Skip to content

build(deps): bump the simple1 group across 1 directory with 16 updates - #39280

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/simple1-8135ca3fcd
Open

build(deps): bump the simple1 group across 1 directory with 16 updates#39280
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/simple1-8135ca3fcd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the simple1 group with 16 updates in the / directory:

Package From To
async-trait 0.1.89 0.1.92
buildid 1.0.4 1.0.5
cfg-if 1.0.4 1.0.5
clap 4.6.3 4.6.7
clap_complete 4.6.9 4.6.11
columnar 0.13.1 0.13.2
crc32fast 1.5.0 1.5.2
crossbeam 0.8.4 0.8.5
crossbeam-channel 0.5.16 0.5.17
flate2 1.1.9 1.1.10
futures 0.3.33 0.3.34
futures-util 0.3.33 0.3.34
headers 0.4.1 0.4.2
hickory-resolver 0.26.1 0.26.3
hyper-util 0.1.20 0.1.21
ipnet 2.12.1 2.12.2

Updates async-trait from 0.1.89 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)

0.1.91

  • Update to syn 3 (#299)
  • Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits
  • 82e7e9e Release 0.1.92
  • 9a35cb8 Merge pull request #303 from dtolnay/mustuse
  • 875ceec Resolve double_must_use clippy lint
  • 62993a5 Raise minimum tested compiler to rust 1.88
  • d049ee0 Release 0.1.91
  • 7a0961f Merge pull request #301 from dtolnay/mutability
  • 740f86f Ignore mut_mut pedantic clippy lint in test
  • 4699cd3 Fix mutability for by-reference receivers
  • 6dd3573 Add regression test for issue 300
  • 2371797 Release 0.1.90
  • Additional commits viewable in compare view

Updates buildid from 1.0.4 to 1.0.5

Release notes

Sourced from buildid's releases.

buildid-v1.0.5

Other

  • Fix macOS feature-powerset build
  • Fix Windows incremental build IDs (#17)

New Features

  • Crate now exists. First release

Commit Statistics

  • 15 commits contributed to the release over the course of 81 calendar days.
  • 0 commits where understood as conventional.
  • 0 issues like '(#ID)' where seen in commit messages

Commit Details

Changelog

Sourced from buildid's changelog.

1.0.5 - 2026-08-17

Other

  • Fix macOS feature-powerset build
  • Fix Windows incremental build IDs (#17)

New Features

  • Crate now exists. First release

Commit Statistics

  • 15 commits contributed to the release over the course of 81 calendar days.
  • 0 commits where understood as conventional.
  • 0 issues like '(#ID)' where seen in commit messages

Commit Details

Commits
  • 1956369 chore(buildid): release v1.0.5
  • 611b0ae Merge pull request #19 from codyps/chore/release-plz-ci
  • 8cb092b ci: add release-plz automation
  • 178b8be Merge pull request #18 from codyps/fix/issue-17-windows-incremental-build-id
  • 2a365b5 Modernize Nix flake checks
  • 9a39318 Fix Linux Nix build ID tests
  • a216368 update nix
  • 4248784 fix incremental test in ci, disable sccache
  • 3925a0f no more bors
  • 1b1b1d4 Update GitHub Actions dependencies
  • Additional commits viewable in compare view

Updates cfg-if from 1.0.4 to 1.0.5

Release notes

Sourced from cfg-if's releases.

v1.0.5

  • Add a note that this crate is deprecated, suggesting cfg_select! instead
Changelog

Sourced from cfg-if's changelog.

1.0.5 - 2026-09-16

  • Add a note that this crate is deprecated, suggesting cfg_select! instead
Commits
  • 8b0a2b0 Deprecation notice + crate version bump
  • efabe3f Add a changelog entry for the upcoming deprecation notice
  • a66c2d4 Bump actions/checkout from 6 to 7
  • bda9677 Bump actions/checkout from 5 to 6
  • See full diff in compare view

Updates clap from 4.6.3 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates clap_complete from 4.6.9 to 4.6.11

Commits
  • 2cb76fd chore: Release
  • 0b00b8d docs: Update changelog
  • 3443000 Merge pull request #6526 from bonnefoa/fix-completion-escape
  • a1b6be7 fix(clap_complete): Fix value escape in zsh completion
  • face9e8 test(complete): Add completion test without arg's help
  • 88053ab test(complete): Re-enable complete tests
  • e6adcc2 chore(release): Simplify replacements
  • 13f2db5 chore: Release
  • 3304fea docs: Update changelog
  • 7b2ad34 Merge pull request #6521 from r-near/feat/derive-deferred-initialization
  • Additional commits viewable in compare view

Updates columnar from 0.13.1 to 0.13.2

Release notes

Sourced from columnar's releases.

columnar-v0.13.2

Other

  • Pin columnar_derive dependency exactly (#116)
  • Implement element_sizes for the remaining FromBytes impls (#118)

columnar_derive-v0.13.2

Other

  • Implement element_sizes for the remaining FromBytes impls (#118)
Changelog

Sourced from columnar's changelog.

0.13.2 - 2026-09-09

Other

  • Pin columnar_derive dependency exactly (#116)
  • Implement element_sizes for the remaining FromBytes impls (#118)
Commits

Updates crc32fast from 1.5.0 to 1.5.2

Commits
  • 7eb0b8a release 1.5.2
  • 9272707 perf(baseline): fold whole 16-byte blocks in the tail (#61)
  • 1e291e6 ci: add riscv64gc-unknown-linux-gnu to cross-test matrix (#59)
  • 9d02870 Update license links (#58)
  • a150f65 release 1.5.1
  • f066e8d perf(simd): widen x86 folds, add ARM 3-way, and speed up small inputs (#56)
  • d5c123d consolidate dword load in baseline implementation (#55)
  • 50e2046 downgrade msrv ci run to just cargo build
  • See full diff in compare view

Updates crossbeam from 0.8.4 to 0.8.5

Release notes

Sourced from crossbeam's releases.

crossbeam-utils 0.8.5

  • Add AtomicCell::fetch_update (#704)
  • Support targets that do not have atomic CAS on stable Rust (#698)

crossbeam-deque 0.8.5

  • Remove dependency on cfg-if. (#1072)

crossbeam 0.8.5

  • Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)
Changelog

Sourced from crossbeam's changelog.

Version 0.8.5

  • Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)
Commits
  • 2920c98 Prepare for the next release
  • 808b75a ci: Update codegen job
  • 46774e0 channel: Document that send_timeout sends an available message even if the ti...
  • 89a3fe4 epoch: Make Shared::null const
  • 383d74a Use *::MAX associated constants
  • a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
  • a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
  • 94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
  • 30e5963 epoch: Add missing fence emulation for tsan
  • 708a6bd Handle overflow in bounded channel/queue initialization (#1301)
  • Additional commits viewable in compare view

Updates crossbeam-channel from 0.5.16 to 0.5.17

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.17

  • Fix UB in bounded channel when SelectedOperation is leaked. (#1295)
  • Fix behavior inconsistency on already received case in at(). (#1296)
  • Handle overflow in bounded channel initialization. (#1301)
  • Use 64-bit index on 32-bit platforms if 64-bit atomic is available. (#1321)
  • Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)
Commits
  • 2920c98 Prepare for the next release
  • 808b75a ci: Update codegen job
  • 46774e0 channel: Document that send_timeout sends an available message even if the ti...
  • 89a3fe4 epoch: Make Shared::null const
  • 383d74a Use *::MAX associated constants
  • a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
  • a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
  • 94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
  • 30e5963 epoch: Add missing fence emulation for tsan
  • 708a6bd Handle overflow in bounded channel/queue initialization (#1301)
  • Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates futures from 0.3.33 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates headers from 0.4.1 to 0.4.2

Commits

Updates hickory-resolver from 0.26.1 to 0.26.3

Release notes

Sourced from hickory-resolver's releases.

v0.26.3

This release fixes regressions introduced in v0.26.2 related to DNSSEC verification, QUIC servers, HTTP/3 servers, and minimum dependency versions.

What's Changed

Full Changelog: hickory-dns/hickory-dns@v0.26.2...v0.26.3

v0.26.2

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in parsers. Other issues were related to UDP spoofing defenses, caching issues, and general DNS protocol correctness issues.

This is our first post-vulnpocalypse release, and most of these vulnerabilities were discovered through LLM-based workflows. The sheer volume of reports has been a challenge for our volunteer maintainers.

Resolved advisories:

  • GHSA-2vgh-3wfw-qj7c: RRSIG Signer's Name not checked against the RRset's zone
  • GHSA-57pw-897j-v4j6: Improper check of signature validity of NSEC and NSEC3 records
  • GHSA-wjgj-fvg9-65w9: DNSSEC validation ignores bogus records with a DNS class other than IN
  • GHSA-588m-chg6-8jqj: Inverted NSEC3 comparison allows forgery of proofs of nonexistence
  • GHSA-qw83-5pm2-ggp5: DNSSEC nonexistence forgery via incorrect handling of wraparound NSEC records
  • GHSA-3jvh-8vj5-65rq: NSEC3 apex NODATA accepted as secure with no QNAME-matching NSEC3
  • GHSA-3r6v-f3jh-vvqm: ancestor-delegation NSEC accepted as proof of nonexistence below the zone cut
  • GHSA-624w-vvww-xvpw: ancestor-delegation NSEC3 accepted as proof of nonexistence at and below the zone cut
  • GHSA-7php-9j59-g3ch: DNSSEC validation is missing RFC 6840 §4.4 checks
  • GHSA-vrv5-968r-5ggm: DNSSEC validation accepts bogus positive response with wildcard expansion
  • GHSA-p2jv-r3m3-7wf4: Nonexistence proof forgery due to insufficient checks on NSEC3 record names
  • GHSA-86vr-jm6c-7cpg: NSEC validator accepts NXDOMAIN for an empty non-terminal (ENT) that the covering NSEC proves exists
  • GHSA-8hq4-5836-w6q4: Server does not check validation status of SOA record in negative responses
  • GHSA-5j98-2g5x-46v6: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
  • GHSA-929p-gjf6-5hqj: DNSSEC validation accepts responses with the wrong RRset as a positive answer
  • GHSA-j2rc-wxwh-62g9: TrustAnchors does not check name of DNSKEY
  • GHSA-rx82-4p2j-j5cv: Name::hash discards label boundaries; ValidationCacheKey(u64) reuses the digest in Eq implementation, leaking an Insecure DNSSEC verdict across distinct owner names
  • GHSA-2hxp-x833-73f7: Hickory DNS recursor: ghost domain attack via child-side NS RRset queries
  • GHSA-x962-5xwx-fr8x: Unchecked subtraction in TSIG RDATA decoding panics when overflow checks are enabled
  • GHSA-wgfr-mphw-j5g4: Panic in zone file parser for SVCB and HTTPS
  • GHSA-hx8c-fjhc-hmf5: Panic in zone file parser for SVCB and HTTPS
  • GHSA-4rph-pmrw-mwpw: Zone file parser panics when parsing long lines
  • GHSA-3w89-7rx5-hpwx: Responses with QDCOUNT=0 bypass check for matching question section
  • GHSA-vcjp-57rr-mpfw: Out-of-bailiwick filtering is not applied to negative responses
  • GHSA-6w6g-hm98-mhgm: Unbounded TC-retry loop in NameServerPool::try_send (resource-exhaustion DoS)
  • GHSA-cx5j-p54p-q756: Cyclic sibling domain name server referrals without glue records cause exponential upstream query amplification in the recursor
  • GHSA-6h5c-jjg5-wj59: Glueless-NS referral fan-out without per-query work budget
  • GHSA-v44v-c8m4-gc43: Denial of service of client UDP connections via spoofed malformed responses
  • GHSA-67wc-6jq8-ghrc: Remote memory-amplification DoS via attacker-controlled RR counts in DNS message parsing

... (truncated)

Commits
  • bd37caf net: require authenticated insecure-delegation proofs
  • 5a79511 Add conformance test for regression
  • c268442 net: fix ancestor delegation issues
  • 9488e8e Exclude accepting QUIC connections from timeouts
  • 4ad16c3 Bump version to 0.26.3
  • cfab556 proto: ignore RRSIGs in DnssecSummary::from_records
  • 819a6bc net: try every RRSIG before marking an RRset bogus
  • 688231e resolver: use lenient resolv.conf parsing
  • ca5d1a1 resolver: Fix 'unused method' with features blocklist,tls-ring
  • 678b01b Fix unnecessary qualification warning
  • Additional commits viewable in compare view

Updates hyper-util from 0.1.20 to 0.1.21

Release notes

Sourced from hyper-util's releases.

v0.1.21

Additions

  • Add crate-level documentation. (#327)
  • Add client::legacy::Builder::http2_header_table_size() method. (#274)
  • Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
  • Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
  • Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
  • Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

  • Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
  • Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
  • Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
  • Fix client::pool::cache to preserve readiness with clones. (#297)
  • Fix client::pool::cache to wake its waiters in FIFO order. (#298)
  • Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
  • Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
  • Fix client::proxy::matcher handling for IP wildcards. (#309)
  • The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
  • Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.21 (2026-09-24)

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

Additions

  • Add crate-level documentation. (#327)
  • Add client::legacy::Builder::http2_header_table_size() method. (#274)
  • Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
  • Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
  • Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
  • Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

  • Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
  • Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
  • Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
  • Fix client::pool::cache to preserve readiness with clones. (#297)
  • Fix client::pool::cache to wake its waiters in FIFO order. (#298)
  • Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
  • Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
  • Fix client::proxy::matcher handling for IP wildcards. (#309)
  • The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
  • Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tas...

Description has been truncated

@dependabot dependabot Bot added the A-dependencies Area: dependency upgrades label Sep 27, 2026
@antiguru
antiguru force-pushed the dependabot/cargo/simple1-8135ca3fcd branch from 2a9d428 to a396f43 Compare September 28, 2026 09:06
@antiguru
antiguru force-pushed the dependabot/cargo/simple1-8135ca3fcd branch from a396f43 to 277b155 Compare September 28, 2026 11:19
@antiguru
antiguru force-pushed the dependabot/cargo/simple1-8135ca3fcd branch 2 times, most recently from ab5a68f to ebd48a0 Compare September 28, 2026 11:54
@antiguru @claude
build(deps): bump the simple1 group across 1 directory with 16 updates
8b5f27c 
Regenerated on current main with only the 16 intended updates. flate2 1.1.10
moves to miniz_oxide 0.9, while apache-avro and backtrace still depend on 0.8,
so exempt 0.8.9 from cargo-deny's duplicate check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@antiguru
antiguru force-pushed the dependabot/cargo/simple1-8135ca3fcd branch from ebd48a0 to 8b5f27c Compare September 28, 2026 12:22

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@antiguru antiguru antiguru approved these changes

Assignees

No one assigned

Labels

A-dependencies Area: dependency upgrades

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@antiguru