Bump the cargo group across 3 directories with 21 updates by dependabot[bot] · Pull Request #44 · SbruiceS/solana

dependabot · 2026-03-20T17:54:01Z

Bumps the cargo group with 17 updates in the / directory:

Package	From	To
borsh	`0.9.3`	`0.10.4`
tokio	`1.14.1`	`1.26.0`
bzip2	`0.4.3`	`0.4.4`
tar	`0.4.38`	`0.4.45`
tungstenite	`0.17.3`	`0.20.1`
ouroboros	`0.15.0`	`0.15.6`
bytes	`1.2.1`	`1.11.1`
openssl	`0.10.41`	`0.10.68`
quinn-proto	`0.8.4`	`0.10.6`
users	`0.10.0`	`0.11.0`
bumpalo	`3.8.0`	`3.20.2`
h2	`0.3.11`	`0.3.27`
keccak	`0.1.0`	`0.1.6`
shlex	`1.1.0`	`1.3.0`
time	`0.1.43`	`0.1.45`
tracing-subscriber	`0.3.7`	`0.3.23`
unsafe-libyaml	`0.2.4`	`0.2.11`

Bumps the cargo group with 12 updates in the /programs/sbf directory:

Package	From	To
bzip2	`0.4.3`	`0.4.4`
tar	`0.4.38`	`0.4.45`
ouroboros	`0.15.0`	`0.15.6`
bytes	`1.2.1`	`1.11.1`
openssl	`0.10.41`	`0.10.68`
bumpalo	`3.3.0`	`3.20.2`
crossbeam-utils	`0.8.5`	`0.8.21`
h2	`0.3.11`	`0.3.21`
keccak	`0.1.0`	`0.1.6`
remove_dir_all	`0.5.2`	`0.5.3`
shlex	`1.1.0`	`1.3.0`
unsafe-libyaml	`0.2.4`	`0.2.11`

Bumps the cargo group with 1 update in the /storage-bigtable/build-proto directory: bytes.

Updates borsh from 0.9.3 to 0.10.4

Release notes

Sourced from borsh's releases.

borsh-derive-internal-v0.10.4

No release notes provided.

borsh-derive-v0.10.4

No release notes provided.

borsh-schema-derive-internal-v0.10.4

No release notes provided.

borsh-v0.10.4

Backported a fix for RUSTSEC-2023-0033: Forbid Vectors of Zero-sized types from de-/serialization (#145)

Changelog

Sourced from borsh's changelog.

[0.10.4] - 2024-09-23

Backported a fix for RUSTSEC-2023-0033: Forbid Vectors of Zero-sized types from de-/serialization (#145)

[0.10.3] - 2022-03-22

Add optional bytes/bytesmut support

[0.10.2] - 2022-02-14

Prevent unbound allocation for vectors on deserialization

[0.10.1] - 2022-02-08

Implemented (de)ser for core::ops::range

Introduce de::EnumExt trait with deserialize_variant method

[0.10.0] - 2023-01-19

Fix no-std feature (some of the imports incorrectly used std:: instead of crate::maybestd::)

Fix borsh-schema derives with for bounds

Implemented BorshSchema for HashSet

Add support for isize, usize types

Delete schema for char

Implement ser/de and schema for (T,)

Add clone impls to borsh schema types

Remove unnecessary trait bounds requirements for array

BREAKING CHANGE: BorshDeserialize now works by receiving an &mut std::io::Read instead of a &mut &[u8]. This is a breaking change for code that provides custom implementations of BorshDeserialize; there is no impact on code that uses only the derive macro.

Added BorshDeserialize::try_from_reader and BorshDeserialize::deserialize_reader.

Upgrade hashbrown version to be >=0.11,<0.14 to allow wider range of versions.

Commits

a1fe363 release: 0.10.4
c545f3c chore: revert workspace and exclude changes (#311)
27843bc chore: prepare 0.10.4 with backported fix (#310)
79097e3 release: Prepare for 0.10.3 release
ad25b07 ci: Removed release-plz as it does not play well with the workspaces setup we...
c93d434 ci: Add release-plz CI action which will create a PR with a suggestion to cut...
e91f405 feat: Add optional bytes/bytesmut support (#132)
9e68316 release: Prepare for 0.10.2 release (#130)
d431291 feat(deserialize): prevent unbound allocation (#129)
d915ab5 chore: Updated Minimum Supported Rust Version to 1.55 (manually confirmed wit...
Additional commits viewable in compare view

Updates tokio from 1.14.1 to 1.26.0

Release notes

Sourced from tokio's releases.

Tokio v1.26.0

Fixed

macros: fix empty join! and try_join! ([https://redirect.github.com/fix empty join! and try_join! tokio-rs/tokio#5504])

sync: don't leak tracing spans in mutex guards ([https://redirect.github.com/sync: don't leak tracing spans in mutex guards tokio-rs/tokio#5469])

sync: drop wakers after unlocking the mutex in Notify ([https://redirect.github.com/Drop wakers after unlocking the mutex in Notify tokio-rs/tokio#5471])

sync: drop wakers outside lock in semaphore ([https://redirect.github.com/Solve deadlock in Semaphore tokio-rs/tokio#5475])

Added

fs: add fs::try_exists ([https://redirect.github.com/Add fs::try_exists tokio-rs/tokio#4299])

net: add types for named unix pipes ([https://redirect.github.com/net: add types for named Unix pipes tokio-rs/tokio#5351])

sync: add MappedOwnedMutexGuard ([https://redirect.github.com/Add MappedOwnedMutexGuard tokio-rs/tokio#5474])

Changed

chore: update windows-sys to 0.45 ([https://redirect.github.com/chore: update windows-sys to 0.45 tokio-rs/tokio#5386])

net: use Message Read Mode for named pipes ([https://redirect.github.com/Named Pipes: Support Message Read Mode tokio-rs/tokio#5350])

sync: mark lock guards with #[clippy::has_significant_drop] ([https://redirect.github.com/Mark MutexGuard with #[clippy::has_significant_drop] tokio-rs/tokio#5422])

sync: reduce contention in watch channel ([https://redirect.github.com/Reduce contention in watch channel tokio-rs/tokio#5464])

time: remove cache padding in timer entries ([https://redirect.github.com/time: remove cache padding in timer entries tokio-rs/tokio#5468])

time: Improve Instant::now() perf with test-util ([https://redirect.github.com/time: Improve Instant::now() perf with test-util tokio-rs/tokio#5513])

Internal Changes

io: use poll_fn in copy_bidirectional ([https://redirect.github.com/Use poll_fn in copy_bidirectional tokio-rs/tokio#5486])

net: refactor named pipe builders to not use bitfields ([https://redirect.github.com/net: refactor named pipe builders to not use bitfields tokio-rs/tokio#5477])

rt: remove Arc from Clock ([https://redirect.github.com/rt: remove Arc from Clock tokio-rs/tokio#5434])

sync: make notify_waiters calls atomic ([https://redirect.github.com/sync: make notify_waiters calls atomic tokio-rs/tokio#5458])

time: don't store deadline twice in sleep entries ([https://redirect.github.com/remove double store of deadline, saving 128 bytes tokio-rs/tokio#5410])

Unstable

metrics: add a new metric for budget exhaustion yields ([https://redirect.github.com/metrics: add a new metric for budget exhaustion yields tokio-rs/tokio#5517])

Documented

io: improve AsyncFd example ([https://redirect.github.com/io: improve AsyncFd example tokio-rs/tokio#5481])

runtime: document the nature of the main future ([https://redirect.github.com/Document the nature of the main future tokio-rs/tokio#5494])

runtime: remove extra period in docs ([https://redirect.github.com/chore: remove unnecessary dot in comment tokio-rs/tokio#5511])

signal: updated Documentation for Signals ([https://redirect.github.com/Updated Documentation for Signals tokio-rs/tokio#5459])

sync: add doc aliases for blocking_* methods ([https://redirect.github.com/sync: add doc aliases for blocking_* methods tokio-rs/tokio#5448])

sync: fix docs for Send/Sync bounds in broadcast ([https://redirect.github.com/sync: fix docs for Send/Sync bounds in broadcast tokio-rs/tokio#5480])

sync: document drop behavior for channels ([https://redirect.github.com/sync: document drop behavior for channels tokio-rs/tokio#5497])

task: clarify what happens to spawned work during runtime shutdown ([https://redirect.github.com/clarify what happens to spawned work during runtime shutdown tokio-rs/tokio#5394])

task: clarify process::Command docs ([https://redirect.github.com/Clarify process::Command docs (fixing #5406) tokio-rs/tokio#5413])

task: fix wording with 'unsend' ([https://redirect.github.com/fix: fix wording with 'unsend' tokio-rs/tokio#5452])

time: document immediate completion guarantee for timeouts ([https://redirect.github.com/time: document immediate completion guarantee for timeouts tokio-rs/tokio#5509])

tokio: document supported platforms ([https://redirect.github.com/Document supported platforms tokio-rs/tokio#5483])

... (truncated)

Commits

a377240 chore: prepare for Tokio v1.26.0 release (#5521)
52da177 metrics: add a new metric for budget exhaustion yields (#5517)
ee1c940 time: Improve Instant::now() perf with test-util (#5513)
815d89a runtime: remove extra period in docs (#5511)
54aaf3d time: document immediate completion guarantee for timeouts (#5509)
5a3abe5 net: add types for named unix pipes (#5351)
d44b1ca io: ignore SplitByUtf8BoundaryIfWindows test on miri (#5507)
e23c6f3 signal: updated Documentation for Signals (#5459)
0a50cb3 net: fix test compilation failure (#5506)
2298679 runtime: document the nature of the main future (#5494)
Additional commits viewable in compare view

Updates bzip2 from 0.4.3 to 0.4.4

Release notes

Sourced from bzip2's releases.

Version 0.5.2 (and 0.1.13 for bzip2-sys)

Some minor fixes this time

better wasm support (and we test wasm on CI)

make bz_internal_error an extern fn by @folkertdev in trifectatechfoundation/bzip2-rs#135 fixes a soundness issue. This is technically a semver-breaking change, but major versions for -sys crates create a lot of churn. We don't expect users to run into this

What's Changed

fix: libc wasm types by @baszalmstra in trifectatechfoundation/bzip2-rs#131

update LICENSE-MIT by @rootdiae in trifectatechfoundation/bzip2-rs#130

run CI for wasm32-wasip2 by @folkertdev in trifectatechfoundation/bzip2-rs#132

remove libc dependency of bzip2-sys by @folkertdev in trifectatechfoundation/bzip2-rs#133

make bz_internal_error an extern fn by @folkertdev in trifectatechfoundation/bzip2-rs#135

New Contributors

@baszalmstra made their first contribution in trifectatechfoundation/bzip2-rs#131

@rootdiae made their first contribution in trifectatechfoundation/bzip2-rs#130

Full Changelog: trifectatechfoundation/bzip2-rs@v0.5.1...v0.5.2

Version 0.5.1 (and 0.1.12 for bzip2-sys)

Highlights

Most changes relate to libbz2-rs-sys: we no longer enable the static feature, and now including different versions, that use either the C or the rust -sys crate, all work together in the same build.

What's Changed

write::BzDecoder: Fix infinite loop on drop when no data is read or written by @chenxiaolong in trifectatechfoundation/bzip2-rs#118

don't enable the static feature when using libbz2-rs-sys by @folkertdev in trifectatechfoundation/bzip2-rs#122

update libbz2-rs-sys version that we use by @folkertdev in trifectatechfoundation/bzip2-rs#123

use core::ffi::{c_int, c_uint} in favor of libc by @folkertdev in trifectatechfoundation/bzip2-rs#126

Add finisher drop implementation to BzEncoder by @jonasbb in trifectatechfoundation/bzip2-rs#121

Update rand requirement from 0.8 to 0.9 by @dependabot in trifectatechfoundation/bzip2-rs#127

Disable bzip2-sys build script if rust backend is enabled by @NobodyXu in trifectatechfoundation/bzip2-rs#125

deprecate Compression::new by @folkertdev in trifectatechfoundation/bzip2-rs#124

build the docs on CI by @folkertdev in trifectatechfoundation/bzip2-rs#128

bump version to 0.5.1 and 0.1.12 by @folkertdev in trifectatechfoundation/bzip2-rs#129

New Contributors

@chenxiaolong made their first contribution in trifectatechfoundation/bzip2-rs#118

@jonasbb made their first contribution in trifectatechfoundation/bzip2-rs#121

@dependabot made their first contribution in trifectatechfoundation/bzip2-rs#127

@NobodyXu made their first contribution in trifectatechfoundation/bzip2-rs#125

Full Changelog: trifectatechfoundation/bzip2-rs@v0.5.0...v0.5.1

Commits

See full diff in compare view

Updates tar from 0.4.38 to 0.4.45

Commits

096e3d1 Bump to 0.4.45 (#443)
17b1fd8 archive: Prevent symlink-directory collision chmod attack (#442)
de1a587 archive: Unconditionally honor PAX size (#441)
6071cbe ci: Consolidate workflows (#439)
ad1fde9 build-sys: Promote unused_code to an error
c8cb250 tests: Squash a warning
638c495 ci: Add xtask infra + reverse dependency testing (#435)
32a9bbb tests: Add RandomReader to exercise partial-read resilience (#436)
9c5df0b Fix GNU long-name extension stream corruption on validation error (#434)
88b1e3b Fix docs typo in header.rs (#431)
Additional commits viewable in compare view

Updates tungstenite from 0.17.3 to 0.20.1

Changelog

Sourced from tungstenite's changelog.

0.20.1

Fixes CVE-2023-43669.

0.20.0

Remove many implicit flushing behaviours. In general reading and writing messages will no longer flush until calling flush. An exception is automatic responses (e.g. pongs) which will continue to be written and flushed when reading and writing. This allows writing a batch of messages and flushing once, improving performance.

Add WebSocket::read, write, send, flush. Deprecate read_message, write_message, write_pending.

Add FrameSocket::read, write, send, flush. Remove read_frame, write_frame, write_pending. Note: Previous use of write_frame may be replaced with send.

Add WebSocketContext::read, write, flush. Remove read_message, write_message, write_pending. Note: Previous use of write_message may be replaced with write + flush.

Remove send_queue, replaced with using the frame write buffer to achieve similar results.

Add WebSocketConfig::max_write_buffer_size. Deprecate max_send_queue.

Add Error::WriteBufferFull. Remove Error::SendQueueFull. Note: WriteBufferFull returns the message that could not be written as a Message::Frame.

Add ability to buffer multiple writes before writing to the underlying stream, controlled by WebSocketConfig::write_buffer_size (default 128 KiB). Improves batch message write performance.

Panic on receiving invalid WebSocketConfig.

0.19.0

Update TLS dependencies.

Exchanging base64 for data-encoding.

0.18.0

Make handshake dependencies optional with a new handshake feature (now a default one!).

Return HTTP error responses (their HTTP body) upon non 101 status codes.

Commits

219075e Merge pull request #379 from snapview/CVE-2023-43669
f0f1a06 Bump crate version
2e50292 Add checking for header sanity
f916b33 Add AttackAttempt error variant
53914c1 Include examples so that cargo publish works
5323559 Bump version
6e63b17 Update changelog
f2ed7aa Merge pull request #365 from snapview/dependabot/cargo/webpki-roots-0.24
8d8f0da Merge pull request #362 from alexheretic/config-asserts
dac07ea Merge pull request #361 from alexheretic/docs++
Additional commits viewable in compare view

Updates ouroboros from 0.15.0 to 0.15.6

Commits

See full diff in compare view

Updates bytes from 1.2.1 to 1.11.1

Release notes

Sourced from bytes's releases.

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

Fix integer overflow in BytesMut::reserve

Bytes v1.11.0

1.11.0 (November 14th, 2025)

Bump MSRV to 1.57 (#788)

Fixed

fix: BytesMut only reuse if src has remaining (#803)

Specialize BytesMut::put::<Bytes> (#793)

Reserve capacity in BytesMut::put (#794)

Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

Guarantee address in slice() for empty slices. (#780)

Rename Vtable::to_* -> Vtable::into_* (#776)

Fix latest clippy warnings (#787)

Ignore BytesMut::freeze doctest on wasm (#790)

Move drop_fn of from_owner into vtable (#801)

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

Fix memory leak when using to_vec with Bytes::from_owner (#773)

#773: tokio-rs/bytes#773

Bytes v1.10.0

1.10.0 (February 3rd, 2025)

Added

Add feature to support platforms without atomic CAS (#467)

try_get_* methods for Buf trait (#753)

Implement Buf::chunks_vectored for Take (#617)

Implement Buf::chunks_vectored for VecDeque<u8> (#708)

Fixed

Remove incorrect guarantee for chunks_vectored (#754)

Ensure that tests pass under panic=abort (#749)

... (truncated)

Changelog

Sourced from bytes's changelog.

1.11.1 (February 3rd, 2026)

Fix integer overflow in BytesMut::reserve

1.11.0 (November 14th, 2025)

Bump MSRV to 1.57 (#788)

Fixed

fix: BytesMut only reuse if src has remaining (#803)

Specialize BytesMut::put::<Bytes> (#793)

Reserve capacity in BytesMut::put (#794)

Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

Guarantee address in slice() for empty slices. (#780)

Rename Vtable::to_* -> Vtable::into_* (#776)

Fix latest clippy warnings (#787)

Ignore BytesMut::freeze doctest on wasm (#790)

Move drop_fn of from_owner into vtable (#801)

1.10.1 (March 5th, 2025)

Fixed

Fix memory leak when using to_vec with Bytes::from_owner (#773)

1.10.0 (February 3rd, 2025)

Added

Add feature to support platforms without atomic CAS (#467)

try_get_* methods for Buf trait (#753)

Implement Buf::chunks_vectored for Take (#617)

Implement Buf::chunks_vectored for VecDeque<u8> (#708)

Fixed

Remove incorrect guarantee for chunks_vectored (#754)

Ensure that tests pass under panic=abort (#749)

1.9.0 (November 27, 2024)

Added

Add Bytes::from_owner to enable externally-allocated memory (#742)

Documented

... (truncated)

Commits

417dccd Release bytes v1.11.1 (#820)
d0293b0 Merge commit from fork
a7952fb chore: prepare bytes v1.11.0 (#804)
60cbb77 fix: BytesMut only reuse if src has remaining (#803)
7ce330f Move drop_fn of from_owner into vtable (#801)
4b53a29 Tweak BytesMut::remaining_mut (#795)
016fdbd Reserve capacity in BytesMut::put (#794)
ef7f257 Specialize BytesMut::put::<Bytes> (#793)
8b4f54d Ignore BytesMut::freeze doctest on wasm (#790)
16132ad Fix latest clippy warnings (#787)
Additional commits viewable in compare view

Updates openssl from 0.10.41 to 0.10.68

Release notes

Sourced from openssl's releases.

openssl-v0.10.68

What's Changed

fixes #2317 -- restore compatibility with our MSRV and release openssl 0.9.68 by @alex in sfackler/rust-openssl#2318

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.67...openssl-v0.10.68

openssl-v0.10.67

What's Changed

Added a utility function to ensure we never have an issue with 0-length slices from pointers again by @alex in sfackler/rust-openssl#2268

Fix CI for the latest rustc by @alex in sfackler/rust-openssl#2271

Add binding for EVP_DigestSqueeze by @initsecret in sfackler/rust-openssl#2270

libressl 4.0: const correctness for X509_LOOKUP_METHOD by @botovq in sfackler/rust-openssl#2276

Bump hex dev-dependency version by @alex in sfackler/rust-openssl#2277

Raise bindgen version by @alex in sfackler/rust-openssl#2278

Ensure Rsa::check_key doesn't leave errors on the stack by @alex in sfackler/rust-openssl#2279

Update some docs to use the corresponds macro by @rushilmehra in sfackler/rust-openssl#2282

Don't leave errors on the stack in MdCtxRef::digest_verify_final by @alex in sfackler/rust-openssl#2283

Adjustments for LibreSSL 4 by @botovq in sfackler/rust-openssl#2287

Explicit rustfmt config by @kornelski in sfackler/rust-openssl#2285

add basic EVP_KDF bindings by @reaperhulk in sfackler/rust-openssl#2289

add ossl3 thread pool bindings by @reaperhulk in sfackler/rust-openssl#2293

add argon2id support for ossl 3.2+ by @reaperhulk in sfackler/rust-openssl#2290

fix 3.2.0 thread support and simplify by @reaperhulk in sfackler/rust-openssl#2294

add libctx arg to argon2id by @reaperhulk in sfackler/rust-openssl#2295

support using threads in argon2id by @reaperhulk in sfackler/rust-openssl#2296

Ensure beginning and end of the error output is readable by @kornelski in sfackler/rust-openssl#2284

Test against 3.4.0-alpha1 by @sfackler in sfackler/rust-openssl#2302

Resolve clippy warnings from nightly by @alex in sfackler/rust-openssl#2310

fixes #2311 -- silencer resolver warnings by @alex in sfackler/rust-openssl#2312

Bump to 3.4.0-beta1 by @sfackler in sfackler/rust-openssl#2313

LibreSSL 4.0.0 by @botovq in sfackler/rust-openssl#2315

Release openssl v0.10.67 and openssl-sys v0.9.104 by @alex in sfackler/rust-openssl#2316

New Contributors

@initsecret made their first contribution in sfackler/rust-openssl#2270

@rushilmehra made their first contribution in sfackler/rust-openssl#2282

@kornelski made their first contribution in sfackler/rust-openssl#2285

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.66...openssl-v0.10.67

openssl-v0.10.66

What's Changed

Fixed invariant violation in MemBio::get_buf with empty results by @alex in sfackler/rust-openssl#2266

Release openssl v0.10.66 by @alex in sfackler/rust-openssl#2267

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.65...openssl-v0.10.66

openssl-v0.10.65

... (truncated)

Commits

be8dcfd Merge pull request #2318 from alex/msrv-fix
065cc77 fixes #2317 -- restore compatibility with our MSRV and release openssl 0.9.68
7b3ec80 Merge pull request #2316 from alex/bump-for-release
b510e8c Release openssl v0.10.67 and openssl-sys v0.9.104
ee3b024 Merge pull request #2315 from botovq/libressl-4.0.0
c4dabc2 CI: Update LibreSSL CI
f9027b7 LibreSSL 4.0.0 is released & stable
1b51ba5 Merge pull request #2313 from sfackler/sfackler-patch-1
de8a97c Bump to 3.4.0-beta1
3930464 Merge pull request #2312 from sfackler/alex-patch-1
Additional commits viewable in compare view

Updates quinn-proto from 0.8.4 to 0.10.6

Release notes

Sourced from quinn-proto's releases.

quinn-proto 0.11.13, quinn 0.11.9

What's Changed

quinn: Remove explicit write future structs by @gretchenfrage in quinn-rs/quinn#2226

proto: Make BytesSource private by @gretchenfrage in quinn-rs/quinn#2233

feat: Make the future returned by SendStream::stopped static by @Frando in quinn-rs/quinn#2220

refactor(quinn): Remove some usage of execute_poll by @gretchenfrage in quinn-rs/quinn#2232

Fix false positive GSO detection by @inetic in quinn-rs/quinn#2248

expose Connection::side() in quinn by @abonander in quinn-rs/quinn#2261

refactor(quinn): Configure out async_io::UdpSocket when unused by @matheus23 in quinn-rs/quinn#2264

proto: upgrade to rustls-platform-verifier 0.6 by @djc in quinn-rs/quinn#2276

Don't violate client CID limits when advertising a preferred address by @Ralith in quinn-rs/quinn#2282

Various enhancement to quinn perf by @stormshield-damiend in quinn-rs/quinn#2279

Updated quinn::Connection::send_datagram() docs by @gry8t in quinn-rs/quinn#2284

Collect qlog recovery metrics by @stormshield-fabs in quinn-rs/quinn#2278

proto: Add option to pad all application data packets to MTU by @FlorianUekermann in quinn-rs/quinn#2274

Update to socket2 v0.6 by @Thomasdezeeuw in quinn-rs/quinn#2291

Upgrade to fastbloom 0.12 by @djc in quinn-rs/quinn#2290

Fix flaky key update test by @Ralith in quinn-rs/quinn#2292

chore(Cargo.toml): support both socket2 v0.5 and v0.6 by @mxinden in quinn-rs/quinn#2294

Tiny clean up of a comment that was in the wrong place by @flub in quinn-rs/quinn#2306

Do not track lost_packets twice by @flub in quinn-rs/quinn#2308

proto: fix NewConnectionId size bound by @djc in quinn-rs/quinn#2311

Configure qlog in TransportConfig by @Ralith in quinn-rs/quinn#2305

Wake endpoint driver on rebind by @Ralith in quinn-rs/quinn#2325

Check for in-flight data on-demand by @Ralith in quinn-rs/quinn#2326

Fix in-flight byte count underflow by @Ralith in quinn-rs/quinn#2319

build(deps): bump criterion from 0.6.0 to 0.7.0 by @dependabot[bot] in quinn-rs/quinn#2330

build(deps): bump windows-sys from 0.59.0 to 0.60.2 by @dependabot[bot] in quinn-rs/quinn#2332

docs(quinn): Revise SendStream::write docs by @gretchenfrage in quinn-rs/quinn#2227

Improve quinn::ConnectionStats docs by @gry8t in quinn-rs/quinn#2340

Various enhancement for perf binaries by @stormshield-damiend in quinn-rs/quinn#2342

Perf/Bench enhancement by @stormshield-damiend in quinn-rs/quinn#2352

feat: add Connection::set_send_window() by @abonander in quinn-rs/quinn#2268

perf: add max udp payload size option by @Dreamacro in quinn-rs/quinn#2343

perf: move client and server on one binary by @Dreamacro in quinn-rs/quinn#2354

perf: rename perf binary to quinn-perf to prevent name clash with linux perf by @stormshield-damiend in quinn-rs/quinn#2360

Ignore async-std advisory for now by @djc in quinn-rs/quinn#2362

Upgrade to fastbloom 0.14 by @djc in quinn-rs/quinn#2363

Catch EOPNOTSUPP for opportunistic socket flags by @gongy in quinn-rs/quinn#2273

quinn-proto 0.11.10, quinn 0.11.7

Fixes potential issues building rustls-platform-verifier 0.4.x with rustls 0.23.24 and newer by upgrading to rustls-platform-verifier 0.5.x. Also contains a large number of small bug fixes and improvements and (hopefully) fixes the broken docs on docs.rs.

We added @gretchenfrage as a maintainer, thanks for all your contributions so far and hope for many more!

What's Changed

Avoid FIPS in docs.rs builds by @djc in quinn-rs/quinn#2040

chore(ci): Remove workaround for broken cc version by @matheus23 in quinn-rs/quinn#2044

... (truncated)

Commits

db2df61 Bump quinn-proto version
8d07b88 Downgrade duplicate packet message to debug level
bd171f8 Set workspace resolver explicitly
60da97e Avoid redundant link target in docs
d8b016c Use or_default() as suggested by clippy
da2e193 Silence clippy false positive
fbd1c6c Don't pre-allocate memory for every possible stream per connection
f659258 streams: extract max_send_data() helper
53830b6 Bump quinn-proto version to 0.10.5
c31f62b More principled error handling for invalid frames
Additional commits viewable in compare view

Updates users from 0.10.0 to 0.11.0

Release notes

Sourced from users's releases.

v0.11.0

Breaking changes

Certain functions now return Arc<OsStr> rather than Arc<OsString>

Bug fixes and other changes

Retry lookups with larger buffer sizes on ERANGE error condition (#38)

Switch logging to use Trace level rather than Debug (#39)

Commits

d6883b4 v0.11.0
f12df3b Add MSRV badge
092ffe3 Run all feature tests on CI, too
d705de3 Use cargo-hack to test all feature combinations
cde6740 Continue using the Entry API... for now
af2d86a Use Arc<OsStr> to avoid double redirection
5765d03 Fix doctest warnings
16de943 Add a Justfile
4b927ff Merge pull request #38 from Freaky/handle-erange
0bfda43 Merge pull request #39 from intgr/log-level-trace
Additional commits viewable in compare view

Updates bumpalo from 3.8.0 to 3.20.2

Changelog

Sourced from bumpalo's changelog.

3.20.2

Released 2026-02-19.

Fixed

Restored Send and Sync implementations for Box<T> for T: ?Sized types as well.

3.20.1

Released 2026-02-18.

Fixed

Restored Send and Sync implementations for Box<T> when T: Send and T: Sync respectively.

3.20.0

Released 2026-02-18.

Added

Added the bumpalo::collections::Vec::pop_if method.

Fixed

Fixed a bug in the bumpalo::collections::String::retain method in the face of panics.

Made bumpalo::collections::Box<T> covariant with T (just like std::boxed::Box<T>).

3.19.1

Released 2025-12-16.

Changed

Annotated bumpalo::collections::String::from_str_in as #[inline].

Fixed

Fixed compilation failures with the latest nightly Rust when enabling the

... (truncated)

Commits

1aad072 Bump to version 3.20.2 (#312)
2fb1d6a Add more tests for send and sync behavior, support unsized types (#311)
7c8d1f3 Bump to 3.20.1 (#310)
e06b36b Restore Send and Sync for Box (#309)
cb7f033 Bump to 3.20.0 (#307)
d97d31c Make box covariant (#304)
f9256f7 Pin quickcheck (#306)
a006efb Fix String::retain panic safety yielding invalid UTF-8 (

Bumps the cargo group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [borsh](https://github.com/near/borsh-rs) | `0.9.3` | `0.10.4` | | [tokio](https://github.com/tokio-rs/tokio) | `1.14.1` | `1.26.0` | | [bzip2](https://github.com/trifectatechfoundation/bzip2-rs) | `0.4.3` | `0.4.4` | | [tar](https://github.com/alexcrichton/tar-rs) | `0.4.38` | `0.4.45` | | [tungstenite](https://github.com/snapview/tungstenite-rs) | `0.17.3` | `0.20.1` | | [ouroboros](https://github.com/someguynamedjosh/ouroboros) | `0.15.0` | `0.15.6` | | [bytes](https://github.com/tokio-rs/bytes) | `1.2.1` | `1.11.1` | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.41` | `0.10.68` | | [quinn-proto](https://github.com/quinn-rs/quinn) | `0.8.4` | `0.10.6` | | [users](https://github.com/ogham/rust-users) | `0.10.0` | `0.11.0` | | [bumpalo](https://github.com/fitzgen/bumpalo) | `3.8.0` | `3.20.2` | | [h2](https://github.com/hyperium/h2) | `0.3.11` | `0.3.27` | | [keccak](https://github.com/RustCrypto/sponges) | `0.1.0` | `0.1.6` | | [shlex](https://github.com/comex/rust-shlex) | `1.1.0` | `1.3.0` | | [time](https://github.com/time-rs/time) | `0.1.43` | `0.1.45` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.7` | `0.3.23` | | [unsafe-libyaml](https://github.com/dtolnay/unsafe-libyaml) | `0.2.4` | `0.2.11` | Bumps the cargo group with 12 updates in the /programs/sbf directory: | Package | From | To | | --- | --- | --- | | [bzip2](https://github.com/trifectatechfoundation/bzip2-rs) | `0.4.3` | `0.4.4` | | [tar](https://github.com/alexcrichton/tar-rs) | `0.4.38` | `0.4.45` | | [ouroboros](https://github.com/someguynamedjosh/ouroboros) | `0.15.0` | `0.15.6` | | [bytes](https://github.com/tokio-rs/bytes) | `1.2.1` | `1.11.1` | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.41` | `0.10.68` | | [bumpalo](https://github.com/fitzgen/bumpalo) | `3.3.0` | `3.20.2` | | [crossbeam-utils](https://github.com/crossbeam-rs/crossbeam) | `0.8.5` | `0.8.21` | | [h2](https://github.com/hyperium/h2) | `0.3.11` | `0.3.21` | | [keccak](https://github.com/RustCrypto/sponges) | `0.1.0` | `0.1.6` | | [remove_dir_all](https://github.com/XAMPPRocky/remove_dir_all) | `0.5.2` | `0.5.3` | | [shlex](https://github.com/comex/rust-shlex) | `1.1.0` | `1.3.0` | | [unsafe-libyaml](https://github.com/dtolnay/unsafe-libyaml) | `0.2.4` | `0.2.11` | Bumps the cargo group with 1 update in the /storage-bigtable/build-proto directory: [bytes](https://github.com/tokio-rs/bytes). Updates `borsh` from 0.9.3 to 0.10.4 - [Release notes](https://github.com/near/borsh-rs/releases) - [Changelog](https://github.com/near/borsh-rs/blob/borsh-v0.10.4/CHANGELOG.md) - [Commits](near/borsh-rs@v0.9.3...borsh-v0.10.4) Updates `tokio` from 1.14.1 to 1.26.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.14.1...tokio-1.26.0) Updates `bzip2` from 0.4.3 to 0.4.4 - [Release notes](https://github.com/trifectatechfoundation/bzip2-rs/releases) - [Commits](https://github.com/trifectatechfoundation/bzip2-rs/commits/0.4.4) Updates `tar` from 0.4.38 to 0.4.45 - [Commits](alexcrichton/tar-rs@0.4.38...0.4.45) Updates `tungstenite` from 0.17.3 to 0.20.1 - [Changelog](https://github.com/snapview/tungstenite-rs/blob/master/CHANGELOG.md) - [Commits](snapview/tungstenite-rs@v0.17.3...v0.20.1) Updates `ouroboros` from 0.15.0 to 0.15.6 - [Commits](https://github.com/someguynamedjosh/ouroboros/commits) Updates `bytes` from 1.2.1 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.2.1...v1.11.1) Updates `openssl` from 0.10.41 to 0.10.68 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.41...openssl-v0.10.68) Updates `quinn-proto` from 0.8.4 to 0.10.6 - [Release notes](https://github.com/quinn-rs/quinn/releases) - [Commits](quinn-rs/quinn@0.8.4...0.10.6) Updates `users` from 0.10.0 to 0.11.0 - [Release notes](https://github.com/ogham/rust-users/releases) - [Commits](ogham/rust-users@v0.10.0...v0.11.0) Updates `bumpalo` from 3.8.0 to 3.20.2 - [Changelog](https://github.com/fitzgen/bumpalo/blob/main/CHANGELOG.md) - [Commits](fitzgen/bumpalo@3.8.0...v3.20.2) Updates `h2` from 0.3.11 to 0.3.27 - [Release notes](https://github.com/hyperium/h2/releases) - [Changelog](https://github.com/hyperium/h2/blob/v0.3.27/CHANGELOG.md) - [Commits](hyperium/h2@v0.3.11...v0.3.27) Updates `keccak` from 0.1.0 to 0.1.6 - [Commits](RustCrypto/sponges@keccak-v0.1.0...keccak-v0.1.6) Updates `mio` from 0.7.14 to 0.8.11 - [Release notes](https://github.com/tokio-rs/mio/releases) - [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md) - [Commits](tokio-rs/mio@v0.7.14...v0.8.11) Updates `openssl-src` from 111.22.0+1.1.1q to 300.5.5+3.5.5 - [Release notes](https://github.com/alexcrichton/openssl-src-rs/releases) - [Commits](https://github.com/alexcrichton/openssl-src-rs/commits) Updates `shlex` from 1.1.0 to 1.3.0 - [Changelog](https://github.com/comex/rust-shlex/blob/master/CHANGELOG.md) - [Commits](comex/rust-shlex@1.1.0...1.3.0) Updates `time` from 0.1.43 to 0.1.45 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](https://github.com/time-rs/time/commits) Updates `tracing-subscriber` from 0.3.7 to 0.3.23 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.7...tracing-subscriber-0.3.23) Updates `unsafe-libyaml` from 0.2.4 to 0.2.11 - [Release notes](https://github.com/dtolnay/unsafe-libyaml/releases) - [Commits](dtolnay/unsafe-libyaml@0.2.4...0.2.11) Updates `bzip2` from 0.4.3 to 0.4.4 - [Release notes](https://github.com/trifectatechfoundation/bzip2-rs/releases) - [Commits](https://github.com/trifectatechfoundation/bzip2-rs/commits/0.4.4) Updates `tar` from 0.4.38 to 0.4.45 - [Commits](alexcrichton/tar-rs@0.4.38...0.4.45) Updates `ouroboros` from 0.15.0 to 0.15.6 - [Commits](https://github.com/someguynamedjosh/ouroboros/commits) Updates `bytes` from 1.2.1 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.2.1...v1.11.1) Updates `openssl` from 0.10.41 to 0.10.68 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.41...openssl-v0.10.68) Updates `bumpalo` from 3.3.0 to 3.20.2 - [Changelog](https://github.com/fitzgen/bumpalo/blob/main/CHANGELOG.md) - [Commits](fitzgen/bumpalo@3.8.0...v3.20.2) Updates `crossbeam-utils` from 0.8.5 to 0.8.21 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/master/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-utils-0.8.5...crossbeam-utils-0.8.21) Updates `h2` from 0.3.11 to 0.3.21 - [Release notes](https://github.com/hyperium/h2/releases) - [Changelog](https://github.com/hyperium/h2/blob/v0.3.27/CHANGELOG.md) - [Commits](hyperium/h2@v0.3.11...v0.3.27) Updates `keccak` from 0.1.0 to 0.1.6 - [Commits](RustCrypto/sponges@keccak-v0.1.0...keccak-v0.1.6) Updates `openssl-src` from 111.22.0+1.1.1q to 300.5.5+3.5.5 - [Release notes](https://github.com/alexcrichton/openssl-src-rs/releases) - [Commits](https://github.com/alexcrichton/openssl-src-rs/commits) Updates `remove_dir_all` from 0.5.2 to 0.5.3 - [Release notes](https://github.com/XAMPPRocky/remove_dir_all/releases) - [Changelog](https://github.com/XAMPPRocky/remove_dir_all/blob/master/CHANGELOG.md) - [Commits](https://github.com/XAMPPRocky/remove_dir_all/compare/[email protected]) Updates `shlex` from 1.1.0 to 1.3.0 - [Changelog](https://github.com/comex/rust-shlex/blob/master/CHANGELOG.md) - [Commits](comex/rust-shlex@1.1.0...1.3.0) Updates `unsafe-libyaml` from 0.2.4 to 0.2.11 - [Release notes](https://github.com/dtolnay/unsafe-libyaml/releases) - [Commits](dtolnay/unsafe-libyaml@0.2.4...0.2.11) Updates `bytes` from 1.2.1 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.2.1...v1.11.1) --- updated-dependencies: - dependency-name: borsh dependency-version: 0.10.4 dependency-type: direct:production dependency-group: cargo - dependency-name: tokio dependency-version: 1.26.0 dependency-type: direct:production dependency-group: cargo - dependency-name: bzip2 dependency-version: 0.4.4 dependency-type: direct:production dependency-group: cargo - dependency-name: tar dependency-version: 0.4.45 dependency-type: direct:production dependency-group: cargo - dependency-name: tungstenite dependency-version: 0.20.1 dependency-type: direct:production dependency-group: cargo - dependency-name: ouroboros dependency-version: 0.15.6 dependency-type: direct:production dependency-group: cargo - dependency-name: bytes dependency-version: 1.11.1 dependency-type: direct:production dependency-group: cargo - dependency-name: openssl dependency-version: 0.10.68 dependency-type: direct:production dependency-group: cargo - dependency-name: quinn-proto dependency-version: 0.10.6 dependency-type: direct:production dependency-group: cargo - dependency-name: users dependency-version: 0.11.0 dependency-type: direct:production dependency-group: cargo - dependency-name: bumpalo dependency-version: 3.20.2 dependency-type: indirect dependency-group: cargo - dependency-name: h2 dependency-version: 0.3.27 dependency-type: indirect dependency-group: cargo - dependency-name: keccak dependency-version: 0.1.6 dependency-type: indirect dependency-group: cargo - dependency-name: mio dependency-version: 0.8.11 dependency-type: indirect dependency-group: cargo - dependency-name: openssl-src dependency-version: 300.5.5+3.5.5 dependency-type: indirect dependency-group: cargo - dependency-name: shlex dependency-version: 1.3.0 dependency-type: indirect dependency-group: cargo - dependency-name: time dependency-version: 0.1.45 dependency-type: indirect dependency-group: cargo - dependency-name: tracing-subscriber dependency-version: 0.3.23 dependency-type: indirect dependency-group: cargo - dependency-name: unsafe-libyaml dependency-version: 0.2.11 dependency-type: indirect dependency-group: cargo - dependency-name: bzip2 dependency-version: 0.4.4 dependency-type: indirect dependency-group: cargo - dependency-name: tar dependency-version: 0.4.45 dependency-type: indirect dependency-group: cargo - dependency-name: ouroboros dependency-version: 0.15.6 dependency-type: indirect dependency-group: cargo - dependency-name: bytes dependency-version: 1.11.1 dependency-type: indirect dependency-group: cargo - dependency-name: openssl dependency-version: 0.10.68 dependency-type: indirect dependency-group: cargo - dependency-name: bumpalo dependency-version: 3.20.2 dependency-type: indirect dependency-group: cargo - dependency-name: crossbeam-utils dependency-version: 0.8.21 dependency-type: indirect dependency-group: cargo - dependency-name: h2 dependency-version: 0.3.21 dependency-type: indirect dependency-group: cargo - dependency-name: keccak dependency-version: 0.1.6 dependency-type: indirect dependency-group: cargo - dependency-name: openssl-src dependency-version: 300.5.5+3.5.5 dependency-type: indirect dependency-group: cargo - dependency-name: remove_dir_all dependency-version: 0.5.3 dependency-type: indirect dependency-group: cargo - dependency-name: shlex dependency-version: 1.3.0 dependency-type: indirect dependency-group: cargo - dependency-name: unsafe-libyaml dependency-version: 0.2.11 dependency-type: indirect dependency-group: cargo - dependency-name: bytes dependency-version: 1.11.1 dependency-type: indirect dependency-group: cargo ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 20, 2026

dependabot bot mentioned this pull request Mar 20, 2026

Bump the cargo group across 3 directories with 20 updates #43

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the cargo group across 3 directories with 21 updates#44

Bump the cargo group across 3 directories with 21 updates#44
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/cargo-6062b59fd1

dependabot bot commented on behalf of github Mar 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 20, 2026

borsh-derive-internal-v0.10.4

borsh-derive-v0.10.4

borsh-schema-derive-internal-v0.10.4

borsh-v0.10.4

[0.10.4] - 2024-09-23

[0.10.3] - 2022-03-22

[0.10.2] - 2022-02-14

[0.10.1] - 2022-02-08

[0.10.0] - 2023-01-19

Tokio v1.26.0

Fixed

Added

Changed

Internal Changes

Unstable

Documented

Version 0.5.2 (and 0.1.13 for bzip2-sys)

What's Changed

New Contributors

Version 0.5.1 (and 0.1.12 for bzip2-sys)

Highlights

What's Changed

New Contributors

0.20.1

0.20.0

0.19.0

0.18.0

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

Bytes v1.11.0

1.11.0 (November 14th, 2025)

Fixed

Internal changes

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

Bytes v1.10.0

1.10.0 (February 3rd, 2025)

Added

Fixed

1.11.1 (February 3rd, 2026)

1.11.0 (November 14th, 2025)

Fixed

Internal changes

1.10.1 (March 5th, 2025)

Fixed

1.10.0 (February 3rd, 2025)

Added

Fixed

1.9.0 (November 27, 2024)

Added

Documented

openssl-v0.10.68

What's Changed

openssl-v0.10.67

What's Changed

New Contributors

openssl-v0.10.66

What's Changed

openssl-v0.10.65

quinn-proto 0.11.13, quinn 0.11.9

What's Changed

quinn-proto 0.11.10, quinn 0.11.7

What's Changed

v0.11.0

Breaking changes

Bug fixes and other changes

3.20.2

Fixed

3.20.1

Fixed

3.20.0

Added

Fixed

3.19.1

Changed

Fixed

Uh oh!

Version 0.5.2 (and 0.1.13 for `bzip2-sys`)

Version 0.5.1 (and 0.1.12 for `bzip2-sys`)