Skip to content

chore(deps): bump the cargo group with 13 updates - #35

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-2e4a1f70d6
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-2e4a1f70d6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 13 updates:

Package From To
serde_json 1.0.151 1.0.154
cc 1.6.0 1.8.0
h2 0.4.19 0.4.20
hyper 1.11.1 1.12.0
powerfmt 0.2.0 0.2.1
smallvec 1.16.2 1.16.3
syn 3.0.6 3.0.8
tokio-util 0.7.19 0.7.20
unicase 2.9.0 2.10.0
want 0.3.1 0.3.2
zeroize 1.9.0 1.9.1
zstd-safe 8.0.0 8.1.0
zstd-sys 2.1.0+zstd.1.5.7 2.1.1+zstd.1.5.7

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates cc from 1.6.0 to 1.8.0

Release notes

Sourced from cc's releases.

cc-v1.8.0

Added

  • add CC_PREFER_CLANG_CL_OVER_MSVC to override prefer_clang_cl_over_msvc (#2001)

Fixed

  • (panic) fix panic in code and replace with error when appropriate (#2008)
  • (env) do not panic if WASM_MUSL_SYSROOT not set (#2007)
  • (jobserver) help thread gets more token than necessary (#2006)
  • stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)
  • do not apply target crt-static when target is overridden (#1999)

Other

  • (parallel) poll for process exit on linux (#2009)
  • document NVCC and other environment variables (#2005)
  • (jobserver) poll for new token (#2004)
  • (parallel) Use poll on unix (#2000)

cc-v1.7.0

Added

  • add Tool::get_envs, deprecate Tool::env and store tool env as Arc<OsStr> pairs (#1985)
  • link c++ when Clang uses libc++ (#1978)
  • add CC_MASM_ASM and fall back to llvm-ml for MASM files (#1975)

Fixed

  • (target parsing) for powerpc64-ibm-aix abi (#1989)
  • ignore ASCII case in program name checks (#1981)

Other

  • (compile) issue compilation cmds more frequently in parallel #1997 #1998
  • (cache) Optimize tool detection caching (#1995)
  • (cache) optimize EnvSnapshot Hash, PartialEq, Ord impl (#1994)
  • Regenerate target info (#1988)
Changelog

Sourced from cc's changelog.

1.8.0 - 2026-10-11

Added

  • add CC_PREFER_CLANG_CL_OVER_MSVC to override prefer_clang_cl_over_msvc (#2001)

Fixed

  • (panic) fix panic in code and replace with error when appropriate (#2008)
  • (env) do not panic if WASM_MUSL_SYSROOT not set (#2007)
  • (jobserver) help thread gets more token than necessary (#2006)
  • stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)
  • do not apply target crt-static when target is overridden (#1999)

Other

  • (parallel) poll for process exit on linux (#2009)
  • document NVCC and other environment variables (#2005)
  • (jobserver) poll for new token (#2004)
  • (parallel) Use poll on unix (#2000)

1.7.0 - 2026-10-10

Added

  • add Tool::get_envs, deprecate Tool::env and store tool env as Arc<OsStr> pairs (#1985)
  • link c++ when Clang uses libc++ (#1978)
  • add CC_MASM_ASM and fall back to llvm-ml for MASM files (#1975)

Fixed

  • (target parsing) for powerpc64-ibm-aix abi (#1989)
  • ignore ASCII case in program name checks (#1981)

Other

  • (compile) issue compilation cmds more frequently in parallel #1997 #1998
  • (cache) Optimize tool detection caching (#1995)
  • (cache) optimize EnvSnapshot Hash, PartialEq, Ord impl (#1994)
  • Regenerate target info (#1988)
Commits
  • d0454ee chore(cc): release v1.8.0 (#2010)
  • fd18a6c perf(parallel): poll for process exit on linux (#2009)
  • b69d7eb fix(panic): fix panic in code and replace with error when appropriate (#2008)
  • 78eaf8f fix(env): do not panic if WASM_MUSL_SYSROOT not set (#2007)
  • ca93d67 docs: document NVCC and other environment variables (#2005)
  • e4f1339 fix(jobserver): help thread gets more token than necessary (#2006)
  • 369070e perf(jobserver): poll for new token (#2004)
  • 360d734 fix: stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)
  • 5832160 refactor(forward_available): use let-else (#2002)
  • fb83356 feat: add CC_PREFER_CLANG_CL_OVER_MSVC to override `prefer_clang_cl_over_ms...
  • Additional commits viewable in compare view

Updates h2 from 0.4.19 to 0.4.20

Release notes

Sourced from h2's releases.

v0.4.20

What's Changed

New Contributors

Full Changelog: hyperium/h2@v0.4.19...v0.4.20

Changelog

Sourced from h2's changelog.

0.4.20 (October 6, 2026)

  • Fix counting reserved push promises against stream concurrency limits.
  • Fix automatic small DATA frame budget to update when the connection window changes at runtime.
  • Fix rejecting duplicate content-length headers with different values.
  • Fix counting refused streams towards the local reset limit.
  • Fix client to reject responses without a :status pseudo header.
  • Fix rare race condition during shutdown.
  • Fix rejecting GOAWAY frames with a non-zero stream identifier.
  • Optimize HPACK Huffman encoding and decoding.
  • Reduce size of HPACK Huffman encoding tables.
  • Optimize receive performance by reducing send buffer locking.
Commits
  • b0e8908 v0.4.20
  • 5b17a0e perf: remove need to lock for pending_refusal for every recv call (#969)
  • a26b427 fix: count reserved push promises against stream concurrency (#968)
  • 96c15eb fix: update automatic DATA frame budget at runtime (#965)
  • d96d347 fix: reject duplicate content-lengths that differ (#967)
  • 8e9655f fix: count refused streams on local reset abuse counter (#966)
  • 3c5f61c fix(client): reject responses without :status (#959)
  • e43124b fix: rare race during shutdown (#956)
  • 20cfc37 style: apply clippy (#955)
  • d785c5f chore: make CI have a single required job (#954)
  • Additional commits viewable in compare view

Updates hyper from 1.11.1 to 1.12.0

Release notes

Sourced from hyper's releases.

v1.12.0

Features

Bug Fixes

  • http1:
    • withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)
    • remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)
    • always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)
    • let a Connection close token win over a later keep-alive (#4201) (5dadff76)
    • preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)
  • http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Everything

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.12.0 (2026-10-06)

Bug Fixes

  • http1:
    • withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)
    • remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)
    • always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)
    • let a Connection close token win over a later keep-alive (#4201) (5dadff76)
    • preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)
  • http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

Commits
  • 7f67699 v1.12.0
  • 254bf12 perf(body): skip waking a closed peer when a channel end drops (#4225)
  • c44f1cc fix(http1): withdraw a stale want when the client dispatcher takes a request ...
  • 69396fd fix(http1): remove content-length if transfer-encoding is auto-added (#4224)
  • a5d7fd7 fix(http1): always remove content-length if transfer-encoding is sent (#4223)
  • 5dadff7 fix(http1): let a Connection close token win over a later keep-alive (#4201)
  • d1cd14e feat(http1): add max_header_size limit for server and client (#4183)
  • 714c7cf style(lib): address cast-possible-truncation clippy findings (#4192)
  • 0d47440 style(lib): mark partial Debug impls as non-exhaustive (#4218)
  • da3b1b1 style(lib): remove useless_borrows_in_formatting from the clippy allowlist (#...
  • Additional commits viewable in compare view

Updates powerfmt from 0.2.0 to 0.2.1

Release notes

Sourced from powerfmt's releases.

v0.2.1

See the changelog for details.

Changelog

Sourced from powerfmt's changelog.

0.2.1 [2026-10-05]

Fixed

  • alternate() in the macro now calls the correct method.
  • Diagnostic messages had minor incorrectness fixed.

Updated

  • Depend on syn version 3 instead of version 2.
Commits

Updates smallvec from 1.16.2 to 1.16.3

Release notes

Sourced from smallvec's releases.

v1.16.3

What's Changed

Full Changelog: servo/rust-smallvec@v1.16.2...v1.16.3

Commits

Updates syn from 3.0.6 to 3.0.8

Release notes

Sourced from syn's releases.

3.0.8

  • Fix parsing of <- and -> tokens in expressions (#2086, #2087)

3.0.7

Commits
  • f18a083 Release 3.0.8
  • e1eab98 Merge pull request #2087 from dtolnay/rightarrow
  • 5345ee5 Allow end of expr before ->
  • 5631c74 Merge pull request #2086 from dtolnay/leftarrow
  • c5b3cf0 Fix left arrow being split into less-than and negative-sign
  • ec4c2da Release 3.0.7
  • f947cf7 Merge pull request #2085 from A4-Tacks/break-label-abs-path
  • 9cb6556 Update test suite to nightly-2026-10-08
  • 0cce166 Fix parse abs path expr in labeled break
  • 295f964 Update test suite to nightly-2026-09-29
  • Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

Updates unicase from 2.9.0 to 2.10.0

Release notes

Sourced from unicase's releases.

v2.10.0

What's Changed

New Contributors

Full Changelog: seanmonstar/unicase@v2.9.0...v2.10.0

Commits

Updates want from 0.3.1 to 0.3.2

Commits

Updates zeroize from 1.9.0 to 1.9.1

Commits

Updates zstd-safe from 8.0.0 to 8.1.0

Commits
  • 9167d35 Release zstd 0.14.1, zstd-safe 8.1.0, and zstd-sys 2.1.1
  • b59becf Propagate C API deprecations through Rust bindings and wrappers
  • d8a325a Simplify Rust allocator constructors and test support
  • 594e743 Delegate panicking dictionary constructors to fallible variants
  • 779d39a Add fallible constructors for prepared dictionaries
  • fc5d2b7 Merge pull request #379 from gyscos/fix/pr-378-rust-allocator
  • 18028cd Count actual newline bytes in dictionary training samples
  • 0cb868f Fix Rust allocator validation and isolate allocation tests
  • 3480b76 fix: formatting
  • f90a236 feat: check that cloning a context doesn't mix allocators
  • Additional commits viewable in compare view

Updates zstd-sys from 2.1.0+zstd.1.5.7 to 2.1.1+zstd.1.5.7

Commits
  • 9167d35 Release zstd 0.14.1, zstd-safe 8.1.0, and zstd-sys 2.1.1
  • b59becf Propagate C API deprecations through Rust bindings and wrappers
  • d8a325a Simplify Rust allocator constructors and test support
  • 594e743 Delegate panicking dictionary constructors to fallible variants
  • 779d39a Add fallible constructors for prepared dictionaries
  • fc5d2b7 Merge pull request #379 from gyscos/fix/pr-378-rust-allocator
  • 18028cd Count actual newline bytes in dictionary training samples
  • 0cb868f Fix Rust allocator validation and isolate allocation tests
  • 3480b76 fix: formatting
  • f90a236 feat: check that cloning a context doesn't mix allocators
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.6.0` | `1.8.0` |
| [h2](https://github.com/hyperium/h2) | `0.4.19` | `0.4.20` |
| [hyper](https://github.com/hyperium/hyper) | `1.11.1` | `1.12.0` |
| [powerfmt](https://github.com/jhpratt/powerfmt) | `0.2.0` | `0.2.1` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.2` | `1.16.3` |
| [syn](https://github.com/dtolnay/syn) | `3.0.6` | `3.0.8` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |
| [unicase](https://github.com/seanmonstar/unicase) | `2.9.0` | `2.10.0` |
| [want](https://github.com/seanmonstar/want) | `0.3.1` | `0.3.2` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.9.0` | `1.9.1` |
| [zstd-safe](https://github.com/gyscos/zstd-rs) | `8.0.0` | `8.1.0` |
| [zstd-sys](https://github.com/gyscos/zstd-rs) | `2.1.0+zstd.1.5.7` | `2.1.1+zstd.1.5.7` |


Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `cc` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.6.0...cc-v1.8.0)

Updates `h2` from 0.4.19 to 0.4.20
- [Release notes](https://github.com/hyperium/h2/releases)
- [Changelog](https://github.com/hyperium/h2/blob/master/CHANGELOG.md)
- [Commits](hyperium/h2@v0.4.19...v0.4.20)

Updates `hyper` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.11.1...v1.12.0)

Updates `powerfmt` from 0.2.0 to 0.2.1
- [Release notes](https://github.com/jhpratt/powerfmt/releases)
- [Changelog](https://github.com/jhpratt/powerfmt/blob/main/CHANGELOG.md)
- [Commits](jhpratt/powerfmt@v0.2.0...v0.2.1)

Updates `smallvec` from 1.16.2 to 1.16.3
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.2...v1.16.3)

Updates `syn` from 3.0.6 to 3.0.8
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.6...3.0.8)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

Updates `unicase` from 2.9.0 to 2.10.0
- [Release notes](https://github.com/seanmonstar/unicase/releases)
- [Commits](seanmonstar/unicase@v2.9.0...v2.10.0)

Updates `want` from 0.3.1 to 0.3.2
- [Commits](seanmonstar/want@v0.3.1...v0.3.2)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

Updates `zstd-safe` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/gyscos/zstd-rs/releases)
- [Commits](gyscos/zstd-rs@zstd-safe-8.0.0...zstd-safe-8.1.0)

Updates `zstd-sys` from 2.1.0+zstd.1.5.7 to 2.1.1+zstd.1.5.7
- [Release notes](https://github.com/gyscos/zstd-rs/releases)
- [Commits](gyscos/zstd-rs@zstd-sys-2.1.0...zstd-sys-2.1.1)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: cc
  dependency-version: 1.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: h2
  dependency-version: 0.4.20
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: hyper
  dependency-version: 1.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: powerfmt
  dependency-version: 0.2.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: smallvec
  dependency-version: 1.16.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: syn
  dependency-version: 3.0.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: unicase
  dependency-version: 2.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: want
  dependency-version: 0.3.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: zstd-safe
  dependency-version: 8.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: zstd-sys
  dependency-version: 2.1.1+zstd.1.5.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from NullSablex as a code owner October 14, 2026 20:01
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants