fix(deps): update rust-minor by renovate[bot] · Pull Request #185 · finos/morphir-rust

renovate · 2026-09-19T12:48:16Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
async-recursion	dependencies	minor	`1.1.1` → `1.2.0`
aws-lc-rs	dependencies	minor	`1.18.1` → `1.19.0`
base64	dependencies	minor	`0.22` → `0.23`
base64	dependencies	minor	`0.22.1` → `0.23.0`
cc	build-dependencies	minor	`1.4.7` → `1.10.0`
ecow	dependencies	minor	`=0.2.6` → `=0.3.1`
extism (source)	dependencies	minor	`1.30.0` → `1.41.0`
getrandom	dependencies	minor	`0.2` → `0.4`
ion-rs	dependencies	minor	`1.0.1` → `1.2.0`
ion-rs	dependencies	minor	`=1.0.1` → `=1.2.0`
jsonschema	dependencies	minor	`0.56` → `0.60`
jsonschema	dev-dependencies	minor	`0.56` → `0.60`
rstest	dev-dependencies	minor	`0.27` → `0.28`
rusqlite	dev-dependencies	minor	`=0.40.2` → `=0.41.1`
rusqlite	dependencies	minor	`=0.40.2` → `=0.41.1`
rusqlite	dependencies	minor	`0.40` → `0.41`
snafu	dependencies	minor	`0.8` → `0.9`
tokio (source)	dev-dependencies	minor	`1.53.1` → `1.54.1`
tokio (source)	dependencies	minor	`1.53.1` → `1.54.1`
typed-path	dependencies	minor	`0.9` → `0.13`
untrusted	dependencies	minor	`0.7.1` → `0.9.0`
uuid	dependencies	minor	`1.26.1` → `1.29.0`
wasm-encoder (source)	dependencies	minor	`0.259` → `0.262`
wat (source)	dev-dependencies	minor	`1.259.0` → `1.262.0`
wit-bindgen	dependencies	minor	`0.62.0` → `0.63.0`

Release Notes

dcchut/async-recursion (async-recursion)

`v1.2.0`

Compare Source

What's Changed

Update error output in tests #45
Fixup arg_not_sync test output from 1.90.0 release #46
Resolve double_must_use lint #50
Update syn to v3.0 in #51

Full Changelog: dcchut/async-recursion@v1.1.1...v1.2.0

aws/aws-lc-rs (aws-lc-rs)

`v1.19.0`: aws-lc-rs v1.19.0

Compare Source

What's Changed

Add AES OFB, CFB8, and CFB1 modes by @lokeswarivejju in #1259
- Adds OperatingMode::OFB, OperatingMode::CFB8, and OperatingMode::CFB1 for AES-128, AES-192, and AES-256 through both the one-shot and streaming cipher APIs.
Add an on-demand AWS-LC self-test API by @Elvrarin in #1262
- Adds aws_lc_rs::try_fips_self_test(), allowing applications to re-run all AWS-LC cryptographic algorithm self-tests without calling the sys crate through unsafe FFI. This does not re-run the module integrity test.
Add Keccak-256 digest support behind "unstable" feature flag by @fabrice102 in #1266
- Adds aws_lc_rs::unstable::digest::KECCAK256 and KECCAK256_OUTPUT_LEN behind the unstable feature for use with the existing digest::digest and digest::Context APIs.
Add configurable RSA-PSS salt lengths by @PaulDance in #1267
- Adds RsaPssSaltLength::{Digest, Max, Custom} and with_pss_salt_length builders on RsaSignatureEncoding and RsaParameters, covering signing and verification for both message and precomputed-digest APIs.
Implement Clone for signing key pairs by @JakeHuneau in #1277
- rsa::KeyPair, EcdsaKeyPair, Ed25519KeyPair, and PqdsaKeyPair can now be cloned directly rather than wrapped in an Arc.
- Clones share the immutable, reference-counted EVP_PKEY; key material is not duplicated, and a clone remains usable after the original is dropped.

Upstream AWS-LC

aws-lc-sys v0.47.0 aligns with AWS-LC v5.12.0 (previously v5.11.0).
aws-lc-fips-sys v0.14.4 updates its bundled AWS-LC FIPS 4.2.0 snapshot with recent FIPS 4.x backports.

Build Improvements

Lower the minimum system-installed AWS-LC version to 4.2.0 by @justsmth in #1268
- The default aws-lc-sys system-library path now accepts AWS-LC 4.2.0 or newer, previously 5.7.0, allowing use of a FIPS 4.x system library.
- Enabling the unstable feature requires AWS-LC 5.7.0 or newer because unstable APIs currently include Keccak-256. Bundled-source builds are unaffected.
Share cc compiler detection across builds by @johncarmack1984 in #1273
- Reuses compiler detection results across the main library build and compiler feature probes, reducing repeated compiler invocations during cold builds.

Issues Being Closed

Implement Clone for rsa::KeyPair -- #1260
Expose AWS-LC FIPS on-demand self-test -- #1261
Add a way to specify the RSA-PSS salt length -- #1263

Other Merged PRs

build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #1264
build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #1265
fix: satisfy Clippy deprecated-since lint and lint legacy-des in CI by @justsmth in #1269
ci: keep upstream Cargo.lock in rustls integration by @justsmth in #1270
ci: use dynamic musl CRT for ARM FIPS tests by @justsmth in #1271
Prepare aws-lc-fips-sys v0.14.4 by @justsmth in #1275
Prepare aws-lc-sys v0.47.0 by @justsmth in #1274
Prepare aws-lc-rs v1.19.0 by @justsmth in #1278

New Contributors

@lokeswarivejju made their first contribution in #1259
@johncarmack1984 made their first contribution in #1273
@JakeHuneau made their first contribution in #1277
@PaulDance made their first contribution in #1267

Full Changelog: aws/aws-lc-rs@v1.18.2...v1.19.0

`v1.18.2`: aws-lc-rs v1.18.2

Compare Source

What's Changed

Implement Eq and PartialEq for RSA and EdDSA parameters by @dsykes16 in #1228
- RsaParameters can now be compared directly against RSA verification constants. Algorithms with different digests, padding schemes, or modulus-size ranges compare unequal. EdDSAParameters also gains equality support.
Add wasm32-wasip2 and wasm32-wasip3 support by @ricochet in #1239
- Adds non-FIPS builds using universal bindings, with CI coverage under Wasmtime and wasi-sdk 34. WASIp3 requires nightly Rust.
- Direct aws-lc-sys consumers must disable the default all-bindings feature for these targets.
Publish the intended RandomizedNonceKey::open_in_place documentation by @Serophots in #1227
- Makes the existing nonce, ciphertext/tag layout, and buffer-on-error contract visible in rustdoc. No runtime behavior changes.

Upstream AWS-LC

aws-lc-sys v0.46.0 aligns with AWS-LC v5.11.0 (previously v5.7.0). See also the release notes for v5.8.0, v5.9.0, and v5.10.0.
- The Ed25519 C-implementation decoder now rejects non-canonical public keys, matching the assembly-optimized implementations: aws/aws-lc#3457
- Includes ChaCha20-Poly1305 key-material zeroization and fixes ML-KEM CPU feature detection to avoid illegal-instruction failures on x86-64 CPUs with AVX2 but no BMI2: aws/aws-lc#3552 and aws/aws-lc#3596
aws-lc-fips-sys v0.14.3 updates its bundled AWS-LC FIPS 4.2.0 snapshot and regenerates bindings. It remains on the FIPS 4.x release line.

Build Improvements

Raise the minimum system AWS-LC version to 5.7.0 by @justsmth in #1243
- Non-FIPS system-library installations must now provide AWS-LC 5.7.0 or newer, previously 1.68.0. Bundled-source builds and FIPS version requirements are unchanged.
Fix static FIPS system-library linking by @justsmth in #1236
- Fixes unresolved FIPS_mode references with GNU ld.bfd when linking a prebuilt static FIPS library, including binaries that do not call crypto and builds where LTO removes those calls.
- Uses whole-archive linking to retain libcrypto, including in downstream Rust staticlib outputs. This can increase binary size; dynamic FIPS and non-FIPS linking are unchanged.
Fix Cranelift linking by @justsmth in #1234
- Normalizes binding link names to avoid undefined-symbol failures, including when Cranelift is selected through Cargo profiles rather than RUSTFLAGS. The AWS_LC_SYS_NO_U1_BINDINGS workaround is no longer needed.
Fix jitterentropy builds with optimizing CFLAGS and newer cc versions by @justsmth in #1254
- Keeps filtered flags in effect throughout the jitterentropy builder's lifetime, preventing cached environment reads from allowing flags such as -O2 to override its required -O0.
Honor AWS_LC_SYS_CC in the main library build by @justsmth in #1255
- Applies crate-specific compiler overrides before compiler lookup in both CC and CMake build paths, keeping compiler selection and capability probes consistent when cc caches environment reads.
Improve archive reproducibility through symlinked build paths by @justsmth in #1238
- Prevents the non-Windows CC builder from incorporating symlink-resolved absolute build paths into archive member names, avoiding unnecessary downstream compile-cache misses. Windows short-path handling is unchanged.
Upgrade bindgen to 0.73 by @xtqqczze in #1244
Document the system-library trust model by @justsmth in #1218
- Clarifies that supplied paths and pkg-config results are trusted build inputs, and that FIPS validation can execute candidate library code before accepting or rejecting it. Documents runner requirements and how to disable automatic system-library detection.

Issues Being Closed

Cranelift builds fail with codegen-backend = "cranelift" -- #1231
Upgrade bindgen to v0.73 -- #1245
Undefined FIPS_mode when linking a prebuilt FIPS module into a binary that does not use crypto -- #1246
Jitterentropy fails with "must not be compiled with optimizations" in aws-lc-rs v1.18.1 / aws-lc-sys v0.45.0 -- #1252

Other Merged PRs

Add security review workflow by @nhatnghiho in #1226
docs: align pull request template with AWS-LC by @justsmth in #1219
ci: verify docs.rs build with read-only crate sources by @justsmth in #1209
ci: harden workflows and release tooling by @justsmth in #1216
ci: harden documentation deployment by @justsmth in #1217
ci: fix rustls integration against rustls-aws-lc-rs by @justsmth in #1229
build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 by @dependabot[bot] in #1232
build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #1235
build(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 by @dependabot[bot] in #1237
Fix Clippy failures with bindgen 0.73 by @justsmth in #1250
Prepare aws-lc-sys v0.46.0 and aws-lc-rs v1.18.2 by @justsmth in #1256
Prepare aws-lc-fips-sys v0.14.3 by @justsmth in #1258

New Contributors

@nhatnghiho made their first contribution in #1226
@dsykes16 made their first contribution in #1228
@Serophots made their first contribution in #1227
@ricochet made their first contribution in #1239
@xtqqczze made their first contribution in #1244

Full Changelog: aws/aws-lc-rs@v1.18.1...v1.18.2

marshallpierce/rust-base64 (base64)

`v0.23.1`

Compare Source

Make the tests build again on non-SIMD architectures

`v0.23.0`

Compare Source

Added more consts for preconfigured configs and engines
Make DecodeError::InvalidLastSymbol more clear by including the decoded value
Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
detection and work in no_std. The engines support the standard and URL-safe alphabets.
Update MSRV to 1.71.0
Add support for custom padding symbols

rust-lang/cc-rs (cc)

`v1.10.0`

Compare Source

Added

Initial libtool support (#1618)

Fixed

(parallel) print the child's exit status as debug output (#2055)
(target-parsing) wasm32-none-component (#2054)

Other

Regenerate target info (#2053)

`v1.9.0`

Compare Source

Added

pass AddressSanitizer on to the C compiler (#2045)
add source root for stable external object names (#2034)
emit rerun-if-env-changed for the compiler's own env vars (#2035)
(env) read Cargo's variables from the env snapshot (#2028)
collect compile commands into a compile_commands.json (#1990)

Fixed

don't prefer clang for -Clinker-plugin-lto=no (#2046)
keep the order of flag and flag_if_supported (#2044)
correct "arbitary" typo in target parser comment (#2039)
correct "stablised" typos in TODO comments (#2040)
(msvc) pass objects to the archiver relative to the output directory (#2033)
honor disabled linker-plugin LTO (#2024)
apply RUSTC_WRAPPER to the cl.exe cc finds itself (#2022)

Other

(parallel) poll on jobserver helper thread (#2021)
(parallel) add jobserver polling for windows (#2020)
Regenerate windows sys bindings (#2019)
(parallel) add polling for process exit on windows (#2016)
(parallel) poll for process exit on macOS/bsd (#2014)

`v1.8.0`

Compare Source

Added

add CC_PREFER_CLANG_CL_OVER_MSVC to override prefer_clang_cl_over_msvc (#2001)

Fixed

(panic) fix panic in code and replace with error when appropriate (#2008)
(env) do not panic if WASM_MUSL_SYSROOT not set (#2007)
(jobserver) help thread gets more token than necessary (#2006)
stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)
do not apply target crt-static when target is overridden (#1999)

Other

(parallel) poll for process exit on linux (#2009)
document NVCC and other environment variables (#2005)
(jobserver) poll for new token (#2004)
(parallel) Use poll on unix (#2000)

`v1.7.0`

Compare Source

Added

add Tool::get_envs, deprecate Tool::env and store tool env as Arc<OsStr> pairs (#1985)
link c++ when Clang uses libc++ (#1978)
add CC_MASM_ASM and fall back to llvm-ml for MASM files (#1975)

Fixed

(target parsing) for powerpc64-ibm-aix abi (#1989)
ignore ASCII case in program name checks (#1981)

Other

(compile) issue compilation cmds more frequently in parallel #1997 #1998
(cache) Optimize tool detection caching (#1995)
(cache) optimize EnvSnapshot Hash, PartialEq, Ord impl (#1994)
Regenerate target info (#1988)

`v1.6.0`

Compare Source

Added

add Build::create_archive and emit_link_directives (#1972)
read the process environment once per Build, on first use (#1969)
add Build::message_logger for structured access to cc's messages (#1967)
add CXXSTDLIB_STATIC to link the C++ stdlib statically from outside (#1957)

Fixed

key the flag support cache on target, host, language and environment (#1965)
forward each line of compiler stderr once and whole with parallel (#1959)

Other

find compile commands by source file so tests pass with parallel (#1973)
add support for armeb-unknown-linux-gnueabi (#1958)

`v1.5.1`

Compare Source

Fixed

link the static C++ stdlib with -bundle, once per Build (#1955)

Other

Use lp64d ABI for Redox riscv64 (#1953)

`v1.5.0`

Compare Source

Added

inherit x86 target features from RUSTFLAGS (#1948)

Fixed

don't report the file name cl.exe echoes as a warning in expand() (#1950)
ignore MSVC /link flags with a warning (#1949)
Make windows_sys more private and re-export types needed by cc-rs (#1944)
pass -Tp on MSVC for .cc so they are not treated as objects (#1930)

Other

document macOS SDKROOT and Xcode CLT for testing (#1943)
remove License section from CONTRIBUTING.md (#1942)
add CONTRIBUTING.md and Conventional Commit PR title check (#1938)

Fixed

Pass -Tp immediately before .cc sources on MSVC (not clang-cl) when compiling C++ so they are not treated as object files (#1877)

typst/ecow (ecow)

`v0.3.1`: Version 0.3.1

Compare Source

Added new EcoBytes type, similar to EcoString but without enforcement of UTF-8 (thanks to @flyingmutant and @imbrem)
Added EcoString::{capacity, reserve}
Fixed compilation errors under no_std (thanks to @pedrodesu)

`v0.3.0`: Version 0.3.0

Compare Source

Added EcoString::{insert, insert_str, remove} methods
Added EcoVec::{drain, splice} methods
Added ToEcoString trait for conveniently converting something that implements Display to an EcoString
Added AsRef<[u8]>, AsRef<OsStr>, and AsRef<Path> impls for EcoString (thanks to @tingerrr)
Added FromIterator<&str> and Extend<&str> impls for EcoString (thanks to @pedrodesu)
Optimized EcoVec::reserve in the case it is non-unique (thanks to @ndren)
Added #[clippy::format_args] to eco_format macro so that eco_format! calls are linted by clippy (thanks to @isuffix)

This is a re-release of v0.2.7 which has been yanked. See #63 for more information.

`v0.2.7`: Version 0.2.7

Compare Source

This release has been yanked, use v0.3.0 instead. See #63 for more information.

extism/extism (extism)

`v1.41.0`

Compare Source

What's Changed

Pin cbindgen so crates.io publish stops rewriting extism.h by @nilslice in #921
Upgrade wasmtime to v49 by @milesj in #919

Full Changelog: extism/extism@v1.40.0...v1.41.0

rust-random/getrandom (getrandom)

`v0.4.3`

Compare Source

Added

wasm64-unknown-unknown target support for wasm_js backend #848

Changed

Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

`v0.4.2`

Compare Source

Changed

Bump r-efi dependency to v6 #814

Fixed

Read errno only when it is set #810
Check the return value of ProcessPrng on Windows #811

`v0.4.1`

Compare Source

Fixed

Documentation build on docs.rs #801

`v0.4.0`

Compare Source

Added

RawOsError type alias #739
SysRng behind new feature sys_rng #751
WASIp3 support #779
extern_impl opt-in backend #786 #794
Motor OS support #797

Changed

Use Edition 2024 and MSRV 1.85 #749

`v0.3.4`

Compare Source

Major change to `wasm_js` backend

Now, when the wasm_js feature is enabled, the wasm_js backend will be used
by default. Users of wasm32-unknown-unknown targeting JavaScript environments
like the Web and Node.js will no longer need to specify:

--cfg getrandom_backend="wasm_js"

in RUSTFLAGS for the crate to compile. They can now simple enable a feature.

Note: this should not affect non-JS users of the wasm32-unknown-unknown
target. Using --cfg getrandom_backend will still override the source of
randomness even if the wasm_js feature is enabled. This includes
--cfg getrandom_backend=custom and --cfg getrandom_backend=unsupported.

For more information, see the discussions in #671, #675, and #730.

Added

unsupported opt-in backend #667
windows_legacy opt-in backend #724

Changed

Implement Memory Sanitizer unpoisoning more precisely #678
Relax MSRV for the linux_raw opt-in backend on ARM targets #688
Use getrandom syscall on all RISC-V Linux targets #699
Replaced wasi dependency with wasip2 #721
Enable wasm_js backend by default if the wasm_js feature is enabled #730

Removed

Unstable rustc-dep-of-std crate feature #694

`v0.3.3`

Compare Source

Changed

Doc improvements #632 #634 #635
Add crate version to docs.rs links used in compile_error!s #639

Fixed

Error handling in WASI p1 #661

`v0.3.2`

Compare Source

Added

efi_rng opt-in backend #570
linux_raw opt-in backend #572
.cargo/config.toml example in the crate-level docs #591
getrandom_test_linux_without_fallback configuration flag to test that file fallback
is not triggered in the linux_android_with_fallback backend #605
Built-in support for *-linux-none targets #618
Cygwin support #626

Changed

Update wasi dependency to v0.14 #594
Add #[inline] attribute to the inner functions #596
Update WASI and Emscripten links in the crate-level docs #597
Do not use dlsym on MUSL targets in the linux_android_with_fallback backend #602
Remove linux_android.rs and use getrandom.rs instead #603
Always use RtlGenRandom on Windows targets when compiling with pre-1.78 Rust #610
Internal representation of the Error type #614
Remove windows-targets dependency and use raw-dylib directly #627

Removed

Error::INTERNAL_START and Error::CUSTOM_START associated constants #614

`v0.3.1`

Compare Source

Fixed

Build error on Android #588

`v0.3.0`

Compare Source

Breaking Changes

Changed

Bump MSRV to 1.63 #542
Rename getrandom and getrandom_uninit functions to fill and fill_uninit respectively #532

Removed

wasm32-wasi target support (use wasm32-wasip1 or wasm32-wasip2 instead) #499
linux_disable_fallback, rdrand, js, test-in-browser, and custom crate features
in favor of configuration flags #504
register_custom_getrandom! macro #504
Implementation of From<NonZeroU32> for Error and Error::code method #507
Internet Explorer 11 support #554
Target-specific associated Error constants #562

Changed

Use ProcessPrng on Windows 10 and up, and use RtlGenRandom on older Windows versions #415
Do not use locale-specific strerror_r for retrieving error code descriptions #440
Avoid assuming usize is the native word size in the rdrand backend #442
Do not read from errno when libc did not indicate error on Solaris #448
Switch from libpthread's mutex to futex on Linux and to nanosleep-based wait loop
on other targets in the use_file backend #490
Do not retry on EAGAIN while polling /dev/random on Linux #522
Remove separate codepath for Node.js in the wasm_js backend
(bumps minimum supported Node.js version to v19) #557
Use js_namespace in the wasm_js backend #559

Added

wasm32-wasip1 and wasm32-wasip2 support #499
getrandom_backend configuration flag for selection of opt-in backends #504
Error::new_custom method #507
rndr opt-in backend #512
Automatic MemorySanitizer support #521 #571
u32 and u64 functions for generating random values of the respective type #544
wasm32v1-none support in the wasm_js backend #560
wasm_js crate feature which allows users to enable the wasm_js opt-in backend #574

Fixed

NetBSD fallback code based on KERN_ARND #555

amazon-ion/ion-rust (ion-rs)

`v1.2.0`

Compare Source

Summary

This release makes binary writes 22–50% faster in benchmarks: writer symbol tables no longer allocate per symbol, and readers no longer build a text→SID map (#1065). For custom WriteAsIon implementations, IonError::application makes it possible to raise application-specific errors (#1073), and the experimental ValueWriter::Encoding makes it possible to encode a nested stream, such as a blob payload, in the same encoding as the enclosing writer (#1079). WriteConfig::with_max_depth sets a limit on how deeply containers can nest when writing; the default is 65,535 (#1074). Finally, experimental-serde can now deserialize internally tagged enums (#[serde(tag = "...")]) from both text and binary Ion (#1077).

What's Changed

docs: add AGENTS.md with contributor guidance for coding agents by @popematt in #1070
fix(writer): defer field name until StructWriter::write value is written by @popematt in #1072
fix: make binary LazyElement sound without lifetime erasure by @popematt in #1058
feat(writer): add WriteConfig::with_max_depth by @popematt in #1074
fix(reader): use Rc::assume_init in IoBuffer::alloc_zeroed by @popematt in #1075
Split symbol table by @JW-Huang in #1065
feat(error): add IonError::Application for user-raised errors by @popematt in #1073
feat(writer): expose ValueWriter::Encoding by @popematt in #1079
refactor(reader): drop untested unsafe from ExpandingReader by @popematt in #1078
fix(text): make text LazyElement sound without lifetime erasure by @popematt in #1080
fix(serde): deserialize internally tagged enums by @sgpthomas in #1077
fix(serde): tunnel Decimal and Timestamp as byte payloads by @popematt in #1082
chore: version bump to v1.2.0 by @popematt in #1083

New Contributors

@sgpthomas made their first contribution in #1077

Full Changelog: amazon-ion/ion-rust@v1.1.0...v1.2.0

`v1.1.0`

Compare Source

What's Changed

This release has smaller and faster in-memory representations for Timestamp, Decimal, Int, UInt, IonError, and Element annotations, plus faster text parsing and binary encoding. It also removes the incomplete Ion 1.1 implementation.

New Features

TimestampBuilder::localize_to_offset (#1055)
Experimental: is_inline on Int, UInt, Coefficient, and Decimal (#1068)
Experimental: managed writer instances can be reused (#1054)

Performance

Timestamp is now a 16-byte packed representation (#1041)
Decimal is now 24 bytes, backed by an overflowing-integer Coefficient (#1044, #1057)
Int and UInt are backed by the same overflowing-integer representation (#1064)
IonError is 32 bytes; large payloads are boxed (#1043)
Element annotations are packed into a single tagged pointer (#1053)
Struct fields are stored in a boxed slice with a lazily built index (#1048)
Faster binary VarUInt/VarInt writers and stack-encoded int/decimal magnitudes (#1047, #1049)
Reduced whitespace and field-name parsing overhead in the text reader (#1061)

Breaking change to experimental features

The experimental-ion-1-1 Cargo feature and the incomplete Ion 1.1 implementation behind it have been removed (#1056). Crates that enable experimental-ion-1-1 must remove it from their feature list to build with this release.

Other changes

The chrono dependency is now only pulled in by the experimental-chrono feature.
CI now checks the stable public API against a committed baseline (#1042).

New Contributors

@JW-Huang made their first contribution in #1057
@dantrapp made their first contribution in #1061

Full Changelog: amazon-ion/ion-rust@v1.0.1...v1.1.0

Stranger6667/jsonschema (jsonschema)

`v0.60.2`

Fixed

Stack overflow when building validators for unevaluated* schemas with $ref cycles across $id resources.

`v0.60.1`

Fixed

Panic on numbers past f64 in const, enum, minimum, maximum, exclusiveMinimum, exclusiveMaximum and type: integer when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. #1790
#[jsonschema::validator] panicking during expansion, or generating code that panics, on schema numbers past f64 when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. Such numbers are compile errors, as without that serde_json feature. #1790
const, enum and uniqueItems treating objects with the same members in a different key order as unequal when another crate in the build enables serde_json/preserve_order. #1791
Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000, with the arbitrary-precision feature.
#[jsonschema::validator] rejecting multipleOf with a positive divisor below the smallest f64, such as 1e-400, with the arbitrary-precision feature.

Performance

Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum with the arbitrary-precision feature taking time growing faster than the square of the digit count, instead of at most the square.
Validation of numbers with more than ten thousand digits, written or implied by their exponent, with the arbitrary-precision feature taking time linear in their written length instead of quadratic in their digit count.

`v0.60.0`

Changed

ValidationErrorKind::Enum and ValidationErrorKind::Constant holding their values as Arc<Value> shared with the validator, instead of a copy per error. #1777

Performance

Validation with unfinished regex matches running each such match once instead of once per run, and comparing errors across runs in linear time instead of quadratic. #1784
items and additionalProperties looking up a single-keyword subschema once per array or object instead of once per value.
is_valid and validate reading fewer cache lines per subschema, by keeping error locations apart from validators.
is_valid on recursive schemas caching only $ref results that took many steps to compute, instead of every one.
Error evaluation paths taking memory linear in the $ref nesting depth, not quadratic. #1778

`v0.59.0`

Added

CLI: - as a path reads the schema or an instance from stdin.
CLI: -V as the version flag; -v stays as an alias.

Changed

CLI: Exit status 3 for errors that prevent a verdict and 2 for usage errors, so 1 always means an invalid instance or schema.
CLI: Errors print to stderr instead of stdout.
**CL

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-09-19T12:48:18Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `getrandom`.
    ... required by package `morphir-gleam-binding v0.3.0 (/tmp/renovate/repos/github/finos/morphir-rust/crates/morphir-gleam-binding)`
versions that meet the requirements `^0.4` are: 0.4.3, 0.4.2, 0.4.1, 0.4.0

package `morphir-gleam-binding` depends on `getrandom` with feature `custom` but `getrandom` does not have that feature.
help: available features: std, sys_rng, wasm_js


failed to select a version for `getrandom` which could resolve this conflict

renovate · 2026-10-29T07:55:59Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Three of the 0.x "minor" updates in this group are breaking, because each crate has to match another crate's version: - getrandom stays at 0.2 in morphir-gleam-binding. The dependency only turns on the `custom` feature of the 0.2 copy that gleam-core's dependencies use on wasm32-unknown-unknown; 0.4 has no such feature and would add an unrelated copy. - ecow stays at =0.2.6, the version gleam-core uses, because morphir-gleam-binding passes EcoString values to and from gleam-core. - untrusted stays at 0.7.1 in morphir-package-tough, because aws-lc-rs 1.18 takes an untrusted 0.7 Reader. rusqlite 0.41 returns an iterator from Statement::column_names, so drop the redundant into_iter() that clippy now rejects. The lock file is resolved again; Renovate's update had failed on getrandom and left the old versions in place. Verified with cargo clippy --all-targets --all-features -D warnings, mise run test:unit (1209 passed) and cargo test --workspace --all-features --tests (4014 passed). Beads: morphir-x4ep.3 Claude-Session: https://claude.ai/code/session_016vWNpLC7n2Fat4wgyZR75p

renovate Bot force-pushed the renovate/rust-minor branch 29 times, most recently from 8aa08a2 to 9e8971c Compare September 23, 2026 00:47

renovate Bot force-pushed the renovate/rust-minor branch 9 times, most recently from 56b0cab to f86988e Compare September 28, 2026 19:49

renovate Bot force-pushed the renovate/rust-minor branch 3 times, most recently from eb5abe7 to 3ce82a4 Compare October 3, 2026 17:33

renovate Bot force-pushed the renovate/rust-minor branch 9 times, most recently from 86bf8ea to 4033f54 Compare October 20, 2026 19:13

renovate Bot force-pushed the renovate/rust-minor branch 6 times, most recently from 4cf7d1f to 9d55926 Compare October 28, 2026 18:57

renovate Bot and others added 2 commits October 31, 2026 21:04

fix(deps): update rust-minor

5d88e2d

Navigation Menu

Repository navigation

fix(deps): update rust-minor - #185

fix(deps): update rust-minor#185
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/rust-minor

renovate Bot commented Sep 19, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Sep 19, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Oct 29, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Sep 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

v1.19.0: aws-lc-rs v1.19.0

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v1.18.2: aws-lc-rs v1.18.2

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

Added

Fixed

Other

Added

Fixed

Other

Added

Fixed

Other

Added

Fixed

Other

Added

Fixed

Other

Fixed

Other

Added

Fixed

Other

Fixed

v0.3.1: Version 0.3.1

v0.3.0: Version 0.3.0

v0.2.7: Version 0.2.7

What's Changed

Added

Changed

Changed

Fixed

Fixed

Added

Changed

Major change to wasm_js backend

Added

Changed

Removed

Changed

Fixed

Added

Changed

Removed

Fixed

Breaking Changes

Changed

Removed

Changed

Added

Fixed

Summary

What's Changed

New Contributors

What's Changed

New Features

Performance

Breaking change to experimental features

Other changes

New Contributors

Fixed

Fixed

Performance

Changed

renovate Bot commented Sep 19, 2026 •

edited

Loading

`v1.19.0`: aws-lc-rs v1.19.0

`v1.18.2`: aws-lc-rs v1.18.2

`v0.3.1`: Version 0.3.1

`v0.3.0`: Version 0.3.0

`v0.2.7`: Version 0.2.7

Major change to `wasm_js` backend

renovate Bot commented Sep 19, 2026 •

edited

Loading