chore(deps)(deps): bump the cargo-minor-patch group across 1 directory with 8 updates by dependabot[bot] · Pull Request #83 · ananthb/starla

dependabot · 2026-07-06T00:39:52Z

Bumps the cargo-minor-patch group with 8 updates in the / directory:

Package	From	To
rustls	`0.23.40`	`0.23.41`
webpki-roots	`1.0.7`	`1.0.8`
anyhow	`1.0.102`	`1.0.103`
bytes	`1.11.1`	`1.12.0`
rand	`0.10.1`	`0.10.2`
uuid	`1.23.2`	`1.23.4`
tray-icon	`0.24.0`	`0.24.1`
open	`5.3.5`	`5.3.6`

Updates rustls from 0.23.40 to 0.23.41

Commits

642a103 ci: drop Taplo job
752c144 Drop nightly clippy tests
8d8611a Fix new clippy::useless-borrows-in-formatting
ebf3297 Fix new clippy::manual_clear
46808e7 ci: sync cargo-check-external-types nightly
041a8d2 Cargo deny: allow RUSTSEC-2026-0173
62e220e Take semver-compatible dependency updates
3c14696 Upgrade to hickory-resolver 0.26
848a2cc connect-tests: delete ech.rs
5ce9cac Bump version to 0.23.41
Additional commits viewable in compare view

Updates webpki-roots from 1.0.7 to 1.0.8

Release notes

Sourced from webpki-roots's releases.

1.0.8

Remove SecureSign Root CA12 root; see https://bugzilla.mozilla.org/show_bug.cgi?id=2031105

What's Changed

Test MSRV with 1.70 by @ctz in rustls/webpki-roots#122

Take semver-compatible dependency updates by @djc in rustls/webpki-roots#123

1.0.8: remove SecureSign Root CA12 root by @ctz in rustls/webpki-roots#124

Full Changelog: rustls/webpki-roots@v/1.0.7...v/1.0.8

Commits

50729cd 1.0.8: remove SecureSign Root CA12 root (#124)
c965c54 Take semver-compatible dependency updates (#123)
a83a3c9 Move MSRV to 1.70 (#122)
See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

91402ce Release bytes v1.12.0 (#831)
2256e6d chore: add safety comments on unsafe blocks (#827)
245adff Pass vtable data by value (#826)
00cc5ff Implement BytesMut::extend_from_within (#818)
5b79d31 Merge tag 'v1.11.1'
804ee6d Make try_unsplit method public (#746)
fd426ca Exclude development scripts from published package (#810)
b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
94e4291 Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capac...
acd1e0f Fix get_int if nbytes is zero (#806)
See full diff in compare view

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

Document required output order of fn partial_shuffle and apply #[must_use] (#1769)

Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

1540ea3 Prepare rand 0.10.2 (#1800)
a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
db14664 Check UniformChar validity on deser (#1790)
bea8620 Bump the all-deps group with 2 updates (#1796)
4f44932 Bump actions/cache from 5 to 6 (#1795)
b999a13 Bump actions/checkout from 6 to 7 (#1794)
aeab810 Avoid unsafe where safety depends on non-local values (#1791)
1896d7c Add typos CI job (#1789)
43eddee Bump the all-deps group with 2 updates (#1788)
Additional commits viewable in compare view

Updates uuid from 1.23.2 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

Commits

3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
cba53d0 prepare for 1.23.4 release
e347af4 Merge pull request #889 from frostyplanet/main
e9bf55c doc: Fix broken link warnings
5351af4 doc: Enable feature flag label for docs.rs
1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
c9619f6 fix up name of fuzz script in readme
20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
62232ca prepare for 1.23.3 release
2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
Additional commits viewable in compare view

Updates tray-icon from 0.24.0 to 0.24.1

Release notes

Sourced from tray-icon's releases.

tray-icon v0.24.1

[0.24.1]

7adc007 (#325 by @Y-ASLant) On Windows, preserve tray icon visibility on Explorer restart so a hidden tray icon won't become visible.

Updating crates.io index
   Packaging tray-icon v0.24.1 (/home/runner/work/tray-icon/tray-icon)
warning: ignoring example `egui` as `examples/egui.rs` is not included in the published package
warning: ignoring example `tao` as `examples/tao.rs` is not included in the published package
warning: ignoring example `winit` as `examples/winit.rs` is not included in the published package
    Updating crates.io index
    Packaged 21 files, 228.2KiB (55.4KiB compressed)
   Verifying tray-icon v0.24.1 (/home/runner/work/tray-icon/tray-icon)
 Downloading crates ...
  Downloaded thiserror v1.0.69
  Downloaded toml_edit v0.22.22
  Downloaded dirs v6.0.0
  Downloaded unicode-ident v1.0.16
  Downloaded fdeflate v0.3.7
  Downloaded cfg-if v1.0.0
  Downloaded autocfg v1.4.0
  Downloaded thiserror-impl v2.0.11
  Downloaded x11 v2.21.0
  Downloaded bitflags v2.8.0
  Downloaded glib-macros v0.18.5
  Downloaded libappindicator-sys v0.9.0
  Downloaded gtk v0.18.2
  Downloaded syn v2.0.96
  Downloaded toml_edit v0.19.15
  Downloaded target-lexicon v0.12.16
  Downloaded gio-sys v0.18.1
  Downloaded once_cell v1.20.2
  Downloaded winnow v0.6.25
  Downloaded toml_datetime v0.6.8
  Downloaded libc v0.2.169
  Downloaded adler2 v2.0.0
  Downloaded gdk-pixbuf v0.18.5
  Downloaded dpi v0.1.1
  Downloaded dirs-sys v0.5.0
  Downloaded proc-macro-error v1.0.4
  Downloaded proc-macro-crate v2.0.0
  Downloaded pin-utils v0.1.0
  Downloaded pango v0.18.3
  Downloaded heck v0.5.0
  Downloaded futures-macro v0.3.31
  Downloaded rustc_version v0.4.1
</tr></table>

... (truncated)

Changelog

Sourced from tray-icon's changelog.

[0.24.1]

7adc007 (#325 by @Y-ASLant) On Windows, preserve tray icon visibility on Explorer restart so a hidden tray icon won't become visible.

Commits

See full diff in compare view

Updates open from 5.3.5 to 5.3.6

Release notes

Sourced from open's releases.

v5.3.6

Bug Fixes

use PowerShell instead of wslview on WSL WSL users reported that wslu's wslview is discontinued and unavailable in some package managers. The regression tests cover the WSL command builder and initially failed because the first generated command was still wslview.

Build the WSL opener as a PowerShell Start-Process -FilePath script argument with the target quoted as data, then retain the xdg-open, gio, gnome-open, and kde-open fallbacks. Update the user-facing docs and keep the WSL command builder testable from host builds without adding dev-dependencies.

Commit Statistics

2 commits contributed to the release.

48 days passed between releases.

1 commit was understood as conventional.

1 unique issue was worked on: #122

Commit Details

#122

Use PowerShell instead of wslview on WSL (44d1d41)

Uncategorized

Merge pull request #123 from Byron/avoid-wslview (41c4cf0)

Changelog

Sourced from open's changelog.

5.3.6 (2026-06-29)

Bug Fixes

use PowerShell instead of wslview on WSL WSL users reported that wslu's wslview is discontinued and unavailable in some package managers. The regression tests cover the WSL command builder and initially failed because the first generated command was still wslview.

Build the WSL opener as a PowerShell Start-Process -FilePath script argument with the target quoted as data, then retain the xdg-open, gio, gnome-open, and kde-open fallbacks. Update the user-facing docs and keep the WSL command builder testable from host builds without adding dev-dependencies.

Commit Statistics

2 commits contributed to the release.

48 days passed between releases.

1 commit was understood as conventional.

1 unique issue was worked on: #122

Commit Details

#122

Use PowerShell instead of wslview on WSL (44d1d41)

Uncategorized

Merge pull request #123 from Byron/avoid-wslview (41c4cf0)

Commits

cfb39d8 Release open v5.3.6
41c4cf0 Merge pull request #123 from Byron/avoid-wslview
44d1d41 fix: use PowerShell instead of wslview on WSL (#122)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 8 updates Bumps the cargo-minor-patch group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.41` | | [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.7` | `1.0.8` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.0` | | [rand](https://github.com/rust-random/rand) | `0.10.1` | `0.10.2` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.2` | `1.23.4` | | [tray-icon](https://github.com/tauri-apps/tray-icon) | `0.24.0` | `0.24.1` | | [open](https://github.com/Byron/open-rs) | `5.3.5` | `5.3.6` | Updates `rustls` from 0.23.40 to 0.23.41 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.40...v/0.23.41) Updates `webpki-roots` from 1.0.7 to 1.0.8 - [Release notes](https://github.com/rustls/webpki-roots/releases) - [Commits](rustls/webpki-roots@v/1.0.7...v/1.0.8) Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `bytes` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.0) Updates `rand` from 0.10.1 to 0.10.2 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.1...0.10.2) Updates `uuid` from 1.23.2 to 1.23.4 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.2...v1.23.4) Updates `tray-icon` from 0.24.0 to 0.24.1 - [Release notes](https://github.com/tauri-apps/tray-icon/releases) - [Changelog](https://github.com/tauri-apps/tray-icon/blob/dev/CHANGELOG.md) - [Commits](tauri-apps/tray-icon@tray-icon-v0.24...tray-icon-v0.24.1) Updates `open` from 5.3.5 to 5.3.6 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.5...v5.3.6) --- updated-dependencies: - dependency-name: rustls dependency-version: 0.23.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: webpki-roots dependency-version: 1.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: bytes dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rand dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.23.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tray-icon dependency-version: 0.24.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps): bump the cargo-minor-patch group across 1 directory with 8 updates#83

chore(deps)(deps): bump the cargo-minor-patch group across 1 directory with 8 updates#83
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-7eb4203152

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.0.8

What's Changed

1.0.103

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

[0.10.2] — 2026-07-02

Fixes

Changes

v1.23.4

What's Changed

New Contributors

v1.23.3

What's Changed

tray-icon v0.24.1

[0.24.1]

[0.24.1]

v5.3.6

Bug Fixes

Commit Statistics

Commit Details

5.3.6 (2026-06-29)

Bug Fixes

Commit Statistics

Commit Details

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited

Loading