Implement iterator for all named flags
  • See full diff in compare view

Updates cc from 1.2.41 to 1.2.46

Release notes

Sourced from cc's releases.

cc-v1.2.46

Other

  • Add Visual Studio 2026 support (#1609)

cc-v1.2.45

Other

  • Regenerate target info (#1606)
  • Use a default check for the "env" variable in apple_sdk_name (#1605)

cc-v1.2.44

Other

  • Fix debug assertion for env/abi mismatch (#1604)
  • Update CHANGELOG for version 1.2.43 (#1602)
  • Stop passing an invalid target to llvm-mingw's cross-compilation wrappers (#1495)

cc-v1.2.43

Other

  • Mark static_flag and shared_flag as deprecated (#1582)

cc-v1.2.42

Other

  • Fix check-semver-checks (#1600)
  • minor improvement for docs (#1598)
  • Fix linker-plugin-lto: use -flto=thin (#1594)
  • Disable check-buildstd for armv7k-apple-watchos (#1599)
  • Add elf abi to ppc64 targets (#1596)
Changelog

Sourced from cc's changelog.

1.2.46 - 2025-11-14

Other

  • Add Visual Studio 2026 support (#1609)

1.2.45 - 2025-11-07

Other

  • Regenerate target info (#1606)
  • Use a default check for the "env" variable in apple_sdk_name (#1605)

1.2.44 - 2025-10-31

Other

  • Fix debug assertion for env/abi mismatch (#1604)
  • Update CHANGELOG for version 1.2.43 (#1602)
  • Stop passing an invalid target to llvm-mingw's cross-compilation wrappers (#1495)

1.2.43 - 2025-10-24

Other

  • Mark static_flag and shared_flag as deprecated (#1582)

1.2.42 - 2025-10-24

Other

  • Fix check-semver-checks (#1600)
  • minor improvement for docs (#1598)
  • Fix linker-plugin-lto: use -flto=thin (#1594)
  • Disable check-buildstd for armv7k-apple-watchos (#1599)
  • Add elf abi to ppc64 targets (#1596)
Commits

Updates find-msvc-tools from 0.1.4 to 0.1.5

Release notes

Sourced from find-msvc-tools's releases.

find-msvc-tools-v0.1.5

Other

  • Add Visual Studio 2026 support (#1609)
Commits

Updates proc-macro2 from 1.0.101 to 1.0.103

Release notes

Sourced from proc-macro2's releases.

1.0.103

  • Add semver-exempt Literal methods str_value, cstr_value, byte_str_value (#525)

1.0.102

  • Fix interaction of Display impls for TokenStream and Ident with formatting specifiers for padding, alignment, width (#523, #524)
Commits
  • d1bf13a Release 1.0.103
  • 29e08c0 Merge pull request #525 from dtolnay/literalvalue
  • f9eec24 Restore support for rustc older than 1.74
  • cc983fc Restore support for rustc older than 1.79
  • 465f781 Restore support for rustc older than 1.89
  • ab5231c Add string literal value tests
  • 4c039a8 Add Literal methods from proc_macro_value feature
  • 885fde9 Vendor rustc_literal_escaper v0.0.5
  • 39b016a Release 1.0.102
  • c3870f1 Add raw identifier Debug test
  • Additional commits viewable in compare view

Updates quote from 1.0.41 to 1.0.42

Release notes

Sourced from quote's releases.

1.0.42

Commits
  • bb9e7a4 Release 1.0.42
  • 683c1d6 Merge pull request #311 from dtolnay/append
  • ed93e8e Revert PR 305
  • 1f2a959 Merge pull request #310 from dtolnay/up
  • 37448aa Raise required compiler to Rust 1.68
  • 39ac89e Resolve manual_let_else pedantic clippy lint
  • f3eac36 Raise required compiler to Rust 1.65
  • 7b490c5 Merge pull request #309 from dtolnay/append
  • 71dfa84 Apply pattern from PR 306 to append_separated & append_terminated
  • df32af7 Touch up PR 306
  • Additional commits viewable in compare view

Updates syn from 2.0.106 to 2.0.110

Release notes

Sourced from syn's releases.

2.0.110

  • Tweaks to improve build speed (#1939, thanks @​dishmaker)
  • Make syn::ext::IdentExt::unraw available without "parsing" feature (#1940)
  • Support parsing syn::Meta followed by => (#1944)

2.0.109

2.0.108

  • Parse unrecognized or invalid literals as Lit::Verbatim (#1925)

2.0.107

  • Improve panic message when constructing a LitInt, LitFloat, or Lit from invalid syntax (#1917)
  • Improve panic message on Punctuated index out of bounds (#1922)
Commits
  • 1c8cabe Release 2.0.110
  • 8ef195b Merge pull request #1944 from dtolnay/metaarrow
  • 9ab4aef Support parsing Meta followed by fat arrow
  • 7711764 Add test of parsing fat arrow after meta
  • 193f52e Update test suite to nightly-2025-11-10
  • 5ece7e1 Merge pull request #1941 from dtolnay/ext
  • 6a44478 Add extension trait for Punct construction with span
  • 798e109 Drop 2 from name of TokenStreamExt2
  • b344f2d Never import name of quote::TokenStreamExt
  • b0ec4c7 Touch up PR 1939
  • Additional commits viewable in compare view

Updates unicode-ident from 1.0.19 to 1.0.22

Release notes

Sourced from unicode-ident's releases.

1.0.22

  • Match the type of char::UNICODE_VERSION (#44)

1.0.21

1.0.20

  • Store ascii start/continue bitmaps in u128 instead of slices of bool (#40, thanks @​Marcondiro)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 17, 2025
Bumps the all-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bytes](https://github.com/tokio-rs/bytes) | `1.10.1` | `1.11.0` |
| [hyper](https://github.com/hyperium/hyper) | `1.7.0` | `1.8.1` |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.74` | `0.10.75` |
| [aho-corasick](https://github.com/BurntSushi/aho-corasick) | `1.1.3` | `1.1.4` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.9.4` | `2.10.0` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.41` | `1.2.46` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.101` | `1.0.103` |
| [quote](https://github.com/dtolnay/quote) | `1.0.41` | `1.0.42` |
| [syn](https://github.com/dtolnay/syn) | `2.0.106` | `2.0.110` |
| [unicode-ident](https://github.com/dtolnay/unicode-ident) | `1.0.19` | `1.0.22` |

Signed-off-by: dependabot[bot] <support@github.com>
@bavshin-f5 bavshin-f5 force-pushed the dependabot/cargo/all-dependencies-54d872bb42 branch from 84860cc to babfbcd Compare November 17, 2025 21:38
@bavshin-f5 bavshin-f5 merged commit 1caa804 into main Nov 17, 2025
22 of 24 checks passed
@dependabot dependabot bot deleted the dependabot/cargo/all-dependencies-54d872bb42 branch November 17, 2025 23:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants