⬆️ deps: Update dependencies (non-major) by renovate[bot] · Pull Request #20 · zendev-lab/cue

renovate · 2026-08-03T02:07:04Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
anyhow	workspace.dependencies	patch	`1.0.102` → `1.0.104`
base64	workspace.dependencies	minor	`0.22` → `0.23`
blake3	workspace.dependencies	patch	`1.8.5` → `1.8.6`
bpaf	workspace.dependencies	patch	`0.9.26` → `0.9.27`
libc	workspace.dependencies	patch	`0.2.186` → `0.2.189`
python	uses-with	minor	`3.13` → `3.14`
ratatui (source)	workspace.dependencies	patch	`0.30.1` → `0.30.2`
rusqlite	workspace.dependencies	patch	`0.40.1` → `0.40.2`
rust (source, changelog)	uses-with	minor	`1.95` → `1.97`
serde (source)	workspace.dependencies	patch	`1.0.228` → `1.0.229`
serde_json	workspace.dependencies	patch	`1.0.150` → `1.0.151`
thiserror	workspace.dependencies	patch	`2.0.18` → `2.0.20`
tokio (source)	workspace.dependencies	minor	`1.52.3` → `1.53.1`
toml	workspace.dependencies	patch	`1.1.2+spec-1.1.0` → `1.1.4`
uuid	workspace.dependencies	minor	`1.23.2` → `1.24.0`

Release Notes

dtolnay/anyhow (anyhow)

`v1.0.104`

Compare Source

Update syn dev-dependency to version 3

`v1.0.103`

Compare Source

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

marshallpierce/rust-base64 (base64)

`v0.23.1`

Compare Source

Make the tests build again on non-SIMD architectures

`v0.23.0`

Compare Source

Added more consts for preconfigured configs and engines
Make DecodeError::InvalidLastSymbol more clear by including the decoded value
Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
detection and work in no_std. The engines support the standard and URL-safe alphabets.
Update MSRV to 1.71.0
Add support for custom padding symbols

BLAKE3-team/BLAKE3 (blake3)

`v1.8.6`

Compare Source

version 1.8.6

Changes since 1.8.5:

update_mmap and update_mmap_rayon (and by extension b3sum) now
use seek rather than metadata to get the length of a file/mapping,
and they tolerate mmap failures. That means b3sum will now memory
map e.g. Linux block devices, which support mapping despite reporting
length 0 in metadata. Hashing NUL files on Windows also works now,
where previously it was an error unless you used --no-mmap or <.
This change was originally proposed by @nabijaczleweli.

pacak/bpaf (bpaf)

`v0.9.27`

improve error message if user passes an empty value to argument or positional

rust-lang/libc (libc)

`v0.2.189`

Compare Source

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
Linux SPARC: Enable the clone3 syscall (#4980)
Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
NuttX: Fix wchar_t definition under Arm (#5245)
Windows: Add back link names for time-related symbols (#5300)

`v0.2.188`

Compare Source

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync
guarantees about DIR (or other extern types), but this caused some crates to break.
The traits are added back for now to allow time to migrate, but will be removed again
in the future; please make sure your crates are not relying on libc::DIR: Send or
libc::DIR: Sync.

`v0.2.187`

Compare Source

This release contains a number of improvements related to 64-bit time_t configuration.
Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced
with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to
specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
uClibc now supports a similar configuration option:
```
RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'
```

As a reminder, these options are under active development and may change in the future
(hence the "unstable" in the name). It likely that we will harmonize everything under a
single configuration option before considering them stable.

Support

Add support for aarch64-unknown-linux-pauthtest (#5065)
Add support for new QNX targets (#5241)
Better document breaking change policy and recommended usage (#5179)

Added

Android: Add POSIX_SPAWN_* constants (#5104)
Android: Add getpwent, setpwent, and endpwent (#5160)
Android: Add preadv2 and pwritev2 (#5157)
Android: Add seccomp_notif* structures (#5224)
Android: Add timer_[create, delete, getoverrun, gettime, settime] (#5108)
Apple: Add PROC_PIDT_SHORTBSDINFO and proc_bsdshortinfo (#5110)
Apple: Add SIOC* constants from sockio.h (#5263)
Apple: Add _IOR, _IOW, _IOWR (#5264)
Apple: Add bpf_program and bpf_insn (#5235)
Apple: Add additional kqueue constants (#5077)
Apple: Update vm_statistics64 with recently added fields (#5253)
Apple: add IN6_IFF_* and SIOCGIFAFLAG_IN6 (#5239)
Dragonfly: Add O_*, POSIX_FADV_*, NI*, and a few other missing constants (#5116)
Dragonfly: add fdatasync, dlvsym, reallocarray, qsort_r, pthread_*affinity_np, ftok, extattr_*, and dup3 (#5116)
Emscripten: Add in6_pktinfo (#5256)
FreeBSD: Add SOL_LOCAL (#5185)
FreeBSD: Add DLT_* constants (#5235)
FreeBSD: Add PROC_LOGSIGEXIT_* and PPROT_* (#4657)
FreeBSD: Add SO_RERROR (#5260)
FreeBSD: add IN6_IFF_*, in6_ifreq, and SIOCGIFAFLAG_IN6 (#5239)
FreeBSD: add _IO* helpers from sys/ioccom.h (#5239)
Glibc: Add PTHREAD_*_MUTEX_INITIALIZER_NP for riscv64 (#5094)
Glibc: Add new fields to struct tcp_info (#5215)
Linux: Add OPEN_TREE_NAMESPACE (#5145)
Linux: Add SECCOMP_IOCTL_* constants (#5224)
Linux: Add SO_DETACH_REUSEPORT_BPF (#5081)
Linux: Add futex_waitv (#5125)
Linux: Add constants for fsopen, fsconfig, fsmount, and fspick (#5145)
Linux: Add fields to statx present since 6.16 (#4621)
Linux: Add network entry API (#5049)
Linux: add ifaddrmsg and rtattr (#5234)
Linux: add sockaddr_iucv (#5041)
MacOS: Add ENOTCAPABLE (#4925)
Musl: Add renameat2 (#5113)
NuttX: Add F_SETFD (#5258)
NuttX: Add POLLRD* and POLLWR* constants (#5258)
NuttX: Add SO_KEEPALIVE and TCP keepalive constants (#5111)
NuttX: Add TCP_MAXSEG (#5258)
NuttX: Add eventfd and EFD_* constants (#5258)
NuttX: Add pipe2 (#5258)
NuttX: Add strerror_r (#5258)
NuttX: Add netinet structs and constants (#5258)
NuttX: Add socket structs, functions and constants (#5258)
QuRT: Add POSIX timer functions (#5091)
QuRT: Add missing pthread functions from QuRT SDK headers (#5091)
QuRT: Add missing unistd process and file functions (#5091)
QuRT: Add mqueue subsystem (message queues, select/pselect) (#5091)
Redox: Add *at and dirent functions (#5117)
Solarish: Add IP TTL and IPv6 Hop Limit consts (#5089)
Solarish: Add port_alert and PORT_ALERT* constants (#5203)
Solarish: add AI_CANONNAME (#5085)
aarch64: Add SYS_sendfile and SYS_fadvise64 constants (#5133)

Deprecated

Dragonfly: Deprecate compatibility aliases CPUCTL_RSMSR and UTX_DB_LASTLOG (#5116)

Fixed

breaking NetBSD: Correct ts from *const timespec to *mut timespec in _lwp_park` (#5169)
breaking Linux GNU: Change overflowing PTRACE_*ET_SYSCALL_USER_DISPATCH_CONFIG constants from u8 to c_uint (#4936)
Fix the soundness bug in the representation of extern types (#5021)
Cygwin: fix cpuset_t typo in CPU_ZERO (#5098)
Dragonfly: ABI fixes including regex offsets, ifaddrs, pthread barriers, process sizing fields, and mcontext alignment (#5116)
Dragonfly: Correct values of CPUCTL_CPUID*, EV_HUP, and EV_SYSFLAGS (#5116)
Emscripten: fix pthread type sizes for wasm64 (MEMORY64) (#5156)
Horizon: Fix the value of POLLOUT (#5090)
Linux: Correct the value of EPIOC[GS]PARAMS with nonstandard _IOC (#5188)
Make VxWorks shims unsafe (#3727)
NetBSD: Correct getmntinfo to link __getmntinfo13 (#5251)
QNX: Fix the value of PTHREAD_MUTEX_INITIALIZER (#5241)
QuRT: fix type and definition inaccuracies against SDK headers (#5091)
Windows: Correctly link to 32-bit time routines on 32-bit platforms (#5059)
uClibc: Fix constants accidentally removed (#5141)
uclibc: Fix build issues (#5046)
uclibc: Fix type of PRIO_PROCESS and friends (#5046)

Changed

AIX, TeeOS: Drop unneeded -> c_void (#5240)
Apple: Change AIO_LISTIO_MAX to account for changes in macOS 27 (#5253)
Glibc: Update the value of MS_NOUSER (#5215)
L4Re: Update definitions and test infra (#5275)
Linux: Update the value of SW_MAX and SW_CNT (#5215)
MacOS: Add swapped_count to vm_statistics64 (#4926)
Windows: Windows-GNU now respects libc_unstable_gnu_time_bits for 64-bit time_t config (#5062)

Removed

Dragonfly: Remove FreeBSD-only Elf32_Lword, ip_mreq_source, and IP_ constants (#5116)
Dragonfly: Remove private VM type bindings (#5116)
Linux: Remove KERN_REALROOTDEV and VM_LAPTOP_MODE (#5177)
VxWorks: Remove non-user-facing (kernel) API (#5129)

Other

Print config information if LIBC_BUILD_VERBOSE is set (#5272)
Annotate *LAST constants as potentially changing (#5120)
Annotate *MAX constants as potentially changing (#5122)
BSD: Annotate ELAST constants as potentially changing (#5118)
FreeBSD: Annotate RAND_MAX as potentially changing (#5119)
Linux, L4re: Annotate *NUM constants as potentially changing (#5123)
QNX: Restructure to support new platforms (#4984)
Unix: Annotate *COUNT constants as potentially changing (#5121)
uClibc: Add unstable support of 64-bit time_t (#5046)
(internal) FreeBSD: Replace unstable env to set version with an unstable cfg (#5201)
(internal) Glibc: Remove public configuration for file offset bits (#5268)
(internal) Linux: Delete config via RUST_LIBC_UNSTABLE_LINUX_TIME_BITS64 (#5197)
(internal) Replace RUST_LIBC_UNSTABLE env with libc_unstable* cfg (#4977)

actions/python-versions (python)

`v3.14.7`: 3.14.7

Compare Source

Python 3.14.7

`v3.14.6`: 3.14.6

Compare Source

Python 3.14.6

`v3.14.5`: 3.14.5

Compare Source

Python 3.14.5

`v3.14.4`: 3.14.4

Compare Source

Python 3.14.4

`v3.14.3`: 3.14.3

Compare Source

Python 3.14.3

`v3.14.2`: 3.14.2

Compare Source

Python 3.14.2

`v3.14.1`: 3.14.1

Compare Source

Python 3.14.1

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

ratatui/ratatui (ratatui)

`v0.30.2`

Compare Source

We are excited to announce the new version of ratatui - a Rust library that's all about cooking up TUIs 👨‍🍳🐀

✨ Release highlights: https://ratatui.rs/highlights/v0302/

⚠️ List of breaking changes can be found here.

Features

90639c1 (uncategorized) Add Termina backend by @joshka in #2561
Summary
- add the ratatui-termina backend crate using the published termina
  crate
- expose the backend through the termina feature and Ratatui
  prelude/backend re-exports
- add a small Termina event-loop example and wire the backend into CI,
  xtask, README generation, and docs
Refs #1784

Validation
- cargo +nightly fmt
- cargo check -p ratatui-termina --all-features --all-targets
- cargo check -p ratatui --no-default-features --features termina
- cargo check -p xtask
- cargo check -p release-header
- cargo xtask check-backend termina
- cargo xtask test-backend termina
- cargo xtask rdme --check
- markdownlint-cli2 ARCHITECTURE.md ratatui-termina/README.md .github/ISSUE_TEMPLATE/bug_report.md

Bug Fixes

fce3c80 (widgets) Require thread-safe shadow effects by @joshka in #2584
Summary
- require custom shadow effects to preserve the auto traits expected by
  Block-backed widgets
- document the CellEffect auto-trait contract
- add a public widget regression test for the affected ratatui::widgets
  re-exports
Fixes #2583
e306ce6 (buffer) Create updates for "uncovered" cells by @benjajaja in #2587

When a wide cell from the previous buffer is replaced by a short/normal
cell, the trailing cell does not get an update if its content does not
change. But if the wide cell has a background (or other) style, the
terminal did render the trailing cell with that style.

Force trailing cells to update if background, underline, or modifiers
are different than the wide cell. We can ignore foreground.

Fixes #2585 (see that for the detailed visual reports)
81e667f (scrollbar) Keep a large thumb within the track at the end by @satyakwok in #2594
Closes #2582.

Problem

When the content is shorter than the viewport, the thumb is large
relative to the track. With the position at the end, part_lengths
clamped thumb_start to track_length - 1 while thumb_length was
clamped independently to [1, track_length], so thumb_start + thumb_length could exceed track_length.

bar_symbols lays out begin + track_start + thumb + track_end + end
and zips it against the cells of the area. When the thumb overruns the
track, track_end saturates to 0 but the thumb still emits more cells
than the track can hold, so the trailing end symbol is pushed past the
end of the area. The last visible cell ends up being a thumb (█) where
the end arrow (▼) should be.

Concretely, for the issue's repro (VerticalRight, content_length = 9, position = 8, height 24): track is 22, thumb_length = 17,
thumb_start = 6, and 6 + 17 = 23 > 22.

This is a regression from v0.30.0, where thumb_length was derived as
thumb_end - thumb_start and therefore always fit within the track.

Fix

Clamp thumb_start to track_length - thumb_length (instead of
track_length - 1) so the thumb always fits within the track and the
end symbol is preserved.

Test

Two regression tests, both fail on main and pass with the fix:
- thumb_stays_within_track_for_large_thumb_at_end checks
  part_lengths directly with the issue's parameters — asserts
  thumb_start + thumb_length <= track_length and that the parts sum to
  the track length.
- render_scrollbar_keeps_end_symbol_for_large_thumb renders the #2582
  case (both arrows, large thumb at the end) and asserts the end symbol is
  drawn rather than overwritten by a thumb cell.
All existing scrollbar tests still pass.

Miscellaneous Tasks

c75d778 (ci) Add cargo-udeps dependency check by @joshka in #2599
Adds cargo xtask udeps and runs it from CI as a required job.

This complements cargo-machete rather than replacing it. cargo-machete
is a fast static source scan, which is why it missed the package-level
unused deps fixed in #2598 when the same dependency names were still
referenced by example crates. cargo-udeps compiles the workspace and
checks rustc dep-info, so it can catch unused dependency declarations
for the package being checked.

To make the new job pass, this also removes the remaining true-positive
unused dev-deps and records explicit cargo-udeps ignores for current
false positives / intentional cases: ratatui-core critical-section,
ratatui-crossterm's duplicate crossterm version feature shape, and
ratatui-termwiz's doc-example-only ratatui dev-dependency.

I searched existing issues and PRs for udeps / cargo-udeps / "cargo
udeps". I did not find prior ratatui discussion about adopting
cargo-udeps; the only hits were Dependabot PR bodies for
taiki-e/install-action release notes mentioning cargo-udeps version
updates, for example #1971, #2095, #2194, and #2522.

Validation:- cargo xtask udeps
- cargo xtask format --check
4a63d41 (uncategorized) Remove unused dependencies by @KikiKian in #2598
Audit removes these dependencies that are not used:

ratatui/Cargo.toml — Removed from [dev-dependencies]:
- futures
- rand_chacha
- tokio
- tracing
- tracing-appender
- tracing-subscriber
ratatui-core/Cargo.toml — Moved from [dependencies] →
[dev-dependencies]:
- indoc

Continuous Integration

36854ef (uncategorized) Add auto-merge required gate by @joshka in #2596
Summary

This makes GitHub auto-merge usable for Ratatui PRs once maintainers are
happy with the change but CI is still running.

The workflow change adds a single aggregate required job to the main
CI workflow. The repository now has auto-merge
enabled
and an ensure checks pass
ruleset
that requires that required status context on main.

Why

Without a required status context, GitHub's auto-merge button is not
useful for the maintainer flow we want. The goal is to let a maintainer
review a PR, decide it is ready, click auto-merge, and move on without
coming back later just to check whether the remaining jobs finished.

This does not relax the merge policy. GitHub's own auto-merge behavior
is to merge only after all required reviews and required status checks
are satisfied. This change gives GitHub a stable required status to wait
on automatically.

Precedent

I have been using this same auto-merge pattern in
ratatui/tui-widgets, where
it has worked well for the intended maintainer flow: once a PR looks
ready, I can enable auto-merge and let GitHub merge it after the
remaining checks and review requirements are satisfied.

How it works

The new required job depends on the main CI jobs in
.github/workflows/ci.yml and always runs after them. It fails if any
required dependency fails, is cancelled, or is skipped.

The repository ruleset requires only this aggregate required context
instead of requiring every individual matrix job separately. That gives
GitHub one stable status to wait on while preserving the existing CI
coverage.

Things to know
- Auto-merge is opt-in per PR. Maintainers still choose when to click
  it.
- It does not skip review requirements, status checks, labels, or any
  other protection rule.
- A PR with auto-merge enabled can still show as blocked while checks or
  required reviews are pending. That is expected.
- If something needs to merge normally, maintainers can still use the
  regular merge path or an allowed ruleset bypass. This is a convenience
  path, not a hard blocker.
- Existing open PRs may need a rebase or synchronize event after this
  lands so they pick up the new required workflow job.
- If a new required CI job is added later, it should be added to the
  required.needs list or it will not be represented by the aggregate
  gate.
- Jobs that are intentionally allowed to fail should be handled
  carefully before adding them to required.needs, because skipped,
  cancelled, and failed dependencies make the aggregate fail.
Current PR state

Auto-merge is already enabled on this PR. If you approve it and the
required checks pass, GitHub will squash-merge it automatically;
approving it is enough to let the PR merge once the remaining
requirements are satisfied.

GitHub docs
Validation
- ruby -e 'require "yaml"; YAML.load_file(".github/workflows/ci.yml"); puts "ok"'
- actionlint .github/workflows/ci.yml
- Verified ratatui/ratatui has allow_auto_merge: true
- Verified the active ensure checks pass ruleset requires status
  context required
- Verified this PR has squash auto-merge enabled and is blocked pending
  checks/review

New Contributors

@satyakwok made their first contribution in #2594
@KikiKian made their first contribution in #2598

Full Changelog: ratatui/ratatui@ratatui-v0.30.1...ratatui-v0.30.2

rusqlite/rusqlite (rusqlite)

`v0.40.2`: 0.40.2

Compare Source

What's Changed

Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

rust-lang/rust (rust)

`v1.97.1`

Compare Source

==========================

rustc: Fix miscompilation in LLVM optimization
This backports an LLVM submodule bump to include the LLVM-side fix and a
revert of the rustc change that is one known trigger for the bug. The rustc
side revert should not be strictly necessary but is done out of abundance of caution.

`v1.97.0`

Compare Source

==========================

Language

Platform Support

nvptx64-nvidia-cuda: drop support for old architectures and old ISAs

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Stabilized APIs

These previously stable APIs are now stable in const contexts:

char::is_control

Cargo

Stabilize build.warnings config. This controls how lint warnings from local packages are treated. Useful for enforcing a warning-free build in CI, replacing -Dwarnings. docs
Stabilize resolver.lockfile-path config. This allows specifying the path to the lockfile to use when resolving dependencies. Useful when working with read-only source directories. docs
cargo-clean: Error when --target-dir doesn't look like a Cargo target directory. This prevents accidental deletion of non-target directories.
Add -m shorthand for --manifest-path
Remove curl dependency from crates-io crate

Rustdoc

Compatibility Notes

Emit a future-compatibility warning when relying on f32: From<{float}> to constrain {float}
Rust will use the v0 symbol mangling scheme by default. This may cause some tools (such as debuggers or profilers, especially with old versions) to fail to demangle symbols emitted by Rust. It may also cause the formatting of text in backtraces to change.
Prevent deref coercions in pin!, in order to prevent unsoundness. The most likely case where this might impact users is: writing pin!(x) where x has type &mut T will now always correctly produce a value of type Pin<&mut &mut T>, instead of sometimes allowing a coercion that produces a value of type Pin<&mut T>. This coercion was previously incorrectly allowed since Rust 1.88.0.
Deprecate std::char constants and functions
Warn on linker output by default
Remove hidden f64 methods which have been deprecated since 1.0
report the varargs_without_pattern lint in deps
Forbid passing generic arguments to module path segments even if the module reexports a generic enum variant
Error on invalid macho link_section specifier
The encoding of certain enums have changed. This is not a breaking change, as it only applies to enums without layout guarantees, but is noted here as we've seen people impacted from having made assumptions about the layout algorithm.
Error on #[export_name = "..."] where the name is empty
Syntactically reject tuple index shorthands in struct patterns
validate #[link_name = "..."] & #[link(name = "...")] parameters
On Windows, after calling shutdown on a socket to shut down the write side, attempting to write to the socket will now produce a BrokenPipe error rather than Other. Map WSAESHUTDOWN to io::ErrorKind::BrokenPipe

`v1.96.1`

Compare Source

===========================

`v1.96.0`

Compare Source

==========================

Language

Compiler

Libraries

Stabilized APIs

Cargo

Allow a dependency to specify both a git repository and an alternate registry. Just like with crates.io, the git repository will be used locally, but the registry version will be used when published.
Added target.'cfg(..)'.rustdocflags support in configuration.
Fixed CVE-2026-5222 and CVE-2026-5223.

Rustdoc

Deprecation notes are now rendered like any other documentation. Previously they used the css white-space: pre-wrap; property and stripped any <p> elements from the rendered html, however this caused issues and unintuitive behavior. The new behavior should be more predictable, however some multi-line deprecation notes will now be rendered as as single lines. If this is undesirable, you can use the standard markdown method of forcing a linebreak, which is two spaces followed by a newline ("\n").
Don't emit rustdoc missing_doc_code_examples lint on impl items
Separate methods and associated functions in sidebar

Compatibility Notes

Fix layout of #[repr(Int)] enums in some edge cases involving fields of uninhabited zero-sized types
Prevent unsize-coercing into Pin<Foo> where Foo doesn't implement Deref. Some such coercions were previously allowed, but produce a type with no useful public API.
rustc: Stop passing --allow-undefined on wasm targets
Gate the accidentally stabilized #![reexport_test_harness_main] attribute
Error on return-position-impl-trait-in-traits whose types are too private
Report the uninhabited_static lint in dependencies and make it deny-by-default
Distributed builds now contain non-split debuginfo for windows-gnu
This appears to improve the quality of backtraces. This change has no effect on the defaults for the output of rustc/cargo on these targets.
Check const generic arguments are correctly typed in more positions
Remove -Csoft-float
Importing structs with ::{self [as name]}, e.g., struct S {}; use S::{self as Other};, is now no longer permitted because {self} imports require a module parent.
For export_name, link_name, and link_section attributes, if multiple of the same attribute is present, the first one now takes precedence.
Update the minimum external LLVM to 21
On avr targets, C's double type is 32-bit by default, so change c_double to f32 on avr targets to match. This is a breaking change, but necessary to make c_double match C's double.

Internal Changes

These changes do not affect any public interfaces of Rust, but they represent
significant improvements to the performance or internals of rustc and related
tools.

serde-rs/serde (serde)

`v1.0.229`

Compare Source

Update to syn 3

serde-rs/json (serde_json)

`v1.0.151`

Compare Source

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

dtolnay/thiserror (thiserror)

`v2.0.20`

Compare Source

Suppress redundant_field_names clippy lint in generated code (#454)

`v2.0.19`

Compare Source

Update to syn 3

tokio-rs/tokio (tokio)

`v1.53.1`: Tokio v1.53.1

Compare Source

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

`v1.53.0`: Tokio v1.53.0

Compare Source

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File ([#8266])
metrics: add task schedule latency metric (#7986)
net: add SocketAddr methods to Unix sockets ([#8144])

Changed

io: add #[inline] to IO trait impls for in-memory types ([#8242])
net: implement UCred::pid on FreeBSD (#8086)
net: support Nuttx target os ([#8259])
signal: refactor global variables on Windows ([#8231])
sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders ([#8095])
taskdump: support taskdumps on s390x ([#8192])
time: add #[track_caller] to timeout_at() (#8077)
time: consolidate mutex locks on spurious poll ([#8124])
time: defer waker clone on spurious poll ([#8107])
time: move lazy-registration state into Sleep ([#8132])
tracing: remove unnecessary span clone ([#8126])

Fixed

io: do not treat zero-length reads as EOF in Chain ([#8251])
net: use getpeereid for QNX peer credentials ([#8270])
runtime: avoid illegal state in FastRand (#8078)
sync: wake mpsc receiver when a queued reserve[_many] returns permits ([#8260])
taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
time: avoid stack overflow in runtime constructor (#8093)
time (alt timer): ensure timers stay in the same runtime after .reset() ([#8169])

IO uring (unstable)

fs: use io-uring for fs::try_exists (#8080)
fs: use io-uring for renaming files (#7800)
rt: flush io-uring CQE in case of CQE overflow ([#8277])

Documented

docs: clarify cancel safety wording ([#8181])
fs: clarify create_dir_all succeeds if path exists ([#8149])
io: add warning about stdout reordering with multiple handles ([#8276])
net: document pipe try_read*/try_write* readiness behavior (#8032)
runtime: document interaction with fork() ([#8202])
sync: clarify broadcast lagging semantics ([#8239])
sync: document memory ordering guarantees for Semaphore ([#8119])
task: explain why yield_now defers its waker ([#8254])
time: add panic docs to timeout_at() (#8077)
time: fix reversed poll order in timeout doc ([#8214])

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the dependencies label Aug 3, 2026

renovate Bot force-pushed the renovate/dependencies-(non-major) branch 5 times, most recently from 10c625b to 360cba4 Compare August 11, 2026 04:13

⬆️ deps: Update dependencies (non-major)

17decd3

renovate Bot force-pushed the renovate/dependencies-(non-major) branch from 360cba4 to 17decd3 Compare August 11, 2026 06:11

Navigation Menu

Uh oh!

⬆️ deps: Update dependencies (non-major) - #20

⬆️ deps: Update dependencies (non-major)#20
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dependencies-(non-major)

renovate Bot commented Aug 3, 2026 •

edited

Loading

Summary

Validation

Summary

Problem

Fix

Test

Summary

Why

Precedent

How it works

Things to know

Current PR state

GitHub docs

Validation

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Added

Deprecated

Fixed

Changed

Support

Added

Deprecated

Fixed

Changed

Removed

Other

v3.14.7: 3.14.7

v3.14.6: 3.14.6

v3.14.5: 3.14.5

v3.14.4: 3.14.4

v3.14.3: 3.14.3

v3.14.2: 3.14.2

v3.14.1: 3.14.1

v3.14.0: 3.14.0

Features

Summary

Validation

Bug Fixes

Summary

Problem

Fix

Test

Miscellaneous Tasks

Continuous Integration

Summary

Why

Precedent

How it works

Things to know

Current PR state

GitHub docs

Validation

New Contributors

v0.40.2: 0.40.2

What's Changed

Language

Platform Support

Stabilized APIs

Cargo

Rustdoc

Compatibility Notes

Language

Compiler

Libraries

Stabilized APIs

Cargo

Rustdoc

Compatibility Notes

Internal Changes

v1.53.1: Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

Fixed (unstable)

Documented

v1.53.0: Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

IO uring (unstable)

Documented

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

renovate Bot commented Aug 3, 2026 •

edited

Loading

`v3.14.7`: 3.14.7

`v3.14.6`: 3.14.6

`v3.14.5`: 3.14.5

`v3.14.4`: 3.14.4

`v3.14.3`: 3.14.3

`v3.14.2`: 3.14.2

`v3.14.1`: 3.14.1

`v3.14.0`: 3.14.0

`v0.40.2`: 0.40.2

`v1.53.1`: Tokio v1.53.1

`v1.53.0`: Tokio v1.53.0