build(deps): bump the rust-dependencies group with 17 updates by dependabot[bot] · Pull Request #62 · rust-proxy/wind

dependabot · 2026-11-01T21:10:45Z

Bumps the rust-dependencies group with 17 updates:

Package	From	To
quinn	`55f74c0`	`01b8848`
quinn-proto	`55f74c0`	`01b8848`
tokio	`1.53.1`	`1.54.1`
tokio-util	`0.7.19`	`0.7.20`
uuid	`1.26.1`	`1.29.0`
pest	`2.9.2`	`2.9.5`
pest_derive	`2.9.2`	`2.9.5`
rustls	`0.23.45`	`0.23.46`
serde_json	`1.0.151`	`1.0.154`
libc	`0.2.189`	`0.2.191`
memmap2	`0.9.11`	`0.9.12`
ureq	`3.4.2`	`3.5.0`
aws-lc-rs	`1.18.1`	`1.19.0`
boring	`5.2.0`	`5.3.0`
boring-sys	`5.2.0`	`5.4.0`
arc-swap	`1.9.2`	`1.9.3`
crossfire	`3.1.20`	`3.1.22`

Updates quinn from 55f74c0 to 01b8848

Commits

01b8848 removed previous BBR implementation
677bed9 added BBRv3 algorithm, including MaxFilter from Kathleen Nichols
4825c4c modified Pacer such that congestion controller metrics can be used to adjust ...
c5acf08 added more granular packet events for congestion controllers, necessary for s...
ecc0dcf proto: account for application close error code width
ac1eec7 Take semver-compatible dependency updates
9d729c1 build(deps): bump arbitrary from 1.4.2 to 1.5.0
0c4b54a build(deps): bump tokio from 1.53.1 to 1.53.2
089fd85 build(deps): bump libc from 0.2.189 to 0.2.190
f233510 proto: honor disabled idle timeout when accepting connections
Additional commits viewable in compare view

Updates quinn-proto from 55f74c0 to 01b8848

Commits

01b8848 removed previous BBR implementation
677bed9 added BBRv3 algorithm, including MaxFilter from Kathleen Nichols
4825c4c modified Pacer such that congestion controller metrics can be used to adjust ...
c5acf08 added more granular packet events for congestion controllers, necessary for s...
ecc0dcf proto: account for application close error code width
ac1eec7 Take semver-compatible dependency updates
9d729c1 build(deps): bump arbitrary from 1.4.2 to 1.5.0
0c4b54a build(deps): bump tokio from 1.53.1 to 1.53.2
089fd85 build(deps): bump libc from 0.2.189 to 0.2.190
f233510 proto: honor disabled idle timeout when accepting connections
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)

net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)

runtime: add Builder::max_io_events_per_busy_tick (#8410)

runtime: stabilize tokio::runtime::worker_index() (#8431)

sync: add SemaphorePermit::semaphore() (#8482)

sync: add blocking_acquire methods to Semaphore (#8269)

sync: add watch::Receiver::is_closed (#8481)

wasm: support JSPI for Emscripten target (#8285, #8627)

wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

fs: reject zero in File::set_max_buf_size (#8449)

io: make copy_buf cooperative (#8459)

io: panic when BufReader or BufStream is created with zero capacity (#8494)

io: panic when in-memory pipe is created with zero capacity (#8397)

io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)

io: support vectored writes in Sink (#8663)

net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)

net: start accepted sockets as readable and writable (#8435)

net: support UCred on Fuchsia (#8257)

process: use mio::unix::pipe for Unix child stdio (#8603)

runtime: cache-pad the shared injection queue and idle state (#8622)

runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)

runtime: make enable_io available whenever rt is enabled (#8387)

runtime: move block_in_place setup into a non-generic function (#8315)

runtime: move the multi-thread inject queue to its own mutex (#8382)

runtime: panic when max_io_events_per_tick is zero (#8476)

runtime: suggest .await in nested block_on panic message (#8501)

sync: avoid atomic reader count in broadcast slots (#8357)

sync: use acquire/release orderings in Notify (#8325)

time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

b53b200 chore: prepare Tokio v1.54.1 (#8693)
5ed619b time: revert "remove the runtime handle from timers" (#8692)
66d34e4 chore: prepare Tokio v1.54.0 (#8667)
0d322ce io: support vectored writes in sink (#8663)
4167c56 codec: expose I/O sources from codec errors (#8665)
cdd9dae fs: propagate iouring stress test failures (#8644)
52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
4890d02 stream: implement FusedStream for JoinSetStream (#8629)
a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

5ec9e6b chore: prepare tokio-util v0.7.20 (#8608)
afd1b26 docs: fix stray braces and broken links in rustdoc (#8605)
3eb95a4 wasm: use sleep on emscripten without JSPI (#8528)
b22c802 wasm: link emscripten_promise_await for Emscripten 4.x compatibility (#8528)
16b1f9d ci: pin libc to 0.2.189 on FreeBSD (#8594)
b263675 time: clean up stale Err(Invalid) doc and typo (#8590)
5d5cd8b Merge 'tokio-1.53.2' into 'master' (#8578)
ff0c406 chore: prepare Tokio v1.53.2 (#8580)
a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
ec31a9f chore: prepare Tokio v1.51.5 (#8579)
Additional commits viewable in compare view

Updates uuid from 1.26.1 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Add versioned constructors to NonNilUuid by @RanaPriyansh in uuid-rs/uuid#919

Prepare for 1.29.0 release by @KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

v1.28.0

What's Changed

Add optional serde format adapters by @RanaPriyansh in uuid-rs/uuid#916

Prepare for 1.28.0 release by @KodrAus in uuid-rs/uuid#918

New Contributors

@RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

Accept case-insensitive urn:uuid: prefixes when parsing by @jaideeppyne in uuid-rs/uuid#912

Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @KodrAus in uuid-rs/uuid#915

Prepare for 1.27.0 release by @KodrAus in uuid-rs/uuid#917

New Contributors

@jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits

4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
a3631fd prepare for 1.29.0 release
304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
d49f963 Reuse existing version tests for NonNilUuid constructors
2f02404 Add versioned constructors to NonNilUuid
276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
4b3b9f5 prepare for 1.28.0 release
cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
784a022 Inline expected tokens in optional compact serde test
a5678c3 Simplify optional serde adapter tests to option tokens
Additional commits viewable in compare view

Updates pest from 2.9.2 to 2.9.5

Release notes

Sourced from pest's releases.

v2.9.5

What's Changed

make stacker-based checks opt-in on non-native targets by @tomtau in pest-parser/pest#1234

Full Changelog: pest-parser/pest@v2.9.4...v2.9.5

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.9", features = ["grammar-extras"] }
pest 2.9.3 and 2.9.4 required a stacker dependency which relies on a C compiler toolchain; this was made optional for non-native targets and can be opt-in enabled with the feature flag in those targets (see native stack guard notes in README):
...
pest = { version = "2.9.5", features = ["stack-guard"] }
v2.9.4

What's Changed

add Cargo.lock for reproducible builds (fixes #1161) by @tomtau in pest-parser/pest#1230

validator: reject repetitions that loop because of the stack by @yuxi-liu-wired in pest-parser/pest#1227

Fix typos in three-string fast path of skip_until by @shivampwm2020 in pest-parser/pest#1231

New Contributors

@yuxi-liu-wired made their first contribution in pest-parser/pest#1227

@shivampwm2020 made their first contribution in pest-parser/pest#1231

Full Changelog: pest-parser/pest@v2.9.3...v2.9.4

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.9", features = ["grammar-extras"] }
v2.9.3

What's Changed

bump syn to 3 by @tomtau in pest-parser/pest#1210

Detect left recursion behind a prefix that can match empty (fixes #411) by @breken-ai in pest-parser/pest#1211

Limit parse depth by @tomtau in pest-parser/pest#1212

Remove reqwest dependency from pest_debugger by @tomtau with @Copilot in pest-parser/pest#1209

... (truncated)

Commits

c474eec make stacker-based checks opt-in on non-native targets (#1234) (fixes #1233)
66a059c Fix typos in the three-string fast path of skip_until (#1231)
b4882ad validator: reject repetitions that loop because of the stack (#1227) (fixes 1...
7e779b7 add Cargo.lock for reproducible builds (fixes #1161) (#1230)
4248cbd bump version to 2.9.3 (#1228)
429e893 Limit parse depth (#1212)
3cdface Detect left recursion behind a prefix that can match empty (fixes #411) (#1211)
9124917 Add AI contribution and usage policy (#1221)
9abf9e5 bump syn to 3 (#1210)
acf7fd9 Remove reqwest dependency from pest_debugger (#1209)
Additional commits viewable in compare view

Updates pest_derive from 2.9.2 to 2.9.5

Release notes

Sourced from pest_derive's releases.

v2.9.5

What's Changed

make stacker-based checks opt-in on non-native targets by @tomtau in pest-parser/pest#1234

Full Changelog: pest-parser/pest@v2.9.4...v2.9.5

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.9", features = ["grammar-extras"] }
pest 2.9.3 and 2.9.4 required a stacker dependency which relies on a C compiler toolchain; this was made optional for non-native targets and can be opt-in enabled with the feature flag in those targets (see native stack guard notes in README):
...
pest = { version = "2.9.5", features = ["stack-guard"] }
v2.9.4

What's Changed

add Cargo.lock for reproducible builds (fixes #1161) by @tomtau in pest-parser/pest#1230

validator: reject repetitions that loop because of the stack by @yuxi-liu-wired in pest-parser/pest#1227

Fix typos in three-string fast path of skip_until by @shivampwm2020 in pest-parser/pest#1231

New Contributors

@yuxi-liu-wired made their first contribution in pest-parser/pest#1227

@shivampwm2020 made their first contribution in pest-parser/pest#1231

Full Changelog: pest-parser/pest@v2.9.3...v2.9.4

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.9", features = ["grammar-extras"] }
v2.9.3

What's Changed

bump syn to 3 by @tomtau in pest-parser/pest#1210

Detect left recursion behind a prefix that can match empty (fixes #411) by @breken-ai in pest-parser/pest#1211

Limit parse depth by @tomtau in pest-parser/pest#1212

Remove reqwest dependency from pest_debugger by @tomtau with @Copilot in pest-parser/pest#1209

... (truncated)

Commits

c474eec make stacker-based checks opt-in on non-native targets (#1234) (fixes #1233)
66a059c Fix typos in the three-string fast path of skip_until (#1231)
b4882ad validator: reject repetitions that loop because of the stack (#1227) (fixes 1...
7e779b7 add Cargo.lock for reproducible builds (fixes #1161) (#1230)
4248cbd bump version to 2.9.3 (#1228)
429e893 Limit parse depth (#1212)
3cdface Detect left recursion behind a prefix that can match empty (fixes #411) (#1211)
9124917 Add AI contribution and usage policy (#1221)
9abf9e5 bump syn to 3 (#1210)
acf7fd9 Remove reqwest dependency from pest_debugger (#1209)
Additional commits viewable in compare view

Updates rustls from 0.23.45 to 0.23.46

Commits

f04804f Delay saving KX hint until handshake confirmation
049d39b Bump version to 0.23.46
6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
795eea7 Advance the HPKE sequence only after seal succeeds
d67cb71 stream: provide backpressure while buffering received plaintext
7a69ade util: fuse flushes from connections with errors
493d089 conn: fuse writes for connections with errors
db00e01 util: keep flushing after short writes
Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable"

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
</tr></table> 

... (truncated)

Commits

ccc2ff4 libc: Release 0.2.191
bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
9c7f568 apple: add ifaliasreq and in6_aliasreq
018c7e9 wasi: Add pthread_condattr_{get,set}clock
2c77185 openbsd: add sensordev structure
e10813c hurd: Add missing POSIX_SPAWN_* flags
2ea4bc1 Fix FreeBSD/aarch64
6d666fd dragonfly: Parse version from headers rather than CLI
Additional commits viewable in compare view

Updates memmap2 from 0.9.11 to 0.9.12

Changelog

Sourced from memmap2's changelog.

[0.9.12] - 2026-10-21

Added

Add MmapOptions::map_if_safe() to allow creation read-only mappings of a file from safe code if the kernel can guarantee the file is immutable and large enough. @alexlarsson

Add MmapOptions::no_probe_handle() to disable probing of file handles on Windows to improve performance, at the cost of no longer being able to remap later with more capabilities. @mat-gas

Add support for OpenHarmony targets (*-unknown-linux-ohos). @hiyms

Changed

Cache allocation granularity on Windows to prevent repeated syscalls. @mat-gas

Commits

4692b05 Merge pull request #180 from RazrFalcon/release/v0.9.12
9e5c0ee Bump version to 0.9.12.
b98035d Merge pull request #177 from JaskRendix/extract-test-suite
0986677 Merge branch 'master' into extract-test-suite
d26cc84 Fix map_if_safe() stub.
145ee36 Silence clippy warning about trivial identical match arms.
b402ef2 Fix check_safe_to_map() on Apple targets.
b544238 Fix formatting.
f50e480 Move tests to test/ folder.
0994bf7 Merge pull request #176 from hiyms/feat/support-ohos
Additional commits viewable in compare view

Updates ureq from 3.4.2 to 3.5.0

Changelog

Sourced from ureq's changelog.

3.5.0

Prepare 3.5.0 and fix dependency advisories and warnings - #1217

Add Agent::shutdown() to interrupt requests in flight and close all connections #1211

Preserve validated request header casing with RequestBuilder::header_raw #1214

Decode proxy URL credentials once; literal percent signs must be escaped as %25 #1215

Encode ProxyBuilder credentials and preserve colons in proxy passwords #1215

Apply remaining timeout budgets to SOCKS setup and drop the socks dependency #1209

Check NO_PROXY before resolving a SOCKS proxy, so excluded hosts connect directly #1209

Clarify timeout budgets, phase boundaries, and proxy DNS #1213

Bound TLS handshake I/O by the remaining connect/global timeout #1208

Retry socket reads interrupted by EINTR when timeout (technically breaking) #1205

Fix native-tls-no-default enabling dependencies without enabling the TLS connector

Add timeout_per_read and timeout_per_write independently of total phase budgets

3.4.3

Update TLS dependencies for security fixes #1218

Commits

1bd534e Fix changelog
fee0ad2 Prepare 3.5.0 and fix dependency advisories and warnings
7de0ab7 Remove realtime dependencies from tests
3f18f90 Add Agent::shutdown() for active and pooled connections
04572f2 Expose validated request header casing
6b1c275 Fix proxy credential encoding and decoding
6a609b4 Apply the connect timeout to the SOCKS handshake and check NO_PROXY first
3c818f4 Clarify timeout budgets and phase boundaries
af3e959 Bound TLS handshake I/O by remaining timeout budgets
0ebb046 Retry socket reads interrupted by a signal when a timeout applies (#1205)
Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.1 to 1.19.0

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.19.0

What's Changed

Add AES OFB, CFB8, and CFB1 modes by @lokeswarivejju in aws/aws-lc-rs#1259

Adds OperatingMode::OFB, OperatingMode::CFB8, and OperatingMode::CFB1 for AES-128, AES-192, and AES-256 through both the one-shot and streaming cipher APIs.

Add an on-demand AWS-LC self-test API by @Elvrarin in aws/aws-lc-rs#1262

Adds aws_lc_rs::try_fips_self_test(), allowing applications to re-run all AWS-LC cryptographic algorithm self-tests without calling the sys crate through unsafe FFI. This does not re-run the module integrity test.

Add Keccak-256 digest support behind "unstable" feature flag by @fabrice102 in aws/aws-lc-rs#1266

Adds aws_lc_rs::unstable::digest::KECCAK256 and KECCAK256_OUTPUT_LEN behind the unstable feature for use with the existing digest::digest and digest::Context APIs.

Add configurable RSA-PSS salt lengths by @PaulDance in aws/aws-lc-rs#1267

Adds RsaPssSaltLength::{Digest, Max, Custom} and with_pss_salt_length builders on RsaSignatureEncoding and RsaParameters, covering signing and verification for both message and precomputed-digest APIs.

Implement Clone for signing key pairs by @JakeHuneau in aws/aws-lc-rs#1277

rsa::KeyPair, EcdsaKeyPair, Ed25519KeyPair, and PqdsaKeyPair can now be cloned directly rather than wrapped in an Arc.

Clones share the immutable, reference-counted EVP_PKEY; key material is not duplicated, and a clone remains usable after the original is dropped.

Upstream AWS-LC

aws-lc-sys v0.47.0 aligns with AWS-LC v5.12.0 (previously v5.11.0).

aws-lc-fips-sys v0.14.4 updates its bundled AWS-LC FIPS 4.2.0 snapshot with recent FIPS 4.x backports.

Build Improvements

Lower the minimum system-installed AWS-LC version to 4.2.0 by @justsmth in aws/aws-lc-rs#1268

The default aws-lc-sys system-library path now accepts AWS-LC 4.2.0 or newer, previously 5.7.0, allowing use of a FIPS 4.x system library.

Enabling the unstable feature requires AWS-LC 5.7.0 or newer because unstable APIs currently include Keccak-256. Bundled-source builds are unaffected.

Share cc compiler detection across builds by @johncarmack1984 in aws/aws-lc-rs#1273

Reuses compiler detection results across the main library build and compiler feature probes, reducing repeated compiler invocations during cold builds.

Issues Being Closed

Implement Clone for rsa::KeyPair -- aws/aws-lc-rs#1260

Expose AWS-LC FIPS on-demand self-test -- aws/aws-lc-rs#1261

Add a way to specify the RSA-PSS salt length -- aws/aws-lc-rs#1263

Other Merged PRs

build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in aws/aws-lc-rs#1264

build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by

Bumps the rust-dependencies group with 17 updates: | Package | From | To | | --- | --- | --- | | [quinn](https://github.com/Tipuch/quinn) | ``55f74c0`` | ``01b8848`` | | [quinn-proto](https://github.com/Tipuch/quinn) | ``55f74c0`` | ``01b8848`` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` | | [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.29.0` | | [pest](https://github.com/pest-parser/pest) | `2.9.2` | `2.9.5` | | [pest_derive](https://github.com/pest-parser/pest) | `2.9.2` | `2.9.5` | | [rustls](https://github.com/rustls/rustls) | `0.23.45` | `0.23.46` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.191` | | [memmap2](https://github.com/RazrFalcon/memmap2-rs) | `0.9.11` | `0.9.12` | | [ureq](https://github.com/algesten/ureq) | `3.4.2` | `3.5.0` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.1` | `1.19.0` | | [boring](https://github.com/cloudflare/boring) | `5.2.0` | `5.3.0` | | [boring-sys](https://github.com/cloudflare/boring) | `5.2.0` | `5.4.0` | | [arc-swap](https://github.com/vorner/arc-swap) | `1.9.2` | `1.9.3` | | [crossfire](https://github.com/frostyplanet/crossfire-rs) | `3.1.20` | `3.1.22` | Updates `quinn` from `55f74c0` to `01b8848` - [Commits](Tipuch/quinn@55f74c0...01b8848) Updates `quinn-proto` from `55f74c0` to `01b8848` - [Commits](Tipuch/quinn@55f74c0...01b8848) Updates `tokio` from 1.53.1 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1) Updates `tokio-util` from 0.7.19 to 0.7.20 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20) Updates `uuid` from 1.26.1 to 1.29.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.26.1...v1.29.0) Updates `pest` from 2.9.2 to 2.9.5 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.9.2...v2.9.5) Updates `pest_derive` from 2.9.2 to 2.9.5 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.9.2...v2.9.5) Updates `rustls` from 0.23.45 to 0.23.46 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.45...v/0.23.46) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `libc` from 0.2.189 to 0.2.191 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.191) Updates `memmap2` from 0.9.11 to 0.9.12 - [Changelog](https://github.com/RazrFalcon/memmap2-rs/blob/master/CHANGELOG.md) - [Commits](RazrFalcon/memmap2-rs@v0.9.11...v0.9.12) Updates `ureq` from 3.4.2 to 3.5.0 - [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md) - [Commits](algesten/ureq@3.4.2...3.5.0) Updates `aws-lc-rs` from 1.18.1 to 1.19.0 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.18.1...v1.19.0) Updates `boring` from 5.2.0 to 5.3.0 - [Release notes](https://github.com/cloudflare/boring/releases) - [Changelog](https://github.com/cloudflare/boring/blob/master/RELEASE_NOTES) - [Commits](cloudflare/boring@v5.2.0...v5.3.0) Updates `boring-sys` from 5.2.0 to 5.4.0 - [Release notes](https://github.com/cloudflare/boring/releases) - [Changelog](https://github.com/cloudflare/boring/blob/master/RELEASE_NOTES) - [Commits](cloudflare/boring@v5.2.0...v5.4.0) Updates `arc-swap` from 1.9.2 to 1.9.3 - [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md) - [Commits](https://github.com/vorner/arc-swap/commits/v1.9.3) Updates `crossfire` from 3.1.20 to 3.1.22 - [Release notes](https://github.com/frostyplanet/crossfire-rs/releases) - [Changelog](https://github.com/frostyplanet/crossfire-rs/blob/master/CHANGELOG.md) - [Commits](frostyplanet/crossfire-rs@v3.1.20...v3.1.22) --- updated-dependencies: - dependency-name: quinn dependency-version: 01b8848dcb321eb17ad4d88dd6f84f28f45a0d6a dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: quinn-proto dependency-version: 01b8848dcb321eb17ad4d88dd6f84f28f45a0d6a dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: tokio-util dependency-version: 0.7.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: uuid dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: pest dependency-version: 2.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: pest_derive dependency-version: 2.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rustls dependency-version: 0.23.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: libc dependency-version: 0.2.191 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: memmap2 dependency-version: 0.9.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: ureq dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: aws-lc-rs dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: boring dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: boring-sys dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: arc-swap dependency-version: 1.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: crossfire dependency-version: 3.1.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

codspeed · 2026-11-01T21:19:12Z

Merging this PR will not alter performance

✅ 22 untouched benchmarks

_{Comparing dependabot/cargo/rust-dependencies-7f8bed4adc (bae6959) with main (0d55c95)}

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 1, 2026

Navigation Menu

Repository navigation

build(deps): bump the rust-dependencies group with 17 updates - #62

build(deps): bump the rust-dependencies group with 17 updates#62
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-7f8bed4adc

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

codspeed Bot commented Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

Tokio v1.54.0

1.54.0 (October 19th, 2026)

Added

Changed

v1.29.0

What's Changed

v1.28.0

What's Changed

New Contributors

v1.27.0

What's Changed

New Contributors

v2.9.5

What's Changed

Warning: Semantic Versioning

v2.9.4

What's Changed

New Contributors

Warning: Semantic Versioning

v2.9.3

What's Changed

v2.9.5

What's Changed

Warning: Semantic Versioning

v2.9.4

What's Changed

New Contributors

Warning: Semantic Versioning

v2.9.3

What's Changed

v1.0.154

v1.0.153

v1.0.152

0.2.191

Support

Added

Fixed

Changed

0.2.190

0.2.191 - 2026-10-16

Support

Added

Fixed

Changed

0.2.190 - 2026-10-02

[0.9.12] - 2026-10-21

Added

Changed

3.5.0

3.4.3

aws-lc-rs v1.19.0

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

Uh oh!

codspeed Bot commented Nov 1, 2026

Merging this PR will not alter performance

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants