Skip to content

chore(deps): bump the cargo-minor-patch group across 1 directory with 9 updates - #75

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/cargo-minor-patch-a5b83330dc
Open

chore(deps): bump the cargo-minor-patch group across 1 directory with 9 updates#75
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/cargo-minor-patch-a5b83330dc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 9 updates in the / directory:

Package From To
async-compression 0.4.43 0.4.45
aws-lc-rs 1.18.0 1.18.1
encoding_rs 0.8.35 0.8.40
indexmap 2.14.0 2.14.2
lru 0.18.3 0.18.4
tauri-plugin-shell 2.3.5 2.3.6
tower-http 0.7.0 0.7.1
tauri-plugin-notification 2.3.3 2.4.0
open 5.4.2 5.4.3

Updates async-compression from 0.4.43 to 0.4.45

Release notes

Sourced from async-compression's releases.

async-compression-v0.4.45

Other

  • (deps) update zstd requirement from 0.13 to 0.14 (#481)

async-compression-v0.4.44

Other

  • updated the following local packages: compression-core, compression-codecs
Commits

Updates aws-lc-rs from 1.18.0 to 1.18.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.1

What's Changed

  • Add ECDSA P-256 SHA-1 ASN.1 signature verification by @​assafvayner in aws/aws-lc-rs#1214
    • Adds ECDSA_P256_SHA1_ASN1 for verifying ASN.1 DER-encoded ECDSA P-256 signatures over SHA-1, so applications can verify legacy signatures such as CloudFront signed URLs using ECDSA P-256 with the default SHA-1 hash.
    • SHA-1 remains available for legacy verification only. This release does not add a corresponding signing algorithm.
  • Tighten AEAD, cipher IV, HKDF, ECDH, and RSA API contracts by @​justsmth in aws/aws-lc-rs#1215
    • In-place AEAD sealing now verifies that Extend produced exactly enough space for the plaintext and authentication tag before passing the buffer to AWS-LC. Non-conforming custom buffers now return Err(Unspecified).
    • Streaming cipher constructors now reject missing or mismatched IV contexts, matching the validation already performed by the one-shot APIs.
    • Salt::from(Okm) now uses the output algorithm selected by the Okm, rather than the algorithm from the source PRK.
    • ECDH shared-secret storage is now zeroized on fallible derive paths.
    • RSA verify_digest_sig now requires the supplied digest to match the digest configured by RsaParameters, for both parsed and unparsed public keys.
    • Valid inputs are unaffected. Calls using inconsistent algorithms, IV contexts, or custom AEAD buffers now fail closed with Err(Unspecified).

Upstream AWS-LC

  • aws-lc-sys v0.45.0 aligns with AWS-LC v5.7.0 (previously v5.5.0). See also the release notes for v5.6.0.
    • v5.7.0 corrects EVP_DecryptUpdate for padded block ciphers so it modifies only the output range reported through out_len. aws-lc-rs now includes canary-based regression coverage around the documented minimum output-buffer sizes.
  • aws-lc-fips-sys v0.14.2 moves to AWS-LC FIPS v4.2.0.
    • Includes the equivalent EVP_DecryptUpdate correction for FIPS builds.
    • Restores FIPS builds with Clang 20 and newer.
    • Removes the FIPS compiler wrapper's dependency on /usr/bin/env, fixing builds in Nix and similar sandboxed environments.

Build Improvements

  • Export cargo:root metadata when linking against a system-installed AWS-LC by @​weihanglo in aws/aws-lc-rs#1208
    • The system-library path now exposes the installation prefix through DEP_AWS_LC_*_ROOT, consistently with the CC and CMake builders, so downstream build scripts can rely on the metadata regardless of how AWS-LC was built.
  • Fix -Wa,--debug-prefix-map handling with Clang and LTO by @​justsmth in aws/aws-lc-rs#1212
    • Fixes Clang builds when CFLAGS contains -flto or -flto=thin. The assembler-specific flag is now used only with GCC; Clang's integrated assembler uses -ffile-prefix-map directly.
  • Filter raw target-triple CFLAGS spellings when compiling jitterentropy by @​justsmth in aws/aws-lc-rs#1207
    • Prevents inherited optimization flags from overriding jitterentropy's required -O0, including when environment variables are set by a parent process using raw or legacy-normalized target triples.

Issues Being Closed

Other Merged PRs

... (truncated)

Commits
  • 22e629d Prepare v1.18.1 (#1224)
  • c4fde5c Prepare aws-lc-fips-sys v0.14.2 (#1221)
  • 7943223 Prepare aws-lc-sys v0.45.0 (#1220)
  • 8ea2229 fix: tighten AEAD, cipher IV, and digest API contracts (#1215)
  • bcca4d1 Add ECDSA P-256 SHA-1 ASN.1 verification algorithm (#1214)
  • 32338a5 fix(builder): filter the raw-triple CFLAGS spelling for jitterentropy (#1207)
  • af422bd Fix -Wa,--debug-prefix-map probe (#1212)
  • 749b26f ci: replace removed llvm-devel-lite package in FreeBSD jobs (#1213)
  • 36c7a68 fix(publish): verify packaged crate with cargo build, not cargo test (#1201)
  • c71ab00 fix: address clippy::assert_is_empty lints in ECB cipher modes (#1210)
  • Additional commits viewable in compare view

Updates encoding_rs from 0.8.35 to 0.8.40

Commits
  • 662cb42 Allow split_u16_stride_mut as dead code
  • 55f2530 Increment version number to 0.8.40
  • 71ae1c0 Mention defense in depth when writing to &mut str
  • 12790ab Remove remarks about a standard library bug that has been worked around
  • d477c2a Inline asm not stable on powerpc/powerpc64 at MSRV
  • 6c2fb49 Work around slow _mm_packus_epi16 in Rust 1.96 through 1.98, inclusive
  • 9451175 Zero the output slice upon panic in functions that write to &mut str
  • 4cdc020 Anticipate complaints about the dependencies in the README
  • debb436 Add thanks to the related release notes
  • 5b05f10 Mention rust-lang/stdarch#2208 in the README
  • Additional commits viewable in compare view

Updates indexmap from 2.14.0 to 2.14.2

Changelog

Sourced from indexmap's changelog.

2.14.2 (2026-09-04)

  • Fix item hygiene in map and set macros. Previously, an internal const CAP could shadow the same name in the caller's namespace.
  • Allow const initialization of empty indexmap_with_default! and indexset_with_default!. The hasher may also be omitted if it's inferrable.

2.14.1 (2026-08-28)

  • Simplify comparisons where Equivalent isn't needed (Q = K).
  • Unify index assertions for bounds checks.
  • Fix (or expect) clippy lints.
Commits
  • 41a8708 Merge pull request #450 from cuviper/macros
  • 0fb7b5c Release 2.14.2
  • 55e6b28 Improve the empty macro cases
  • c067355 Fix item hygiene in user macros
  • fdf7e17 Merge pull request #449 from cuviper/release-2.14.1
  • ada540e Release 2.14.1
  • af93b43 expect clippy::redundant_slicing in tests
  • c95da18 fix clippy::derivable_impls
  • 2196365 fix clippy::useless_vec (and more) in tests
  • 1c2be7b use inherent usize::MAX
  • Additional commits viewable in compare view

Updates lru from 0.18.3 to 0.18.4

Changelog

Sourced from lru's changelog.

v0.18.4 - 2026-09-02

  • Add retain method.
Commits
  • 2504ad0 Merge pull request #245 from jeromefroe/jerome/prepare-0-18-4-release
  • 419b047 Prepare 0.18.4 release
  • 05ba36e Merge pull request #241 from ChrisJr404/add-retain
  • d84bc5e Revert retain to the simpler removal implementation
  • 36a810e Potential fix for pull request finding
  • e0d578c Merge remote-tracking branch 'up/master' into add-retain
  • 6e6ff26 retain: free the node returned by the map to avoid a dangling entry
  • 349676f Add retain method
  • See full diff in compare view

Updates tauri-plugin-shell from 2.3.5 to 2.3.6

Release notes

Sourced from tauri-plugin-shell's releases.

persisted-scope v2.3.6

[2.3.6]

Dependencies

  • Upgraded to fs@2.5.0
Updating crates.io index
   Packaging tauri-plugin-persisted-scope v2.3.6 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/persisted-scope)
    Updating crates.io index
    Packaged 12 files, 185.6KiB (83.9KiB compressed)
   Uploading tauri-plugin-persisted-scope v2.3.6 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/persisted-scope)
    Uploaded tauri-plugin-persisted-scope v2.3.6 to registry `crates-io`
note: waiting for tauri-plugin-persisted-scope v2.3.6 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-persisted-scope v2.3.6 at registry `crates-io`

nfc-js v2.3.6

[2.3.6]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-nfc@2.3.6
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.1kB README.md
npm notice 5.0kB dist-js/index.cjs
npm notice 3.7kB dist-js/index.d.ts
npm notice 4.8kB dist-js/index.js
npm notice 679B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-nfc
npm notice version: 2.3.6
</tr></table>

... (truncated)

Commits

Updates tower-http from 0.7.0 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

  • fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)
  • fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)
  • request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

  • fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

  • behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)
  • decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)
  • decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)
  • fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)
  • fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)
  • set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

... (truncated)

Commits
  • c941451 chore(release): prepare 0.7.1 (#729)
  • 9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
  • e2582e2 Allow ignoring multi-range requests (#727)
  • 888f7fe feat(services): configure directory redirects (#728)
  • 5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
  • d154adb fix: reject multipart ranges before validation (#661)
  • d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
  • 90c072b Propagate ServeDir::try_call I/O errors (#718)
  • 860922e fix(decompression): don't end the body on an empty data frame (#722)
  • 8532252 docs(example)/custom future with multiple bodies (#711)
  • Additional commits viewable in compare view

Updates tauri-plugin-notification from 2.3.3 to 2.4.0

Release notes

Sourced from tauri-plugin-notification's releases.

single-instance v2.4.0

[2.4.0]

Dependencies

  • Upgraded to deep-link@2.4.7

fix

  • 98e2c11e (#3194 by @​mrquantumoff) Breaking Change: On Linux, the DBus ID/name will now be <bundle-id>.SingleInstance instead of org.<bundle_id_underscores>.SingleInstance to follow DBus specifications.

    This will break the single-instance mechanism across different app versions if the app was installed multiple times.

    Added dbus_id builder method, which can be used to restore previous behavior. For a bundle identifier of com.tauri.my-example this would be dbus_id("org.com_tauri_my_example").

Updating crates.io index
   Packaging tauri-plugin-single-instance v2.4.0 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Updating crates.io index
    Packaged 16 files, 211.8KiB (91.6KiB compressed)
   Uploading tauri-plugin-single-instance v2.4.0 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Uploaded tauri-plugin-single-instance v2.4.0 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.4.0 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-single-instance v2.4.0 at registry `crates-io`

sql-js v2.4.0

[2.4.0]

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-sql@2.4.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
</tr></table>

... (truncated)

Commits
  • adc23d6 publish new versions (#2808)
  • fc573b3 chore(deps): update rust crate tokio-tungstenite to 0.27 (#2768)
  • 901ddfb ci: enable create-pull-request sign commits (#2809)
  • f209b2f chore(deps): update tauri monorepo to v2.6.0 (v2) (#2804)
  • 19ed1bd chore(deps): update dependency prettier to v3.6.1 (#2806)
  • 5779099 publish new versions (#2780)
  • 2aec8ff feat(opener): add inAppBrowser option for iOS and Android (#2803)
  • 9799f0d fix(log): iOS simulator freezing due to early logging (#2802)
  • 8cdaacd chore(examples): update API example mobile projects
  • d46778e chore(deps): update dependency typescript-eslint to v8.35.0 (#2794)
  • Additional commits viewable in compare view

Updates open from 5.4.2 to 5.4.3

Release notes

Sourced from open's releases.

v5.4.3

Bug Fixes

  • wait for intermediate child to terminate when double-forking

Commit Statistics

  • 3 commits contributed to the release.
  • 9 days passed between releases.
  • 1 commit was understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Commit Details

  • Uncategorized
    • Merge pull request #131 from ncfavier/reap (136d4d0)
    • Review (43e601d)
    • Wait for intermediate child to terminate when double-forking (a78c0ca)
Changelog

Sourced from open's changelog.

5.4.3 (2026-09-02)

Bug Fixes

  • wait for intermediate child to terminate when double-forking

Commit Statistics

  • 4 commits contributed to the release.
  • 9 days passed between releases.
  • 1 commit was understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Commit Details

  • Uncategorized
    • Release open v5.4.3 (9551952)
    • Merge pull request #131 from ncfavier/reap (136d4d0)
    • Review (43e601d)
    • Wait for intermediate child to terminate when double-forking (a78c0ca)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo-minor-patch group across 1 directory with…
bc49e67 
… 9 updates

Bumps the cargo-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [async-compression](https://github.com/Nullus157/async-compression) | `0.4.43` | `0.4.45` |
| [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.0` | `1.18.1` |
| [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.35` | `0.8.40` |
| [indexmap](https://github.com/indexmap-rs/indexmap) | `2.14.0` | `2.14.2` |
| [lru](https://github.com/jeromefroe/lru-rs) | `0.18.3` | `0.18.4` |
| [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.5` | `2.3.6` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.7.0` | `0.7.1` |
| [tauri-plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.3.3` | `2.4.0` |
| [open](https://github.com/Byron/open-rs) | `5.4.2` | `5.4.3` |



Updates `async-compression` from 0.4.43 to 0.4.45
- [Release notes](https://github.com/Nullus157/async-compression/releases)
- [Commits](Nullus157/async-compression@async-compression-v0.4.43...async-compression-v0.4.45)

Updates `aws-lc-rs` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@v1.18.0...v1.18.1)

Updates `encoding_rs` from 0.8.35 to 0.8.40
- [Commits](hsivonen/encoding_rs@v0.8.35...v0.8.40)

Updates `indexmap` from 2.14.0 to 2.14.2
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.14.0...2.14.2)

Updates `lru` from 0.18.3 to 0.18.4
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.18.3...0.18.4)

Updates `tauri-plugin-shell` from 2.3.5 to 2.3.6
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@nfc-v2.3.5...nfc-v2.3.6)

Updates `tower-http` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1)

Updates `tauri-plugin-notification` from 2.3.3 to 2.4.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@nfc-v2.3.3...fs-v2.4.0)

Updates `open` from 5.4.2 to 5.4.3
- [Release notes](https://github.com/Byron/open-rs/releases)
- [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md)
- [Commits](Byron/open-rs@v5.4.2...v5.4.3)

---
updated-dependencies:
- dependency-name: async-compression
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: aws-lc-rs
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: encoding_rs
  dependency-version: 0.8.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: indexmap
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: lru
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-shell
  dependency-version: 2.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-notification
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: open
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants