chore(deps): bump the cargo-minor-patch group across 1 directory with 15 updates by dependabot[bot] · Pull Request #2298 · CurateLabs/graphforge

dependabot · 2026-11-06T05:32:27Z

Bumps the cargo-minor-patch group with 15 updates in the / directory:

Package	From	To
sha2	`0.11.0`	`0.11.1`
unicode-normalization	`0.1.25`	`0.1.26`
ureq	`3.4.2`	`3.5.1`
uuid	`1.28.0`	`1.29.1`
tokio	`1.53.2`	`1.54.1`
napi	`3.14.2`	`3.16.1`
napi-derive	`3.6.12`	`3.7.0`
libc	`0.2.190`	`0.2.191`
rustix	`1.1.5`	`1.1.6`
spdx	`0.13.4`	`0.13.6`
roxmltree	`0.21.1`	`0.21.2`
crc32fast	`1.5.2`	`1.5.4`
zstd-safe	`8.1.0`	`8.2.0`
brotli	`9.0.0`	`9.1.1`
toml_edit	`0.25.13+spec-1.1.0`	`0.25.19+spec-1.1.0`

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates unicode-normalization from 0.1.25 to 0.1.26

Commits

See full diff in compare view

Updates ureq from 3.4.2 to 3.5.1

Changelog

Sourced from ureq's changelog.

3.5.1

Bump ureq-proto to 0.7.1 (fixes to connection reuse and transfer encoding) #1224

Send only cookie names and values in request Cookie headers #1222

Preserve readable responses after macOS rejects timeout changes on closed sockets #1220

3.5.0

Prepare 3.5.0 and fix dependency advisories and warnings - #1217

Add Agent::shutdown() to interrupt requests in flight and close all connections #1211

Preserve validated request header casing with RequestBuilder::header_raw #1214

Decode proxy URL credentials once; literal percent signs must be escaped as %25 #1215

Encode ProxyBuilder credentials and preserve colons in proxy passwords #1215

Apply remaining timeout budgets to SOCKS setup and drop the socks dependency #1209

Check NO_PROXY before resolving a SOCKS proxy, so excluded hosts connect directly #1209

Clarify timeout budgets, phase boundaries, and proxy DNS #1213

Bound TLS handshake I/O by the remaining connect/global timeout #1208

Retry socket reads interrupted by EINTR when timeout (technically breaking) #1205

Fix native-tls-no-default enabling dependencies without enabling the TLS connector

Add timeout_per_read and timeout_per_write independently of total phase budgets

3.4.3

Update TLS dependencies for security fixes #1218

Commits

33ca9d3 3.5.1
d1b194c Bump ureq-proto to 0.7.1
81d1b40 Bump ureq-proto to 0.7.0
0cbee9a docs: clarify body read limit defaults (#1223)
f92baae Send only cookie names and values in the Cookie header
f60896d Preserve readable responses after macOS timeout setter failures
1bd534e Fix changelog
fee0ad2 Prepare 3.5.0 and fix dependency advisories and warnings
7de0ab7 Remove realtime dependencies from tests
3f18f90 Add Agent::shutdown() for active and pooled connections
Additional commits viewable in compare view

Updates uuid from 1.28.0 to 1.29.1

Release notes

Sourced from uuid's releases.

v1.29.1

What's Changed

Remove some deprecated attrs and resolve Cargo lints by @KodrAus in uuid-rs/uuid#921

Deprecate the borsh feature of uuid in favour of a uuid feature in borsh by @KodrAus in uuid-rs/uuid#923

Fix up several bugs in v7 monotonicity raised by automated scanning by @KodrAus in uuid-rs/uuid#926

Prepare for 1.29.1 release by @KodrAus in uuid-rs/uuid#927

Full Changelog: uuid-rs/uuid@v1.29.0...v1.29.1

v1.29.0

What's Changed

Add versioned constructors to NonNilUuid by @RanaPriyansh in uuid-rs/uuid#919

Prepare for 1.29.0 release by @KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits

0fe2dab Merge pull request #927 from uuid-rs/cargo/v1.29.1
8896d2e prepare for 1.29.1 release
2eef370 Merge pull request #926 from uuid-rs/fix/timestamp-edges
de33fde fix up several bugs in v7 monotonicity raised by automated scanning
7c7326d Merge pull request #923 from uuid-rs/fix/deprecate-borsh
13e1ff0 deprecate the borsh feature of uuid in favour of a uuid feature in borsh
4eba67b Merge pull request #921 from uuid-rs/chore/lint-fixup
8a052e0 resolve some clippy lints
3d24508 bump gungruan version
c097ab7 remove some deprecated attrs and resolve Cargo lints
Additional commits viewable in compare view

Updates tokio from 1.53.2 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)

net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)

runtime: add Builder::max_io_events_per_busy_tick (#8410)

runtime: stabilize tokio::runtime::worker_index() (#8431)

sync: add SemaphorePermit::semaphore() (#8482)

sync: add blocking_acquire methods to Semaphore (#8269)

sync: add watch::Receiver::is_closed (#8481)

wasm: support JSPI for Emscripten target (#8285, #8627)

wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

fs: reject zero in File::set_max_buf_size (#8449)

io: make copy_buf cooperative (#8459)

io: panic when BufReader or BufStream is created with zero capacity (#8494)

io: panic when in-memory pipe is created with zero capacity (#8397)

io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)

io: support vectored writes in Sink (#8663)

net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)

net: start accepted sockets as readable and writable (#8435)

net: support UCred on Fuchsia (#8257)

process: use mio::unix::pipe for Unix child stdio (#8603)

runtime: cache-pad the shared injection queue and idle state (#8622)

runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)

runtime: make enable_io available whenever rt is enabled (#8387)

runtime: move block_in_place setup into a non-generic function (#8315)

runtime: move the multi-thread inject queue to its own mutex (#8382)

runtime: panic when max_io_events_per_tick is zero (#8476)

runtime: suggest .await in nested block_on panic message (#8501)

sync: avoid atomic reader count in broadcast slots (#8357)

sync: use acquire/release orderings in Notify (#8325)

time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

b53b200 chore: prepare Tokio v1.54.1 (#8693)
5ed619b time: revert "remove the runtime handle from timers" (#8692)
66d34e4 chore: prepare Tokio v1.54.0 (#8667)
0d322ce io: support vectored writes in sink (#8663)
4167c56 codec: expose I/O sources from codec errors (#8665)
cdd9dae fs: propagate iouring stress test failures (#8644)
52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
4890d02 stream: implement FusedStream for JoinSetStream (#8629)
a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
Additional commits viewable in compare view

Updates napi from 3.14.2 to 3.16.1

Release notes

Sourced from napi's releases.

napi-v3.16.1

Fixed

(napi) avoid a deadlock when a worker loads the addon during block_on (#3670)

napi-v3.16.0

Added

(napi) support well-known symbol keys for class members (#3665)

(napi) support symbol_for keys for class members (#3661)

Fixed

(napi) compact class identity metadata (#3667)

(napi) keep the registered classes when a later load fails (#3666)

(napi) free define_class closures, honour static flags, avoid TS1016 in constructors (#3662)

(napi) free threadsafe function call data when the call fails (#3656)

napi-v3.15.0

Added

(napi) cancel a ReadableStream through its Reader, and fix ReadableStream::cancel (#3623)

Fixed

(napi) set the custom GC aborted flag before Node closes its tsfn (#3626)

(napi) TypedArray input leaks and compat buffer copies on wasm (#3612)

(napi) copy managed array inputs (#3607)

(napi) reject a value of another class on builds without type tags (#3610)

(napi) drop unadopted class value and reset factory flag on failed conversion (#3603)

(napi) join the Tokio runtime threads at env teardown (#3592)

(napi) keep borrowed class args alive across AsyncTask/AsyncBlock (#3584)

Other

(cli) cover FreeBSD arm64 (#3620)

(cli) record the design behind the threaded WASI heap sync (#3581)

Commits

417375a chore: release (#3671)
9ffcf8d build(deps): bump qs from 6.16.0 to 6.17.1 (#3669)
8a89547 fix(napi): avoid a deadlock when a worker loads the addon during block_on (...
eec0c64 chore(deps): update dependency oxfmt to ^0.75.0 (#3660)
f89400d chore: release (#3637)
192cbaa chore(deps): update dependency @types/inquirer to v10 (#3668)
9188219 chore(deps): update dependency electron to v45 (#3634)
1d93a4e fix(napi): compact class identity metadata (#3667)
e9de902 fix(napi): keep the registered classes when a later load fails (#3666)
cad7ff7 feat(napi): support well-known symbol keys for class members (#3665)
Additional commits viewable in compare view

Updates napi-derive from 3.6.12 to 3.7.0

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.7.0

Added

(napi) support well-known symbol keys for class members (#3665)

(napi) support symbol_for keys for class members (#3661)

Fixed

(napi) free define_class closures, honour static flags, avoid TS1016 in constructors (#3662)

napi-derive-v3.6.13

Other

update Cargo.toml dependencies

Commits

f89400d chore: release (#3637)
192cbaa chore(deps): update dependency @types/inquirer to v10 (#3668)
9188219 chore(deps): update dependency electron to v45 (#3634)
1d93a4e fix(napi): compact class identity metadata (#3667)
e9de902 fix(napi): keep the registered classes when a later load fails (#3666)
cad7ff7 feat(napi): support well-known symbol keys for class members (#3665)
c01ce60 fix(napi): free define_class closures, honour static flags, avoid TS1016 in c...
5a49dad feat(napi): support symbol_for keys for class members (#3661)
0c58903 fix(napi): free threadsafe function call data when the call fails (#3656)
ada66a3 chore(deps): update release-plz/action action to v0.5.147 (#3659)
Additional commits viewable in compare view

Updates libc from 0.2.190 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

Commits

ccc2ff4 libc: Release 0.2.191
bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
9c7f568 apple: add ifaliasreq and in6_aliasreq
018c7e9 wasi: Add pthread_condattr_{get,set}clock
2c77185 openbsd: add sensordev structure
e10813c hurd: Add missing POSIX_SPAWN_* flags
2ea4bc1 Fix FreeBSD/aarch64
6d666fd dragonfly: Parse version from headers rather than CLI
Additional commits viewable in compare view

Updates rustix from 1.1.5 to 1.1.6

Commits

4a563ad chore: Release rustix version 1.1.6
8e6aaa6 Merge commit from fork
4686873 fix: expose additional termios output mode flags (#1709)
c9ad9d3 fix(net): don't trust cmsg_len past the end of a truncated control buffer (...
98358af Avoid constructing a zero Pid in tcgetpgrp on non-Linux targets (#1710)
664aeae fix(net): use IPPROTO_IPV6 for IPV6_MULTICAST_HOPS (#1692)
bf78ee6 freebsd: Fix cfg gates for FreeBSD 12 (#1707)
b3d81bd Fix fallocate on Apple platforms. (#1708)
915ab6f fix(fs): Set proper inotify WatchFlags values on libc backend (#1714)
52d5db7 Use 32-bit UID/GID syscalls on arm, sparc, and x86 (#1716)
Additional commits viewable in compare view

Updates spdx from 0.13.4 to 0.13.6

Release notes

Sourced from spdx's releases.

0.13.6

Fixed

PR#98 cleaned up the error representation.

Changed

PR#97 updated SPDX license list to 3.29.0.

0.13.5

Fixed

PR#96 fixed LicenseItem's PartialEq and PartialOrd implementations to agree with its total ordering, resolving #95.

Changelog

Sourced from spdx's changelog.

[0.13.6] - 2026-10-02

Fixed

PR#98 cleaned up the error representation.

Changed

PR#97 updated SPDX license list to 3.29.0.

[0.13.5] - 2026-08-06

Fixed

PR#96 fixed LicenseItem's PartialEq and PartialOrd implementations to agree with its total ordering, resolving #95.

Commits

0ca398c Release 0.13.6
d2bb576 Update CHANGELOG
b8ba627 Avoid duplicate cache error output (#98)
0590fc5 Update license list to 3.29.0 (#97)
10dcdc2 Release 0.13.5
057eb32 Fix CHANGELOG
744e4cd Fix LicenseItem ordering consistency (#96)
See full diff in compare view

Updates roxmltree from 0.21.1 to 0.21.2

Changelog

Sourced from roxmltree's changelog.

[0.21.2] - 2026-10-24

Fixed

Stack overflow when parsing deeply nested elements. Element content is now parsed iteratively instead of recursing once per nesting level.

Commits

b04f75f Bump version for maintenance release.
3f5c78d Parse element content iteratively
e8a27a7 Fix a typo in and reword for clarity the docstring for EntityResolver
See full diff in compare view

Updates crc32fast from 1.5.2 to 1.5.4

Commits

118796a Release 1.5.4
3400e3b aarch64: merge the 3-way streams with precomputed shift tables (#76)
b9e3b49 aarch64: read words without align_to (#74)
6b9d674 baseline: fold 8- and 4-byte tails with the slicing tables (#72)
7bfe6b1 Bounds-check the x86 SIMD loads (#73)
c963d3d Deny unsafe code outside the SIMD backends (#75)
9ecaae9 Mark the x86 feature detection #[inline] (#71)
d28c588 Load the final partial block without a stack copy (#70)
c438f1c Inline the Hasher constructor and update path (#69)
d2363ea Release 1.5.3
Additional commits viewable in compare view

Updates zstd-safe from 8.1.0 to 8.2.0

Commits

75bc740 Release zstd 0.14.3, zstd-safe 8.2.0, and zstd-sys 2.1.2
1c580b6 zstd-safe: keep the one-shot reset check inline
502ee2f zstd-safe: only reset after one-shot decompression if a stream may be open
5ded6e0 zstd-safe: apply rustfmt
e224018 zstd-safe: refuse to unload a dictionary under unfinished zstdmt jobs
6a1065b Stop a single_frame() decoder when finish_frame() ends the frame
c7156df Don't let finish_frame() start a frame nothing was read from
b0fb8a7 Add write::Decoder::finish() to report incomplete frames
ab34d01 Don't retry a panicked writer when dropping AutoFlushDecoder/AutoFinishEncoder
74ace2d Reset the borrowed context's session in raw::{Encoder,Decoder}::with_context
Additional commits viewable in compare view

Updates brotli from 9.0.0 to 9.1.1

Commits

a3cb931 release 9.1.1
b47cb22 Refactor into a more legible reader
e0efe1c BroCatli: hold back trailing header bytes and handle short and chunked streams
afa8585 BroCatli: keep both header bytes when an empty stream straddles a byte boundary
e951e7e brotli CLI: accept -bare and -bytealign with -catable, exit 1 when rejected
c550341 Fix index out of bounds under the disallow_large_window_size feature
73e6947 Release 9.1.0
73766fc Forward portable float from the C FFI crate
6518a4e fix: correct BroCatli empty-stream concatenation for small windows
See full diff in compare view

Updates toml_edit from 0.25.13+spec-1.1.0 to 0.25.19+spec-1.1.0

Commits

563cb1a chore: Release
4ad20a6 docs: Update changelog
f09854a perf(serde): Report size hints (#1262)
663302b perf(serde): Report size hints
22ef745 chore: Release
8ffe3c5 chore: Release
fa51878 docs: Update changelog
f8ad91e perf(serde): Reuse key allocations (#1261)
fe51467 perf(serde): Reuse key allocations
7024319 perf(writer): Expand coverage of the fast path (#1259)
Additional commits viewable in compare view

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

dependabot · 2026-11-06T05:32:30Z

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

coderabbitai · 2026-11-06T05:32:35Z

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: CurateLabs/graphforge
Branch: main
File: .coderabbit.yaml
Commit: 7af4ecd
Layers: Repository YAML
Review profile: CHILL
Plan: Advanced
Run ID: 8f6aa87f-84ce-453c-ac8b-e7237667efca

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Billing warning: we have not been able to collect payment for this subscription for more than 72 hours. Please update the payment method or pay any pending invoices in Billing to avoid service interruption.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

… 15 updates Bumps the cargo-minor-patch group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [unicode-normalization](https://github.com/unicode-rs/unicode-normalization) | `0.1.25` | `0.1.26` | | [ureq](https://github.com/algesten/ureq) | `3.4.2` | `3.5.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.2` | `1.54.1` | | [napi](https://github.com/napi-rs/napi-rs) | `3.14.2` | `3.16.1` | | [napi-derive](https://github.com/napi-rs/napi-rs) | `3.6.12` | `3.7.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` | | [rustix](https://github.com/bytecodealliance/rustix) | `1.1.5` | `1.1.6` | | [spdx](https://github.com/EmbarkStudios/spdx) | `0.13.4` | `0.13.6` | | [roxmltree](https://github.com/RazrFalcon/roxmltree) | `0.21.1` | `0.21.2` | | [crc32fast](https://github.com/srijs/rust-crc32fast) | `1.5.2` | `1.5.4` | | [zstd-safe](https://github.com/gyscos/zstd-rs) | `8.1.0` | `8.2.0` | | [brotli](https://github.com/dropbox/rust-brotli) | `9.0.0` | `9.1.1` | | [toml_edit](https://github.com/toml-rs/toml) | `0.25.13+spec-1.1.0` | `0.25.19+spec-1.1.0` | Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `unicode-normalization` from 0.1.25 to 0.1.26 - [Commits](https://github.com/unicode-rs/unicode-normalization/commits/v0.1.26) Updates `ureq` from 3.4.2 to 3.5.1 - [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md) - [Commits](algesten/ureq@3.4.2...3.5.1) Updates `uuid` from 1.28.0 to 1.29.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.28.0...v1.29.1) Updates `tokio` from 1.53.2 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.2...tokio-1.54.1) Updates `napi` from 3.14.2 to 3.16.1 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-v3.14.2...napi-v3.16.1) Updates `napi-derive` from 3.6.12 to 3.7.0 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-derive-v3.6.12...napi-derive-v3.7.0) Updates `libc` from 0.2.190 to 0.2.191 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.190...0.2.191) Updates `rustix` from 1.1.5 to 1.1.6 - [Release notes](https://github.com/bytecodealliance/rustix/releases) - [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md) - [Commits](bytecodealliance/rustix@v1.1.5...v1.1.6) Updates `spdx` from 0.13.4 to 0.13.6 - [Release notes](https://github.com/EmbarkStudios/spdx/releases) - [Changelog](https://github.com/EmbarkStudios/spdx/blob/main/CHANGELOG.md) - [Commits](EmbarkStudios/spdx@0.13.4...0.13.6) Updates `roxmltree` from 0.21.1 to 0.21.2 - [Changelog](https://github.com/RazrFalcon/roxmltree/blob/master/CHANGELOG.md) - [Commits](RazrFalcon/roxmltree@v0.21.1...v0.21.2) Updates `crc32fast` from 1.5.2 to 1.5.4 - [Commits](srijs/rust-crc32fast@v1.5.2...v1.5.4) Updates `zstd-safe` from 8.1.0 to 8.2.0 - [Release notes](https://github.com/gyscos/zstd-rs/releases) - [Commits](gyscos/zstd-rs@zstd-safe-8.1.0...zstd-safe-8.2.0) Updates `brotli` from 9.0.0 to 9.1.1 - [Release notes](https://github.com/dropbox/rust-brotli/releases) - [Commits](dropbox/rust-brotli@9.0.0...9.1.1) Updates `toml_edit` from 0.25.13+spec-1.1.0 to 0.25.19+spec-1.1.0 - [Commits](toml-rs/toml@v0.25.13...v0.25.19) --- updated-dependencies: - dependency-name: brotli dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: crc32fast dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: libc dependency-version: 0.2.191 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: napi dependency-version: 3.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: napi-derive dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: roxmltree dependency-version: 0.21.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: rustix dependency-version: 1.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: spdx dependency-version: 0.13.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: toml_edit dependency-version: 0.25.17+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: unicode-normalization dependency-version: 0.1.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: ureq dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zstd-safe dependency-version: 8.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from DecisionNerd as a code owner November 6, 2026 05:32

github-actions Bot added the core Core source code changes label Nov 6, 2026

dependabot Bot force-pushed the dependabot/cargo/cargo-minor-patch-9286a2732a branch 3 times, most recently from efa100d to 64f3fe2 Compare November 9, 2026 14:18

dependabot Bot force-pushed the dependabot/cargo/cargo-minor-patch-9286a2732a branch from 64f3fe2 to 253d50e Compare November 11, 2026 02:58

Navigation Menu

Repository navigation

chore(deps): bump the cargo-minor-patch group across 1 directory with 15 updates - #2298

chore(deps): bump the cargo-minor-patch group across 1 directory with 15 updates#2298
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-9286a2732a

dependabot Bot commented on behalf of github Nov 6, 2026 •

edited by blacksmith-sh Bot

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 6, 2026

Uh oh!

coderabbitai Bot commented Nov 6, 2026 •

edited

Loading

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 6, 2026 • edited by blacksmith-sh Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.5.1

3.5.0

3.4.3

v1.29.1

What's Changed

v1.29.0

What's Changed

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

Tokio v1.54.0

1.54.0 (October 19th, 2026)

Added

Changed

napi-v3.16.1

Fixed

napi-v3.16.0

Added

Fixed

napi-v3.15.0

Added

Fixed

Other

napi-derive-v3.7.0

Added

Fixed

napi-derive-v3.6.13

Other

0.2.191

Support

Added

Fixed

Changed

0.2.191 - 2026-10-16

Support

Added

Fixed

Changed

0.13.6

Fixed

Changed

0.13.5

Fixed

[0.13.6] - 2026-10-02

Fixed

Changed

[0.13.5] - 2026-08-06

Fixed

[0.21.2] - 2026-10-24

Fixed

Uh oh!

dependabot Bot commented on behalf of github Nov 6, 2026

Labels

Uh oh!

coderabbitai Bot commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 6, 2026 •

edited by blacksmith-sh Bot

Loading

coderabbitai Bot commented Nov 6, 2026 •

edited

Loading