Skip to content

build(deps): bump the cargo group across 1 directory with 8 updates - #596

Merged
twitchyliquid64 merged 2 commits into
mainfrom
dependabot/cargo/cargo-c82013c660
Jun 29, 2026
Merged

build(deps): bump the cargo group across 1 directory with 8 updates#596
twitchyliquid64 merged 2 commits into
mainfrom
dependabot/cargo/cargo-c82013c660

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 8 updates in the / directory:

Package From To
anyhow 1.0.102 1.0.103
bytes 1.11.1 1.12.0
camino 1.2.2 1.2.4
indicatif 0.18.4 0.18.5
rcgen 0.13.2 0.14.8
rustls 0.23.40 0.23.41
uuid 1.23.3 1.23.4
mockall 0.14.0 0.15.0

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Commits

Updates camino from 1.2.2 to 1.2.4

Release notes

Sourced from camino's releases.

camino 1.2.4

Added

Methods to convert between Box<Utf8Path> and Box<Path>:

  • From<Box<Utf8Path>> for Box<Path> (as of release, not documented due to rust-lang/rust#158466).
  • Utf8Path::into_std_boxed_path(self: Box<Self>)
  • Utf8Path::from_boxed_path(path: Box<Path>)
  • TryFrom<Box<Path>> for Box<Utf8Path>

Thanks nicopap for your first contribution!

camino 1.2.3

Performance improvements

  • Utf8Path::hash now delegates to std::path::Path::hash, resulting in hashing requiring ~2x fewer instructions. Thanks stormslowly for your first contribution!
Changelog

Sourced from camino's changelog.

[1.2.4] - 2026-06-27

Added

Methods to convert between Box<Utf8Path> and Box<Path>:

  • From<Box<Utf8Path>> for Box<Path> (as of release, not documented due to rust-lang/rust#158466).
  • Utf8Path::into_std_boxed_path(self: Box<Self>)
  • Utf8Path::from_boxed_path(path: Box<Path>)
  • TryFrom<Box<Path>> for Box<Utf8Path>

Thanks nicopap for your first contribution!

[1.2.3] - 2026-06-18

Performance improvements

  • Utf8Path::hash now delegates to std::path::Path::hash, resulting in hashing requiring ~2x fewer instructions. Thanks stormslowly for your first contribution!
Commits
  • 8966366 [camino] version 1.2.4
  • abf526b [meta] prepare release
  • 417c6e1 docs: fix dangling [from] link in into_std_boxed_path (#125)
  • 6d25706 add Box<Path> -> Box<Utf8Path> conversion (#124)
  • 816ddeb test Box\<Utf8Path> conversions, and other review fixes (#123)
  • e437cc3 Add conversion from Box<Utf8Path> to Box<Path> (#122)
  • 0b4c744 [camino] version 1.2.3
  • feac129 [meta] prepare changelog
  • f806a85 add cargo-release autoreplacements
  • 6368097 perf: delegate Utf8Path::hash to the wrapped Path (#120)
  • Additional commits viewable in compare view

Updates indicatif from 0.18.4 to 0.18.5

Release notes

Sourced from indicatif's releases.

0.18.5

What's Changed

Commits
  • 90156ec Drop screenshots from MultiProgress documentation
  • 4dbd0d5 Bump version to 0.18.5
  • 24973aa Take semver-compatible dependency versions
  • a575ef7 style: inline Template::from_str_with_tab_width()
  • 0b94aa2 style: replace from_str() method with FromStr impl
  • 398ac69 style: move helper functions to the bottom
  • 692705d Fix HumanFloatCount dropping rounding at precision 0
  • cbd070d Fix stray comma after minus sign in HumanFloatCount
  • 1fb0b62 Bump actions/checkout from 6 to 7
  • cf53b69 Bump unicode-segmentation from 1.12.0 to 1.13.3
  • Additional commits viewable in compare view

Updates rcgen from 0.13.2 to 0.14.8

Release notes

Sourced from rcgen's releases.

0.14.8

What's Changed

0.14.7

What's Changed

0.14.6

What's Changed

0.14.5

Implement SigningKey for &impl SigningKey to make Issuer more broadly useful.

What's Changed

0.14.4

What's Changed

0.14.3

What's Changed

... (truncated)

Commits
  • a70f083 Bump version to 0.14.8
  • a32fdb1 Fix encoding of directoryName constraints
  • 7111a79 update key_pair to signing_key
  • 10664c9 Take semver-compatible dependency updates
  • 0ec4d09 Add testing of CSR serializing basic constraints
  • 5f94ef9 Add support for serializing BasicConstraints in CSR's
  • fb835c1 Add writing basic constraints logic
  • 0cf161d Bump codecov/codecov-action from 5 to 6
  • 4909041 Add testing of CSR Params parsing Basic Constraints variants
  • 6675a94 Add support for is_ca in CSR Params
  • Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.41

Commits
  • 642a103 ci: drop Taplo job
  • 752c144 Drop nightly clippy tests
  • 8d8611a Fix new clippy::useless-borrows-in-formatting
  • ebf3297 Fix new clippy::manual_clear
  • 46808e7 ci: sync cargo-check-external-types nightly
  • 041a8d2 Cargo deny: allow RUSTSEC-2026-0173
  • 62e220e Take semver-compatible dependency updates
  • 3c14696 Upgrade to hickory-resolver 0.26
  • 848a2cc connect-tests: delete ech.rs
  • 5ce9cac Bump version to 0.23.41
  • Additional commits viewable in compare view

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits
  • 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
  • cba53d0 prepare for 1.23.4 release
  • e347af4 Merge pull request #889 from frostyplanet/main
  • e9bf55c doc: Fix broken link warnings
  • 5351af4 doc: Enable feature flag label for docs.rs
  • 1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
  • c9619f6 fix up name of fuzz script in readme
  • See full diff in compare view

Updates mockall from 0.14.0 to 0.15.0

Changelog

Sourced from mockall's changelog.

[ 0.15.0 ] - 2026-06-28

Added

  • Compatibility with the #[auto_impl] macro. (#686)
Commits
  • fc2c853 chore: Release
  • 551fadd Merge pull request #688 from asomers/audit-job-lockfile
  • 21529e3 Fix the audit CI job
  • 2270cdb Merge pull request #686 from Kranzes/automock-auto_impl-compat
  • d3b041d Add compatibility with the #[auto_impl] macro
  • 055886e Merge pull request #687 from asomers/clippy-june-2026
  • ed4bf07 Clippy cleanup
  • f7a4d6f Merge pull request #685 from asomers/clippy=may-2026
  • ba15180 Clippy cleanup: useless_borrows_in_formatting
  • de22d57 Merge pull request #684 from asomers/github-workflows
  • Additional commits viewable in compare view

Summary by CodeRabbit

  • Chores
    • Updated a workspace cryptography-related dependency to a newer version while keeping the same feature set.
    • Bumped a development/testing dependency to the latest compatible release.
  • Refactor
    • Improved internal certificate authority handling to reuse a single issuer for signing server and client certificates.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 29, 2026
@coderabbitai

coderabbitai Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: b104a445-d848-4367-ade9-4f0be050eba2

📥 Commits

Reviewing files that changed from the base of the PR and between 773334a and 8173fd1.

📒 Files selected for processing (1)
  • crates/minimald/src/net/proxy.rs
📝 Walkthrough

Walkthrough

The workspace rcgen dependency and crates/rcache mockall dev-dependency were bumped, and crates/minimald/src/net/proxy.rs now retains an rcgen::Issuer inside CertAuthority for server and client certificate signing.

Changes

Dependency Version Bumps

Layer / File(s) Summary
rcgen and mockall version bumps
Cargo.toml, crates/rcache/Cargo.toml		 rcgen is updated from 0.13 to 0.14 with the same feature set, and mockall is updated from 0.14 to 0.15.

Certificate Authority Issuer Refactor

Layer / File(s) Summary
CertAuthority issuer signing
crates/minimald/src/net/proxy.rs		 CertAuthority now stores an issuer, constructs it during generation, and uses it to sign the server certificate plus generated client certificates.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

Suggested reviewers

  • norrietaylor

Poem

🐇 Two bumps in the garden, neat and small,
One issuer now signs certificates for all.
The rabbit hops by with a pleased little grin,
While versioned pebbles settle right in.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately reflects a Dependabot-style Cargo dependency bump with eight updates in the repository.
Docstring Coverage ✅ Passed Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch

Comment @coderabbitai help to get the list of available commands.

coderabbitai[bot]
coderabbitai Bot reviewed Jun 29, 2026
View reviewed changes

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@Cargo.toml`:
- Line 98: The rcgen 0.14 upgrade breaks the old 3-argument signed_by usage, so
update all affected call sites together. In the proxy certificate generation
code in minimald net proxy, replace the legacy signed_by(&key, &cert, &ca_key)
pattern with the new Issuer-based API and make sure every place that constructs
CA-signed certs uses the same updated flow. Check the helper and related
certificate-issuing logic in the proxy module so the build succeeds with rcgen
0.14.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: d112ea4e-a297-4fb4-b761-aed453458e05

📥 Commits

Reviewing files that changed from the base of the PR and between 94da592 and e49f397.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (2)
  • Cargo.toml
  • crates/rcache/Cargo.toml

Comment thread Cargo.toml
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-c82013c660 branch from e49f397 to 7ba10e6 Compare June 29, 2026 16:01
@dependabot
build(deps): bump the cargo group across 1 directory with 8 updates
773334a 
Bumps the cargo group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.0` |
| [camino](https://github.com/camino-rs/camino) | `1.2.2` | `1.2.4` |
| [indicatif](https://github.com/console-rs/indicatif) | `0.18.4` | `0.18.5` |
| [rcgen](https://github.com/rustls/rcgen) | `0.13.2` | `0.14.8` |
| [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.41` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.23.4` |
| [mockall](https://github.com/asomers/mockall) | `0.14.0` | `0.15.0` |



Updates `anyhow` from 1.0.102 to 1.0.103
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.103)

Updates `bytes` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.1...v1.12.0)

Updates `camino` from 1.2.2 to 1.2.4
- [Release notes](https://github.com/camino-rs/camino/releases)
- [Changelog](https://github.com/camino-rs/camino/blob/main/CHANGELOG.md)
- [Commits](camino-rs/camino@camino-1.2.2...camino-1.2.4)

Updates `indicatif` from 0.18.4 to 0.18.5
- [Release notes](https://github.com/console-rs/indicatif/releases)
- [Commits](console-rs/indicatif@0.18.4...0.18.5)

Updates `rcgen` from 0.13.2 to 0.14.8
- [Release notes](https://github.com/rustls/rcgen/releases)
- [Commits](rustls/rcgen@v0.13.2...v0.14.8)

Updates `rustls` from 0.23.40 to 0.23.41
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.40...v/0.23.41)

Updates `uuid` from 1.23.3 to 1.23.4
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.3...v1.23.4)

Updates `mockall` from 0.14.0 to 0.15.0
- [Changelog](https://github.com/asomers/mockall/blob/master/CHANGELOG.md)
- [Commits](asomers/mockall@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.103
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: bytes
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: camino
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: indicatif
  dependency-version: 0.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: mockall
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rcgen
  dependency-version: 0.14.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rustls
  dependency-version: 0.23.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-c82013c660 branch from 7ba10e6 to 773334a Compare June 29, 2026 16:13
@twitchyliquid64
twitchyliquid64 enabled auto-merge (squash) June 29, 2026 16:21
@twitchyliquid64
twitchyliquid64 merged commit 8167059 into main Jun 29, 2026
41 checks passed
@twitchyliquid64
twitchyliquid64 deleted the dependabot/cargo/cargo-c82013c660 branch June 29, 2026 16:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@coderabbitai coderabbitai[bot] coderabbitai[bot] left review comments
@twitchyliquid64 twitchyliquid64 twitchyliquid64 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@twitchyliquid64