Skip to content

build(deps): bump the cargo group with 13 updates - #153

Merged
jaudiger merged 1 commit into
mainfrom
dependabot/cargo/cargo-ed28a55353
Sep 16, 2026
Merged

jaudiger merged 1 commit into
mainfrom
dependabot/cargo/cargo-ed28a55353

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 13 updates:

Package From To
brioche-pack 8f15d5b 5700793
serde_with 3.22.0 3.23.0
base64 0.22.1 0.23.1
bitflags 2.13.1 2.13.2
cc 1.4.4 1.4.5
darling 0.23.0 0.24.1
darling_core 0.23.0 0.24.1
darling_macro 0.23.0 0.24.1
find-msvc-tools 0.1.11 0.1.12
portable-atomic-util 0.2.7 0.2.8
serde_with_macros 3.22.0 3.23.0
syn 3.0.4 3.0.5
tinyvec 1.12.0 1.13.2

Updates brioche-pack from 8f15d5b to 5700793

Commits

Updates serde_with from 3.22.0 to 3.23.0

Release notes

Sourced from serde_with's releases.

serde_with v3.23.0

Changed

  • Update syn and darling dependencies to use syn v3 (#992)
  • Update dev-dependencies to newer versions (#993)
  • Update base64 to a newer version. This should not have any API change, but some error messages might change. (#993)
  • serde_as can now parse cfg_attr(true, ...) and cfg_attr(false, ...) (#995) true/false are new literals as of Rust 1.88 but need to be parsed explicitly with the syn types. This is used when emitting schemars annotations.
Commits
  • ea5dfdc Bump version to v3.23.0 (#1005)
  • e52e85b Bump version to v3.23.0
  • 39955b6 Bump rmp dev-dependency (#1004)
  • b51e5fb Bump rmp dev-dependency
  • ef598c6 Use setup-rust-toolchain v2 instead of v1 (#1003)
  • 9ea2658 Fix cargo lint about workspace lints being inherited in the test crate
  • e5ad81a Use setup-rust-toolchain v2 instead of v1
  • 8100141 Bump the github-actions group across 1 directory with 2 updates (#1002)
  • 940f4a6 Bump jsonschema from 0.49.8 to 0.52.0 (#1001)
  • 6f42b94 Bump the github-actions group across 1 directory with 2 updates
  • Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates bitflags from 2.13.1 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Commits
  • 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
  • 5822493 prepare for 2.13.2 release
  • 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
  • 2c0b042 re-pull const declarations outside of nested const
  • c3f8d31 Merge pull request #494 from DanielEScherzer/flags-docs-example
  • 0fc3762 Flags: adjust order of elements in manual implementation example
  • See full diff in compare view

Updates cc from 1.4.4 to 1.4.5

Release notes

Sourced from cc's releases.

cc-v1.4.5

Fixed

  • probe flag support without OUT_DIR via tempfile (#1875)

Other

  • simplify conditional logic using then method (#1860)

Fixed

  • Probe flag support without OUT_DIR via tempfile, so flag_if_supported no longer silently drops flags outside Cargo build scripts (#1875)
Changelog

Sourced from cc's changelog.

1.4.5 - 2026-09-04

Fixed

  • probe flag support without OUT_DIR via tempfile (#1875)

Other

  • simplify conditional logic using then method (#1860)

Fixed

  • Probe flag support without OUT_DIR via tempfile, so flag_if_supported no longer silently drops flags outside Cargo build scripts (#1875)
Commits

Updates darling from 0.23.0 to 0.24.1

Release notes

Sourced from darling's releases.

v0.24.1

  • Don't assume fields using with impl FromMeta #433
  • #[allow(unused_qualifications)] in generated code #435
  • Do not include skipped variants in did-you-mean suggestions #427

v0.24.0

  • Update syn to v3 #431
  • Add impl ToTokens for SpannedValue #423
  • Allow data magic field for FromDeriveInput to be any type that implements TryFrom<&syn::Data, Error = darling::Error> without needing to use #[darling(with = ...)] syntax #391
Changelog

Sourced from darling's changelog.

v0.24.1 (August 20, 2026)

  • Don't assume fields using with impl FromMeta #433
  • #[allow(unused_qualifications)] in generated code #435
  • Do not include skipped variants in did-you-mean suggestions #427

v0.24.0 (July 30, 2026)

  • Update syn to v3 #431
  • Add impl ToTokens for SpannedValue #423
  • Allow data magic field for FromDeriveInput to be any type that implements TryFrom<&syn::Data, Error = darling::Error> without needing to use #[darling(with = ...)] syntax #391
Commits
  • 6b68cbe Bump version to 0.24.1
  • 4fe8929 Do not suggest skipped variants in did-you-mean
  • 8531873 Don't require FromMeta for with fields (#438)
  • c4b688f Allow unused_qualifications in generated code
  • 51dd494 Bump version to 0.24.0
  • 2f3a94a Implement ToTokens for SpannedValue
  • 7bdc239 Fix clippy::needless_continue lint in code generated by FromDeriveInput
  • bdc3139 Upgrade Syn to 3.0.0
  • dfa9f88 Pass tokens that failed to parse as Expr to FromMeta::from_invalid_expr
  • 3c16c07 Check fields earlier for FromVariant impls
  • Additional commits viewable in compare view

Updates darling_core from 0.23.0 to 0.24.1

Release notes

Sourced from darling_core's releases.

v0.24.1

  • Don't assume fields using with impl FromMeta #433
  • #[allow(unused_qualifications)] in generated code #435
  • Do not include skipped variants in did-you-mean suggestions #427

v0.24.0

  • Update syn to v3 #431
  • Add impl ToTokens for SpannedValue #423
  • Allow data magic field for FromDeriveInput to be any type that implements TryFrom<&syn::Data, Error = darling::Error> without needing to use #[darling(with = ...)] syntax #391
Changelog

Sourced from darling_core's changelog.

v0.24.1 (August 20, 2026)

  • Don't assume fields using with impl FromMeta #433
  • #[allow(unused_qualifications)] in generated code #435
  • Do not include skipped variants in did-you-mean suggestions #427

v0.24.0 (July 30, 2026)

  • Update syn to v3 #431
  • Add impl ToTokens for SpannedValue #423
  • Allow data magic field for FromDeriveInput to be any type that implements TryFrom<&syn::Data, Error = darling::Error> without needing to use #[darling(with = ...)] syntax #391
Commits
  • 6b68cbe Bump version to 0.24.1
  • 4fe8929 Do not suggest skipped variants in did-you-mean
  • 8531873 Don't require FromMeta for with fields (#438)
  • c4b688f Allow unused_qualifications in generated code
  • 51dd494 Bump version to 0.24.0
  • 2f3a94a Implement ToTokens for SpannedValue
  • 7bdc239 Fix clippy::needless_continue lint in code generated by FromDeriveInput
  • bdc3139 Upgrade Syn to 3.0.0
  • dfa9f88 Pass tokens that failed to parse as Expr to FromMeta::from_invalid_expr
  • 3c16c07 Check fields earlier for FromVariant impls
  • Additional commits viewable in compare view

Updates darling_macro from 0.23.0 to 0.24.1

Release notes

Sourced from darling_macro's releases.

v0.24.1

  • Don't assume fields using with impl FromMeta #433
  • #[allow(unused_qualifications)] in generated code #435
  • Do not include skipped variants in did-you-mean suggestions #427

v0.24.0

  • Update syn to v3 #431
  • Add impl ToTokens for SpannedValue #423
  • Allow data magic field for FromDeriveInput to be any type that implements TryFrom<&syn::Data, Error = darling::Error> without needing to use #[darling(with = ...)] syntax #391
Changelog

Sourced from darling_macro's changelog.

v0.24.1 (August 20, 2026)

  • Don't assume fields using with impl FromMeta #433
  • #[allow(unused_qualifications)] in generated code #435
  • Do not include skipped variants in did-you-mean suggestions #427

v0.24.0 (July 30, 2026)

  • Update syn to v3 #431
  • Add impl ToTokens for SpannedValue #423
  • Allow data magic field for FromDeriveInput to be any type that implements TryFrom<&syn::Data, Error = darling::Error> without needing to use #[darling(with = ...)] syntax #391
Commits
  • 6b68cbe Bump version to 0.24.1
  • 4fe8929 Do not suggest skipped variants in did-you-mean
  • 8531873 Don't require FromMeta for with fields (#438)
  • c4b688f Allow unused_qualifications in generated code
  • 51dd494 Bump version to 0.24.0
  • 2f3a94a Implement ToTokens for SpannedValue
  • 7bdc239 Fix clippy::needless_continue lint in code generated by FromDeriveInput
  • bdc3139 Upgrade Syn to 3.0.0
  • dfa9f88 Pass tokens that failed to parse as Expr to FromMeta::from_invalid_expr
  • 3c16c07 Check fields earlier for FromVariant impls
  • Additional commits viewable in compare view

Updates find-msvc-tools from 0.1.11 to 0.1.12

Release notes

Sourced from find-msvc-tools's releases.

find-msvc-tools-v0.1.12

Other

  • simplify conditional logic using then method (#1860)
Commits

Updates portable-atomic-util from 0.2.7 to 0.2.8

Release notes

Sourced from portable-atomic-util's releases.

0.2.8

  • Increase the minimum supported Rust version from Rust 1.34 to Rust 1.36. Using the alloc feature without the std feature already required Rust 1.36, so this does not change anything for such no-std use cases. (#8)

  • Add Arc::map. (align to the std Arc change in Rust 1.100) (#10, thanks @​c410-f3r)

  • Fix thread sanitizer false positives when using x86_64-unknown-linux-gnutsan target in stable Rust. (e02eca7)

Changelog

Sourced from portable-atomic-util's changelog.

[0.2.8] - 2026-09-04

  • Increase the minimum supported Rust version from Rust 1.34 to Rust 1.36. Using the alloc feature without the std feature already required Rust 1.36, so this does not change anything for such no-std use cases. (#8)

  • Add Arc::map. (align to the std Arc change in Rust 1.100) (#10, thanks @​c410-f3r)

  • Fix thread sanitizer false positives when using x86_64-unknown-linux-gnutsan target in stable Rust. (e02eca7)

Commits
  • 6fb276a Release 0.2.8
  • f0b9e65 Update changelog
  • bd99c94 Add new map method (#10)
  • 48b2205 Bump taiki-e/github-actions/.github/workflows/tidy.yml
  • a590e5e Bump taiki-e/github-actions/.github/workflows/rust-test.yml
  • 484916a Bump taiki-e/github-actions/.github/workflows/rust-release.yml
  • 82feef3 Bump taiki-e/setup-cross-toolchain-action from 1.41.0 to 1.42.0
  • 529b79e Bump taiki-e/install-action from 2.83.4 to 2.86.3
  • 3c14657 build: Remove needless cargo:rerun-if-changed
  • fd66c56 Update build script for Rust 1.98
  • Additional commits viewable in compare view

Updates serde_with_macros from 3.22.0 to 3.23.0

Release notes

Sourced from serde_with_macros's releases.

serde_with v3.23.0

Changed

  • Update syn and darling dependencies to use syn v3 (#992)
  • Update dev-dependencies to newer versions (#993)
  • Update base64 to a newer version. This should not have any API change, but some error messages might change. (#993)
  • serde_as can now parse cfg_attr(true, ...) and cfg_attr(false, ...) (#995) true/false are new literals as of Rust 1.88 but need to be parsed explicitly with the syn types. This is used when emitting schemars annotations.
Commits
  • ea5dfdc Bump version to v3.23.0 (#1005)
  • e52e85b Bump version to v3.23.0
  • 39955b6 Bump rmp dev-dependency (#1004)
  • b51e5fb Bump rmp dev-dependency
  • ef598c6 Use setup-rust-toolchain v2 instead of v1 (#1003)
  • 9ea2658 Fix cargo lint about workspace lints being inherited in the test crate
  • e5ad81a Use setup-rust-toolchain v2 instead of v1
  • 8100141 Bump the github-actions group across 1 directory with 2 updates (#1002)
  • 940f4a6 Bump jsonschema from 0.49.8 to 0.52.0 (#1001)
  • 6f42b94 Bump the github-actions group across 1 directory with 2 updates
  • Additional commits viewable in compare view

Updates syn from 3.0.4 to 3.0.5

Release notes

Sourced from syn's releases.

3.0.5

Commits
  • e0ad92d Release 3.0.5
  • 74e7d75 Merge pull request #2080 from sunshowers/lit-str-span
  • 4c264f3 In LitStr::parse_with, report correct span for lex errors
  • 7e2b27b Update test suite to nightly-2026-08-26
  • See full diff in compare view

Updates tinyvec from 1.12.0 to 1.13.2

Changelog

Sourced from tinyvec's changelog.

1.13.2

  • Another bug having to do with macro expansion on no_std targets was fixed.

1.13.1

  • fix bug where crate couldn't build for alloc without std too.

1.13

  • Adds TinyVec::with_initial_len
  • fix the Write impl on ArrayVec.

1.12

  • Add schemars support.

1.11.1

  • Fix accidental OOM when deserializing hostile Borsh input.

1.11

  • switched from serde dep to serde_core dep, which should allow more parallelization in builds for downstream users.
  • add as_mut_inner method when the latest_stable_rust feature is enabled
  • add is_full method to check if the size is equal to the capacity
  • add defmt support

1.10

  • Minimum rust version is now 1.55, and the non-const-generic impls are removed. This reduces build times by over a second on average, which is significant enough for a library crate.

1.9

  • Adds a latest_stable_rust cargo feature, which will automatically pull in other cargo features related to the latest Stable version of rust.
  • Adds ArrayVec::try_from_array_len
  • Adds TinyVec::into_vec and TinyVec::into_boxed_slice
  • Adds support for generic-array crate
  • Adds support for the borsh crate

1.8.1

  • e00E updated the rustc features so that they all correctly depend on the lower version feature. pr 199

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [brioche-pack](https://github.com/brioche-dev/brioche) | ``8f15d5b`` | ``5700793`` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.22.0` | `3.23.0` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.13.1` | `2.13.2` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.4.4` | `1.4.5` |
| [darling](https://github.com/TedDriggs/darling) | `0.23.0` | `0.24.1` |
| [darling_core](https://github.com/TedDriggs/darling) | `0.23.0` | `0.24.1` |
| [darling_macro](https://github.com/TedDriggs/darling) | `0.23.0` | `0.24.1` |
| [find-msvc-tools](https://github.com/rust-lang/cc-rs) | `0.1.11` | `0.1.12` |
| [portable-atomic-util](https://github.com/taiki-e/portable-atomic-util) | `0.2.7` | `0.2.8` |
| [serde_with_macros](https://github.com/jonasbb/serde_with) | `3.22.0` | `3.23.0` |
| [syn](https://github.com/dtolnay/syn) | `3.0.4` | `3.0.5` |
| [tinyvec](https://github.com/Lokathor/tinyvec) | `1.12.0` | `1.13.2` |


Updates `brioche-pack` from `8f15d5b` to `5700793`
- [Release notes](https://github.com/brioche-dev/brioche/releases)
- [Commits](brioche-dev/brioche@8f15d5b...5700793)

Updates `serde_with` from 3.22.0 to 3.23.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.22.0...v3.23.0)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `bitflags` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.13.1...2.13.2)

Updates `cc` from 1.4.4 to 1.4.5
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.4.4...cc-v1.4.5)

Updates `darling` from 0.23.0 to 0.24.1
- [Release notes](https://github.com/TedDriggs/darling/releases)
- [Changelog](https://github.com/TedDriggs/darling/blob/master/CHANGELOG.md)
- [Commits](TedDriggs/darling@v0.23.0...v0.24.1)

Updates `darling_core` from 0.23.0 to 0.24.1
- [Release notes](https://github.com/TedDriggs/darling/releases)
- [Changelog](https://github.com/TedDriggs/darling/blob/master/CHANGELOG.md)
- [Commits](TedDriggs/darling@v0.23.0...v0.24.1)

Updates `darling_macro` from 0.23.0 to 0.24.1
- [Release notes](https://github.com/TedDriggs/darling/releases)
- [Changelog](https://github.com/TedDriggs/darling/blob/master/CHANGELOG.md)
- [Commits](TedDriggs/darling@v0.23.0...v0.24.1)

Updates `find-msvc-tools` from 0.1.11 to 0.1.12
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@find-msvc-tools-v0.1.11...find-msvc-tools-v0.1.12)

Updates `portable-atomic-util` from 0.2.7 to 0.2.8
- [Release notes](https://github.com/taiki-e/portable-atomic-util/releases)
- [Changelog](https://github.com/taiki-e/portable-atomic-util/blob/main/CHANGELOG.md)
- [Commits](taiki-e/portable-atomic-util@v0.2.7...v0.2.8)

Updates `serde_with_macros` from 3.22.0 to 3.23.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.22.0...v3.23.0)

Updates `syn` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.4...3.0.5)

Updates `tinyvec` from 1.12.0 to 1.13.2
- [Changelog](https://github.com/Lokathor/tinyvec/blob/main/changelog.md)
- [Commits](Lokathor/tinyvec@v1.12.0...v1.13.2)

---
updated-dependencies:
- dependency-name: brioche-pack
  dependency-version: 5700793a17b276b2d7c23e003a8f8846e82468e1
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: serde_with
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: bitflags
  dependency-version: 2.13.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: cc
  dependency-version: 1.4.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: darling
  dependency-version: 0.24.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: darling_core
  dependency-version: 0.24.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: darling_macro
  dependency-version: 0.24.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: find-msvc-tools
  dependency-version: 0.1.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: portable-atomic-util
  dependency-version: 0.2.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_with_macros
  dependency-version: 3.23.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: syn
  dependency-version: 3.0.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tinyvec
  dependency-version: 1.13.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 13, 2026
@jaudiger jaudiger self-assigned this Sep 16, 2026
@jaudiger

Copy link
Copy Markdown
Contributor

Looks good to me

@jaudiger
jaudiger merged commit 65c68d5 into main Sep 16, 2026
10 checks passed
@jaudiger
jaudiger deleted the dependabot/cargo/cargo-ed28a55353 branch September 16, 2026 05:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant