From 23f6a4161fddb003a461dfa5264bd060317c477d Mon Sep 17 00:00:00 2001
From: Linwei Shang <linwei.shang@dfinity.org>
Date: Fri, 25 Sep 2026 22:40:37 +0800
Subject: [PATCH] chore: Release candid 0.10.37

Patch release of `candid` / `candid_derive`, 0.10.36 -> 0.10.37. No source
changes; it dates the two decoder fixes already on `master`.

Bumps both crates and the `=` pin between them, dates the `Unreleased`
changelog entries as `2026-09-25` / `Candid 0.10.37`, and refreshes the
lockfiles.

All four lockfiles move together this time, including
`rust/candid/fuzz/Cargo.lock`, which the previous release left at 0.10.34
and flagged as a checklist item.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md                  | 4 ++--
 Cargo.lock                    | 8 ++++----
 rust/bench/Cargo.lock         | 4 ++--
 rust/candid/Cargo.toml        | 4 ++--
 rust/candid/fuzz/Cargo.lock   | 4 ++--
 rust/candid_derive/Cargo.toml | 2 +-
 tools/ui/Cargo.lock           | 4 ++--
 7 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8a87bad2..5ad89c43 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,8 +1,8 @@
 # Changelog
 
-## Unreleased
+## 2026-09-25
 
-### Candid
+### Candid 0.10.37
 
 * Bug fixes:
   + Bound the byte length of the type-table header, 64 KiB by default and configurable with `DecoderConfig::set_max_header_len`. Headers over the bound, far above any realistic interface, are now rejected; the value section is unaffected, and `set_max_type_len` still separately bounds the number of type-table entries.
diff --git a/Cargo.lock b/Cargo.lock
index 14e0b7c9..754e1127 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -244,13 +244,13 @@ dependencies = [
 
 [[package]]
 name = "candid"
-version = "0.10.36"
+version = "0.10.37"
 dependencies = [
  "anyhow",
  "bincode",
  "binrw",
  "byteorder",
- "candid_derive 0.10.36",
+ "candid_derive 0.10.37",
  "candid_parser 0.4.1",
  "hex",
  "ic_principal 0.1.5",
@@ -282,7 +282,7 @@ dependencies = [
 
 [[package]]
 name = "candid_derive"
-version = "0.10.36"
+version = "0.10.37"
 dependencies = [
  "lazy_static",
  "proc-macro2 1.0.86",
@@ -315,7 +315,7 @@ version = "0.4.1"
 dependencies = [
  "anyhow",
  "arbitrary",
- "candid 0.10.36",
+ "candid 0.10.37",
  "codespan-reporting",
  "console",
  "convert_case",
diff --git a/rust/bench/Cargo.lock b/rust/bench/Cargo.lock
index 88f7977b..d1027ca0 100644
--- a/rust/bench/Cargo.lock
+++ b/rust/bench/Cargo.lock
@@ -168,7 +168,7 @@ dependencies = [
 
 [[package]]
 name = "candid"
-version = "0.10.36"
+version = "0.10.37"
 dependencies = [
  "anyhow",
  "binrw",
@@ -189,7 +189,7 @@ dependencies = [
 
 [[package]]
 name = "candid_derive"
-version = "0.10.36"
+version = "0.10.37"
 dependencies = [
  "lazy_static",
  "proc-macro2",
diff --git a/rust/candid/Cargo.toml b/rust/candid/Cargo.toml
index 9d4766fe..372c5c6a 100644
--- a/rust/candid/Cargo.toml
+++ b/rust/candid/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "candid"
 # sync with the version in `candid_derive/Cargo.toml`
-version = "0.10.36"
+version = "0.10.37"
 edition = "2021"
 rust-version.workspace = true
 authors = ["DFINITY Team"]
@@ -16,7 +16,7 @@ keywords = ["internet-computer", "idl", "candid", "dfinity"]
 include = ["src", "Cargo.toml", "LICENSE", "README.md"]
 
 [dependencies]
-candid_derive = { path = "../candid_derive", version = "=0.10.36" }
+candid_derive = { path = "../candid_derive", version = "=0.10.37" }
 ic_principal = { path = "../ic_principal", version = "0.1.0" }
 # `verbose-backtrace` (a default feature) pulls in `owo-colors` and generates
 # backtrace frames that `get_binread_labels` discards, so keep it off.
diff --git a/rust/candid/fuzz/Cargo.lock b/rust/candid/fuzz/Cargo.lock
index d11e6190..4f8ff7ee 100644
--- a/rust/candid/fuzz/Cargo.lock
+++ b/rust/candid/fuzz/Cargo.lock
@@ -78,7 +78,7 @@ checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
 
 [[package]]
 name = "candid"
-version = "0.10.34"
+version = "0.10.37"
 dependencies = [
  "anyhow",
  "binrw",
@@ -109,7 +109,7 @@ dependencies = [
 
 [[package]]
 name = "candid_derive"
-version = "0.10.34"
+version = "0.10.37"
 dependencies = [
  "lazy_static",
  "proc-macro2",
diff --git a/rust/candid_derive/Cargo.toml b/rust/candid_derive/Cargo.toml
index 3c2f4e78..e5b4df3e 100644
--- a/rust/candid_derive/Cargo.toml
+++ b/rust/candid_derive/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "candid_derive"
 # sync with the version in `candid/Cargo.toml`
-version = "0.10.36"
+version = "0.10.37"
 edition = "2021"
 rust-version.workspace = true
 authors = ["DFINITY Team"]
diff --git a/tools/ui/Cargo.lock b/tools/ui/Cargo.lock
index e0491605..3538ee2d 100644
--- a/tools/ui/Cargo.lock
+++ b/tools/ui/Cargo.lock
@@ -144,7 +144,7 @@ checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3"
 
 [[package]]
 name = "candid"
-version = "0.10.36"
+version = "0.10.37"
 dependencies = [
  "anyhow",
  "binrw",
@@ -165,7 +165,7 @@ dependencies = [
 
 [[package]]
 name = "candid_derive"
-version = "0.10.36"
+version = "0.10.37"
 dependencies = [
  "lazy_static",
  "proc-macro2",