deps(deps): bump the rust-minor-patch group across 1 directory with 110 updates

[dependabot]

Bumps the rust-minor-patch group with 82 updates in the / directory:

Package	From	To
serde	1.0.228	1.0.229
serde_json	1.0.150	1.0.151
anyhow	1.0.103	1.0.104
crossbeam-channel	0.5.15	0.5.16
ringbuf	0.5.0	0.5.1
ort	2.0.0-rc.12	2.0.0-rc.13
ureq	3.3.0	3.4.0
tokio	1.52.3	1.53.1
tokio-stream	0.1.18	0.1.19
futures	0.3.32	0.3.33
clap	4.6.1	4.6.6
aho-corasick	1.1.4	1.1.5
android_system_properties	0.1.5	0.1.6
aws-lc-rs	1.17.0	1.18.0
bitflags	2.13.0	2.13.1
bytemuck	1.25.0	1.25.2
bytes	1.12.0	1.12.1
cc	1.2.65	1.4.2
cfg_aliases	0.2.1	0.2.2
clang-sys	1.8.1	1.9.1
console	0.16.3	0.16.4
cookie	0.18.1	0.18.2
crossbeam-deque	0.8.6	0.8.7
crossbeam-epoch	0.9.18	0.9.20
crossbeam-utils	0.8.21	0.8.22
cxx	1.0.194	1.0.199
data-encoding	2.11.0	2.11.1
dbus	0.9.11	0.9.12
defmt	1.1.0	1.1.1
der	0.8.0	0.8.1
displaydoc	0.2.6	0.2.7
either	1.16.0	1.17.0
exr	1.74.0	1.74.2
fastrand	2.4.1	2.5.0
foreign-types-macros	0.2.3	0.2.4
glob	0.3.3	0.3.4
http	1.4.2	1.5.0
http-body	1.0.1	1.1.0
http-body-util	0.1.3	0.1.4
hyper	1.10.1	1.11.0
indicatif	0.18.5	0.18.6
ipnet	2.12.0	2.12.1
jiff	0.2.31	0.2.35
jobserver	0.1.34	0.1.35
libc	0.2.186	0.2.189
libredox	0.1.17	0.1.19
macro_rules_attribute	0.2.2	0.2.3
matrixmultiply	0.3.10	0.3.11
memchr	2.8.2	2.8.3
mio	1.2.1	1.2.2
num-iter	0.1.45	0.1.46
pest	2.8.6	2.8.8
pest_derive	2.8.6	2.8.8
portable-atomic	1.13.1	1.15.0
proc-macro2	1.0.106	1.0.107
quinn-proto	0.11.15	0.11.16
quote	1.0.46	1.0.47
rand	0.9.4	0.9.5
regex	1.12.4	1.13.1
rustc-hash	2.1.2	2.1.3
rustls	0.23.41	0.23.43
rustls-pki-types	1.14.1	1.15.1
rustversion	1.0.22	1.0.23
simd-adler32	0.3.9	0.3.10
simd_cesu8	1.1.1	1.2.0
socket2	0.6.4	0.6.5
syn	2.0.118	2.0.119
tao-macros	0.1.3	0.1.4
tendril	0.5.0	0.5.1
thiserror	2.0.18	2.0.20
time	0.3.51	0.3.55
tinyvec	1.11.0	1.12.0
tokio-macros	2.7.0	2.7.2
tokio-util	0.7.18	0.7.19
toml_edit	0.25.12+spec-1.1.0	0.25.13+spec-1.1.0
toml_parser	1.1.2+spec-1.1.0	1.1.3+spec-1.1.0
web_atoms	0.2.5	0.2.6
webpki-root-certs	1.0.8	1.0.9
webpki-roots	1.0.8	1.0.9
winnow	1.0.3	1.0.4
zerocopy	0.8.52	0.8.56
zmij	1.0.21	1.0.23

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• See full diff in compare view

Updates crossbeam-channel from 0.5.15 to 0.5.16

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.16

• Improve support for rust-analyzer auto-completion of code inside select!/select_biased! macro. (#1240)
• Make never const. (#1250)

Commits

• 9b56303 Prepare for the next release
• a078b17 ci: Sync config with main
• 508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
• 6a20e57 tests: Fix mismatched_lifetime_syntaxes
• c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
• bd6563e Update no_atomic.rs
• d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
• c0c466e channel: Use non-poison Mutex
• 8b3940f Add missing word to docs (#1208)
• df6eec0 docs: Link select_biased! from select! macro (#1202)
• Additional commits viewable in compare view

Updates ringbuf from 0.5.0 to 0.5.1

Commits

• See full diff in compare view

Updates ort from 2.0.0-rc.12 to 2.0.0-rc.13

Release notes

Sourced from ort's releases.

v2.0.0-rc.13

2.0.0-rc.13

💖 If you find ort useful, please consider sponsoring us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

---

🎯 Execution provider clarity

EP structs like ep::CUDA are now compile-time gated behind their respective Cargo feature flags. The EP feature flags only modifying runtime behavior was a common pain point, and this change brings ort in line with, like, every other Rust crate in existence.

⚠️ ort will now throw an error at link time if download-binaries is enabled and no binaries contain all of the requested EPs. Previously, if you enabled a nonsensical combination like cuda + coreml, ort would silently fall back to a CPU-only build. This caused great confusion as the only indicator of what went wrong was in log messages that don't show by default. A new lax-feature-matching Cargo feature will fallback to the closest fit instead of erroring.

🍎 ONNX Runtime 1.28

rc.13 skips ahead 4 ONNX Runtime versions to v1.28, bringing new operator support, bug & security fixes, and performance improvements.

✖️ No CUDA 12

rc.13 only ships CUDA 13 binaries, as ONNX Runtime has deprecated CUDA 12.

🧩 Custom operator ergonomics

Custom operators have been reworked to have a more Rusty interface:

 struct MyOperator;
impl Operator for MyOperator {


type Kernel<'attr> = ort::operator::BoxedKernel<'attr>;
fn name(&self) -> &str {
"MyOperator"
}



fn inputs(&self) -> Vec<OperatorInput> {

  vec![OperatorInput::required(TensorElementType::Float32), OperatorInput::required(TensorElementType::Float32)]




fn inputs(&self) -> impl IntoIterator<Item = OperatorInput> {

  [OperatorInput::required(TensorElementType::Float32), OperatorInput::required(TensorElementType::Float32)]

}


fn outputs(&self) -> Vec<OperatorOutput> {

  vec![OperatorOutput::required(TensorElementType::Float32)]




fn outputs(&self) -> impl IntoIterator<Item = OperatorOutput> {

  [OperatorOutput::required(TensorElementType::Float32)]

}


fn create_kernel(&self, _: &KernelAttributes) -> ort::Result<Box<dyn Kernel>> {

  Ok(Box::new(|ctx: &amp;KernelContext| {



</tr></table>

... (truncated)

Commits

• 002f41a 2.0.0-rc.13
• d5dc28f chore(tract): update tract to v0.23
• 62ad710 chore(candle): update to candle v0.11.0
• 66ffef6 docs: update
• 58ebfd8 chore(tools): update api-coverage
• 71c1c84 refactor!: separate Device and HardwareDevice
• 85f4893 chore(sys): update ONNX Runtime to v1.28.0
• d7d924e refactor!: move environment::current to an associated function
• db48c03 feat: Tensor::size
• 2c6652b feat: per-run profiling
• Additional commits viewable in compare view

Updates ureq from 3.3.0 to 3.4.0

Changelog

Sourced from ureq's changelog.

3.4.0

• Seal RequestExt (technically breaking) #1189
• Send canonical Basic authentication scheme to CONNECT proxies #1185
• Establish target TLS through HTTPS CONNECT proxies #1183
• Update rustls-platform-verifier to 0.7.0 #1174
• Fix pooled connections never aging out according to max_idle_age #1172
• Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #1171
• RequestExt::middleware_config for conf inside middleware #1169

Commits

• 5e803fc 3.4.0
• 82b37b5 Update changelog for 3.4.0
• 07b8ea2 Seal RequestExt (#1189)
• 0df28a1 Update changelog
• 653e963 Bump deps (#1188)
• 830f6ca chore: remove redundant clone (#1187)
• 6e9a050 Send CONNECT Proxy-Authorization scheme as canonical "Basic" (#1185)
• f8a5bed Fix TLS to targets through HTTPS proxies (#1183)
• 1f1c342 Support testing in release mode (#1180)
• 089c235 Update rustls-platform-verifier to 0.7.0
• Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

• signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

• time: fix alt timer cancellation and insertion race (#8252)

Documented

• runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

• fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
• metrics: add task schedule latency metric (#7986)
• net: add SocketAddr methods to Unix sockets (#8144)

Changed

• io: add #[inline] to IO trait impls for in-memory types (#8242)
• net: implement UCred::pid on FreeBSD (#8086)
• net: support Nuttx target os (#8259)
• signal: refactor global variables on Windows (#8231)
• sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
• taskdump: support taskdumps on s390x (#8192)
• time: add #[track_caller] to timeout_at() (#8077)
• time: consolidate mutex locks on spurious poll (#8124)
• time: defer waker clone on spurious poll (#8107)
• time: move lazy-registration state into Sleep (#8132)
• tracing: remove unnecessary span clone (#8126)

Fixed

• io: do not treat zero-length reads as EOF in Chain (#8251)
• net: use getpeereid for QNX peer credentials (#8270)
• runtime: avoid illegal state in FastRand (#8078)
• sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
• taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
• time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• be689a3 chore: prepare Tokio v1.53.0 (#8294)
• 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
• f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
• efdba5f chore: prepare Tokio v1.52.4 (#8289)
• b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
• Additional commits viewable in compare view

Updates tokio-stream from 0.1.18 to 0.1.19

Commits

• bc0933c chore: prepare tokio-stream v0.1.19 (#8310)
• e3786d0 readme: remove obsolete TokioConf notices (#8311)
• f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
• 52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
• ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.33

Release notes

Sourced from futures's releases.

0.3.33

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.33 - 2026-07-18

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Commits

• 89cc254 Release 0.3.33
• cd9f5be ci: Update release workflow
• d79a499 Resolve rustdoc::broken_intra_doc_links warning
• 95bbcf8 Resolve rustdoc ambiguous link error
• 303c165 Resolve rustdoc::redundant_explicit_links warning
• f34e3f5 ci: Cleanup
• 66591a2 Enable Miri for more tests
• ab1072f Simplify target_has_atomic cfg in utility crates
• cf5d23b Fix unsound compat01as03 implementation (fixes #2514) (#3012)
• 8ae794f Add portable-atomic-alloc feature and use it in FuturesUnordered (#3007)
• Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• 348cff3 chore: Release
• d478377 docs: Update changelog
• 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
• 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
• f90a966 fix(complete): Use spaces for indentation in fish
• dd4997b fix(complete): Don't glob-expand bash positionals
• 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
• 8141e11 chore(deps): Update compatible (dev) (#6398)
• 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
• Additional commits viewable in compare view

Updates aho-corasick from 1.1.4 to 1.1.5

Commits

• 5178060 1.1.5
• b68c8d5 api: check for overflow in Match::offset too
• c821786 build(deps): bump actions/checkout in the actions group (#171)
• 8209bb9 Hash-pin all actions, drop persisted credentials (#170)
• 0f3f5da api: document a couple panicking preconditions
• e88e1fc benchmarks: bump dependencies
• 88e4966 ci: use older version of log on pinned build
• See full diff in compare view

Updates android_system_properties from 0.1.5 to 0.1.6

Commits

• See full diff in compare view

Updates aws-lc-rs from 1.17.0 to 1.18.0

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.0

AWS-LC-FIPS module updated to 4.x

This release switches aws-lc-fips-sys (used via the fips feature) from the AWS-LC-FIPS 3.x branch to AWS-LC-FIPS 4.0.

• If your project requires FIPS compliance, please consult your local FIPS compliance experts before upgrading. The FIPS v3 module shipped in aws-lc-rs v1.17.x is FIPS 140-3 validated ([Certificate #5314](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314) static, [Certificate #5298](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298) dynamic). The 4.x module has completed validation testing by an accredited lab and has been submitted to NIST for certification. Refer to the CMVP Modules In Progress List for its current status, and to FIPS.md for security policies and supported operating environments.
• Consumers who need to remain on the FIPS 3.x module should pin aws-lc-rs to <1.18.0. See the Cargo Book on Specifying Dependencies.

AWS-LC-FIPS module	aws-lc-rs
2.0.x	<1.12.0
3.0.x	<1.18.0
4.x	latest

What's Changed

• Switch aws-lc-fips-sys to AWS-LC's "FIPS 4.0" branch by @​justsmth in aws/aws-lc-rs#1185
  • aws-lc-fips-sys v0.13.16 -> v0.14.0. Please see the call-out above.
• The ML-DSA signature APIs are now stable 🎉 by @​justsmth in aws/aws-lc-rs#1188 and aws/aws-lc-rs#1189
  • PqdsaKeyPair, PqdsaPublicKey, PqdsaPrivateKey, PqdsaSigningAlgorithm, PqdsaVerificationAlgorithm, and the ML_DSA_44 / ML_DSA_65 / ML_DSA_87 algorithms (and their _SIGNING counterparts) now live in aws_lc_rs::signature. ML-DSA no longer requires the unstable feature, and is now available under fips -- the FIPS 4.0 module provides ML-DSA, which is what had kept these APIs unstable. See our updated API documentation.
  • Please migrate any use of aws_lc_rs::unstable::signature to aws_lc_rs::signature. The unstable::signature module remains as deprecated aliases and will be removed in a future release.
  • PqdsaKeyPair::to_pkcs8 has been renamed to to_pkcs8v1, since elsewhere in the module an unqualified to_pkcs8 means PKCS#8 v2. A deprecated to_pkcs8 alias remains available under the unstable feature.
  • Existing unstable consumers continue to compile, with deprecation warnings. Two cases need a source change: builds using #![deny(warnings)], and code that glob-imports both signature::* and unstable::signature::*, which now needs an explicit import to disambiguate.
  • Behavior change: PqdsaVerificationAlgorithm::parsed_verify_digest_sig now always returns Unspecified. Digest-then-verify is not an operation defined by FIPS 204 -- pure ML-DSA signs the message itself, and the pre-hash variant (HashML-DSA) uses a distinct domain separator that this API does not implement.
• Add out-of-place AEAD sealing by @​iainmcgin in aws/aws-lc-rs#1183
  • Adds seal_separate_out_of_place to LessSafeKey and TlsRecordSealingKey. Every sealing entry point was previously in-place, so a caller whose plaintext was borrowed or shared had to copy it into a scratch buffer purely to make it mutable. This mirrors the existing open_separate_gather, so the sealing and opening directions now match.
• Add rsa::KeyPair::from_components for constructing RSA key pairs from raw components by @​justsmth in aws/aws-lc-rs#1175
  • Adds rsa::KeyPairComponents and rsa::KeyPair::from_components, matching ring 0.17, so a signing key can be built from formats such as JWK without first encoding the components as DER. Unlike ring, d and the CRT parameters are validated at construction using RSA_check_key, so keys with inconsistent or placeholder values that ring accepts may be rejected. Unnecessary generic bounds were also removed from PublicKeyComponents.
• Automatically optimize aws-lc for size when opt-level is "s" or "z" by @​justsmth in aws/aws-lc-rs#1159
  • The builder now enables AWS-LC's size-optimized configuration (OPENSSL_SMALL, and no AVX-512 assembly on x86_64) whenever Cargo is already building for size. In CI, a small binary exercising SHA-256, AES-256-GCM, and ECDSA P-256 is 36-50% smaller at opt-level=z than at opt-level=3: 50% on x86_64 Linux, 48% on aarch64 macOS, 39% on x86_64 Windows, 36% on aarch64 Linux. Your own savings depend on how much of AWS-LC your binary retains.
  • No algorithms are removed and outputs are unchanged; the trade-off is slower elliptic-curve performance. Set AWS_LC_SYS_SMALL=1/=0 to force it on or off independently of opt-level.
  • FIPS builds do not opt in automatically: aws-lc-fips-sys requires an explicit AWS_LC_FIPS_SYS_SMALL=1, and warns when it is set.
  • Partially addresses aws/aws-lc-rs#745; the default size under opt-level=3 footprint is unchanged.
• Export native library build metadata from the -sys crates by @​justsmth in aws/aws-lc-rs#1187, including original commits from @​glebpom in aws/aws-lc-rs#1184
  • Downstream build scripts compiling C code against AWS-LC can now locate our artifacts via DEP_AWS_LC_* / DEP_AWS_LC_FIPS_* (libdir, libcrypto_path, link_kind, and libssl_path with ssl), consistently across the CC, CMake, and system-library build paths. Existing linker directives are unchanged. On Windows, the *_path values are the link-time artifact (import library), not the runtime DLL.
• Key wrap hardening by @​justsmth in aws/aws-lc-rs#1190 and aws/aws-lc-rs#1191
  • KeyEncryptionKey::unwrap no longer underflows on ciphertexts shorter than 8 bytes. Since the ciphertext is untrusted input, builds with overflow-checks = true would panic instead of returning the documented Err(Unspecified); default release builds were unaffected.
  • KeyEncryptionKey now zeroizes its key material on drop, consistent with the other key types in this crate.
• docs(signature): correct outdated note about signing a separate digest by @​WesleyRosenblum in aws/aws-lc-rs#1186

Upstream AWS-LC (v5.5.0)

aws-lc-sys v0.44.0 aligns with AWS-LC v5.5.0 (previously v5.2.0). See also the release notes for v5.3.0 and v5.4.0.

Build Improvements

• Fix bindings copy from read-only prebuilt AWS-LC install by @​justsmth in aws/aws-lc-rs#1194
  • Copies into OUT_DIR now remove any stale destination first and leave the fresh copy writable, so building against a read-only prebuilt install (e.g. the Nix store) no longer fails with Permission denied on a build-script rerun. An OUT_DIR already poisoned by an earlier build now recovers without a cargo clean.

Issues Being Closed

• ML-DSA stabilization? -- aws/aws-lc-rs#964
• Expose out-of-place AEAD sealing -- aws/aws-lc-rs#1182

... (truncated)

Commits

• f464440 Prepare aws-lc-rs v1.18.0 (#1200)
• 7085f8b Fix bindings copy from read-only prebuilt AWS-LC install (#1194)
• 2196440 Export native library build metadata from the -sys crates (#1187)
• 623100f Prepare aws-lc-sys v0.44.0 (#1199)
• 90c687e Add rsa::KeyPair::from_components for constructing RSA key pairs from raw c...
• b84076f Automatically optimize aws-lc for size when opt-level is "s" or "z" (#1159)
• 5a5408b Publish script fixes: cargo clean failure, and verify aws-lc-rs against minim...
• a23dd38 ci: fix mdbook test failure and run docs checks on PRs (#1181)
• 390622e fix: align PQDSA API with signature module conventions (#1189)
• 4b0cb00 docs(signature): correct outdated note about signing a separate digest (#1186)
• Additional commits viewable in compare view

Updates aws-lc-sys from 0.41.0 to 0.44.0

Commits

• f464440 Prepare aws-lc-rs v1.18.0 (#1200)
• 7085f8b Fix bindings copy from read-only prebuilt AWS-LC install (#1194)
• 2196440 Export native library build metadata from the -sys crates (#1187)
• 623100f Prepare aws-lc-sys v0.44.0 (#1199)
• 90c687e Add rsa::KeyPair::from_components for constructing RSA key pairs from raw c...
• b84076f Automatically optimize aws-lc for size when opt-level is "s" or "z" (#1159)
• 5a5408b Publish script fixes: cargo clean failure, and verify aws-lc-rs against minim...
• a23dd38 ci: fix mdbook test failure and run docs checks on PRs (#1181)
• 390622e fix: align PQDSA API with signature module conventions (#1189)
• 4b0cb00 docs(signature): correct outdated note about signing a separate digest (#1186)
• Additional commits viewable in compare view

Updates bitflags from 2.13.0 to 2.13.1

Release notes

Sourced from bitflags's releases.

2.13.1

What's Changed

• Lower the LLVM IR output of the generated output by @​bolshoytoster in bitflags/bitflags#492
• Prepare for 2.13.1 release by @​KodrAus in bitflags/bitflags#493

New Contributors

• @​bolshoytoster made their first contribution in bitflags/bitflags#492

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

Changelog

Sourced from bitflags's changelog.

2.13.1

What's Changed

• Lower the LLVM IR output of the generated output by @​bolshoytoster in bitflags/bitflags#492

New Contributors

• @​bolshoytoster made their first contribution in bitflags/bitflags#492

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

Commits

• f92a292 Merge pull request #493 from bitflags/cargo/2.13.1
• c1271c5 prepare for 2.13.1 release
• e077c4a Merge pull request #492 from bolshoytoster/main
• 75d1be4 Bless compile fail stderr
• 7813d71 Support the MSRV
• d8f8234 Remove unused variable warning with empty bitflags
• 2e27d6a Fix const _ = !0;
• dd8beda Fix Self in flags
• dbc0ce1 Lower the LLVM IR output of the generated output
• See full diff in compare view

Updates bytemuck from 1.25.0 to 1.25.2

Changelog

Sourced from bytemuck's changelog.

1.25.2

• implement NoUninit for char, bool, NonZero* arrays

1.25.1

• Don't impl core::error::Error on spirv, which was causing a build error on that target.
• Added a reminder on try_cast_slice that empty slices must still be aligned.

1.25

• Remove extern "stdcall" fn ptr impls on non-x86-32 windows.
• Fix nightly_portable_simd after LaneCount removal.

1.24

• use new stable avx512 types from rust 1.89
• impl AnyBitPattern for [MaybeUninit<T: AnyBitPattern>; N]
• bump derive minimum version.

1.23.2

• bump derive minimum version.

1.23.1

• Added a windows-only ZeroableInOption impl for "stdcall" functions.

1.23

• impl_core_error crate feature adds core::error::Error impl.
• More ZeroableInOption impls.

1.22

• Add the pod_saturating feature, which adds Pod impls for Saturating<T> when T is already Pod.
• A bump in the minimum bytemuck_derive dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient cargo.lock file sitting around.
• Adds Send and Sync impls to BoxByte...

  Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 12 package(s) with unknown licenses.
• ⚠️ 2 packages with OpenSSF Scorecard issues.

View full job summary