Skip to content

deps(deps): bump the cargo-deps group across 1 directory with 25 updates - #3898

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-deps-b5cc78d78a
Open

deps(deps): bump the cargo-deps group across 1 directory with 25 updates#3898
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-deps-b5cc78d78a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-deps group with 25 updates in the / directory:

Package From To
aes 0.9.1 0.9.2
anyhow 1.0.102 1.0.104
async-nats 0.49.1 0.50.0
async-trait 0.1.89 0.1.91
blst 0.3.16 0.3.17
bytes 1.12.0 1.12.1
bytesize 2.4.0 2.4.2
cc 1.2.65 1.4.0
chacha20 0.10.0 0.10.1
clap 4.6.1 4.6.4
console 0.15.11 0.16.4
env_logger 0.11.10 0.11.11
event-listener 5.4.1 5.4.2
futures 0.3.32 0.3.33
libc 0.2.186 0.2.189
memmap2 0.9.10 0.9.11
pem 3.0.6 4.0.0
rand 0.8.6 0.8.7
serde_json 1.0.150 1.0.151
spin 0.12.0 0.12.2
thiserror 2.0.18 2.0.19
tokio 1.52.3 1.53.1
tokio-stream 0.1.18 0.1.19
ulid 1.2.1 3.0.0
ziggy 1.7.1 1.7.2

Updates aes from 0.9.1 to 0.9.2

Commits

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 1dbe186 Release 1.0.104
  • f6479f8 Update to syn 3
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Updates async-nats from 0.49.1 to 0.50.0

Release notes

Sourced from async-nats's releases.

async-nats/v0.50.0

Overview

This release allows for on-demand swap between chrono and time crates.

What's Changed

Chrono vs Time

Enabling chrono anywhere in the dependency graph selects the chrono backend for the whole build (Cargo feature unification).

New Contributors

Full Changelog: nats-io/nats.rs@async-nats/v0.49.1...async-nats/v0.50.0

Commits
  • 9b382a2 Release v0.50.0
  • 834b129 Apply linter fixes
  • d00e6b5 Fix account info deser failure on servers with tiered jetstream
  • afceb76 Replace dead feature-powerset CI job with curated feature check
  • a493d15 Switch to tryhard for nats-server tests
  • c27e773 Use new start method for retry start in nats-server crate
  • 86ecbaf Use time by default and cover chrono in CI
  • 15f9f63 Add chrono as alternative to time.
  • See full diff in compare view

Updates async-trait from 0.1.89 to 0.1.91

Release notes

Sourced from async-trait's releases.

0.1.91

  • Update to syn 3 (#299)
  • Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits
  • d049ee0 Release 0.1.91
  • 7a0961f Merge pull request #301 from dtolnay/mutability
  • 740f86f Ignore mut_mut pedantic clippy lint in test
  • 4699cd3 Fix mutability for by-reference receivers
  • 6dd3573 Add regression test for issue 300
  • 2371797 Release 0.1.90
  • d03f075 Merge pull request #299 from dtolnay/syn3
  • 6cf42c1 Update to syn 3
  • b9daaba Ignore match_same_arms pedantic clippy lint
  • aa706d1 Update actions/upload-artifact@v6 -> v7
  • Additional commits viewable in compare view

Updates blst from 0.3.16 to 0.3.17

Release notes

Sourced from blst's releases.

Release v0.3.17

  • add Zig bindings
  • accept zero-length salt in blst_kegen_v5 (spec doesn't formally prohibit it)
  • harden some interfaces
  • refine carry chains in mulx_mont modules
  • align with latest Python, Swig, Node.js
  • add support for Node-API
Commits
  • 54e6e55 bindings/rust/Cargo.toml: bump the version number.
  • 8aaaef0 bindings/zig: bump the version number.
  • ff66582 bindings/python/run.me: add test vectors from pairing-friendly-curves draft.
  • 3ede151 bindings/go/README.md: fix typos.
  • 14cd09a Execute build/refresh.sh.
  • 41b511a asm/{qx}-x86_64.pl: minimize symbol pollution in MSCV build.
  • bf008ec exports.c,recip.c: align with asm/mulx_mont_256-x86_64.
  • 33d7f80 asm/mulx_mont_256-x86_64.pl: clarify limitations.
  • e3d708b asm/x86_64-xlate.pl: update from cryptogams.
  • 23cdd8a bindings/go/blst.go: harden PairingMulNAggregate interface.
  • Additional commits viewable in compare view

Updates bytes from 1.12.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)
Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)
Commits

Updates bytesize from 2.4.0 to 2.4.2

Release notes

Sourced from bytesize's releases.

bytesize: v2.4.2

  • Improve accuracy of parsing large non-decimal byte count strings.

bytesize: v2.4.1

  • Fix rounding error near power-of-unit boundaries.
Changelog

Sourced from bytesize's changelog.

2.4.2

  • Improve accuracy of parsing large non-decimal byte count strings.

2.4.1

  • Fix rounding error near power-of-unit boundaries.
Commits
  • 2f8d196 chore: release v2.4.2 (#177)
  • 13f4aee Avoid f64 precision loss when parsing integer byte counts (#171)
  • 37cf3fc chore: release v2.4.1 (#176)
  • c84e293 chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.16.1 to 1.17....
  • fdba7f0 chore(deps): bump taiki-e/install-action from 2.81.10 to 2.82.7 (#173)
  • 1bad401 chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#174)
  • 520a557 fix: ideal_unit_std picks the wrong unit near power-of-unit boundaries (#175)
  • a50ff2f chore(deps): bump taiki-e/install-action from 2.75.27 to 2.81.10 (#163)
  • ce689d7 chore(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 (#164)
  • 284b09d chore(deps): bump serde_json from 1.0.149 to 1.0.150 (#165)
  • Additional commits viewable in compare view

Updates cc from 1.2.65 to 1.4.0

Release notes

Sourced from cc's releases.

cc-v1.4.0

Added

  • support trim paths with clang-cl.exe (#1799)

cc-v1.3.0

Added

  • inherit path remap rules from cargo trim-paths (#1794)

cc-v1.2.67

Other

  • Fix clippy warning (#1788)
  • Regenerate target info (#1785)
  • Add support for aarch64-unknown-linux-pauthtest target (#1713)
  • Fix nightly compilation error (#1783)

cc-v1.2.66

Other

  • Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
  • Support new QNX targets (#1775)
  • Add kache to the supported compiler wrappers (#1770)
Changelog

Sourced from cc's changelog.

1.4.0 - 2026-07-24

Added

  • support trim paths with clang-cl.exe (#1799)

1.3.0 - 2026-07-18

Added

  • inherit path remap rules from cargo trim-paths (#1794)

1.2.67 - 2026-07-11

Other

  • Fix clippy warning (#1788)
  • Regenerate target info (#1785)
  • Add support for aarch64-unknown-linux-pauthtest target (#1713)
  • Fix nightly compilation error (#1783)

1.2.66 - 2026-07-05

Other

  • Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
  • Support new QNX targets (#1775)
  • Add kache to the supported compiler wrappers (#1770)
Commits

Updates chacha20 from 0.10.0 to 0.10.1

Commits
  • 5f3430b Release chacha20 v0.10.1 (#574)
  • 5e2e7b3 build(deps): bump actions/checkout from 6 to 7 (#573)
  • 7edb728 chacha20: use intel-sde-install action for AVX-512 CI (#572)
  • 2aa613e Update Cargo.lock (#571)
  • 57cb130 chacha20: apply unreachable_pub lint (#570)
  • 637e168 build(deps): bump hybrid-array from 0.4.11 to 0.4.12 in the all-deps group (#...
  • 51bb585 chacha20: widen NEON bulk path to 8 parallel blocks (#564)
  • 269a7b9 Update Cargo.lock (#563)
  • 315fe6c build(deps): bump the all-deps group with 2 updates (#561)
  • 3248a87 Fix header level of example sections (#560)
  • Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • 87ec1ad chore: Release
  • 78f2529 docs: Update changelog
  • b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
  • 74c6666 fix(complete): Keep zsh candidate order
  • d142d8f Merge pull request #6360 from epage/string
  • ba89563 style: Prefer explicit string operations
  • bea966e Merge pull request #6359 from epage/man
  • b811986 chore(man):Remove unused required-features
  • 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
  • bab9b24 chore(deps): Update compatible (dev) (#6357)
  • Additional commits viewable in compare view

Updates console from 0.15.11 to 0.16.4

Release notes

Sourced from console's releases.

0.16.4

What's Changed

0.16.3

What's Changed

0.16.2

What's Changed

0.16.1

What's Changed

0.16.0

What's Changed

The 0.15.12 release was yanked after it turned out to be semver-incompatible with existing usage by several of the most popular dependent crates, because it introduced a std feature -- and those crates used default-features = false but relied on the std-guarded features.

The 0.16.0 API should be semver-compatible with the 0.15.x API except for the need for the std feature.

Refer to the 0.15.12 release notes for more information.

0.15.12

What's Changed

... (truncated)

Commits
  • 598eca9 Bump version to 0.16.4
  • 0f22c35 feat: add is_dumb public function
  • 1426649 Bump actions/checkout from 3 to 7
  • d2d89ad ignore non-ascii input in Style::from_dotted_str
  • 6cff3e0 document current panic in Style::from_dotted_str via test cases
  • dd4334f Apply suggestions from clippy 1.95
  • 586efad Remove redundant as_handle helper
  • be20e85 Add TermInner::new constructors
  • 70ea3d0 Bump version to 0.16.3
  • 6bd8894 Remove make msrv-lock
  • Additional commits viewable in compare view

Updates env_logger from 0.11.10 to 0.11.11

Release notes

Sourced from env_logger's releases.

v0.11.11

[0.11.11] - 2026-06-25

Internal

  • Updated env_filter
Changelog

Sourced from env_logger's changelog.

[0.11.11] - 2026-06-25

Internal

  • Updated env_filter
Commits
  • b4d3f2b chore: Release
  • cc2b2ef chore: Release
  • 69e27d1 docs: Update changelog
  • 166880d Merge pull request #411 from epage/parse
  • 0a580d0 fix(filter): Remove 'parse' on no_std
  • 78d8ef1 Merge pull request #404 from cagatay-y/feature/filter-no_std
  • 132fe86 feat(filter): Add support for no_std environments
  • 4feafa4 refactor(env_filter): Fix unreachable pub warning
  • 92f8d8d Merge pull request #410 from rust-cli/renovate/crate-ci-typos-1.x
  • 4e57784 chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • Additional commits viewable in compare view

Updates event-listener from 5.4.1 to 5.4.2

Release notes

Sourced from event-listener's releases.

v5.4.2

  • Add spinlock implementation to intrusive.rs.
  • Remove slab-based implementation of event-listener. #109
  • Fix unbounded Send/Sync implementations on StackSlot. #163
  • Misc. internal improvements.
Changelog

Sourced from event-listener's changelog.

Version 5.4.2

  • Add spinlock implementation to intrusive.rs.
  • Remove slab-based implementation of event-listener. #109
  • Fix unbounded Send/Sync implementations on StackSlot. #163
  • Misc. internal improvements.
Commits
  • 77004ac Merge pull request #166 from smol-rs/release
  • b7c96f8 Release 5.4.2
  • 214becd Fix unbounded Send/Sync implementations on StackSlot (#163)
  • 92fc46b Remove no longer needed imports
  • bb65f07 ci: Use taiki-e/checkout-action action
  • 593ace8 ci: Use reusable workflows for clippy
  • da90a66 Format with rustfmt
  • 2e9db21 chore: Fix typo
  • fb1182e Remove slab-based implementation of event-listener
  • c5cec7b Add spinlock implementation to intrusive.rs
  • Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.33

Release notes

Sourced from futures's releases.

0.3.33

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Changelog

Sourced from futures's changelog.

0.3.33 - 2026-07-18

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Commits
  • 89cc254 Release 0.3.33
  • cd9f5be ci: Update release workflow
  • d79a499 Resolve rustdoc::broken_intra_doc_links warning
  • 95bbcf8 Resolve rustdoc ambiguous link error
  • 303c165 Resolve rustdoc::redundant_explicit_links warning
  • f34e3f5 ci: Cleanup
  • 66591a2 Enable Miri for more tests
  • ab1072f Simplify target_has_atomic cfg in utility crates
  • cf5d23b Fix unsound compat01as03 implementation (fixes #2514) (#3012)
  • 8ae794f Add portable-atomic-alloc feature and use it in FuturesUnordered (#3007)
  • Additional commits viewable in compare view

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

  • Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
  • Linux SPARC: Enable the clone3 syscall (#4980)
  • Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

  • Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

  • Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
  • NuttX: Fix wchar_t definition under Arm (#5245)
  • Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

  • The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

  • uClibc now supports a similar configuration option:

    RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

  • Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
  • Linux SPARC: Enable the clone3 syscall (#4980)
  • Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

  • Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

  • Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
  • NuttX: Fix wchar_t definition under Arm (#5245)
  • Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

  • The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
  • uClibc now supports a similar configuration option:

... (truncated)

Commits
  • ef0906e libc: Release 0.2.189
  • 5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
  • 3e51062 psp: Fix overflowing_literals warnings
  • e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
  • 63221b3 macros: Require safe in safe_f! invocations
  • 707ab52 macros: Require unsafe in f! invocations
  • 8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
  • 8427909 windows: Add back link names for time-related symbols
  • b4863fa nuttx: fix wchar_t definition under arm
  • 41c683d nuttx: mirror type definitions
  • Additional commits viewable in compare view

Updates memmap2 from 0.9.10 to 0.9.11

Changelog

Sourced from memmap2's changelog.

[0.9.11] - 2026-06-22

Fixed

  • Fix unchecked pointer arithmatic in advice_range, unchecked_advise_range, flush_range and flush_async_range.

Changed

  • Bump the MSRV from 1.63 to 1.65.
Commits
  • 7d76ad3 Merge pull request #171 from RazrFalcon/release/v0.9.11
  • 34f87ab Bump version to 0.9.11
  • de56043 Merge pull request #170 from RazrFalcon/fix-unchecked-pointer-math
  • 8b31409 Bump MSRV to 1.65 (to follow libc).
  • cee7cf0 Fix unchecked pointer math.
  • e741b00 Merge pull request #166 from andybalaam/typo-crated
  • 28fdcdd Fix typo 'crated' -> 'created'
  • See full diff in compare view

Updates pem from 3.0.6 to 4.0.0

Commits

Updates rand from 0.8.6 to 0.8.7

Changelog

Sourced from rand's changelog.

[0.8.7] - 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1804)

#1804: rust-random/rand#1804

Commits

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits

Bumps the cargo-deps group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aes](https://github.com/RustCrypto/block-ciphers) | `0.9.1` | `0.9.2` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` |
| [async-nats](https://github.com/nats-io/nats.rs) | `0.49.1` | `0.50.0` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.91` |
| [blst](https://github.com/supranational/blst) | `0.3.16` | `0.3.17` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.12.0` | `1.12.1` |
| [bytesize](https://github.com/bytesize-rs/bytesize) | `2.4.0` | `2.4.2` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.65` | `1.4.0` |
| [chacha20](https://github.com/RustCrypto/stream-ciphers) | `0.10.0` | `0.10.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.4` |
| [console](https://github.com/console-rs/console) | `0.15.11` | `0.16.4` |
| [env_logger](https://github.com/rust-cli/env_logger) | `0.11.10` | `0.11.11` |
| [event-listener](https://github.com/smol-rs/event-listener) | `5.4.1` | `5.4.2` |
| [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` |
| [libc](https://github.com/rust-lang/libc) | `0.2.186` | `0.2.189` |
| [memmap2](https://github.com/RazrFalcon/memmap2-rs) | `0.9.10` | `0.9.11` |
| [pem](https://github.com/jcreekmore/pem-rs) | `3.0.6` | `4.0.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.6` | `0.8.7` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [spin](https://github.com/mvdnes/spin-rs) | `0.12.0` | `0.12.2` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` |
| [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.18` | `0.1.19` |
| [ulid](https://github.com/dylanhart/ulid-rs) | `1.2.1` | `3.0.0` |
| [ziggy](https://github.com/srlabs/ziggy) | `1.7.1` | `1.7.2` |



Updates `aes` from 0.9.1 to 0.9.2
- [Commits](RustCrypto/block-ciphers@aes-v0.9.1...aes-v0.9.2)

Updates `anyhow` from 1.0.102 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.104)

Updates `async-nats` from 0.49.1 to 0.50.0
- [Release notes](https://github.com/nats-io/nats.rs/releases)
- [Commits](nats-io/nats.rs@async-nats/v0.49.1...async-nats/v0.50.0)

Updates `async-trait` from 0.1.89 to 0.1.91
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.91)

Updates `blst` from 0.3.16 to 0.3.17
- [Release notes](https://github.com/supranational/blst/releases)
- [Commits](supranational/blst@v0.3.16...v0.3.17)

Updates `bytes` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.12.0...v1.12.1)

Updates `bytesize` from 2.4.0 to 2.4.2
- [Release notes](https://github.com/bytesize-rs/bytesize/releases)
- [Changelog](https://github.com/bytesize-rs/bytesize/blob/master/CHANGELOG.md)
- [Commits](bytesize-rs/bytesize@bytesize-v2.4.0...bytesize-v2.4.2)

Updates `cc` from 1.2.65 to 1.4.0
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.65...cc-v1.4.0)

Updates `chacha20` from 0.10.0 to 0.10.1
- [Commits](RustCrypto/stream-ciphers@chacha20-v0.10.0...chacha20-v0.10.1)

Updates `clap` from 4.6.1 to 4.6.4
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.4)

Updates `console` from 0.15.11 to 0.16.4
- [Release notes](https://github.com/console-rs/console/releases)
- [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md)
- [Commits](console-rs/console@0.15.11...0.16.4)

Updates `env_logger` from 0.11.10 to 0.11.11
- [Release notes](https://github.com/rust-cli/env_logger/releases)
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)
- [Commits](rust-cli/env_logger@v0.11.10...v0.11.11)

Updates `event-listener` from 5.4.1 to 5.4.2
- [Release notes](https://github.com/smol-rs/event-listener/releases)
- [Changelog](https://github.com/smol-rs/event-listener/blob/master/CHANGELOG.md)
- [Commits](smol-rs/event-listener@v5.4.1...v5.4.2)

Updates `futures` from 0.3.32 to 0.3.33
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.33)

Updates `libc` from 0.2.186 to 0.2.189
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.186...0.2.189)

Updates `memmap2` from 0.9.10 to 0.9.11
- [Changelog](https://github.com/RazrFalcon/memmap2-rs/blob/master/CHANGELOG.md)
- [Commits](RazrFalcon/memmap2-rs@v0.9.10...v0.9.11)

Updates `pem` from 3.0.6 to 4.0.0
- [Changelog](https://github.com/jcreekmore/pem-rs/blob/master/CHANGELOG.md)
- [Commits](jcreekmore/pem-rs@v3.0.6...v4.0.0)

Updates `rand` from 0.8.6 to 0.8.7
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.8.7/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.6...0.8.7)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `spin` from 0.12.0 to 0.12.2
- [Changelog](https://github.com/zesterer/spin-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mvdnes/spin-rs/commits)

Updates `thiserror` from 2.0.18 to 2.0.19
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.19)

Updates `tokio` from 1.52.3 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

Updates `tokio-stream` from 0.1.18 to 0.1.19
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-stream-0.1.18...tokio-stream-0.1.19)

Updates `ulid` from 1.2.1 to 3.0.0
- [Commits](dylanhart/ulid-rs@v1.2.1...v3.0.0)

Updates `ziggy` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/srlabs/ziggy/releases)
- [Changelog](https://github.com/srlabs/ziggy/blob/main/CHANGELOG.md)
- [Commits](srlabs/ziggy@1.7.1...1.7.2)

---
updated-dependencies:
- dependency-name: aes
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: async-nats
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: async-trait
  dependency-version: 0.1.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: blst
  dependency-version: 0.3.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: bytes
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: bytesize
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: cc
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: chacha20
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: clap
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: console
  dependency-version: 0.16.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: env_logger
  dependency-version: 0.11.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: event-listener
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: futures
  dependency-version: 0.3.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: libc
  dependency-version: 0.2.189
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: memmap2
  dependency-version: 0.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: pem
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-deps
- dependency-name: rand
  dependency-version: 0.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: spin
  dependency-version: 0.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: tokio-stream
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: ulid
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-deps
- dependency-name: ziggy
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 3, 2026
@immunefi-magnus

Copy link
Copy Markdown

🛡️ Immunefi PR Reviews

We noticed that your project isn't set up for automatic code reviews. If you'd like this PR reviewed by the Immunefi team, you can request it manually using the link below:

🔗 Send this PR in for review

Once submitted, we'll take care of assigning a reviewer and follow up here.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit d6ed870. Configure here.

Comment thread Cargo.toml
chacha20 = { version = "0.10.0", default-features = false }
clap = "4.6.1"
console = "0.15.11"
console = "0.16.4"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Console dual-version breaks color disable

Medium Severity

Bumping workspace console to 0.16.4 leaves Substrate crates on 0.15.11, so two copies coexist. init_logger disables colors only on the 0.16.4 statics; sc-informant and sc-tracing still emit ANSI that tracing-subscriber escapes into literal \x1b[ text in node logs.

Additional Locations (2)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit d6ed870. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants