Bump the rust-crates group across 1 directory with 10 updates by dependabot[bot] · Pull Request #1262 · posit-dev/ark

dependabot · 2026-06-11T06:11:43Z

Bumps the rust-crates group with 10 updates in the / directory:

Package	From	To
cc	`1.2.61`	`1.2.62`
compact_str	`0.9.0`	`0.9.1`
dashmap	`6.1.0`	`6.2.1`
log	`0.4.29`	`0.4.30`
nix	`0.31.2`	`0.31.3`
reqwest	`0.13.3`	`0.13.4`
reqwest-middleware	`0.5.1`	`0.5.2`
serde_json	`1.0.149`	`1.0.150`
serde_with	`3.19.0`	`3.20.0`
tar	`0.4.45`	`0.4.46`

Updates cc from 1.2.61 to 1.2.62

Release notes

Sourced from cc's releases.

cc-v1.2.62

Other

Regenerate target info (#1721)

Allow exceptions on wasm platforms (#1714)

Add relibc env (#1710)

recognize sh4 architecture in parse_arch() (#1712)

Changelog

Sourced from cc's changelog.

1.2.62 - 2026-05-08

Other

Regenerate target info (#1721)

Allow exceptions on wasm platforms (#1714)

Add relibc env (#1710)

recognize sh4 architecture in parse_arch() (#1712)

Commits

37a5f8f chore(cc): release v1.2.62 (#1716)
34a2218 Regenerate target info (#1721)
a9d8632 Allow exceptions on wasm platforms (#1714)
ce036b3 Add relibc env (#1710)
18ed3dc target: recognize sh4 architecture in parse_arch() (#1712)
33f84c5 Bump taiki-e/install-action from 2.75.18 to 2.75.19 (#1709)
cbd4c09 Bump taiki-e/install-action from 2.75.17 to 2.75.18 (#1708)
See full diff in compare view

Updates compact_str from 0.9.0 to 0.9.1

Changelog

Sourced from compact_str's changelog.

0.9.1

May 26, 2026

Changes

Fixed a case of undefined behavior in HeapString.

Fix in fix: possible undefined behavior with realloc in a HeapString

Commits

fbe932e fix CI
639e171 v0.9.1
0a51e12 backport ParkMyCar/compact_str#459
70361f7 version: 0.9.0 (#430)
f1c0bc3 start, delete methods that are documented as being deleted in v0.9.0 (#429)
2d7e3d4 start, small fix, qualify the vec macro (#428)
See full diff in compare view

Updates dashmap from 6.1.0 to 6.2.1

Release notes

Sourced from dashmap's releases.

v6.2.1

This is an interim maintenance release for the existing v6 branch before v7 can be released. This bumps the MSRV to 1.85 and updates dependencies to their latest versions.

Commits

749ed1f v6.2.1
d02b945 v6.2.0
b983625 update dependencies
94a294a bump msrv to 1.85
See full diff in compare view

Updates log from 0.4.29 to 0.4.30

Release notes

Sourced from log's releases.

0.4.30

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Changelog

Sourced from log's changelog.

[0.4.30] - 2026-05-21

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Commits

9c55760 Merge pull request #725 from rust-lang/cargo/0.4.30
d1acb05 update docs on current MSRV and note latest bump in changelog
5068293 prepare for 0.4.30 release
7ccd873 Merge pull request #724 from rust-lang/feat/net-to-value
923dfaa fix up test cfgs
ecb7de8 gate net value impls on std
67bb4f6 run fmt
25f49fe rework net type capturing
7087dcb feat: impl ToValue for core::net types
67bc7e3 Merge pull request #723 from woodruffw-forks/ww/ci
Additional commits viewable in compare view

Updates nix from 0.31.2 to 0.31.3

Changelog

Sourced from nix's changelog.

[0.31.3] - 2026-05-11

Added

Enable module ioctl for Cygwin (#2715)

Add CLOCK_BOOTTIME/CLOCK_PROCESS_CPUTIME_ID/CLOCK_THREAD_CPUTIME_ID/CLOCK_UPTIME to NetBSD-like platforms (#2716)

unistd: add mkfifo for redox (#2749)

Added kevent64 support on apple targets: Kqueue::kevent64, KEvent64, and Kevent64Flags. (#2781)

Fixed

fix SaFlags_t definition on redox (#2751)

Fixed EpollEvent::events() to use from_bits_retain instead of from_bits().unwrap(), preventing panics when the kernel returns unknown epoll flags. (#2783)

Fixed KEvent::flags() and KEvent::fflags() to use from_bits_retain instead of from_bits().unwrap(), preventing panics when the kernel returns unknown kqueue flags. (#2784)

Commits

b5933ca chore: release v0.31.3
5d6a46e Replace Cirrus CI with more Github Workflows jobs (#2776)
3407489 event: add kevent64 support on apple targets (#2781)
fe80fc5 chore: resolve clippy useless_borrows_in_formatting (#2790)
3310fc7 Revert "fix(ci): temporarily disable armv7-unknown-linux-uclibceabihf (#2764)...
e3ab917 epoll: use from_bits_retain to avoid panics on unknown flags (#2783)
6c15701 kqueue: use from_bits_retain to avoid panics on unknown flags (#2784)
73028cf fix(ci): enable Hurd target (#2765)
1a680a9 cargo: Remove deprecated package authors field (#2789)
85cff07 docs: add missing changelog entries (#2786)
Additional commits viewable in compare view

Updates reqwest from 0.13.3 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.

Add ClientBuilder::http2_keep_alive_* options for the blocking client.

Add TLS 1.3 support when using native-tls backend.

Fix redirect handling to strip sensitive headers when the scheme changes.

Fix HTTP/3 happy-eyeball connection creation.

Upgrade hickory-resolver to 0.26.

What's Changed

fix(tls): improve rustls-no-provider panic message and add module docs by @smythg4 in seanmonstar/reqwest#3021

fix: do not lose the url in error when decoding json by @Dushistov in seanmonstar/reqwest#3026

Add tls_sslkeylogfile builder method by @passcod in seanmonstar/reqwest#2923

fix(redirect): strip sensitive headers on scheme change across redirects by @SAY-5 in seanmonstar/reqwest#3034

chore: upgrade MSRV to 1.85 by @seanmonstar in seanmonstar/reqwest#3038

chore: clean up minimal-versions CI job by @seanmonstar in seanmonstar/reqwest#3039

fix(http3): use happy eyeballs for h3 connect by @lyuzichong in seanmonstar/reqwest#3030

fix: update hickory-resolver to 0.26 and adjust code accordingly by @seanmonstar in seanmonstar/reqwest#3040

fix: remove unwrap in hickory initialization by @mat813 in seanmonstar/reqwest#3041

feat(https): support TLS 1.3 as min version under native-tls 🎉 by @AverageHelper in seanmonstar/reqwest#2975

Expose keep alive configurations in blocking client by @aeb-dev in seanmonstar/reqwest#3043

Prepare v0.13.4 by @seanmonstar in seanmonstar/reqwest#3046

New Contributors

@smythg4 made their first contribution in seanmonstar/reqwest#3021

@Dushistov made their first contribution in seanmonstar/reqwest#3026

@SAY-5 made their first contribution in seanmonstar/reqwest#3034

@mat813 made their first contribution in seanmonstar/reqwest#3041

@AverageHelper made their first contribution in seanmonstar/reqwest#2975

@aeb-dev made their first contribution in seanmonstar/reqwest#3043

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

Changelog

Sourced from reqwest's changelog.

v0.13.4

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.

Add ClientBuilder::http2_keep_alive_* options for the blocking client.

Add TLS 1.3 support when using native-tls backend.

Fix redirect handling to strip sensitive headers when the scheme changes.

Fix HTTP/3 happy-eyeball connection creation.

Upgrade hickory-resolver to 0.26.

Commits

11489b3 v0.13.4
d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
fb7bf6a fix: remove unwrap in hickory initialization (#3041)
3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
9cbb65b chore: clean up minimal-versions CI job (#3039)
17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
Additional commits viewable in compare view

Updates reqwest-middleware from 0.5.1 to 0.5.2

Release notes

Sourced from reqwest-middleware's releases.

reqwest-middleware-v0.5.2

Added

(reqwest-middleware) stream feature exported. (#246)

expose internal reqwest::Client as reference (#209)

Other

Adjust third-party middleware list in readme (#282)

Commits

614b947 chore: release (#280)
051dc25 feat!: support opentelemetry 0.32 (#284)
9bedaf8 Adjust third-party middleware list in readme (#282)
8bc3640 feat(reqwest-middleware): stream feature exported. (#246)
de31517 feat: expose internal reqwest::Client as reference (#209)
See full diff in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates serde_with from 3.19.0 to 3.20.0

Release notes

Sourced from serde_with's releases.

serde_with v3.20.0

Added

Add support for base58 encoding, similar to the existing base64 setup by @mitinarseny (#943)

Fixed

Extend base64 with schemars support by @mitinarseny (#9949)

Commits

f1b06c7 Bump version to 3.20.0 (#953)
11fe1c5 Bump version to 3.20.0
222b9aa Include Rust 1.95 in the CI matrix (#951)
993770c Include Rust 1.95 in the CI matrix
731b00b feat: automatic schemars support for Base64 (#949)
93d6d9d Bump github/codeql-action from 4.35.2 to 4.35.3 in the github-actions group (...
59bc97b Bump github/codeql-action in the github-actions group
84f2e40 feat: automatic schemars support for base64
ff837ab feat: base58 (#943)
9fda9ce chore: bring back newline
Additional commits viewable in compare view

Updates tar from 0.4.45 to 0.4.46

Release notes

Sourced from tar's releases.

0.4.46

Security

archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm) by @cgwalters in composefs/tar-rs#454

See also GHSA-3cv2-h65g-fgmm

Other changes

ci: Fix and re-enable reverse dependency testing by @cgwalters in composefs/tar-rs#444

Update astral-tokio-tar requirement from 0.5 to 0.6 by @dependabot[bot] in composefs/tar-rs#446

Update some links by @atouchet in composefs/tar-rs#445

Add support of absolute paths by @zxvfc in composefs/tar-rs#426

docs: Expand notes on concurrent mutations and following symlinks by @cgwalters in composefs/tar-rs#453

Update repo links by @cgwalters in composefs/tar-rs#451

ci: Add crates.io trusted publishing workflow by @cgwalters in composefs/tar-rs#456

Release 0.4.46 by @cgwalters in composefs/tar-rs#455

New Contributors

@dependabot[bot] made their first contribution in composefs/tar-rs#446

@atouchet made their first contribution in composefs/tar-rs#445

@zxvfc made their first contribution in composefs/tar-rs#426

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits

fc459c1 Release 0.4.46
43e05a8 ci: Add crates.io trusted publishing workflow
bba5666 Update repo links
cd94c46 docs: Document TOCTOU / concurrent-mutation threat model
1b4997c builder: Expand docs for follow_symlinks and append_dir_all
bab14dd archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm)
2349b49 Add support of absolute paths
39d0311 Update some links
59d803e Update astral-tokio-tar requirement from 0.5 to 0.6
8296b9a ci: Fix and re-enable reverse dependency testing (#444)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-crates group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cc](https://github.com/rust-lang/cc-rs) | `1.2.61` | `1.2.62` | | [compact_str](https://github.com/ParkMyCar/compact_str) | `0.9.0` | `0.9.1` | | [dashmap](https://github.com/xacrimon/dashmap) | `6.1.0` | `6.2.1` | | [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.30` | | [nix](https://github.com/nix-rust/nix) | `0.31.2` | `0.31.3` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.3` | `0.13.4` | | [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) | `0.5.1` | `0.5.2` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.19.0` | `3.20.0` | | [tar](https://github.com/composefs/tar-rs) | `0.4.45` | `0.4.46` | Updates `cc` from 1.2.61 to 1.2.62 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@cc-v1.2.61...cc-v1.2.62) Updates `compact_str` from 0.9.0 to 0.9.1 - [Changelog](https://github.com/ParkMyCar/compact_str/blob/v0.9.1/CHANGELOG.md) - [Commits](ParkMyCar/compact_str@v0.9.0...v0.9.1) Updates `dashmap` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/xacrimon/dashmap/releases) - [Commits](xacrimon/dashmap@v6.1.0...v6.2.1) Updates `log` from 0.4.29 to 0.4.30 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.29...0.4.30) Updates `nix` from 0.31.2 to 0.31.3 - [Changelog](https://github.com/nix-rust/nix/blob/master/CHANGELOG.md) - [Commits](nix-rust/nix@v0.31.2...v0.31.3) Updates `reqwest` from 0.13.3 to 0.13.4 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.3...v0.13.4) Updates `reqwest-middleware` from 0.5.1 to 0.5.2 - [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases) - [Commits](TrueLayer/reqwest-middleware@reqwest-middleware-v0.5.1...reqwest-middleware-v0.5.2) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `serde_with` from 3.19.0 to 3.20.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.19.0...v3.20.0) Updates `tar` from 0.4.45 to 0.4.46 - [Release notes](https://github.com/composefs/tar-rs/releases) - [Commits](composefs/tar-rs@0.4.45...0.4.46) --- updated-dependencies: - dependency-name: cc dependency-version: 1.2.62 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-crates - dependency-name: compact_str dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-crates - dependency-name: dashmap dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-crates - dependency-name: log dependency-version: 0.4.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-crates - dependency-name: nix dependency-version: 0.31.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-crates - dependency-name: reqwest dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-crates - dependency-name: reqwest-middleware dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-crates - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-crates - dependency-name: serde_with dependency-version: 3.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-crates - dependency-name: tar dependency-version: 0.4.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-crates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the rust-crates group across 1 directory with 10 updates#1262

Bump the rust-crates group across 1 directory with 10 updates#1262
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-crates-80db666529

dependabot Bot commented on behalf of github Jun 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 11, 2026

cc-v1.2.62

Other

1.2.62 - 2026-05-08

Other

0.9.1

May 26, 2026

Changes

v6.2.1

0.4.30

What's Changed

New Contributors

Notable Changes

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Notable Changes

[0.31.3] - 2026-05-11

Added

Fixed

v0.13.4

tl;dr

What's Changed

New Contributors

v0.13.4

reqwest-middleware-v0.5.2

Added

Other

v1.0.150

serde_with v3.20.0

Added

Fixed

0.4.46

Security

Other changes

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants