Skip to content

build(deps): bump the cargo group with 4 updates - #1159

Merged
twitchyliquid64 merged 1 commit into
mainfrom
dependabot/cargo/cargo-2c7060f0df
Aug 3, 2026
Merged

build(deps): bump the cargo group with 4 updates#1159
twitchyliquid64 merged 1 commit into
mainfrom
dependabot/cargo/cargo-2c7060f0df

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited by macroscopeapp Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 4 updates: async-compression, camino, rustls and toml.

Updates async-compression from 0.4.42 to 0.4.43

Release notes

Sourced from async-compression's releases.

async-compression-v0.4.43

Other

  • Fix hang when decoding a corrupt subsequent zstd frame (#470)
Commits
  • 6fd95cf chore(async-compression): release v0.4.43 (#471)
  • 25e903d Fix hang when decoding a corrupt subsequent zstd frame (#470)
  • 05af670 chore(deps): bump actions/checkout from 6 to 7 (#469)
  • e6d4ba7 chore(deps): bump codecov/codecov-action from 6 to 7 (#468)
  • See full diff in compare view

Updates camino from 1.2.4 to 1.2.5

Release notes

Sourced from camino's releases.

camino 1.2.5

Fixed

Removed unnecessary files from the package.

Changelog

Sourced from camino's changelog.

[1.2.5] - 2026-07-28

Fixed

Removed unnecessary files from the package.

Commits

Updates rustls from 0.23.42 to 0.23.43

Commits
  • fcf61cd Prepare 0.23.43
  • f0dad4c Check server's proposed suite against actual offer
  • b480cc6 Test for server choosing a non-QUIC TLS1.3 suite
  • 883a44d Consider Protocol in ServerConfig::supports_version
  • c2f1fd9 Check suitability of server version in QUIC client
  • d98e1b9 Add test for server Tls13RequiredForQuic
  • e63d9bf Bound ticket age calculation
  • 79cd462 Defensiveness improvement for binder suffix arithmetic
  • 4a9f025 use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt
  • 3131e5c Accept that libcrux deps are vulnerable
  • Additional commits viewable in compare view

Updates toml from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0

Commits
  • beee9fe chore: Release
  • 16e2ac1 docs: Update changelog
  • 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
  • 534039c fix(serde): Deserialize Value datetimes into typed targets
  • 6e45cef test(serde): Reproduce Value datetime deserialization error
  • 4ec099f chore: Release
  • 5a47a51 docs: Update changelog
  • da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
  • 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
  • ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note

Bump 4 Cargo dependencies

Updates the Cargo.lock lockfile with 4 dependency version bumps from the cargo group.

Macroscope summarized e280273.

@dependabot
build(deps): bump the cargo group with 4 updates
e280273 
Bumps the cargo group with 4 updates: [async-compression](https://github.com/Nullus157/async-compression), [camino](https://github.com/camino-rs/camino), [rustls](https://github.com/rustls/rustls) and [toml](https://github.com/toml-rs/toml).


Updates `async-compression` from 0.4.42 to 0.4.43
- [Release notes](https://github.com/Nullus157/async-compression/releases)
- [Commits](Nullus157/async-compression@async-compression-v0.4.42...async-compression-v0.4.43)

Updates `camino` from 1.2.4 to 1.2.5
- [Release notes](https://github.com/camino-rs/camino/releases)
- [Changelog](https://github.com/camino-rs/camino/blob/main/CHANGELOG.md)
- [Commits](camino-rs/camino@camino-1.2.4...camino-1.2.5)

Updates `rustls` from 0.23.42 to 0.23.43
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.42...v/0.23.43)

Updates `toml` from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.3...toml-v1.1.4)

---
updated-dependencies:
- dependency-name: async-compression
  dependency-version: 0.4.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: camino
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rustls
  dependency-version: 0.23.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: toml
  dependency-version: 1.1.4+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 3, 2026 14:00
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 3, 2026
@CLAassistant

CLAassistant commented Aug 3, 2026

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@twitchyliquid64
twitchyliquid64 merged commit c0c68fa into main Aug 3, 2026
27 of 29 checks passed
@twitchyliquid64
twitchyliquid64 deleted the dependabot/cargo/cargo-2c7060f0df branch August 3, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@twitchyliquid64 twitchyliquid64 twitchyliquid64 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@CLAassistant @twitchyliquid64