Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2025

Bumps the pointercrate group with 14 updates:

Package From To
tokio 1.44.1 1.44.2
cc 1.2.17 1.2.18
errno 0.3.10 0.3.11
flate2 1.1.0 1.1.1
hyper-util 0.1.10 0.1.11
iana-time-zone 0.1.62 0.1.63
indexmap 2.8.0 2.9.0
miniz_oxide 0.8.5 0.8.7
openssl 0.10.71 0.10.72
openssl-sys 0.9.106 0.9.107
redox_syscall 0.5.10 0.5.11
rustix 1.0.3 1.0.5
smallvec 1.14.0 1.15.0
windows-core 0.52.0 0.61.0

Updates tokio from 1.44.1 to 1.44.2

Release notes

Sourced from tokio's releases.

Tokio v1.44.2

This release fixes a soundness issue in the broadcast channel. The channel accepts values that are Send but !Sync. Previously, the channel called clone() on these values without synchronizing. This release fixes the channel by synchronizing calls to .clone() (Thanks Austin Bonander for finding and reporting the issue).

Fixed

  • sync: synchronize clone() call in broadcast channel (#7232)

#7232: tokio-rs/tokio#7232

Commits
  • ec4b1d7 chore: forward port 1.43.x
  • e3c3a56 Merge branch 'tokio-1.43.x' into forward-port-1.43.x
  • a7b658c chore: prepare Tokio v1.43.1 release
  • c1c8d10 Merge remote-tracking branch 'origin/tokio-1.38.x' into forward-port-1.38.x
  • aa303bc chore: prepare Tokio v1.38.2 release
  • 7b6ccb5 chore: backport CI fixes
  • 4b174ce sync: fix cloning value when receiving from broadcast channel
  • See full diff in compare view

Updates cc from 1.2.17 to 1.2.18

Release notes

Sourced from cc's releases.

cc-v1.2.18

Other

  • Regenerate target info (#1450)
  • Use std::thread::available_parallelism for determining the default number of jobs (#1447)
  • Fix mips64-openwrt-linux-musl parsing (#1449)
  • Use compiler prefix x86_64-linux-musl (#1443)
Changelog

Sourced from cc's changelog.

1.2.18 - 2025-04-04

Other

  • Regenerate target info (#1450)
  • Use std::thread::available_parallelism for determining the default number of jobs (#1447)
  • Fix mips64-openwrt-linux-musl parsing (#1449)
  • Use compiler prefix x86_64-linux-musl (#1443)
Commits

Updates errno from 0.3.10 to 0.3.11

Changelog

Sourced from errno's changelog.

[0.3.11] - 2025-04-04

  • Add VxWorks support #105

  • Add cygwin support #106

Commits

Updates flate2 from 1.1.0 to 1.1.1

Release notes

Sourced from flate2's releases.

1.1.1

This release should be smaller and thus faster to download. Additionally, when using the zlib-rs backend, duplicate symbol issues shouldn't occur anymore.

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.0...1.1.1

Commits
  • 98c98c8 Merge pull request #482 from folkertdev/update-zlib-rs-0.5.0
  • 94b36b0 upgrade zlib-rs to version 0.5.0
  • a79bfe4 Merge pull request #481 from Shnatsel/backend-docs
  • 694e822 less editorializing
  • 6debe95 Merge pull request #480 from Shnatsel/zlib-rs-readme
  • a24e276 Rewrite outdated backend notes in lib.rs
  • 78ca174 More informative README on backends
  • c9a3efa Merge pull request #476 from jayvdb/rm-changelog
  • 0b2137d Remove stale CHANGELOG.md
  • 0abbd1c Merge pull request #475 from oyvindln/patch-1
  • Additional commits viewable in compare view

Updates hyper-util from 0.1.10 to 0.1.11

Release notes

Sourced from hyper-util's releases.

v0.1.11

What's Changed

New Contributors

Thanks

Changelog

Sourced from hyper-util's changelog.

0.1.11 (2025-03-31)

  • Add tracing crate feature with support in TokioExecutor.
  • Add HttpConnector::interface() support for macOS and Solarish systems.
  • Add rt::WithHyperIo and rt::WithTokioIo combinators.
  • Add auto_date_header() for auto server builder.
  • Add max_local_error_reset_streams() for auto server builder.
  • Add ignore_invalid_headers() for auto server builder.
  • Add methods to determine if auto server is configured for HTTP/1 or HTTP/2.
  • Implement Connection for UnixStream and NamedPipeClient.
  • Fix HTTP/2 websocket requests sent through legacy::Client.
Commits
  • 4c4e062 v0.1.11
  • 486e3b6 bump license year
  • 5831ace feat(client): enable HttpConnector::interface on macOS and Solarish systems...
  • dc03ad4 feat(client): implement Connection for UnixStream and NamedPipeClient (#177)
  • 94afd50 feat(rt/tokio): additive tokio and hyper i/o adaptors (#170)
  • ef35d8a chore: pin once-cell on msrv ci job (#175)
  • d51318d chore(client/legacy): remove unused PoolClient::is_closed() (#169)
  • 1290685 chore(tokio): warn on dead code (#168)
  • b90ff7d feat(rt): add tracing feature that will propagate span context in TokioExec...
  • 46826ea feat(server): support auto_date_header, max_local_error_reset_streams, an...
  • Additional commits viewable in compare view

Updates iana-time-zone from 0.1.62 to 0.1.63

Changelog

Sourced from iana-time-zone's changelog.

[0.1.63] - 2025-03-31

Changes

  • Bump MSRV (minimum supported rust version) to 1.62 (#131)
  • Bump windows-core to 0.56-0.61 range (#131, #133)
Commits
  • 6adcd01 Bump version number to 0.1.63
  • 16f281a Merge pull request #133 from MarijnS95/windows-0.56
  • 798e431 Bump windows-core range to 0.56-0.61 and regenerate with 0.59
  • 66033d9 Bump windows-core to 0.56
  • 10c843d Merge pull request #131 from MarijnS95/windows-core-0.54
  • a26e540 Bump windows-core to 0.53-0.54 range
  • 5bad558 WIP: Bump MSRV to 1.62
  • 343f31b Merge pull request #164 from strawlab/dev/astraw-fix-aix
  • 995347f AIX: remove unused code
  • See full diff in compare view

Updates indexmap from 2.8.0 to 2.9.0

Changelog

Sourced from indexmap's changelog.

2.9.0 (2025-04-04)

  • Added a get_disjoint_mut method to IndexMap, matching Rust 1.86's HashMap method.
  • Added a get_disjoint_indices_mut method to IndexMap and map::Slice, matching Rust 1.86's get_disjoint_mut method on slices.
  • Deprecated the borsh feature in favor of their own indexmap feature, solving a cyclic dependency that occured via borsh-derive.
Commits
  • 1818d41 Merge pull request #387 from cuviper/release-2.9.0
  • 9f49983 Release 2.9.0
  • 582a90f Merge pull request #386 from cuviper/de-borsh
  • 9011739 Deprecate the "borsh" feature
  • 0a836e8 Merge pull request #238 from NiklasJonsson/get_many_mut
  • 434d7ac Avoid let-else for MSRV's sake
  • 5be552d Implement additional suggestions from review
  • 4e1d8ce Address review feedback
  • 5aec9ec Implement get_disjoint_mut for arrays of keys
  • d10de30 Merge pull request #385 from iajoiner/docs/macros
  • Additional commits viewable in compare view

Updates miniz_oxide from 0.8.5 to 0.8.7

Changelog

Sourced from miniz_oxide's changelog.

0.8.7 - 2025-04-03

Bug Fixes

  • (inflate) make block boundary function a feature since it breaks semver and add to test - (862fb2c) - oyvindln

0.8.6 - 2025-04-03

Yanked as it broke semver due to adding an enum variant - fixed in 0.8.7 by adding the new functionality as an optional feature for now.

Bug Fixes

  • (deflate) help the compiler evade two bounds checks to improve compression performance a little - (633e59f) - oyvindln
  • (deflate) further deflate performance improvements especially on fast mode - (5a65104) - oyvindln
  • (docs) update miniz_oxide readme a bit - (743ae50) - oyvindln
  • (inflate) don't use bit reverse lookup table when not using alloc and make it smaller - (8e331bb) - oyvindln
  • (inflate) correctly return MZError::buf from inflate on incomplete stream - (061069e) - oyvindln
  • (inflate) improve inflate perf in some cases when using wrapping buffer - (44a3e1b) - oyvindln
  • (inflate) evade more bounds checks in inflate and disable stop on block boundary code when compiled as dep of rustc - (953a54d) - oyvindln
  • (inflate) skip stream module when compiling as part of rustc std as it's not used there - (073160c) - oyvindln
  • rename serde feature, separate serde test - (eee6524) - oyvindln
  • remoe unused serde BigArray implementation sizes and update Readme - (f73670a) - oyvindln
  • Block boundary test and cleanup (#171) - (82ada74) - Philip Taylor

Features

  • add derive(Serialize, Deserialize) to DecompressorOxide (#166) - (c9e5996) - dishmaker
  • Add API to support random access at block boundaries (#170) - (240bcdd) - Philip Taylor

Commits
  • 81526b9 bump version and changelog
  • d78d8a9 fix CI
  • c5c0cc6 remove block boundary enum option in c api so it compiles
  • 862fb2c fix(inflate): make block boundary function a feature since it breaks semver a...
  • a2b8edb fix: add missing test data
  • ace80a1 fix(inflate): fix overflow crash introduced due to accidentally using | inste...
  • 4afbb3d bump version and changelog
  • 4982644 update readme
  • 073160c fix(inflate): skip stream module when compiling as part of rustc std as it's ...
  • 953a54d fix(inflate): evade more bounds checks in inflate and disable stop on block b...
  • Additional commits viewable in compare view

Updates openssl from 0.10.71 to 0.10.72

Release notes

Sourced from openssl's releases.

openssl-v0.10.72

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.71...openssl-v0.10.72

Commits
  • 87085bd Merge pull request #2390 from alex/uaf-fix
  • d1a12e2 Fixed two UAFs and bumped versions for release
  • 7c7b2e6 Merge pull request #2389 from skmcgrail/aws-lc-follow-up
  • 34a477b Use --experimental with bindgen-cli with aws-lc build
  • d4bf071 Merge pull request #2386 from skmcgrail/aws-lc-follow-up
  • a86bf67 Remove comment
  • 705dbfb Fix test
  • e0df413 Skip final call for LibreSSL 4.1.0 for CCM mode
  • 2f1164b Enable additional capabilities for AWS-LC
  • dde9ffb Merge pull request #1805 from skmcgrail/aws-lc-support-final
  • Additional commits viewable in compare view

Updates openssl-sys from 0.9.106 to 0.9.107

Release notes

Sourced from openssl-sys's releases.

openssl-sys-v0.9.107

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.106...openssl-sys-v0.9.107

Commits
  • 87085bd Merge pull request #2390 from alex/uaf-fix
  • d1a12e2 Fixed two UAFs and bumped versions for release
  • 7c7b2e6 Merge pull request #2389 from skmcgrail/aws-lc-follow-up
  • 34a477b Use --experimental with bindgen-cli with aws-lc build
  • d4bf071 Merge pull request #2386 from skmcgrail/aws-lc-follow-up
  • a86bf67 Remove comment
  • 705dbfb Fix test
  • e0df413 Skip final call for LibreSSL 4.1.0 for CCM mode
  • 2f1164b Enable additional capabilities for AWS-LC
  • dde9ffb Merge pull request #1805 from skmcgrail/aws-lc-support-final
  • Additional commits viewable in compare view

Updates redox_syscall from 0.5.10 to 0.5.11

Updates rustix from 1.0.3 to 1.0.5

Commits
  • cb01fbe chore: Release rustix version 1.0.5
  • 310f8ec Mark 32-bit x86 freebsd as needing y2038 fixes. (#1430)
  • 1997940 chore: Release rustix version 1.0.4
  • d2fe327 For tidiness, keep the target_os = "..." lists sorted alphabetically. (#1429)
  • 416b4c3 Handle Duration overflow gracefully in kevent. (#1427)
  • bd5427c Fix build, sockopts and examples for cygwin (#1428)
  • 92cd57a Temporarily disable x86_64-uwp-windows-msvc in CI due to build errors on nigh...
  • See full diff in compare view

Updates smallvec from 1.14.0 to 1.15.0

Release notes

Sourced from smallvec's releases.

v1.15.0

What's Changed

New Contributors

Full Changelog: servo/rust-smallvec@v1.14.0...v1.15.0

Commits

Updates windows-core from 0.52.0 to 0.61.0

Release notes

Sourced from windows-core's releases.

0.61.0

Major crate updates:

  • windows 0.59.0
  • windows-core 0.59.0
    • windows-implement 0.59.0
    • windows-interface 0.59.0
  • windows-targets 0.53.0
    • windows_i686_msvc 0.53.0
    • windows_x86_64_msvc 0.53.0
    • windows_aarch64_msvc 0.53.0
    • windows_i686_gnu 0.53.0
    • windows_x86_64_gnu 0.53.0
    • windows_i686_gnullvm 0.53.0
    • windows_x86_64_gnullvm 0.53.0
    • windows_aarch64_gnullvm 0.53.0
  • windows-bindgen 0.59.0
  • windows-registry 0.4.0
  • windows-result 0.3.0
  • windows-strings 0.3.0
  • cppwinrt 0.2.0

Minor crate updates:

  • windows-version 0.1.2

Excluded:

  • windows-sys 0.59.0

Things to keep in mind:

  • The tag/release names no longer map directly to the crate versions, so to find samples for a particular release requires looking at the releases page and finding the release that most recently updated a particular crate.

  • The windows-bindgen crate includes the major code generation overhaul that brings many improvements - be sure to check out the PR description for more information. The resulting code gen depends on the new version of windows-core and its dependencies, unless you include the --sys option. #3359

  • The cppwinrt crate constitutes a major update due to streamlining the error handling. #3415

  • The windows-registry, windows-strings, and windows-result crates are also major version updates since they include small breaking changes.

  • The windows-targets crate finally receives a major version update, the first in over a year. This is due to #3359 and #3342 potentially introducing breaking changes. Although unlikely, these updates introduced sufficient changes that make it hard to ensure that the windows-targets libs don't break existing code. As we're updating windows-targets anyway, I took the liberty to bump the MSRV to 1.60 - to match the latest version of windows-sys - and remove the old but unused doc macro feature. Both remained for compatibility with very old dependents of the windows-targets crate.

  • The windows-version crate receives a minor update to update its dependency on the windows-targets crate.

  • Beyond these specifics, this update is the culmination of around 6 months worth of work on the windows-rs project. The biggest improvements comes from the new code generation engine, but many other improvements are now also available for production. This includes support for many new lints, warnings, and suggestions provided by the Rust toolchain; much smaller code gen thanks to deriving many more traits; more efficient code gen; major improvements to WinRT type system and implementation support; more robust and consistent error handling; stock collection and async support; improved support for class hierarchies; and much more!

In addition to "what's changed" below, check out what's changed for notes for 0.60.0 and 0.59.0 for additional changes that roll up to the crates published as part of this release.

What's Changed

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pointercrate group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.44.1` | `1.44.2` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.17` | `1.2.18` |
| [errno](https://github.com/lambda-fairy/rust-errno) | `0.3.10` | `0.3.11` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.0` | `1.1.1` |
| [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.10` | `0.1.11` |
| [iana-time-zone](https://github.com/strawlab/iana-time-zone) | `0.1.62` | `0.1.63` |
| [indexmap](https://github.com/indexmap-rs/indexmap) | `2.8.0` | `2.9.0` |
| [miniz_oxide](https://github.com/Frommi/miniz_oxide) | `0.8.5` | `0.8.7` |
| [openssl](https://github.com/sfackler/rust-openssl) | `0.10.71` | `0.10.72` |
| [openssl-sys](https://github.com/sfackler/rust-openssl) | `0.9.106` | `0.9.107` |
| redox_syscall | `0.5.10` | `0.5.11` |
| [rustix](https://github.com/bytecodealliance/rustix) | `1.0.3` | `1.0.5` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.14.0` | `1.15.0` |
| [windows-core](https://github.com/microsoft/windows-rs) | `0.52.0` | `0.61.0` |


Updates `tokio` from 1.44.1 to 1.44.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.44.1...tokio-1.44.2)

Updates `cc` from 1.2.17 to 1.2.18
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.17...cc-v1.2.18)

Updates `errno` from 0.3.10 to 0.3.11
- [Release notes](https://github.com/lambda-fairy/rust-errno/releases)
- [Changelog](https://github.com/lambda-fairy/rust-errno/blob/main/CHANGELOG.md)
- [Commits](lambda-fairy/rust-errno@v0.3.10...v0.3.11)

Updates `flate2` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.0...1.1.1)

Updates `hyper-util` from 0.1.10 to 0.1.11
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.10...v0.1.11)

Updates `iana-time-zone` from 0.1.62 to 0.1.63
- [Changelog](https://github.com/strawlab/iana-time-zone/blob/main/CHANGELOG.md)
- [Commits](strawlab/iana-time-zone@v0.1.62...v0.1.63)

Updates `indexmap` from 2.8.0 to 2.9.0
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.8.0...2.9.0)

Updates `miniz_oxide` from 0.8.5 to 0.8.7
- [Changelog](https://github.com/Frommi/miniz_oxide/blob/master/CHANGELOG.md)
- [Commits](Frommi/miniz_oxide@0.8.5...0.8.7)

Updates `openssl` from 0.10.71 to 0.10.72
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.71...openssl-v0.10.72)

Updates `openssl-sys` from 0.9.106 to 0.9.107
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-sys-v0.9.106...openssl-sys-v0.9.107)

Updates `redox_syscall` from 0.5.10 to 0.5.11

Updates `rustix` from 1.0.3 to 1.0.5
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.0.3...v1.0.5)

Updates `smallvec` from 1.14.0 to 1.15.0
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.14.0...v1.15.0)

Updates `windows-core` from 0.52.0 to 0.61.0
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](microsoft/windows-rs@0.52.0...0.61.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.44.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: cc
  dependency-version: 1.2.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: errno
  dependency-version: 0.3.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: flate2
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: hyper-util
  dependency-version: 0.1.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: iana-time-zone
  dependency-version: 0.1.63
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: indexmap
  dependency-version: 2.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: pointercrate
- dependency-name: miniz_oxide
  dependency-version: 0.8.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: openssl
  dependency-version: 0.10.72
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: openssl-sys
  dependency-version: 0.9.107
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: redox_syscall
  dependency-version: 0.5.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: rustix
  dependency-version: 1.0.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: pointercrate
- dependency-name: smallvec
  dependency-version: 1.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: pointercrate
- dependency-name: windows-core
  dependency-version: 0.61.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: pointercrate
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 6, 2025
@stadust stadust merged commit e44e0be into master Apr 8, 2025
2 checks passed
@dependabot dependabot bot deleted the dependabot/cargo/pointercrate-9ed3760e19 branch April 8, 2025 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants