Repository navigation
build(deps): bump the cargo group across 1 directory with 26 updates - #3170
Open
dependabot[bot] wants to merge 2 commits into
Open
dependabot[bot] wants to merge 2 commits into
dependabot[bot] wants to merge 2 commits into
Conversation
Bumps the cargo group with 26 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aes-gcm](https://github.com/RustCrypto/AEADs) | `0.11.0` | `0.11.1` | | [async-compression](https://github.com/Nullus157/async-compression) | `0.4.50` | `0.4.52` | | [crc32c](https://github.com/zowens/crc32c) | `0.6.8` | `0.6.9` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.10` | `1.1.11` | | [getrandom](https://github.com/rust-random/getrandom) | `0.3.4` | `0.4.3` | | [google-cloud-auth](https://github.com/googleapis/google-cloud-rust) | `1.17.0` | `1.18.0` | | [google-cloud-storage](https://github.com/googleapis/google-cloud-rust) | `1.20.0` | `1.21.0` | | [jaq-all](https://github.com/01mf02/jaq) | `0.3.0` | `0.4.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` | | [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` | | [russh](https://github.com/warp-tech/russh) | `0.65.0` | `0.65.1` | | [size](https://github.com/neosmart/prettysize-rs) | `0.5.0` | `0.6.0` | | [smallvec](https://github.com/servo/rust-smallvec) | `1.16.3` | `1.16.4` | | [sysinfo](https://github.com/GuillaumeGomez/sysinfo) | `0.39.6` | `0.40.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.3` | `1.54.1` | | [tokio-vsock](https://github.com/rust-vsock/tokio-vsock) | `0.7.2` | `0.7.3` | | [vsock](https://github.com/rust-vsock/vsock-rs) | `0.5.4` | `0.5.5` | | [tonic](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` | | [tonic-prost](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` | | [tonic-prost-build](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` | | [unicode-width](https://github.com/unicode-rs/unicode-width) | `0.2.2` | `0.2.3` | | [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.0` | | [zeroize](https://github.com/RustCrypto/utils) | `1.9.0` | `1.9.1` | | [globset](https://github.com/BurntSushi/ripgrep) | `0.4.20` | `0.4.21` | | [rustls-native-certs](https://github.com/rustls/rustls-native-certs) | `0.8.4` | `0.8.5` | | [tokio-rustls](https://github.com/rustls/tokio-rustls) | `0.26.5` | `0.26.6` | Updates `aes-gcm` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/AEADs@aes-gcm-v0.11.0...aes-gcm-v0.11.1) Updates `async-compression` from 0.4.50 to 0.4.52 - [Release notes](https://github.com/Nullus157/async-compression/releases) - [Commits](Nullus157/async-compression@async-compression-v0.4.50...async-compression-v0.4.52) Updates `crc32c` from 0.6.8 to 0.6.9 - [Commits](zowens/crc32c@v0.6.8...v0.6.9) Updates `flate2` from 1.1.10 to 1.1.11 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Changelog](https://github.com/rust-lang/flate2-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/flate2-rs@1.1.10...v1.1.11) Updates `getrandom` from 0.3.4 to 0.4.3 - [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md) - [Commits](rust-random/getrandom@v0.3.4...v0.4.3) Updates `google-cloud-auth` from 1.17.0 to 1.18.0 - [Release notes](https://github.com/googleapis/google-cloud-rust/releases) - [Commits](https://github.com/googleapis/google-cloud-rust/commits) Updates `google-cloud-storage` from 1.20.0 to 1.21.0 - [Release notes](https://github.com/googleapis/google-cloud-rust/releases) - [Commits](https://github.com/googleapis/google-cloud-rust/commits) Updates `jaq-all` from 0.3.0 to 0.4.0 - [Release notes](https://github.com/01mf02/jaq/releases) - [Commits](https://github.com/01mf02/jaq/commits) Updates `libc` from 0.2.190 to 0.2.191 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.190...0.2.191) Updates `opentelemetry-otlp` from 0.33.0 to 0.33.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md) - [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.33.0...opentelemetry-otlp-0.33.1) Updates `russh` from 0.65.0 to 0.65.1 - [Release notes](https://github.com/warp-tech/russh/releases) - [Commits](Eugeny/russh@v0.65.0...v0.65.1) Updates `size` from 0.5.0 to 0.6.0 - [Release notes](https://github.com/neosmart/prettysize-rs/releases) - [Commits](neosmart/prettysize-rs@0.5.0...0.6.0) Updates `smallvec` from 1.16.3 to 1.16.4 - [Release notes](https://github.com/servo/rust-smallvec/releases) - [Commits](smallvec/smallvec@v1.16.3...v1.16.4) Updates `sysinfo` from 0.39.6 to 0.40.1 - [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md) - [Commits](GuillaumeGomez/sysinfo@v0.39.6...v0.40.1) Updates `tokio` from 1.53.3 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.3...tokio-1.54.1) Updates `tokio-vsock` from 0.7.2 to 0.7.3 - [Commits](https://github.com/rust-vsock/tokio-vsock/commits) Updates `vsock` from 0.5.4 to 0.5.5 - [Commits](https://github.com/rust-vsock/vsock-rs/commits) Updates `tonic` from 0.14.6 to 0.14.9 - [Release notes](https://github.com/grpc/grpc-rust/releases) - [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md) - [Commits](grpc/grpc-rust@tonic-v0.14.6...tonic-v0.14.9) Updates `tonic-prost` from 0.14.6 to 0.14.9 - [Release notes](https://github.com/grpc/grpc-rust/releases) - [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md) - [Commits](grpc/grpc-rust@tonic-prost-v0.14.6...tonic-prost-v0.14.9) Updates `tonic-prost-build` from 0.14.6 to 0.14.9 - [Release notes](https://github.com/grpc/grpc-rust/releases) - [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md) - [Commits](grpc/grpc-rust@tonic-prost-build-v0.14.6...tonic-prost-build-v0.14.9) Updates `unicode-width` from 0.2.2 to 0.2.3 - [Commits](unicode-rs/unicode-width@v0.2.2...v0.2.3) Updates `uuid` from 1.28.0 to 1.29.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.28.0...v1.29.0) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1) Updates `globset` from 0.4.20 to 0.4.21 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@globset-0.4.20...globset-0.4.21) Updates `rustls-native-certs` from 0.8.4 to 0.8.5 - [Release notes](https://github.com/rustls/rustls-native-certs/releases) - [Commits](rustls/rustls-native-certs@v/0.8.4...v/0.8.5) Updates `tokio-rustls` from 0.26.5 to 0.26.6 - [Release notes](https://github.com/rustls/tokio-rustls/releases) - [Commits](rustls/tokio-rustls@v/0.26.5...v/0.26.6) --- updated-dependencies: - dependency-name: aes-gcm dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: async-compression dependency-version: 0.4.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: crc32c dependency-version: 0.6.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: flate2 dependency-version: 1.1.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: getrandom dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: google-cloud-auth dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: google-cloud-storage dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: jaq-all dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: libc dependency-version: 0.2.191 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: opentelemetry-otlp dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: russh dependency-version: 0.65.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: size dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: smallvec dependency-version: 1.16.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: sysinfo dependency-version: 0.40.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tokio-vsock dependency-version: 0.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: vsock dependency-version: 0.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tonic dependency-version: 0.14.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tonic-prost dependency-version: 0.14.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tonic-prost-build dependency-version: 0.14.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: unicode-width dependency-version: 0.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: uuid dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: globset dependency-version: 0.4.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: rustls-native-certs dependency-version: 0.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio-rustls dependency-version: 0.26.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
Contributor
|
Approved: no findings at Nothing to do. Clobber: none. |
5 of 7 tasks
agent-137
reviewed
Nov 9, 2026
Member
There was a problem hiding this comment.
Review on Karl's behalf, at b85391f94. This is a comment, not an approval. Nothing was built for it: every point comes from reading the code, and each finding says how it was checked.
- CI at head b85391f: red. These fail:
clippy,build-linux,tests,unit,zoned,artifacts,kani,native-daemon-e2eandminimald-root-integration, and with themci-success,ci-linux-native-success,ci-linux-kvm-success,ci-macos-successandci-kani-success.cargo-deny,fmtandcommitlintpass. - Existing reviews: minimal-review approved with "no findings" at head, even though CI is red. CodeRabbit skipped (dependabot), so no CodeRabbit review exists. No human review.
Semver-breaking bumps (all 0.x minor): sysinfo 0.39.6 → 0.40.1, getrandom 0.3.4 → 0.4.3, jaq-all 0.3.0 → 0.4.0, size 0.5.0 → 0.6.0. Everything else is a patch or a compatible minor. One new crate comes in transitively: google-cloud-api 1.8.0 (via google-cloud-storage 1.21). cargo-deny passed, so no license, ban or advisory flags. getrandom now has three versions in the tree (0.2, 0.3, 0.4), and deny accepted that.
Should-fix
-
sysinfo0.40 makesSystem::new()return aResult, so three call sites stop compiling:crates/minvmd/src/cmd/config.rs:33-35crates/minvmd/src/metrics.rs:47-54crates/minimald/src/rpc.rs:353-355
Each fails with E0599: no method
refresh_memory/total_memory/refresh_processes/processonResult<T, E>. This one bump is behind every red lane. Fix: handle theResultat the 3 sites (System::new()?or.ok()?, the functions already returnOption), or ignoresysinfoin this group and do it in a separate PR. Verified from the failedclippyjob log (run 42689251692): 8 errors, all in those files. -
The other three breaking bumps compiled in that clippy run:
getrandom::fillinbepcompiled.jaq-all0.4 incommoncompiled.size0.6 compiled forop.- Not reached:
size0.6 inminimald, andgetrandom0.4 in theminimalCLI. cargo stopped after minimald/minvmd failed, so there is no compile evidence for either.
Recheck after the sysinfo fix. I did not build locally.
Verdict: needs changes. Fix the 3 sysinfo call sites or drop sysinfo from the group. The minimal-review approval should not be counted.
Member
There was a problem hiding this comment.
This group bump does not compile. sysinfo 0.40 changed System::new() to return Result<System, sysinfo::Error>, and three call sites in minvmd and minimald break. The CI, macOS, Linux native, Linux KVM and Kani workflows all fail on the same six E0599 errors. The other 25 bumps look safe: no new version is yanked or covered by a RustSec advisory, and cargo-deny passes.
Findings
-
Blocking: sysinfo 0.39.6 to 0.40.1 breaks the build. The 0.40 migration guide says types "now return a
Resultand willErrif not supported on this OS". These call sites need updating:crates/minvmd/src/metrics.rs:47. The function returnsOption, solet mut sys = System::new().ok()?;keeps the current behaviour.crates/minvmd/src/cmd/config.rs:33.HostCapacity::probe()returnsSelf, so it needs an explicit choice for the error case. Pick a fallback deliberately rather than lettingtotal_mibsilently become 0.crates/minimald/src/rpc.rs:353. The function returnsOption, so.ok()?fits here too.
Pushing a fix onto a dependabot branch stops dependabot from rebasing it. The cleaner route is a follow-up PR that bumps sysinfo with these three fixes, with this group re-run once that lands. Alternatively, sysinfo can be held at 0.39 in
.github/dependabot.yml. -
CI never reached some crates, so a green run is still needed after the fix. Compilation stopped in
minvmdandminimald. I checked the other three breaking-range bumps by reading their source instead:- getrandom 0.3 to 0.4.
bepuses onlygetrandom::fill, atcrates/bep/src/ca.rs:769,seal.rs:392,seal.rs:557,signin.rs:642andkeys.rs:1654. Its signature is unchanged in 0.4.3. The crate's MSRV is 1.85, and the toolchain pin is 1.99.1. - jaq-all 0.3 to 0.4.
commoncompiled in the clippy job, socrates/common/src/jq.rstype-checks. Its tests, including the jaq-panic regression, have not run yet. - size 0.5 to 0.6.
minimaldtype-checked with only the sysinfo errors, sosize::Size::from_bytesatcrates/minimald/src/box_ops.rs:172is fine.crates/op/src/materialize_events.rs:65,70uses the same call. The 0.6 formatter's default scale isNone, and upstream's existing tests are unchanged, so user-visible output should not change.
- getrandom 0.3 to 0.4.
-
Minor: the PR body is stale. It lists smallvec 1.16.4 and uuid 1.29.0, but the rebased lockfile has 1.16.5 and 1.29.2. getrandom does not appear in the lockfile diff at all, because 0.4.3 was already in the graph. No action needed.
The bumps
| Crate | From | To |
|---|---|---|
| aes-gcm | 0.11.0 | 0.11.1 |
| async-compression | 0.4.50 | 0.4.52 |
| crc32c | 0.6.8 | 0.6.9 |
| flate2 | 1.1.10 | 1.1.11 |
| getrandom | 0.3.4 | 0.4.3 (major) |
| google-cloud-auth | 1.17.0 | 1.18.0 |
| google-cloud-storage | 1.20.0 | 1.21.0 |
| jaq-all | 0.3.0 | 0.4.0 (major) |
| libc | 0.2.190 | 0.2.191 |
| opentelemetry-otlp | 0.33.0 | 0.33.1 |
| russh | 0.65.0 | 0.65.1 |
| size | 0.5.0 | 0.6.0 (major) |
| smallvec | 1.16.3 | 1.16.5 |
| sysinfo | 0.39.6 | 0.40.1 (major, breaks build) |
| tokio | 1.53.3 | 1.54.1 |
| tokio-vsock | 0.7.2 | 0.7.3 |
| vsock | 0.5.4 | 0.5.5 |
| tonic | 0.14.6 | 0.14.9 |
| tonic-prost | 0.14.6 | 0.14.9 |
| tonic-prost-build | 0.14.6 | 0.14.9 |
| unicode-width | 0.2.2 | 0.2.3 |
| uuid | 1.28.0 | 1.29.2 |
| zeroize | 1.9.0 | 1.9.1 |
| globset | 0.4.20 | 0.4.21 |
| rustls-native-certs | 0.8.4 | 0.8.5 |
| tokio-rustls | 0.26.5 | 0.26.6 |
The lockfile also moves these transitive crates:
- compression-codecs, compression-core, google-cloud-gax-internal and google-cloud-wkt.
- jaq-core 3.1.2, jaq-json 2.0.3 and jaq-std 3.0.4.
- opentelemetry-proto 0.33.1 and tonic-build 0.14.9.
- One new crate, google-cloud-api 1.8.0, pulled in by google-cloud-storage.
Checked and fine
- Advisories. I checked every new version against the RustSec advisory database as of 2026-11-09, and none is affected.
- tokio has one advisory, RUSTSEC-2026-0384. It affects only 1.54.0 and is patched in 1.54.1, the version this PR lands.
- russh's RUSTSEC-2026-0154 was patched in 0.60.3.
- Yanked versions. None of the 36 new versions is yanked on crates.io. uuid 1.29.2 was published today, so it has had the least exposure.
- CI status.
cargo-deny,commitlint,fmtandminimal-checkpass. The compile failures are entirely the sysinfo change above. - Patches. There is no
[patch.crates-io]entry for any bumped crate. Only vt100 and topiary are patched.
Verdict
Request changes. sysinfo 0.40 needs three small call-site fixes, either here or in a dedicated PR, before this group can merge. After that, it needs a full green CI run to cover bep, op and the jq tests.
Reviewed with lab tooling on the branch head; the lab round, where one ran, is cited in the text. Questions welcome.
bryan-minimal
requested changes
Nov 9, 2026
Member
There was a problem hiding this comment.
Requesting changes: sysinfo 0.40 makes System::new() fallible and breaks three call sites in minvmd and minimald (CI is red on five workflows). No advisories or yanks among the new versions; a separate fix PR keeps dependabot rebasing this one.
norrietaylor
approved these changes
Nov 10, 2026
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the cargo group with 26 updates in the / directory:
0.11.00.11.10.4.500.4.520.6.80.6.91.1.101.1.110.3.40.4.31.17.01.18.01.20.01.21.00.3.00.4.00.2.1900.2.1910.33.00.33.10.65.00.65.10.5.00.6.01.16.31.16.40.39.60.40.11.53.31.54.10.7.20.7.30.5.40.5.50.14.60.14.90.14.60.14.90.14.60.14.90.2.20.2.31.28.01.29.01.9.01.9.10.4.200.4.210.8.40.8.50.26.50.26.6Updates
aes-gcmfrom 0.11.0 to 0.11.1Commits
2eff6ccCut releases that replacesubtlewithctutils(#880)c90047fReplacesubtlewithctutils(#879)da2169eocb3: remove unusedctrandzeroizedependencies (#876)f5374f3Add missing crates to the root readme table (#877)e946770eax v0.6.0 (#875)88ceb7ddeoxys v0.2.0 (#874)7d22c81belt-dwp v0.1.0 (#873)09308efascon-aead128 v0.1.0 (#872)e1b1e6eaes-siv v0.8.0 (#871)303c27fccm v0.6.0 (#869)Updates
async-compressionfrom 0.4.50 to 0.4.52Release notes
Sourced from async-compression's releases.
Commits
e637664chore: release (#510)7cbbb7bfix(gzip): validate and consume FHCRC header bytes (#511)5bc8fedchore(clippy): Suppress clippy lint for macro-generated fields (#509)7ab7d10chore(deps): bump rust-lang/crates-io-auth-action from 1.0.5 to 1.0.6 (#507)04a9843chore(deps): bump MarcoIeni/release-plz-action from 0.5.139 to 0.5.147 (#508)29ae167chore(deps): bump taiki-e/install-action from 2.87.21 to 2.88.0 (#506)f2559fdchore: release (#503)c259d25feature(zstd): addmzstdv0.2.5 (#505)a9de8cachore: add keywords to compression crates (#502)e548b13ci: run compression-core tests under Miri (#498)Updates
crc32cfrom 0.6.8 to 0.6.9Commits
3098a6eRelease 0.6.99c3554aInline the SSE 4.2 CRC loops on x86_64c92fcffUpdate criterion requirement from 0.7 to 0.866c7c49Include license files in repo and published crates835d1eaUpdate criterion requirement from 0.6 to 0.7509722eRand crate update (#75)f250fd3Make license metadata SPDX compliantfceb1dcRelease 0.6.8Updates
flate2from 1.1.10 to 1.1.11Release notes
Sourced from flate2's releases.
Changelog
Sourced from flate2's changelog.
Commits
cd06529chore: release v1.1.116ff4098Merge pull request #582 from rust-lang/fix-lacking-buffer-drain5f68913Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits5582d95fixup! Complete sync flushes across output buffer boundaries (#581)d05c7c4Merge pull request #577 from rust-lang/fix-loop5c7ee7aMerge pull request #583 from Kobzol/trusted-publishingcc527c6Setup trusted publishing for the flate2 crate54f49cdMerge pull request #580 from NUAAwqy/fix/can-by-extended-typo491df15Complete sync flushes across output buffer boundaries (#581)a7a1161Fix "can by extended" typos in deflate and zlib write docsUpdates
getrandom from 0.3.4 to 0.4.3Changelog
Sourced from getrandom's changelog.
... (truncated)
Commits
5e7cd57Release v0.4.3 (#853)1ea268aUse manual bindings for WASIp2/3 (#830)f7290b0Update Cargo.lock (#852)16ce801Update Cargo.lock (#850)e5adfcaAddwasm64-unknown-unknownsupport forwasm_jsbackend (#848)626df8dUpdate Cargo.lock (#846)4a01cb2Update Cargo.lock (#841)f87bf39Update Cargo.lock (#836)eadb879ci: re-enable build job for x86_64-pc-cygwin (#832)d715d73CI: Reduce the number of packages that are updated for wasip2 MSRV test (#825)Updates
google-cloud-authfrom 1.17.0 to 1.18.0Commits
Updates
google-cloud-storagefrom 1.20.0 to 1.21.0Commits
Updates
jaq-allfrom 0.3.0 to 0.4.0Commits
Updates
libcfrom 0.2.190 to 0.2.191Release notes
Sourced from libc's releases.
Changelog
Sourced from libc's changelog.
Commits
ccc2ff4libc: Release 0.2.191bce6efbapple: Addmach_task_selfandmach_task_self_to semver checksecf4fd4apple: Re-restrictmach_vm_mapto MacOS-onlyb0e0423Revert "apple: Disablemach.hAPI on Apple mobile OSs"9c7f568apple: addifaliasreqandin6_aliasreq018c7e9wasi: Add pthread_condattr_{get,set}clock2c77185openbsd: add sensordev structuree10813churd: Add missingPOSIX_SPAWN_*flags2ea4bc1Fix FreeBSD/aarch646d666fddragonfly: Parse version from headers rather than CLIUpdates
opentelemetry-otlpfrom 0.33.0 to 0.33.1Commits
372ebbcchore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)5582e71docs(logs): polish design doc and fill perf numbers (#3566)7ce1269fix(sdk): log when the periodic metrics reader panics (#3777)b547036fix(prometheus): keep resource labels when scope info is disabled (#3751)e8480dbchore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)0fdfc48feat(proto): Add support for protobuffer descriptor output (#3675)87929d7ci: install markdown-link-check from npm (#3661)ff2ab2ddocs(trace): explain async context propagation (#3759)2595432fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...952bdeefix: accept optional whitespace in TraceState (#3761)Updates
russhfrom 0.65.0 to 0.65.1Release notes
Sourced from russh's releases.
Commits
b33092av0.65.120c5a93fix(keys): keep the comment when loading a public key file (#801)3a21566fix(client): accept non-canonical ECDSA P-521 signature mpints after strict d...a6be9bafix(cipher): count the MAC tag in the minimum packet length check (#802)43a46d6fix(AgentClient): propagate method errors (#808)56384e6add Eric-D as a contributor for code (#799)7c59594fix(server): let Dropbear through strict kex by accounting for the ignored fi...d10345ddeps: trim aws-lc-rs features to avoid transitive deps (#809)0a8cc28deps: remove dep on generic-array 0.14 compat (#810)92562d3tests: adapt to VerifiedPublicKey after #785 (#807)Updates
sizefrom 0.5.0 to 0.6.0Release notes
Sourced from size's releases.
Commits
5eb283fBump to version 0.6.09f9849aAddSize::ubytes()to get size as au64f4787f1Clarify Size formatting restrictions inno_stdmodedad0c82Re-enable some doc tests under no_std now that formatting is possible1a3fb31Allow using fmt::Display without std (#17)9578e89Explicitly denote elided lifetimefe453c3AddSize::const_new()andSize::new()aliases/helpers66f6e87Reject some edge cases when parsing sizes from strings1ac08deAddress lint about redundant/superseded Cargo.toml package property01990ffFix errantly splitting on non-ascii byte boundariesUpdates
smallvecfrom 1.16.3 to 1.16.4Release notes
Sourced from smallvec's releases.
Commits
eab7746chore: bump version (#779)bb9e44bPort fuzzer changes from PR #737 to v1 (#753)Updates
sysinfofrom 0.39.6 to 0.40.1Changelog
Sourced from sysinfo's changelog.
Commits
75dcd2cMerge pull request #1790 from GuillaumeGomez/update15a5e93Update crate version to0.40.14f252bdUpdate CHANGELOG for0.40.14a7b9e7Merge pull request #1789 from GuillaumeGomez/fromb19150aAdd backFrom\<X<Y>> for Vec\<Y>implementations forUsers,Groupsand `G...e27239aWindows: markSystem::load_averageas unsupported (#1788)70c58c7Fix wrong supported system list forGPUs13e94d5Windows: markSystem::load_averageas unsupported34677feallow getting ownedDiskfromDisks(#1786)48972c4Merge pull request #1784 from GuillaumeGomez/updateUpdates
tokiofrom 1.53.3 to 1.54.1Release notes
Sourced from tokio's releases.
... (truncated)
Commits
b53b200chore: prepare Tokio v1.54.1 (#8693)5ed619btime: revert "remove the runtime handle from timers" (#8692)66d34e4chore: prepare Tokio v1.54.0 (#8667)0d322ceio: support vectored writes in sink (#8663)4167c56codec: expose I/O sources from codec errors (#8665)cdd9daefs: propagate iouring stress test failures (#8644)52ac781ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)4890d02stream: implementFusedStreamforJoinSetStream(#8629)a6bd8e1wasm: check Emscripten version when using JSPI (#8627)9dd749dMerge 'tokio-1.53.3' into 'master' (#8641)Updates
tokio-vsockfrom 0.7.2 to 0.7.3Commits