Skip to content

chore(deps): bump the cargo-weekly group with 14 updates - #264

Merged
mablr merged 1 commit into
mainfrom
dependabot/cargo/cargo-weekly-3f06c280bc
Oct 19, 2026
Merged

chore(deps): bump the cargo-weekly group with 14 updates#264
mablr merged 1 commit into
mainfrom
dependabot/cargo/cargo-weekly-3f06c280bc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-weekly group with 14 updates:

Package From To
serde_json 1.0.151 1.0.154
toml 1.1.6+spec-1.1.0 1.1.8+spec-1.1.0
zstd 0.14.1 0.14.2
coins-ledger 0.13.2 0.13.3
proptest 1.11.0 1.12.0
rand_xorshift 0.4.0 0.5.0
secret-vault-value 1.0.1 1.0.2
smallvec 1.16.2 1.16.3
syn 3.0.6 3.0.8
toml_edit 0.25.15+spec-1.1.0 0.25.17+spec-1.1.0
triomphe 0.1.16 0.1.17
unicode-ident 1.0.26 1.0.27
zip 9.0.1 9.0.2
zopfli 0.8.3 0.8.4

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates toml from 1.1.6+spec-1.1.0 to 1.1.8+spec-1.1.0

Commits
  • ceac6e4 chore: Release
  • 0fe9e93 docs: Update changelog
  • e3a64aa fix(display): Ensure all keys are encoded (#1245)
  • 76484d0 fix(display): Ensure all keys are encoded
  • 711b1ba refactor(display): Clarify that we are working with encoded keys
  • 4f73ebd test(display): Reproduce the key bug
  • 6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 4d45944 perf(parser): Remove no-op code (#1243)
  • 189c91c perf(parser): Remove no-op code
  • Additional commits viewable in compare view

Updates zstd from 0.14.1 to 0.14.2

Commits
  • 1e52c7e Release zstd 0.14.2
  • 42fc51f Add reader-preserving fallible decoder constructors
  • 78170db Add Decoder::into_inner for reader recovery without additional input
  • See full diff in compare view

Updates coins-ledger from 0.13.2 to 0.13.3

Release notes

Sourced from coins-ledger's releases.

v0.13.3

What's Changed

New Contributors

Full Changelog: summa-tx/coins@0.13.2...v0.13.3

Commits

Updates proptest from 1.11.0 to 1.12.0

Commits
  • 70cf37d Merge pull request #675 from proptest-rs/prep-1.12
  • 729e0ff prepare next releases and fix panic handling
  • 28c1fad Merge pull request #664 from Expyron/main
  • 5ddd9a4 Merge pull request #668 from toddATavail/fix-fork-persisted-failure
  • a6a9ac7 Merge pull request #673 from glaziermag/fix-book-deploy
  • d57d88b Replace rand_chacha with chacha20
  • 9411213 Deploy the book on pushes to main
  • 1719745 fix: terminate the fork replay when a persisted failure fails
  • 0f55b7a test: a persisted failure in a forked test must be reported
  • 4b0594e Merge pull request #669 from proptest-rs/no-fail-fast
  • Additional commits viewable in compare view

Updates rand_xorshift from 0.4.0 to 0.5.0

Commits

Updates secret-vault-value from 1.0.1 to 1.0.2

Commits

Updates smallvec from 1.16.2 to 1.16.3

Release notes

Sourced from smallvec's releases.

v1.16.3

What's Changed

Full Changelog: servo/rust-smallvec@v1.16.2...v1.16.3

Commits

Updates syn from 3.0.6 to 3.0.8

Release notes

Sourced from syn's releases.

3.0.8

  • Fix parsing of <- and -> tokens in expressions (#2086, #2087)

3.0.7

Commits
  • f18a083 Release 3.0.8
  • e1eab98 Merge pull request #2087 from dtolnay/rightarrow
  • 5345ee5 Allow end of expr before ->
  • 5631c74 Merge pull request #2086 from dtolnay/leftarrow
  • c5b3cf0 Fix left arrow being split into less-than and negative-sign
  • ec4c2da Release 3.0.7
  • f947cf7 Merge pull request #2085 from A4-Tacks/break-label-abs-path
  • 9cb6556 Update test suite to nightly-2026-10-08
  • 0cce166 Fix parse abs path expr in labeled break
  • 295f964 Update test suite to nightly-2026-09-29
  • Additional commits viewable in compare view

Updates toml_edit from 0.25.15+spec-1.1.0 to 0.25.17+spec-1.1.0

Commits
  • ceac6e4 chore: Release
  • 0fe9e93 docs: Update changelog
  • e3a64aa fix(display): Ensure all keys are encoded (#1245)
  • 76484d0 fix(display): Ensure all keys are encoded
  • 711b1ba refactor(display): Clarify that we are working with encoded keys
  • 4f73ebd test(display): Reproduce the key bug
  • 6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 4d45944 perf(parser): Remove no-op code (#1243)
  • 189c91c perf(parser): Remove no-op code
  • Additional commits viewable in compare view

Updates triomphe from 0.1.16 to 0.1.17

Commits
  • 1c3cfa2 Bump to 0.1.17
  • 0c0e5f1 Merge pull request #147 from Manishearth/unsafe-review-docs
  • 87f5560 Document safety invariants and proofs in ArcBorrow
  • 2992295 Document safety invariants and proofs in ArcUnion
  • f4e78fd Document safety invariants and proofs in OffsetArc
  • 13e0a4b Merge pull request #145 from Manishearth/offset-arc-make-mut-unwind
  • d3133a3 agent-driven: Add regression test for OffsetArc::make_mut unwind safety
  • df994f4 agent-driven: Ensure OffsetArc::make_mut is panic-safe during unwinding
  • c6e3ebf Merge pull request #144 from Manishearth/arcborrow-unsized
  • 53673c0 agent-driven: Add unit tests for OffsetArc
  • Additional commits viewable in compare view

Updates unicode-ident from 1.0.26 to 1.0.27

Release notes

Sourced from unicode-ident's releases.

1.0.27

  • Optimize trie layout to create headroom for new identifiers in future unicode versions (#54, #56)
Commits
  • c1ac3af Release 1.0.27
  • ff8907c Merge pull request #56 from dtolnay/segment
  • b57403f Split base address for two different lookups
  • 4e958c4 Merge pull request #55 from dtolnay/indexset
  • 7da4079 Replace chunk layout with IndexSet
  • 97d6034 Merge pull request #54 from dtolnay/overflow
  • c7e447b Defer half-chunk overflow enforcement
  • 639d388 Merge pull request #53 from dtolnay/triestat
  • 662f912 Update trie statistics in readme for Unicode 18.0.0
  • 2bdb95a Merge pull request #52 from dtolnay/naming
  • Additional commits viewable in compare view

Updates zip from 9.0.1 to 9.0.2

Changelog

Sourced from zip's changelog.

9.0.2 - 2026-10-11

🐛 Bug Fixes

  • additional bug fixes for symlink extraction
Commits
  • d4baac6 doc: Manually update CHANGELOG for 9.0.2
  • bbb39b5 chore: Bump version from 9.0.1 to 9.0.2 to force a release PR
  • 5e0274b doc: Update CHANGELOG with bug fixes for symlink extraction
  • 5cd986f Update vulnerability reporting guidelines
  • 649e50e test: fix conditionally-unused function and missing imports (#1053)
  • 7fc4490 Merge commit from fork
  • 25a4ccb ci: explicit nightly in the command (nightly is already the default) (#1052)
  • 22e8f8c chore(deps): bump rust from 1.95 to 1.99 in /.devcontainer (#1051)
  • b5326b2 chore(deps): update zstd requirement from ^0.13.3 to ^0.14.0 (#986)
  • 553f64f ci: Scope permissions to job level (#1049)
  • Additional commits viewable in compare view

Updates zopfli from 0.8.3 to 0.8.4

Release notes

Sourced from zopfli's releases.

v0.8.4

What's Changed

Bug Fixes

  • Preserve BitwiseWriter invariants when bit flushing encounters a retryable I/O error, preventing subsequent writes from panicking. (#85)
  • Match Zopfli's lz77_optimal statistics-randomization cutoff to avoid unintended output differences in edge cases. (#89)

Changes

  • Raise the minimum supported Rust version to 1.88 due to dependency requirements.
  • Address new Clippy lints and improve internal documentation and scripts.

Dependency Updates

  • Update Rust dependencies to their latest versions, including bumpalo, crc32fast, log, proptest, proptest-derive, and simd-adler32.
  • Update GitHub Actions dependencies, including actions/checkout and github/codeql-action.

New Contributors

Full Changelog: zopfli-rs/zopfli@v0.8.3...v0.8.4

Commits
  • 62df3ae Bump Zopfli version to 0.8.4 🎉
  • 245de58 chore: fix new Clippy lints
  • e2353bd docs(README): set shell language for shell command code blocks
  • acc5f4a chore: bump MSRV to 1.88 due to dependency MSRV bump
  • ff963fb fix(squeeze): match Zopfli's lz77_optimal stats randomization cutoff on cos...
  • 3222baf chore(deps): refresh dependency, remove now redundant Cargo manifest key
  • d0e9d23 chore(test/run.sh): fix shellcheck lints, format with shfmt
  • c9e7478 chore(deps): update rust crate crc32fast to v1.5.2 (#88)
  • 3878989 chore(deps): update rust crate log to v0.4.34 (#87)
  • 067cb1c chore(deps): update rust crate crc32fast to v1.5.1 (#86)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo-weekly group with 14 updates
af70d45 
Bumps the cargo-weekly group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [toml](https://github.com/toml-rs/toml) | `1.1.6+spec-1.1.0` | `1.1.8+spec-1.1.0` |
| [zstd](https://github.com/gyscos/zstd-rs) | `0.14.1` | `0.14.2` |
| [coins-ledger](https://github.com/summa-tx/coins) | `0.13.2` | `0.13.3` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` |
| [rand_xorshift](https://github.com/rust-random/rngs) | `0.4.0` | `0.5.0` |
| [secret-vault-value](https://github.com/abdolence/secret-vault-rs) | `1.0.1` | `1.0.2` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.2` | `1.16.3` |
| [syn](https://github.com/dtolnay/syn) | `3.0.6` | `3.0.8` |
| [toml_edit](https://github.com/toml-rs/toml) | `0.25.15+spec-1.1.0` | `0.25.17+spec-1.1.0` |
| [triomphe](https://github.com/Manishearth/triomphe) | `0.1.16` | `0.1.17` |
| [unicode-ident](https://github.com/dtolnay/unicode-ident) | `1.0.26` | `1.0.27` |
| [zip](https://github.com/zip-rs/zip2) | `9.0.1` | `9.0.2` |
| [zopfli](https://github.com/zopfli-rs/zopfli) | `0.8.3` | `0.8.4` |


Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `toml` from 1.1.6+spec-1.1.0 to 1.1.8+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.6...toml-v1.1.8)

Updates `zstd` from 0.14.1 to 0.14.2
- [Release notes](https://github.com/gyscos/zstd-rs/releases)
- [Commits](gyscos/zstd-rs@v0.14.1...v0.14.2)

Updates `coins-ledger` from 0.13.2 to 0.13.3
- [Release notes](https://github.com/summa-tx/coins/releases)
- [Commits](summa-tx/coins@0.13.2...v0.13.3)

Updates `proptest` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.11.0...v1.12.0)

Updates `rand_xorshift` from 0.4.0 to 0.5.0
- [Commits](rust-random/rngs@rand_xorshift-0.4.0...rand_jitter-0.5.0)

Updates `secret-vault-value` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/abdolence/secret-vault-rs/releases)
- [Commits](https://github.com/abdolence/secret-vault-rs/commits)

Updates `smallvec` from 1.16.2 to 1.16.3
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.2...v1.16.3)

Updates `syn` from 3.0.6 to 3.0.8
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.6...3.0.8)

Updates `toml_edit` from 0.25.15+spec-1.1.0 to 0.25.17+spec-1.1.0
- [Commits](toml-rs/toml@v0.25.15...v0.25.17)

Updates `triomphe` from 0.1.16 to 0.1.17
- [Commits](Manishearth/triomphe@v0.1.16...v0.1.17)

Updates `unicode-ident` from 1.0.26 to 1.0.27
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](dtolnay/unicode-ident@1.0.26...1.0.27)

Updates `zip` from 9.0.1 to 9.0.2
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v9.0.1...9.0.2)

Updates `zopfli` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/zopfli-rs/zopfli/releases)
- [Commits](zopfli-rs/zopfli@v0.8.3...v0.8.4)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: toml
  dependency-version: 1.1.8+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: zstd
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: coins-ledger
  dependency-version: 0.13.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: proptest
  dependency-version: 1.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo-weekly
- dependency-name: rand_xorshift
  dependency-version: 0.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo-weekly
- dependency-name: secret-vault-value
  dependency-version: 1.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: smallvec
  dependency-version: 1.16.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: syn
  dependency-version: 3.0.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: toml_edit
  dependency-version: 0.25.17+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: triomphe
  dependency-version: 0.1.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: unicode-ident
  dependency-version: 1.0.27
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: zip
  dependency-version: 9.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
- dependency-name: zopfli
  dependency-version: 0.8.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-weekly
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 19, 2026
@dependabot dependabot Bot added the rust Pull requests that update rust code label Oct 19, 2026
mablr
mablr reviewed Oct 19, 2026
View reviewed changes

@mablr mablr left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it work if we downgrade secret-vault-value ? (it's too fresh) @grandizzy

@grandizzy
grandizzy requested a review from mablr October 19, 2026 17:23
mablr
mablr approved these changes Oct 19, 2026
View reviewed changes

@mablr mablr left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, thx @grandizzy

@mablr
mablr enabled auto-merge (squash) October 19, 2026 17:30
@mablr
mablr merged commit 09d49c5 into main Oct 19, 2026
32 of 41 checks passed
@mablr
mablr deleted the dependabot/cargo/cargo-weekly-3f06c280bc branch October 19, 2026 17:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mablr mablr mablr approved these changes
@stevencartavia stevencartavia stevencartavia approved these changes
@DaniPopes DaniPopes Awaiting requested review from DaniPopes DaniPopes is a code owner
@mattsse mattsse Awaiting requested review from mattsse mattsse is a code owner
@grandizzy grandizzy Awaiting requested review from grandizzy grandizzy is a code owner
@onbjerg onbjerg Awaiting requested review from onbjerg onbjerg is a code owner
@0xrusowsky 0xrusowsky Awaiting requested review from 0xrusowsky 0xrusowsky is a code owner
@figtracer figtracer Awaiting requested review from figtracer figtracer is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@mablr @stevencartavia