[dependabot]

Bumps the cargo-minor group with 4 updates: litrs, sha2, unicode-ident and zopfli.

Updates litrs from 1.0.0 to 1.0.1

Release notes

Sourced from litrs's releases.

v1.0.1

• Fix parsing of (byte/C) strings starting with \<newline> (without other escapes). In those cases, the backslash, newline and whitespace were incorrectly kept.
• Fix to_compile_error causing a second, unrelated error in item position. Output changed from compile_error!("...") to compile_error! { "..." }.
• Fix bug parsing \u{} (empty unicode escape). This resulted in a null byte, now it's correctly rejected.
• Fix panic bug when parsing (byte/C) string literals with escapes and a trailing multi-byte char (e.g. "\n"é). These are super fringe cases as they require a literal suffix or a malformed literal.
• Fix off-by-one bug regarding number of # in raw string literals. Before, 256 were "allowed", which is wrong as Rust only allows up to 255. This also led to an overflow cast as u8 which resulted in an incorrect value().
• Some documentation & error message fixes

Changelog

Sourced from litrs's changelog.

[1.0.1] - 2026-10-12

• Fix parsing of (byte/C) strings starting with \<newline> (without other escapes). In those cases, the backslash, newline and whitespace were incorrectly kept.
• Fix to_compile_error causing a second, unrelated error in item position. Output changed from compile_error!("...") to compile_error! { "..." }.
• Fix bug parsing \u{} (empty unicode escape). This resulted in a null byte, now it's correctly rejected.
• Fix panic bug when parsing (byte/C) string literals with escapes and a trailing multi-byte char (e.g. "\n"é). These are super fringe cases as they require a literal suffix or a malformed literal.
• Fix off-by-one bug regarding number of # in raw string literals. Before, 256 were "allowed", which is wrong as Rust only allows up to 255. This also led to an overflow cast as u8 which resulted in an incorrect value().
• Some documentation & error message fixes

Commits

• 510d5d7 Bump version to 1.0.1
• 85fba3e Minor doc and error message fixes
• 2e29c1b Improve to_compile_error output in item position
• ae7a18d Fix bug parsing \u{} (empty unicode escape)
• 67694b2 Fix parsing of string starting with \\<newline> (without other escapes)
• 776b79f Fix off-by-one bug regarding number of # in raw string literals
• 15d2a2d Fix unescape bug if literal ends with multi-byte char
• See full diff in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

• 138dc5a Release sha2 v0.11.1 (#927)
• cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
• 7c59cad Update Cargo.lock (#921)
• f57b947 streebog: tweak internal implementation (#925)
• 336611f Fix cargo::manual_readme lint (#924)
• 1df8877 md2: fix clippy::needless_range_loop lint (#923)
• 6075989 sha2: fix loading of round constants on AArch64 backends (#922)
• eadfd90 Update Cargo.lock (#913)
• fa30840 blake2 v0.11.0 (#911)
• f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
• Additional commits viewable in compare view

Updates unicode-ident from 1.0.26 to 1.0.27

Release notes

Sourced from unicode-ident's releases.

1.0.27

• Optimize trie layout to create headroom for new identifiers in future unicode versions (#54, #56)

Commits

• c1ac3af Release 1.0.27
• ff8907c Merge pull request #56 from dtolnay/segment
• b57403f Split base address for two different lookups
• 4e958c4 Merge pull request #55 from dtolnay/indexset
• 7da4079 Replace chunk layout with IndexSet
• 97d6034 Merge pull request #54 from dtolnay/overflow
• c7e447b Defer half-chunk overflow enforcement
• 639d388 Merge pull request #53 from dtolnay/triestat
• 662f912 Update trie statistics in readme for Unicode 18.0.0
• 2bdb95a Merge pull request #52 from dtolnay/naming
• Additional commits viewable in compare view

Updates zopfli from 0.8.3 to 0.8.4

Release notes

Sourced from zopfli's releases.

v0.8.4

What's Changed

Bug Fixes

• Preserve BitwiseWriter invariants when bit flushing encounters a retryable I/O error, preventing subsequent writes from panicking. (#85)
• Match Zopfli's lz77_optimal statistics-randomization cutoff to avoid unintended output differences in edge cases. (#89)

Changes

• Raise the minimum supported Rust version to 1.88 due to dependency requirements.
• Address new Clippy lints and improve internal documentation and scripts.

Dependency Updates

• Update Rust dependencies to their latest versions, including bumpalo, crc32fast, log, proptest, proptest-derive, and simd-adler32.
• Update GitHub Actions dependencies, including actions/checkout and github/codeql-action.

New Contributors

• @​Bodhizafa made their first contribution in #85.
• @​happyarts made their first contribution in #89.

Full Changelog: zopfli-rs/zopfli@v0.8.3...v0.8.4

Commits

• 62df3ae Bump Zopfli version to 0.8.4 🎉
• 245de58 chore: fix new Clippy lints
• e2353bd docs(README): set shell language for shell command code blocks
• acc5f4a chore: bump MSRV to 1.88 due to dependency MSRV bump
• ff963fb fix(squeeze): match Zopfli's lz77_optimal stats randomization cutoff on cos...
• 3222baf chore(deps): refresh dependency, remove now redundant Cargo manifest key
• d0e9d23 chore(test/run.sh): fix shellcheck lints, format with shfmt
• c9e7478 chore(deps): update rust crate crc32fast to v1.5.2 (#88)
• 3878989 chore(deps): update rust crate log to v0.4.34 (#87)
• 067cb1c chore(deps): update rust crate crc32fast to v1.5.1 (#86)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.