chore(deps): bump the dependencies group across 1 directory with 24 updates by dependabot[bot] · Pull Request #41 · ararog/sofie

dependabot · 2026-04-29T17:44:30Z

Bumps the dependencies group with 21 updates in the / directory:

Package	From	To
clap	`4.6.0`	`4.6.1`
tokio	`1.51.1`	`1.52.1`
aws-lc-rs	`1.16.2`	`1.16.3`
bitflags	`2.11.0`	`2.11.1`
cc	`1.2.59`	`1.2.61`
data-encoding	`2.10.0`	`2.11.0`
idna_adapter	`1.2.1`	`1.2.2`
indexmap	`2.13.1`	`2.14.0`
jiff	`0.2.23`	`0.2.24`
libc	`0.2.184`	`0.2.186`
libmimalloc-sys	`0.1.44`	`0.1.47`
mimalloc	`0.1.48`	`0.1.50`
portable-atomic-util	`0.2.6`	`0.2.7`
rustls	`0.23.37`	`0.23.40`
rustls-pki-types	`1.14.0`	`1.14.1`
rustls-webpki	`0.103.10`	`0.103.13`
typenum	`1.19.0`	`1.20.0`
uuid	`1.23.0`	`1.23.1`
wasip2	`1.0.2+wasi-0.2.9`	`1.0.3+wasi-0.2.9`
webpki-roots	`1.0.6`	`1.0.7`
winnow	`1.0.1`	`1.0.2`

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Commits

1420275 chore: Release
d2c817d docs: Update changelog
f88c94e Merge pull request #6341 from epage/sep
acbb822 fix(complete): Reduce risk of conflict with actual subcommands
a49fadb refactor(complete): Pull out subcommand separator
ddc008b Merge pull request #6332 from epage/update
497dc50 chore: Update compatible dependencies
dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
54bdaa3 chore(deps): Update j178/prek-action action to v2
f0d30d9 chore: Release
Additional commits viewable in compare view

Updates tokio from 1.51.1 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)

net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)

taskdump: add trace_with() for customized task dumps (#8025)

taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)

fs: support io_uring in AsyncRead for File (#7907)

Changed

runtime: improve spawn_blocking scalability with sharded queue (#7757)

runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

docs: fix typo in oneshot::Sender::send docs (#8026)

docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)

net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits

905c146 chore: prepare to release v1.52.1 (#8059)
56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
5f7be0a chore: perpare 1.52.0 (#8045)
36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
f943312 fs: support io-uring in AsyncRead for File (#7907)
Additional commits viewable in compare view

Updates aws-lc-rs from 1.16.2 to 1.16.3

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.16.3

What's Changed

Key length validation in UnboundCipherKey::new() now enforced at runtime by @justsmth in aws/aws-lc-rs#1092

The documented error on key length mismatch was never actually checked. Streaming cipher constructors also relied on debug_assert_eq! which gets stripped in release builds — these are now runtime checks.

Support MSAN and TSAN sanitizer builds via AWS_LC_SYS_SANITIZER environment variable by @justsmth in aws/aws-lc-rs#1100

Accepts asan, msan, or tsan. The existing asan feature flag continues to work.

Build Improvements

Follow symlinks when classifying include directory entries by @cmtm in aws/aws-lc-rs#1071

Fixes builds under Bazel (and other build systems) where source files in CARGO_MANIFEST_DIR are symlinks into a content-addressable store.

Improve clang-cl discovery for Windows ARM64 builds by @justsmth in aws/aws-lc-rs#1060

The build script now discovers clang-cl inside Visual Studio installations rather than requiring it on PATH.

Fix Windows ARM64 FIPS build: pass correct architecture to vcvarsall.bat by @justsmth in aws/aws-lc-rs#1075

Strip LTO flags from CFLAGS for FIPS builds by @skmcgrail in aws/aws-lc-rs#1087

Build environments like RPM mock chroots (e.g. AL2023) that export -flto=auto in CFLAGS would break the FIPS delocator pipeline.

MSVC: Fix builtin swap intrinsic check to avoid link-time failures by @walter-zeromatter in aws/aws-lc-rs#1086

MSVC: Add jitterentropy src subdirectory to include search path by @walter-zeromatter in aws/aws-lc-rs#1085

MSVC: Use 8.3 short paths on Windows to avoid MAX_PATH limits by @walter-zeromatter in aws/aws-lc-rs#1081

Issues Being Closed

Clarify that build needs to run from VS Developer shell for Windows builds -- aws/aws-lc-rs#1056

Add MSAN (MemorySanitizer) support, matching existing ASAN support -- aws/aws-lc-rs#1077

aws-lc-sys fails to compile on iOS arm64 with Clang 15.0.7: undeclared ioctl in urandom.c -- aws/aws-lc-rs#1068

Other Merged PRs

Prepare aws-lc-sys v0.39.1 by @justsmth in aws/aws-lc-rs#1080

Bump aws-lc-fips-sys to v0.13.14 by @skmcgrail in aws/aws-lc-rs#1088

CI: Harden artifact workflows and update action versions by @justsmth in aws/aws-lc-rs#1091

Bump actions/checkout from 4 to 6 by @dependabot[bot] in aws/aws-lc-rs#1096

Bump actions/setup-go from 4 to 6 by @dependabot[bot] in aws/aws-lc-rs#1095

Bump codecov/codecov-action from 4 to 6 by @dependabot[bot] in aws/aws-lc-rs#1094

Prepare aws-lc-rs v1.16.3 by @justsmth in aws/aws-lc-rs#1098

Prepare aws-lc-sys v0.40.0 by @justsmth in aws/aws-lc-rs#1099

New Contributors

@cmtm made their first contribution in aws/aws-lc-rs#1071

@walter-zeromatter made their first contribution in aws/aws-lc-rs#1086

Full Changelog: aws/aws-lc-rs@v1.16.2...v1.16.3

Commits

f75bae5 Support MSAN and TSAN sanitizer builds via environment variable (#1100)
64677e8 Improve clang-cl discovery for Windows ARM64 builds (#1060)
e2e3e15 Prepare aws-lc-sys v0.40.0 (#1099)
e0ec100 Prepare aws-lc-rs v1.16.3 (#1098)
46ed951 MSVC Fix: use 8.3 short paths on Windows to avoid MAX_PATH limits in building...
27c4cca Add jitterentropy src subdirectory to include search path (#1085)
6b30158 MSVC Fix: Improve bad intrinsic check on msvc (#1086)
5a3f9ca Bump codecov/codecov-action from 4 to 6 (#1094)
6a7b379 Bump actions/setup-go from 4 to 6 (#1095)
f7cb890 Bump actions/checkout from 4 to 6 (#1096)
Additional commits viewable in compare view

Updates aws-lc-sys from 0.39.1 to 0.40.0

Commits

f75bae5 Support MSAN and TSAN sanitizer builds via environment variable (#1100)
64677e8 Improve clang-cl discovery for Windows ARM64 builds (#1060)
e2e3e15 Prepare aws-lc-sys v0.40.0 (#1099)
e0ec100 Prepare aws-lc-rs v1.16.3 (#1098)
46ed951 MSVC Fix: use 8.3 short paths on Windows to avoid MAX_PATH limits in building...
27c4cca Add jitterentropy src subdirectory to include search path (#1085)
6b30158 MSVC Fix: Improve bad intrinsic check on msvc (#1086)
5a3f9ca Bump codecov/codecov-action from 4 to 6 (#1094)
6a7b379 Bump actions/setup-go from 4 to 6 (#1095)
f7cb890 Bump actions/checkout from 4 to 6 (#1096)
Additional commits viewable in compare view

Updates bitflags from 2.11.0 to 2.11.1

Release notes

Sourced from bitflags's releases.

2.11.1

What's Changed

Bless compile-fail tests for current beta by @DanielEScherzer in bitflags/bitflags#478

example_generated.rs: add missing third slash for doc comment by @DanielEScherzer in bitflags/bitflags#477

Clarify self and other in method docs by @KodrAus in bitflags/bitflags#481

Prepare for 2.11.1 release by @KodrAus in bitflags/bitflags#482

New Contributors

@DanielEScherzer made their first contribution in bitflags/bitflags#478

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Changelog

Sourced from bitflags's changelog.

2.11.1

What's Changed

Bless compile-fail tests for current beta by @DanielEScherzer in bitflags/bitflags#478

example_generated.rs: add missing third slash for doc comment by @DanielEScherzer in bitflags/bitflags#477

Clarify self and other in method docs by @KodrAus in bitflags/bitflags#481

New Contributors

@DanielEScherzer made their first contribution in bitflags/bitflags#478

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Commits

4ed9ffa Merge pull request #482 from KodrAus/cargo/2.11.1
c53cd57 prepare for 2.11.1 release
a44410a Merge pull request #481 from KodrAus/docs/clarifications
3d671b9 update more compile error messages
5f3adad fix up compile error messages
780765d fix up contains and intersection docs
97b7607 clarify self and other in method docs
88a7a18 Merge pull request #477 from DanielEScherzer/patch-1
f0e4646 example_generated.rs: add missing third slash for doc comment
a31c96f Merge pull request #478 from DanielEScherzer/beta-bless
Additional commits viewable in compare view

Updates cc from 1.2.59 to 1.2.61

Release notes

Sourced from cc's releases.

cc-v1.2.61

Other

fix OutputKind::Capture documentation (#1705)

cc-v1.2.60

Fixed

(ar) suppress warnings from D modifier probe (#1700)

Changelog

Sourced from cc's changelog.

1.2.61 - 2026-04-24

Other

fix OutputKind::Capture documentation (#1705)

1.2.60 - 2026-04-10

Fixed

(ar) suppress warnings from D modifier probe (#1700)

Commits

360f691 chore(cc): release v1.2.61 (#1707)
17a2788 Bump taiki-e/install-action from 2.75.16 to 2.75.17 (#1706)
da52db7 command_helpers.rs: fix OutputKind::Capture documentation (#1705)
ee64d58 Bump taiki-e/install-action from 2.75.4 to 2.75.5 (#1703)
78cf7e4 CI: Hash-pin all actions, apply other suggestions from zizmor (#1702)
7cad9f5 chore(cc): release v1.2.60 (#1701)
c15c3eb fix(ar): suppress warnings from D modifier probe (#1700)
See full diff in compare view

Updates clap_derive from 4.6.0 to 4.6.1

Release notes

Sourced from clap_derive's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap_derive's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Commits

ac5fda6 chore: Release
b73c627 docs: Update changelog
44cfb34 Merge pull request #6346 from TomPlanche/fix/cargo-env-incremental-rebuild
34ef8a0 fix(derive): Track Cargo env vars for incremental rebuilds
0fe0be3 chore: Release
480af9d docs: Update changelog
2b3ddd0 Merge pull request #6340 from liskin/fix-completion-escape
7ffe739 fix(complete): Do not suggest options after "--"
d47fc4f test(complete): Options suggested after escape (--)
1420275 chore: Release
Additional commits viewable in compare view

Updates data-encoding from 2.10.0 to 2.11.0

Commits

b4d20e0 Release 2.11.0 (#155)
d354bb2 Add interpretation function from byte to character (#154)
See full diff in compare view

Updates idna_adapter from 1.2.1 to 1.2.2

Commits

1d9782f Keep Cargo.lock in sync
48e4503 Version 1.2.2: Make virama check LTO better with ICU4X 2.2
See full diff in compare view

Updates indexmap from 2.13.1 to 2.14.0

Changelog

Sourced from indexmap's changelog.

2.14.0 (2026-04-09)

MSRV: Rust 1.85.0 or later is now required.

Updated the hashbrown dependency to 0.17.

Made more map::Slice methods const: new_mut, first_mut, last_mut, split_at_mut, split_at_mut_checked, split_first_mut, split_last_mut

Commits

bcd165b Merge pull request #439 from cuviper/release-2.14.0
4ef06a7 Release 2.14.0
d21826c Merge pull request #438 from cuviper/hashbrown-0.17
2566bec Upgrade to hashbrown v0.17
4b62776 Merge pull request #437 from cuviper/disjoint-panic
478fba2 Normalize the panic doc of get_disjoint_mut
fb6dafd Merge pull request #436 from cuviper/const-slice-mut
5c237a2 Make Slice::{first,last,split_*}_mut methods const
48ff9ce Merge pull request #435 from cuviper/edition-2024
648be98 cargo fmt with edition 2024
Additional commits viewable in compare view

Updates jiff from 0.2.23 to 0.2.24

Changelog

Sourced from jiff's changelog.

0.2.24 (2026-04-23)

This release primarily adds a new memory_usage routine for reporting heap allocation sizes for the TimeZone and Zoned types. This release also acknowledges and updates the timeline expectations for a Jiff 1.0 release in README.md.

Enhancements:

#520: Add memory_usage to the TimeZone and Zoned types.

#535: Improve comment in Span::checked_add example.

Bug fixes:

#541: Update Jiff 1.0 timeline.

Commits

2cc55b2 0.2.24
c6542f1 changelog: 0.2.24
ec3c2ec api: add TimeZone::memory_usage and Zoned::memory_usage
bc752b6 docs: improve comment in Span::checked_add example
f6c8a55 readme: update 1.0 timeline
97314c1 docs: fix typo
bad71d8 docs: typo
See full diff in compare view

Updates jiff-static from 0.2.23 to 0.2.24

Changelog

Sourced from jiff-static's changelog.

0.2.24 (2026-04-23)

This release primarily adds a new memory_usage routine for reporting heap allocation sizes for the TimeZone and Zoned types. This release also acknowledges and updates the timeline expectations for a Jiff 1.0 release in README.md.

Enhancements:

#520: Add memory_usage to the TimeZone and Zoned types.

#535: Improve comment in Span::checked_add example.

Bug fixes:

#541: Update Jiff 1.0 timeline.

Commits

2cc55b2 0.2.24
c6542f1 changelog: 0.2.24
ec3c2ec api: add TimeZone::memory_usage and Zoned::memory_usage
bc752b6 docs: improve comment in Span::checked_add example
f6c8a55 readme: update 1.0 timeline
97314c1 docs: fix typo
bad71d8 docs: typo
See full diff in compare view

Updates libc from 0.2.184 to 0.2.186

Release notes

Sourced from libc's releases.

0.2.186

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185

Added

EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)

Hexagon: add missing constants and fix types for linux-musl (#5042)

Redox: Add semaphore functions (#5051)

Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

Hexagon: Decouple time64 types from musl symbol redirects (#5040)

Horizon: Change POLL constants from c_short to c_int (#5045)

Changelog

Sourced from libc's changelog.

0.2.186 - 2026-04-24

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185 - 2026-04-13

Added

EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)

Hexagon: add missing constants and fix types for linux-musl (#5042)

Redox: Add semaphore functions (#5051)

Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

Hexagon: Decouple time64 types from musl symbol redirects (#5040)

Horizon: Change POLL constants from c_short to c_int (#5045)

Commits

42620ff [0.2] libc: Release 0.2.186
9db2eaa apple: add KEVENT_FLAG_* constants
3840939 Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE for linux
f697deb chore: migrate from Cirrus CI to GHA
71d5bfc libc: Release 0.2.185
1027d1c Revert "ci: Pin nightly to 2026-04-01"
0e9c6e5 redox: Add semaphore functions
24ef457 feat: add back support for gnu windows x86 in ci
aa75caf horizon: Change POLL constants from c_short to c_int
b7eda5a hexagon: add missing constants and fix types for linux-musl
Additional commits viewable in compare view

Updates libmimalloc-sys from 0.1.44 to 0.1.47

Release notes

Sourced from libmimalloc-sys's releases.

Version 0.1.47

Changes

Mimalloc v2.2.4

Version 0.1.46

Changes

Fixed musl builds.

Version 0.1.45

Changes

Mimalloc v2.2.3

Commits

0007097 v0.1.47
db90458 Updated mimalloc from upstream
eff2109 Merge pull request #139 from reigadegr/master
7b45056 fix: Windows build failure caused by -Wno-error=date-time
9c47102 Fix mimalloc build failure with musl and release mode
44c72c7 Merge pull request #136 from nathaniel-daniel/add-windows-libs
c0ad27d Link with required libs on Windows
59d7ee3 v0.1.46
585ef6a Merge pull request #134 from purpleprotocol/patch_alpine
65cd789 Patch Alpine
Additional commits viewable in compare view

Updates mimalloc from 0.1.48 to 0.1.50

Release notes

Sourced from mimalloc's releases.

Version 0.1.50

Changes

Update to mimalloc v2.3.1 and v3.3.1

Version 0.1.49

Changes

Update to mimalloc v2.3.0 and v3.3.0

Use mimalloc v3 by default.

Commits

e639b55 v0.1.50
5da8f92 Bump to v2.3.1 and v3.3.1
2967f96 libmimalloc-sys v0.1.46
a2a6019 theap
92c240d Wrong feature flags
7b3acdb v0.1.49
c10c6d4 Oops
f88c34e I don't care about clippy right now
8675930 Update extended
d54c2f7 Use v3 by default
Additional commits viewable in compare view

Updates portable-atomic-util from 0.2.6 to 0.2.7

Release notes

Sourced from portable-atomic-util's releases.

0.2.7

Implement serde serialization and deserialization for Arc, gated behind "serde" feature. (#2, thanks @tommasoclini)

Changelog

Sourced from portable-atomic-util's changelog.

[0.2.7] - 2026-04-16

Implement serde serialization and deserialization for Arc, gated behind "serde" feature. (#2, thanks @tommasoclini)

Commits

ef24b51 Release 0.2.7
592caf2 Update changelog
831b81d Touch up PR 2
b9e3ad8 serde feature and traits implementation for Arc (#2)
10c5481 Update scripts and CI config
7b1ef64 tools: Update tidy.sh and related config
d6f4c76 zizmor: Apply more lints
e071ea7 tools: Update scripts and related config
d79b5b1 ci: Update config
See full diff in compare view

Updates rustls from 0.23.37 to 0.23.40

Commits

b44c09f Prepare 0.23.40
e7a555f Prefer Ord::max to core::cmp
c0005be ech: base inner name padding on actual extension
4e49529 ech: test inner name padding
3e06ef1 ech: add both name and "gross" padding
c574ffd ech: avoid short-lived allocation for padding
8bf935c ech: pop comment from match arm
9088004 ech: expand maximum_name_length to usize ASAP
a612901 Default require_ems based on CryptoProvider FIPS status
0541605 Cargo: version 0.23.38 -> 0.23.39
Additional commits viewable in compare view

Updates rustls-pki-types from 1.14.0 to 1.14.1

Release notes

Sourced from rustls-pki-types's releases.

1.14.1

Parsing PEM will now error for PEM sections larger than 256 MB in size, to avoid running out of memory during parsing. The limit was chosen based on historical data from large certificate revocation lists from the web PKI.

What's Changed

Remove mention of rustls-pemfile from docs by @ranile in rustls/pki-types#103

Update ECH reference to RFC9849 by @ctz in rustls/pki-types#104

pem: error for sections that are too large by @djc in rustls/pki-types#106

Update ECH reference to RFC 9849 by @ctz in rustls/pki-types#107

Adjust PEM size limit to account for huge CRLs by @ctz in rustls/pki-types#108

Commits

bb3c1da Adjust PEM size limit to account for huge CRLs
20bcfe1 Bump version to 1.14.1
b796d3d pem: error for sections that are too large
422d8cf Update ECH reference to RFC 9849
14ce65c Remove mention of rustls-pemfile from docs
See full diff in compare view

Updates rustls-webpki from 0.103.10 to 0.103.13

Release notes

Sourced from rustls-webpki's releases.

0.103.13

Fix reachable panic in parsing a CRL. This was reported to us as GHSA-82j2-j2ch-gfr8. Users who don't use CRLs are not affected.

For name constraints on URI names, we incorrectly processed excluded subtrees in a way which inverted the desired meaning. See rustls/webpki#471. This was a case missing in the fix for GHSA-965h-392x-2mh5.

What's Changed

Actually fail closed for URI matching against excluded subtrees by @djc in rustls/webpki#473

Prepare 0.103.13 by @ctz in rustls/webpki#474

Full Changelog: rustls/webpki@v/0.103.12...v/0.103.13

0.103.12

This release fixes two bugs in name constraint enforcement:

GHSA-965h-392x-2mh5: name constraints for URI names were ignored and therefore accepted. URI name constraints are now rejected unconditionally. Note this library does not provide an API for asserting URI names, and URI name constraints are otherwise not implemented.

GHSA-xgp8-3hg3-c2mh: permitted subtree name constraints for DNS names were accepted for certificates asserting a wildcard name. This was incorrect because, given a name constraint of accept.example.com, *.example.com could feasibly allow a name of reject.example.com which is outside the constraint. This is very similar to CVE-2025-61727.

Since name constraints are restrictions on otherwise properly-issued certificates, these bugs are reachable only after signature verification and require misissuance to exploit.

What's Changed

Prepare 0.103.12 by @djc in rustls/webpki#470

Full Changelog: rustls/webpki@v/0.103.11...v/0.103.12

0.103.11

In response to #464, we've slightly relaxed requirements for anchor_from_trust_cert() to ignore unknown extensions even if they're marked as critical. This only affects parsing a TrustAnchor from DER, for which most extensions are ignored anyway.

What's Changed

Backport parsing trust anchors with unknown critical extensions to 0.103 by @djc in rustls/webpki#466

Commits

2879b2c...
Description has been truncated

…pdates Bumps the dependencies group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.51.1` | `1.52.1` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.16.2` | `1.16.3` | | [bitflags](https://github.com/bitflags/bitflags) | `2.11.0` | `2.11.1` | | [cc](https://github.com/rust-lang/cc-rs) | `1.2.59` | `1.2.61` | | [data-encoding](https://github.com/ia0/data-encoding) | `2.10.0` | `2.11.0` | | [idna_adapter](https://github.com/hsivonen/idna_adapter) | `1.2.1` | `1.2.2` | | [indexmap](https://github.com/indexmap-rs/indexmap) | `2.13.1` | `2.14.0` | | [jiff](https://github.com/BurntSushi/jiff) | `0.2.23` | `0.2.24` | | [libc](https://github.com/rust-lang/libc) | `0.2.184` | `0.2.186` | | [libmimalloc-sys](https://github.com/purpleprotocol/mimalloc_rust) | `0.1.44` | `0.1.47` | | [mimalloc](https://github.com/purpleprotocol/mimalloc_rust) | `0.1.48` | `0.1.50` | | [portable-atomic-util](https://github.com/taiki-e/portable-atomic-util) | `0.2.6` | `0.2.7` | | [rustls](https://github.com/rustls/rustls) | `0.23.37` | `0.23.40` | | [rustls-pki-types](https://github.com/rustls/pki-types) | `1.14.0` | `1.14.1` | | [rustls-webpki](https://github.com/rustls/webpki) | `0.103.10` | `0.103.13` | | [typenum](https://github.com/paholg/typenum) | `1.19.0` | `1.20.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.23.1` | | [wasip2](https://github.com/bytecodealliance/wasi-rs) | `1.0.2+wasi-0.2.9` | `1.0.3+wasi-0.2.9` | | [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.6` | `1.0.7` | | [winnow](https://github.com/winnow-rs/winnow) | `1.0.1` | `1.0.2` | Updates `clap` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1) Updates `tokio` from 1.51.1 to 1.52.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.51.1...tokio-1.52.1) Updates `aws-lc-rs` from 1.16.2 to 1.16.3 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.16.2...v1.16.3) Updates `aws-lc-sys` from 0.39.1 to 0.40.0 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@aws-lc-sys/v0.39.1...aws-lc-sys/v0.40.0) Updates `bitflags` from 2.11.0 to 2.11.1 - [Release notes](https://github.com/bitflags/bitflags/releases) - [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md) - [Commits](bitflags/bitflags@2.11.0...2.11.1) Updates `cc` from 1.2.59 to 1.2.61 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@cc-v1.2.59...cc-v1.2.61) Updates `clap_derive` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@v4.6.0...v4.6.1) Updates `data-encoding` from 2.10.0 to 2.11.0 - [Commits](ia0/data-encoding@v2.10.0...v2.11.0) Updates `idna_adapter` from 1.2.1 to 1.2.2 - [Commits](hsivonen/idna_adapter@v1.2.1...v1.2.2) Updates `indexmap` from 2.13.1 to 2.14.0 - [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.13.1...2.14.0) Updates `jiff` from 0.2.23 to 0.2.24 - [Release notes](https://github.com/BurntSushi/jiff/releases) - [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md) - [Commits](BurntSushi/jiff@jiff-static-0.2.23...jiff-static-0.2.24) Updates `jiff-static` from 0.2.23 to 0.2.24 - [Release notes](https://github.com/BurntSushi/jiff/releases) - [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md) - [Commits](BurntSushi/jiff@jiff-static-0.2.23...jiff-static-0.2.24) Updates `libc` from 0.2.184 to 0.2.186 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.184...0.2.186) Updates `libmimalloc-sys` from 0.1.44 to 0.1.47 - [Release notes](https://github.com/purpleprotocol/mimalloc_rust/releases) - [Commits](purpleprotocol/mimalloc_rust@v0.1.44...v0.1.47) Updates `mimalloc` from 0.1.48 to 0.1.50 - [Release notes](https://github.com/purpleprotocol/mimalloc_rust/releases) - [Commits](purpleprotocol/mimalloc_rust@v0.1.48...v0.1.50) Updates `portable-atomic-util` from 0.2.6 to 0.2.7 - [Release notes](https://github.com/taiki-e/portable-atomic-util/releases) - [Changelog](https://github.com/taiki-e/portable-atomic-util/blob/main/CHANGELOG.md) - [Commits](taiki-e/portable-atomic-util@v0.2.6...v0.2.7) Updates `rustls` from 0.23.37 to 0.23.40 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.37...v/0.23.40) Updates `rustls-pki-types` from 1.14.0 to 1.14.1 - [Release notes](https://github.com/rustls/pki-types/releases) - [Commits](rustls/pki-types@v/1.14.0...v/1.14.1) Updates `rustls-webpki` from 0.103.10 to 0.103.13 - [Release notes](https://github.com/rustls/webpki/releases) - [Commits](rustls/webpki@v/0.103.10...v/0.103.13) Updates `typenum` from 1.19.0 to 1.20.0 - [Release notes](https://github.com/paholg/typenum/releases) - [Changelog](https://github.com/paholg/typenum/blob/main/CHANGELOG.md) - [Commits](paholg/typenum@v1.19.0...v1.20.0) Updates `uuid` from 1.23.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.0...v1.23.1) Updates `wasip2` from 1.0.2+wasi-0.2.9 to 1.0.3+wasi-0.2.9 - [Commits](bytecodealliance/wasi-rs@wasip2-1.0.2...wasip2-1.0.3) Updates `webpki-roots` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/rustls/webpki-roots/releases) - [Commits](rustls/webpki-roots@v/1.0.6...v/1.0.7) Updates `winnow` from 1.0.1 to 1.0.2 - [Changelog](https://github.com/winnow-rs/winnow/blob/main/CHANGELOG.md) - [Commits](winnow-rs/winnow@v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tokio dependency-version: 1.52.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: aws-lc-rs dependency-version: 1.16.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: aws-lc-sys dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: bitflags dependency-version: 2.11.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: cc dependency-version: 1.2.61 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: clap_derive dependency-version: 4.6.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: data-encoding dependency-version: 2.11.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: idna_adapter dependency-version: 1.2.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: indexmap dependency-version: 2.14.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: jiff dependency-version: 0.2.24 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: jiff-static dependency-version: 0.2.24 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: libc dependency-version: 0.2.186 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: libmimalloc-sys dependency-version: 0.1.47 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: mimalloc dependency-version: 0.1.50 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: portable-atomic-util dependency-version: 0.2.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: rustls dependency-version: 0.23.40 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: rustls-pki-types dependency-version: 1.14.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: rustls-webpki dependency-version: 0.103.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: typenum dependency-version: 1.20.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: uuid dependency-version: 1.23.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: wasip2 dependency-version: 1.0.3+wasi-0.2.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: webpki-roots dependency-version: 1.0.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: winnow dependency-version: 1.0.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-29T17:44:31Z

Milestone

The specified milestone could not be found on this repository. If you view a milestone, the final part of the page URL, after milestone, is the identifier. For example: https://github.com/<org>/<repo>/milestone/3.

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot assigned ararog Apr 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 24 updates#41

chore(deps): bump the dependencies group across 1 directory with 24 updates#41
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/dependencies-a8902c5f1e

dependabot Bot commented on behalf of github Apr 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 29, 2026

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.1] - 2026-04-15

Fixes

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

Changed

Fixed

Documented

aws-lc-rs v1.16.3

What's Changed

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

2.11.1

What's Changed

New Contributors

2.11.1

What's Changed

New Contributors

cc-v1.2.61

Other

cc-v1.2.60

Fixed

1.2.61 - 2026-04-24

Other

1.2.60 - 2026-04-10

Fixed

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.1] - 2026-04-15

Fixes

2.14.0 (2026-04-09)

0.2.24 (2026-04-23)

0.2.24 (2026-04-23)

0.2.186

Added

Changed

0.2.185

Added

Fixed

0.2.186 - 2026-04-24

Added

Changed

0.2.185 - 2026-04-13

Added

Fixed

Version 0.1.47

Changes

Version 0.1.46

Changes

Version 0.1.45

Changes

Version 0.1.50

Changes

Version 0.1.49

Changes

0.2.7

[0.2.7] - 2026-04-16

1.14.1

What's Changed

0.103.13

What's Changed

0.103.12

What's Changed

0.103.11

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Apr 29, 2026