deps: bump the deps-patches group across 1 directory with 15 updates by dependabot[bot] · Pull Request #215 · beyondessential/seedling

dependabot · 2026-10-20T15:17:46Z

Bumps the deps-patches group with 15 updates in the / directory:

Package	From	To
rust-embed	`8.12.0`	`8.13.0`
toml	`1.1.4+spec-1.1.0`	`1.1.6+spec-1.1.0`
clap	`4.6.6`	`4.6.7`
jiff	`0.2.35`	`0.2.38`
quinn	`0.11.11`	`0.11.12`
rand	`0.10.2`	`0.10.3`
reqwest	`0.13.4`	`0.13.5`
rustls	`0.23.43`	`0.23.45`
serde_json	`1.0.151`	`1.0.154`
sha2	`0.11.0`	`0.11.1`
tokio	`1.53.1`	`1.53.2`
uuid	`1.26.0`	`1.28.0`
libc	`0.2.189`	`0.2.190`
rustix	`1.1.4`	`1.1.5`
hickory-resolver	`0.26.1`	`0.26.3`

Updates rust-embed from 8.12.0 to 8.13.0

Updates toml from 1.1.4+spec-1.1.0 to 1.1.6+spec-1.1.0

Commits

572c005 chore: Release
66d0c53 docs: Update changelog
07af4e7 perf: Reduce allocations in toml_edit parsing and dumping (#1215)
0ff90db perf(display): Write encoded strings directly
efb2536 perf(display): Move generated representation strings
075c444 refactor(display): Consolidate key-path encoding
b48f338 perf(display): Borrow table keys during document output
c6c1de3 perf(parser): Move completed table header keys
ec90463 perf(parser): Borrow input when creating editable documents
d76a48a test: Benchmark rendering generated keys and values
Additional commits viewable in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates jiff from 0.2.35 to 0.2.38

Changelog

Sourced from jiff's changelog.

0.2.38 (2026-10-06)

This release updates Jiff's bundled copy of the [IANA Time Zone Database] to 2026e. See the 2026e release announcement for more details.

0.2.37 (2026-09-12)

This is a redux release of 0.2.36 that fixes a compilation bug.

Bug fixes:

#647: Fixes a compilation bug due to incorrect include paths.

0.2.36 (2026-09-12)

This release has a couple bug fixes and adds opt-in integration with the arbitrary crate.

Enhancements:

#631: Add optional Arbitrary trait implementations from the arbitrary crate.

Bug fixes:

#617: Fixes a bug in jiff_core::tz::Offset checked subtraction routine.

#627: Use serialize_some for optional Serde helpers in jiff::fmt::serde.

Commits

4ce3e20 0.2.38
bca7bb9 jiff-tzdb-0.1.9
374afc2 jiff-tzdb: update to tzdb 2026e
5416198 doc: include readme in published crate
4100a7c 0.2.37
c1febcb changelog: 0.2.37
7bd0c36 doc: fix include paths, redux
aa8008e Revert "doc: fix include paths"
8c2585c doc: fix include paths
7e81331 0.2.36
Additional commits viewable in compare view

Updates quinn from 0.11.11 to 0.11.12

Commits

eaec0db Bump versions to 0.11.18 / 0.11.12
4c92955 proto: handle empty ranges in RangeSet::replace
9a66201 proto: avoid panic on high minimum ACK delay
abca008 streams: budget send windows against retained storage
3c0adcc streams: release abandoned send buffers on reset
d2cf48f quinn: enforce cumulative read_to_end size limits
daa5131 quinn: separate read_to_end buffer accumulation
811b548 proto: reject transport parameters with a mismatched length
9bd87c9 proto: preserve the server config for pending incoming connections
a708a97 proto: prune queued DATAGRAMs when the active path changes
Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)

Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)

Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

9e7d328 Prepare rand 0.10.3 (#1840)
f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
c994eb1 docs: fix angle unit in quick start example (#1839)
33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
521fab6 Stop pinning dependencies (#1820)
3f7c433 Stop pinning dependencies
cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates rustls from 0.23.43 to 0.23.45

Commits

2976d90 Prepare 0.23.45
f9d4ee9 Handshake "alignment" check covers previously-received messages
c4e92e8 Keep data needed for HRR processing together
e553a7a server: TLS1.2 is not available after a HRR
5dff9da Test whether server negotiates TLS1.2 after HRR
185a063 reject a second ClientHello that changes the cipher suite
9fafe6d reject a second ClientHello that drops pre_shared_key
1b42c5f providers: zeroize private key DER
64ad386 Bump version to 0.23.44
1efbf66 bogo: remove PostQuantum setup
Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

fs: clamp io_uring read length to u32::MAX (#8572)

rt: ignore current_thread task dumps from other runtimes (#8544)

rt: preserve io_uring context if a completion waker panics (#8566)

sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)

taskdump: restore deferred leaf wakes during capture (#8445)

time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits

ff0c406 chore: prepare Tokio v1.53.2 (#8580)
a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
ec31a9f chore: prepare Tokio v1.51.5 (#8579)
625c851 sync: assign semaphore permits before emitting tracing event (#8542)
832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
9a47992 process: unregister Windows wait before closing child handle (#8564)
2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
Additional commits viewable in compare view

Updates uuid from 1.26.0 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

Add optional serde format adapters by @RanaPriyansh in uuid-rs/uuid#916

Prepare for 1.28.0 release by @KodrAus in uuid-rs/uuid#918

New Contributors

@RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

Accept case-insensitive urn:uuid: prefixes when parsing by @jaideeppyne in uuid-rs/uuid#912

Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @KodrAus in uuid-rs/uuid#915

Prepare for 1.27.0 release by @KodrAus in uuid-rs/uuid#917

New Contributors

@jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

v1.26.1

What's Changed

Seat the v7 counter below the version nibble by @lenamonj in uuid-rs/uuid#907

Don't panic in overflowing Timestamp to SystemTime conversion by @KodrAus in uuid-rs/uuid#909

Prepare for 1.26.1 release by @KodrAus in uuid-rs/uuid#910

New Contributors

@lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

Commits

276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
4b3b9f5 prepare for 1.28.0 release
cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
784a022 Inline expected tokens in optional compact serde test
a5678c3 Simplify optional serde adapter tests to option tokens
638a518 Refactor optional serde adapter tests and share byte wrapper
b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
ffd8ec5 prepare for 1.27.0 release
654fa5b Add optional serde format adapters
4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.190

Release notes

Sourced from libc's releases.

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

Docs: Add more links to public headers and manual pages (#5407), (#5485)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

... (truncated)

Commits

7b0ab55 ci: Rename publish_0.2.yml to release.yaml
ac85dde ci: Sync release permissions with main
8f8cd20 libc: Release 0.2.190
052c6e6 changelog: Fix an incorrect commit link
ea19fd7 test: Remove explicit libc version
6dbf3a2 dragonfly: Move INHERIT_ZERO to the freebsd module
8a64766 apple: add posix_spawn_file_actions_add(f)chdir(_np)
28de514 linux, netbsd: Give statvfs a Default impl
a58a95f cygwin: Change POSIX_SPAWN_* flags to c_short
d175264 apple: timeval32 is exhaustive
Additional commits viewable in compare view

Updates rustix from 1.1.4 to 1.1.5

Commits

287214b chore: Release rustix version 1.1.5
0cea188 fix(bug): ns->us overflow handling (#1655)
a99fd26 build: Remove OUT_DIR probe artifact (#1628)
1e2954a fix build errors for horizon target (#1671)
4cecb72 Mangle the name of rustix::runtime to discourage users. (#1633)
ded795b Fix compile errors for next libc version (#1676)
9640071 Expose the O_SYMLINK & O_NOFOLLOW_ANY flags on Apple platforms (#1666)
cf67411 Fix debug printing of abstract socket addrs (#1615)
aab9464 Completely remove rustc_attrs. (#1663)
a9620e8 ci: fix syn pin (#1647)
Additional commits viewable in compare view

Updates hickory-resolver from 0.26.1 to 0.26.3

Release notes

Sourced from hickory-resolver's releases.

v0.26.3

This release fixes regressions introduced in v0.26.2 related to DNSSEC verification, QUIC servers, HTTP/3 servers, and minimum dependency versions.

What's Changed

Fix warnings (release/0.26) by @divergentdave in hickory-dns/hickory-dns#3877

resolver: use lenient resolv.conf parsing by @djc in hickory-dns/hickory-dns#3879

backport: Fix multi rrsig validation 0.26 by @MartB in hickory-dns/hickory-dns#3892

Bump version to 0.26.3 by @djc in hickory-dns/hickory-dns#3895

Exclude accepting QUIC connections from timeouts - 0.26 branch by @divergentdave in hickory-dns/hickory-dns#3906

[0.26] net: fix insecure ancestor delegation by @djc in hickory-dns/hickory-dns#3907

Full Changelog: hickory-dns/hickory-dns@v0.26.2...v0.26.3

v0.26.2

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in parsers. Other issues were related to UDP spoofing defenses, caching issues, and general DNS protocol correctness issues.

This is our first post-vulnpocalypse release, and most of these vulnerabilities were discovered through LLM-based workflows. The sheer volume of reports has been a challenge for our volunteer maintainers.

Resolved advisories:

GHSA-2vgh-3wfw-qj7c: RRSIG Signer's Name not checked against the RRset's zone

GHSA-57pw-897j-v4j6: Improper check of signature validity of NSEC and NSEC3 records

GHSA-wjgj-fvg9-65w9: DNSSEC validation ignores bogus records with a DNS class other than IN

GHSA-588m-chg6-8jqj: Inverted NSEC3 comparison allows forgery of proofs of nonexistence

GHSA-qw83-5pm2-ggp5: DNSSEC nonexistence forgery via incorrect handling of wraparound NSEC records

GHSA-3jvh-8vj5-65rq: NSEC3 apex NODATA accepted as secure with no QNAME-matching NSEC3

GHSA-3r6v-f3jh-vvqm: ancestor-delegation NSEC accepted as proof of nonexistence below the zone cut

GHSA-624w-vvww-xvpw: ancestor-delegation NSEC3 accepted as proof of nonexistence at and below the zone cut

GHSA-7php-9j59-g3ch: DNSSEC validation is missing RFC 6840 §4.4 checks

GHSA-vrv5-968r-5ggm: DNSSEC validation accepts bogus positive response with wildcard expansion

GHSA-p2jv-r3m3-7wf4: Nonexistence proof forgery due to insufficient checks on NSEC3 record names

GHSA-86vr-jm6c-7cpg: NSEC validator accepts NXDOMAIN for an empty non-terminal (ENT) that the covering NSEC proves exists

GHSA-8hq4-5836-w6q4: Server does not check validation status of SOA record in negative responses

GHSA-5j98-2g5x-46v6: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC va...
Description has been truncated

Bumps the deps-patches group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | rust-embed | `8.12.0` | `8.13.0` | | [toml](https://github.com/toml-rs/toml) | `1.1.4+spec-1.1.0` | `1.1.6+spec-1.1.0` | | [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` | | [jiff](https://github.com/BurntSushi/jiff) | `0.2.35` | `0.2.38` | | [quinn](https://github.com/quinn-rs/quinn) | `0.11.11` | `0.11.12` | | [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [rustls](https://github.com/rustls/rustls) | `0.23.43` | `0.23.45` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` | | [uuid](https://github.com/uuid-rs/uuid) | `1.26.0` | `1.28.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.190` | | [rustix](https://github.com/bytecodealliance/rustix) | `1.1.4` | `1.1.5` | | [hickory-resolver](https://github.com/hickory-dns/hickory-dns) | `0.26.1` | `0.26.3` | Updates `rust-embed` from 8.12.0 to 8.13.0 Updates `toml` from 1.1.4+spec-1.1.0 to 1.1.6+spec-1.1.0 - [Commits](toml-rs/toml@toml-v1.1.4...toml-v1.1.6) Updates `clap` from 4.6.6 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7) Updates `jiff` from 0.2.35 to 0.2.38 - [Release notes](https://github.com/BurntSushi/jiff/releases) - [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md) - [Commits](BurntSushi/jiff@jiff-static-0.2.35...jiff-static-0.2.38) Updates `quinn` from 0.11.11 to 0.11.12 - [Release notes](https://github.com/quinn-rs/quinn/releases) - [Commits](quinn-rs/quinn@quinn-0.11.11...quinn-0.11.12) Updates `rand` from 0.10.2 to 0.10.3 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.2...0.10.3) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `rustls` from 0.23.43 to 0.23.45 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.43...v/0.23.45) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2) Updates `uuid` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.26.0...v1.28.0) Updates `libc` from 0.2.189 to 0.2.190 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.190/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.190) Updates `rustix` from 1.1.4 to 1.1.5 - [Release notes](https://github.com/bytecodealliance/rustix/releases) - [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md) - [Commits](bytecodealliance/rustix@v1.1.4...v1.1.5) Updates `hickory-resolver` from 0.26.1 to 0.26.3 - [Release notes](https://github.com/hickory-dns/hickory-dns/releases) - [Changelog](https://github.com/hickory-dns/hickory-dns/blob/main/CHANGELOG.md) - [Commits](hickory-dns/hickory-dns@v0.26.1...v0.26.3) --- updated-dependencies: - dependency-name: rust-embed dependency-version: 8.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: deps-patches - dependency-name: toml dependency-version: 1.1.6+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: jiff dependency-version: 0.2.38 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: quinn dependency-version: 0.11.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: rand dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: rustls dependency-version: 0.23.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: deps-patches - dependency-name: libc dependency-version: 0.2.190 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: rustix dependency-version: 1.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: hickory-resolver dependency-version: 0.26.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches ... Signed-off-by: dependabot[bot] <support@github.com>

github-code-quality · 2026-10-20T15:18:54Z

Code coverage overview

Languages: TypeScript, Rust

TypeScript / code-coverage/vitest

main 7251502	dependabot/cargo/dep... c5039a1	+/-
66%	66%	0%

Rust / code-coverage/rust

main 7251502	dependabot/cargo/dep... c5039a1	+/-
64%	63%	-1%

View coverage of the 1 most impacted file.

File	main 7251502	dependabot/cargo/dep... c5039a1	+/-
`crates/core/src...tls/issuance.rs`	36%	24%	-12%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.

_{Updated October 20, 2026 15:23 UTC}

dependabot · 2026-10-27T15:17:41Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 20, 2026

dependabot Bot closed this Oct 27, 2026

dependabot Bot deleted the dependabot/cargo/deps-patches-0191b157e8 branch October 27, 2026 15:17

Navigation Menu

Repository navigation

deps: bump the deps-patches group across 1 directory with 15 updates - #215

deps: bump the deps-patches group across 1 directory with 15 updates#215
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/deps-patches-0191b157e8

dependabot Bot commented on behalf of github Oct 20, 2026 •

edited

Loading

Uh oh!

github-code-quality Bot commented Oct 20, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.6.7

[4.6.7] - 2026-09-14

Features

[4.6.7] - 2026-09-14

Features

0.2.38 (2026-10-06)

0.2.37 (2026-09-12)

0.2.36 (2026-09-12)

[0.10.3] — 2026-09-20

Fixes

Changes

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

v1.0.154

v1.0.153

v1.0.152

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

Fixed (unstable)

v1.28.0

What's Changed

New Contributors

v1.27.0

What's Changed

New Contributors

v1.26.1

What's Changed

New Contributors

0.2.190

Support

Added

0.2.190 - 2026-10-02

Support

Added

v0.26.3

What's Changed

v0.26.2

Uh oh!

github-code-quality Bot commented Oct 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code coverage overview

TypeScript / code-coverage/vitest

Rust / code-coverage/rust

Uh oh!

dependabot Bot commented on behalf of github Oct 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 20, 2026 •

edited

Loading

github-code-quality Bot commented Oct 20, 2026 •

edited

Loading