Skip to content

build(deps): bump the time group across 1 directory with 3 updates#4572

Draft
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/time-1be4ecab1f
Draft

build(deps): bump the time group across 1 directory with 3 updates#4572
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/time-1be4ecab1f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the time group with 1 update in the / directory: time.

Updates time from 0.3.47 to 0.3.49

Release notes

Sourced from time's releases.

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.49 [2026-06-13]

Fixed

  • Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop compiling. A patch has been added that avoids triggering the bug.

0.3.48 [2026-06-12] [YANKED]

Security

  • The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded user input. Digits after the 9th have no semantic meaning.
  • Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple locations for soundness. The practical effect of this change is nothing, as Rust has always mapped C-like enums to 0..N in memory.

Compatibility

  • Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only format and parse valid UTF-8.
  • format_description::parse is deprecated. It is recommended to use format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

  • All types in the unit module have a generic parameter, though this is currently not used for much. Usage will be expanded in the future.
  • Comparisons between types in the unit module and the generic Unit type are permitted.
  • Support for rand 0.10
  • Version 3 format descriptions
    • Only UTF-8 is supported. As a side effect of this, [ignore] requires that the remaining input not begin mid-codepoint.
    • Representation is deliberately opaque to allow for arbitrary changes going forward.
    • format:false is supported on [optional] components. This is not possible in version 1 and version 2 format descriptions due to API compatibility.
    • The time::serde::format_description! macro uses a new, clearer syntax for version 3.
      • time::serde::format_description!(mod foo [Date] = "[year]-[month]-[day]");
      • Unlike version 1 and version 2 format descriptions, the type is not automatically brought into scope. You must import it yourself.
    • Nonsensical combinations of modifiers are rejected. For example, you cannot specify case-sensitivity when parsing a numerical month.
    • [year] defaults to range:standard
    • Components and modifiers are case sensitive (and always lowercase).

Changed

  • The convert module has been renamed to unit.

Fixed

... (truncated)

Commits
  • ff8683c v0.3.49 release
  • f189886 fix: resolve E0119 trait coherence error in rustc >= 1.95.0
  • 5d8737c v0.3.48 release
  • 1bfca87 Use widen instead of extend in sys code
  • c57284f fix: return error instead of panicking on truncated strftime padding modifier
  • a74f35f Use v3 format descriptions for serde defaults
  • 96ff36c Allow eliding serde format description version
  • edc58b1 Permit duplicates in v1/v2 in permit_modifiers!
  • a838f69 Bump codecov action
  • f2f99f8 Fix unused warning
  • Additional commits viewable in compare view

Updates time-core from 0.1.8 to 0.1.9

Changelog

Sourced from time-core's changelog.

Changelog

All notable changes to the time project will be documented in this file.

The format is based on [Keep a Changelog]. This project adheres to [Semantic Versioning].


0.3.49 [2026-06-13]

Fixed

  • Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop compiling. A patch has been added that avoids triggering the bug.

0.3.48 [2026-06-12] [YANKED]

Security

  • The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded user input. Digits after the 9th have no semantic meaning.
  • Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple locations for soundness. The practical effect of this change is nothing, as Rust has always mapped C-like enums to 0..N in memory.

Compatibility

  • Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only format and parse valid UTF-8.
  • format_description::parse is deprecated. It is recommended to use format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

  • All types in the unit module have a generic parameter, though this is currently not used for much. Usage will be expanded in the future.
  • Comparisons between types in the unit module and the generic Unit type are permitted.
  • Support for rand 0.10
  • Version 3 format descriptions
    • Only UTF-8 is supported. As a side effect of this, [ignore] requires that the remaining input not begin mid-codepoint.
    • Representation is deliberately opaque to allow for arbitrary changes going forward.
    • format:false is supported on [optional] components. This is not possible in version 1 and version 2 format descriptions due to API compatibility.
    • The time::serde::format_description! macro uses a new, clearer syntax for version 3.
      • time::serde::format_description!(mod foo [Date] = "[year]-[month]-[day]");
      • Unlike version 1 and version 2 format descriptions, the type is not automatically brought into scope. You must import it yourself.
    • Nonsensical combinations of modifiers are rejected. For example, you cannot specify case-sensitivity when parsing a numerical month.

... (truncated)

Commits

Updates time-macros from 0.2.27 to 0.2.29

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jun 12, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 12, 2026 10:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jun 12, 2026
@cratelyn cratelyn marked this pull request as draft June 12, 2026 14:14
@cratelyn

Copy link
Copy Markdown
Member

there's something wrong in the rcgen crate, looking at the build here.

i'm marking this as a draft until we have time to triage this.

Bumps the time group with 1 update in the / directory: [time](https://github.com/time-rs/time).


Updates `time` from 0.3.47 to 0.3.49
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.47...v0.3.49)

Updates `time-core` from 0.1.8 to 0.1.9
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](https://github.com/time-rs/time/commits)

Updates `time-macros` from 0.2.27 to 0.2.29
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](https://github.com/time-rs/time/commits)

---
updated-dependencies:
- dependency-name: time
  dependency-version: 0.3.48
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: time
- dependency-name: time-core
  dependency-version: 0.1.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: time
- dependency-name: time-macros
  dependency-version: 0.2.28
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: time
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the time group with 3 updates build(deps): bump the time group across 1 directory with 3 updates Jun 15, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/time-1be4ecab1f branch from 9f96734 to 2cdd8ae Compare June 15, 2026 10:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant