[dependabot]

Bumps the rust-minor-patch group with 101 updates in the / directory:

Package	From	To
serde_json	1.0.151	1.0.154
log	0.4.34	0.4.35
ort	2.0.0-rc.13	2.0.0-rc.15
ureq	3.4.1	3.5.1
reqwest	0.13.4	0.13.5
clap	4.6.6	4.6.7
tao	0.37.0	0.37.2
arbitrary	1.4.2	1.5.0
aws-lc-rs	1.18.1	1.19.0
aws-lc-sys	0.45.0	0.47.0
bitflags	2.13.1	2.13.2
cc	1.4.5	1.11.0
cfg-if	1.0.4	1.0.5
clap_builder	4.6.6	4.6.7
clap_derive	4.6.4	4.6.7
clap_lex	1.1.0	1.1.1
combine	4.6.8	4.6.9
console	0.16.4	0.16.6
crc32fast	1.5.1	1.5.4
cxx	1.0.200	1.0.205
cxx-build	1.0.200	1.0.205
cxxbridge-cmd	1.0.200	1.0.205
cxxbridge-flags	1.0.200	1.0.205
cxxbridge-macro	1.0.200	1.0.205
defmt	1.1.1	1.2.0
defmt-macros	1.1.1	1.2.0
defmt-parser	1.0.0	1.1.0
der	0.8.2	0.8.3
deranged	0.5.8	0.5.9
derive_arbitrary	1.4.2	1.5.0
either	1.18.0	1.19.0
encoding_rs	0.8.35	0.8.44
equivalent	1.0.2	1.0.3
find-msvc-tools	0.1.12	0.1.15
h2	0.4.19	0.4.20
hmac-sha256	1.1.14	1.1.15
hyper	1.11.1	1.12.0
hyper-rustls	0.27.9	0.27.10
hyper-util	0.1.20	0.1.21
icu_locale_core	2.3.0	2.4.0
icu_normalizer	2.3.0	2.4.0
icu_normalizer_data	2.3.0	2.4.0
icu_properties	2.3.0	2.4.0
icu_properties_data	2.3.0	2.4.0
icu_provider	2.3.1	2.4.0
jiff	0.2.35	0.2.39
jiff-core	0.1.0	0.1.4
jiff-static	0.2.35	0.2.41
libc	0.2.189	0.2.191
litrs	1.0.0	1.0.1
lru-slab	0.1.2	0.1.3
mime	0.3.17	0.3.18
mio	1.2.3	1.2.4
objc2	0.6.4	0.6.5
openssl	0.10.81	0.10.82
openssl-probe	0.2.1	0.2.2
openssl-sys	0.9.117	0.9.118
ort-sys	2.0.0-rc.13	2.0.0-rc.15
pest	2.9.1	2.9.5
pest_derive	2.9.1	2.9.5
pest_generator	2.9.1	2.9.5
pest_meta	2.9.1	2.9.5
powerfmt	0.2.0	0.2.1
quinn	0.11.11	0.11.12
rand	0.10.2	0.10.3
realfft	3.5.0	3.5.1
redox_users	0.5.2	0.5.3
rustix	1.1.4	1.1.6
rustls-native-certs	0.8.4	0.8.5
rustls-platform-verifier	0.7.0	0.7.1
rustls-platform-verifier-android	0.1.1	0.2.0
schannel	0.1.29	0.1.30
siphasher	1.0.3	1.0.4
smallvec	1.16.0	1.16.4
syn	3.0.5	3.0.9
thiserror	2.0.20	2.0.21
tinystr	0.8.4	0.8.5
tinyvec	1.13.2	1.13.3
tokio-rustls	0.26.5	0.26.6
tokio-util	0.7.19	0.7.20
toml_datetime	1.1.1+spec-1.1.0	1.1.2+spec-1.1.0
toml_edit	0.25.13+spec-1.1.0	0.25.18+spec-1.1.0
toml_parser	1.1.3+spec-1.1.0	1.1.5+spec-1.1.0
unicase	2.9.0	2.10.0
unicode-ident	1.0.24	1.0.27
unicode-width	0.2.2	0.2.3
ureq-proto	0.6.2	0.7.1
utf8_iter	1.0.4	1.1.0
want	0.3.1	0.3.2
winnow	1.0.4	1.0.5
xattr	1.6.1	1.7.0
yoke	0.8.3	0.8.4
yoke-derive	0.8.2	0.8.4
zerocopy	0.8.56	0.8.63
zerocopy-derive	0.8.56	0.8.63
zerofrom-derive	0.1.7	0.1.8
zeroize	1.9.0	1.9.1
zerovec	0.11.8	0.11.9
zerovec-derive	0.11.6	0.11.7
zlib-rs	0.6.7	0.6.8
zopfli	0.8.3	0.8.4

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates log from 0.4.34 to 0.4.35

Release notes

Sourced from log's releases.

v0.4.35

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

• rework CI/CD to align with Rust project standards

Changelog

Sourced from log's changelog.

0.4.35 - 2026-10-30

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

• rework CI/CD to align with Rust project standards

Commits

• a46450b Update CHANGELOG.md
• a715f17 chore: release v0.4.35
• b4e2b12 Merge pull request #747 from rust-lang/chore/release-plz-mgnt
• 6b490b6 run fmt
• 2c7fd52 simplify some crate release tasks for easier automation
• 5bc5545 Merge pull request #745 from marcoienibot/release-plz-disable-semver-check
• 4234b8c Disable release-plz semver check
• 95918ff Merge pull request #744 from Kobzol/trusted-publishing
• e7ed747 Fix Zizmor lints
• e87a3c6 Setup trusted publishing
• Additional commits viewable in compare view

Updates ort from 2.0.0-rc.13 to 2.0.0-rc.15

Release notes

Sourced from ort's releases.

v2.0.0-rc.15

2.0.0-rc.15

💖 If you find ort useful, please consider supporting us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

✨ Supporters get priority (<24h) issue resolution & support!

---

rc.15 fixes over 30 instances of undefined behavior and adds no new features. It is highly recommended to upgrade to rc.15 as soon as possible, as multiple memory leaks/memory safety issues were fixed.

Alternative backends will be updated sometime before Oct 23.

• run_async now only accepts owned inputs.
• ExecutionProviderLibrary::unregister has been removed. You can still unregister EP libraries via the unsafe -sys API.
• ValueRefMut no longer implements DerefMut to Value. It has the same methods as &mut Value and can be used in the same places in the ort API. It is recommended to take ValueRefMut anywhere you used to take &mut Value.
• InMemorySession no longer implements DerefMut to Session. It has the same methods as &mut Session.
• Kernel now requires Send; ThreadManager requires Send + Sync.
• SessionBuilder::with_external_initializer_file_in_memory now takes Arc<[u8]> instead of Cow<'static, [u8]>.

---

v2.0.0-rc.14

2.0.0-rc.14

💖 If you find ort useful, please consider supporting us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

✨ Supporters get priority (<24h) issue resolution & support!

---

... (truncated)

Commits

• 5c564c5 2.0.0-rc.15
• 5acdda4 fix!: take external initializer file buffers as Arc\<[u8]>
• 24cc24a fix(editor): attribute/initializer UAFs
• 43bac17 fix!: prevent moves out of DerefMut for in-memory sessions/ValueRefMut
• 8993b93 fix: wasm & no_std build
• 262d9aa fix: 2 potential IoBinding UAFs
• 5fe022f fix(sys): make OrtAllocator::default const
• 593d821 fix: tensors can have MemoryInfo but no AllocatorHandle
• a27c6f9 fix(adapter): hold onto the Allocator that created it
• 6fe7776 fix(sys): add missing graph & tensor op attr variants
• Additional commits viewable in compare view

Updates ureq from 3.4.1 to 3.5.1

Changelog

Sourced from ureq's changelog.

3.5.1

• Bump ureq-proto to 0.7.1 (fixes to connection reuse and transfer encoding) #1224
• Send only cookie names and values in request Cookie headers #1222
• Preserve readable responses after macOS rejects timeout changes on closed sockets #1220

3.5.0

• Prepare 3.5.0 and fix dependency advisories and warnings - #1217
• Add Agent::shutdown() to interrupt requests in flight and close all connections #1211
• Preserve validated request header casing with RequestBuilder::header_raw #1214
• Decode proxy URL credentials once; literal percent signs must be escaped as %25 #1215
• Encode ProxyBuilder credentials and preserve colons in proxy passwords #1215
• Apply remaining timeout budgets to SOCKS setup and drop the socks dependency #1209
• Check NO_PROXY before resolving a SOCKS proxy, so excluded hosts connect directly #1209
• Clarify timeout budgets, phase boundaries, and proxy DNS #1213
• Bound TLS handshake I/O by the remaining connect/global timeout #1208
• Retry socket reads interrupted by EINTR when timeout (technically breaking) #1205
• Fix native-tls-no-default enabling dependencies without enabling the TLS connector
• Add timeout_per_read and timeout_per_write independently of total phase budgets

3.4.3

• Update TLS dependencies for security fixes #1218

3.4.2

• Bump ureq-proto to 0.6.3 (fixes network-path references in redirects)
• Bypass pooling for request connection settings incompatible with the Agent #1201
• Try the next resolved address on unreachable/unavailable connect errors #1195

Commits

• 33ca9d3 3.5.1
• d1b194c Bump ureq-proto to 0.7.1
• 81d1b40 Bump ureq-proto to 0.7.0
• 0cbee9a docs: clarify body read limit defaults (#1223)
• f92baae Send only cookie names and values in the Cookie header
• f60896d Preserve readable responses after macOS timeout setter failures
• 1bd534e Fix changelog
• fee0ad2 Prepare 3.5.0 and fix dependency advisories and warnings
• 7de0ab7 Remove realtime dependencies from tests
• 3f18f90 Add Agent::shutdown() for active and pooled connections
• Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

• fix(blocking): preserve version and extensions in TryFromhttp::Request by @​wwhsaber in seanmonstar/reqwest#3050
• Remove unnecessary clones by @​FranciscoTGouveia in seanmonstar/reqwest#3052
• Add Referrer and Referrer Policy methods to WASM Request API by @​Billy-Sheppard in seanmonstar/reqwest#3049
• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in seanmonstar/reqwest#3058
• feat: add Error::is_dns() to identify DNS resolution failures by @​JoakoI98 in seanmonstar/reqwest#3057
• Fix blocking client timeout panic by @​V-Mann-Nick in seanmonstar/reqwest#3060
• Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @​FalkWoldmann in seanmonstar/reqwest#3063
• feat: Add ClientBuilder::http1_max_headers by @​smaeda-ks in seanmonstar/reqwest#3065
• feat: expose the negotiated TLS version via TlsInfo by @​dennisameling in seanmonstar/reqwest#3067
• fix(error): detect timeouts wrapped in body decode errors by @​raphaelroshan in seanmonstar/reqwest#3064
• Remove unnecessary clones and a cast by @​FranciscoTGouveia in seanmonstar/reqwest#3071
• chore(deps): upgrade base64 to 0.23 by @​paolobarbolini in seanmonstar/reqwest#3074
• perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @​spellsaif in seanmonstar/reqwest#3085
• fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @​spellsaif in seanmonstar/reqwest#3084
• src/async_impl/request.rs_improved_doc_for_json_fn: by @​Athleteg in seanmonstar/reqwest#3082
• fix: proxy could use wrong credentials if many matched by @​seanmonstar in seanmonstar/reqwest#3098

New Contributors

• @​wwhsaber made their first contribution in seanmonstar/reqwest#3050
• @​FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052
• @​Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049
• @​JoakoI98 made their first contribution in seanmonstar/reqwest#3057
• @​V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060
• @​FalkWoldmann made their first contribution in seanmonstar/reqwest#3063
• @​smaeda-ks made their first contribution in seanmonstar/reqwest#3065
• @​raphaelroshan made their first contribution in seanmonstar/reqwest#3064
• @​spellsaif made their first contribution in seanmonstar/reqwest#3085
• @​Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

• de55373 v0.13.5
• 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
• 9f06fd2 docs: improve description of JSON method (#3082)
• 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
• ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
• 4e9a3c7 chore: add pull request template for human-written content
• 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
• 221abe9 chore: Remove unnecessary clones and a cast (#3071)
• 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
• fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
• Additional commits viewable in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates tao from 0.37.0 to 0.37.2

Release notes

Sourced from tao's releases.

tao v0.37.2

Updating crates.io index
     Locking 361 packages to highest compatible versions
      Adding dlopen2 v0.8.2 (available: v0.9.0)
      Adding gdkwayland-sys v0.18.2 (available: v0.19.0)
      Adding gdkx11-sys v0.18.2 (available: v0.19.0)
      Adding gtk v0.18.2 (available: v0.19.0)
      Adding jni v0.21.1 (available: v0.22.4)
      Adding parking_lot v0.12.5 (available: v0.13.0)
      Adding raw-window-handle v0.4.3 (available: v0.6.2)
      Adding raw-window-handle v0.5.2 (available: v0.6.2)
      Adding syn v2.0.119 (available: v3.0.9)
      Adding toml v0.8.2 (available: v0.8.23)
      Adding toml_datetime v0.6.3 (available: v0.6.11)
      Adding toml_edit v0.20.2 (available: v0.20.7)
      Adding windows-core v0.62.2 (available: v0.100.0)
      Adding windows-version v0.1.7 (available: v0.100.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1350 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (363 crate dependencies)
Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     proc-macro-error
Version:   1.0.4
Warning:   unmaintained
Title:     proc-macro-error is unmaintained
Date:      2024-09-01
ID:        RUSTSEC-2024-0370
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0370
Crate:     glib
Version:   0.18.5
Warning:   unsound
Title:     Unsoundness in Iterator and DoubleEndedIterator impls for glib::VariantStrIter
Date:      2024-03-30
ID:        RUSTSEC-2024-0429
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0429
warning: 3 allowed warnings found
</tr></table>

... (truncated)

Changelog

Sourced from tao's changelog.

[0.37.2]

• d19f4c12 (#1356 by @​yuezk) Fix compilation on FreeBSD, OpenBSD, NetBSD, and DragonFly BSD by enabling the resize hit-test helper used by the GTK backend.
• 3fcda65f (#1351 by @​marrionesa) Fixed undefined behavior in the Linux raw_display_handle_rwh_06 implementations: a failed XOpenDisplay (null) no longer reaches XDefaultScreen / NonNull::new_unchecked, the null Wayland wl_display is checked, and both now return Err(HandleError::Unavailable). The rwh_05 implementations also skip the XDefaultScreen call when the display is null. See #1347.
• 176eaef4 (#1381 by @​helenanova) Fix a Linux session crash where every touch event near the border of an undecorated window re-issued begin_resize_drag_for_device; a resize drag now only starts on touch begin.
• 1316232d (#1267 by @​osman-yuksel) On macOS, fix an abort (SIGABRT) when a drag entered or was dropped on a window while carrying no NSFilenamesPboardType entry, which is the case for text, URLs and promised files (for example a track dragged out of Music.app). The pasteboard was unwrapped unconditionally inside the draggingEntered: and performDragOperation: callbacks, and since those cannot unwind, the resulting panic aborted the process instead of propagating. Such drags now report no paths.
• 749385b4 (#1391 by @​RaphaelFakhri) On Linux, fix KeyCode::to_scancode returning the scancode of a different key for KeyM, BracketRight, Numpad4, Numpad5, Numpad6 and Numpad7.
• 19a43d27 (#1372 by @​ali-issa) On macOS, Window::drag_window no longer panics in debug builds when there is no current event (for example when the drag is requested after the mouse-down was handled); it logs a warning and returns Ok(()) without dragging.
• 9aa859e1 (#1368 by @​Tunglies) Fix excessive memory growth when repeatedly creating and closing windows on macOS.
• 8423382b (#1354 by @​nedtwigg) On macOS and iOS, declare the Objective-C method implementations and CFRunLoop callbacks extern "C-unwind", so an Objective-C exception raised beneath one (for example inside [super sendEvent:]) unwinds to the system's handler instead of aborting the process with "panic in a function that cannot unwind". Apps built with panic = "abort" still abort.
• 2514c69d (#1361 by @​4o3F) On Windows, fix incorrect client sizes when creating or resizing an initially hidden, undecorated window with shadows by applying consistent client-area calculations to both WM_NCCALCSIZE parameter forms.
• 2831c7d6 (#1353 by @​zzentq) On Windows, fix a gap at the bottom of an undecorated window that goes fullscreen while maximized: the client area was clamped to the monitor work area.
• 2d918a69 (#1352 by @​Legend-Master) On Windows, delay unmaximizing the window if it's hidden to avoid it flashing briefly.

[0.37.1]

• 365089b6 (#1341 by @​Legend-Master) On Windows, fix visibility flickers when calling windowing functions

• f79aa3a1 (#1342 by @​Legend-Master) On Windows, fix set_maximized and set_minimized calls don't work if the window's built with with_focused(false).

  Note: this change will also make that if the window is created through with_focused(false), subsequent window.set_visible(true) calls will now focus the window (the current behavior is the window only gets focus if you call window.set_focus() or window.set_maximized(true)) this is consistent with the other platforms.

Commits

• See full diff in compare view

Updates arbitrary from 1.4.2 to 1.5.0

Changelog

Sourced from arbitrary's changelog.

1.5.0

Released 2026-10-05.

Added

• Added support for deriving Arbitrary for types with raw identifiers.

Changed

• Updated derive_arbitrary to syn 3. This raises the MSRV from 1.63.0 to 1.71.0, which is the MSRV of syn 3.

Fixed

• Fixed soundness when generating arrays.
• Fixed nonzero integer generation to always produce a nonzero value.
• Updated derive_arbitrary to include fixes for fully qualified paths.

---

Commits

• 9807b59 Merge pull request #243 from fitzgen/bump-to-1.5.0
• 7a49e61 Bump to version 1.5.0
• aa2802b Merge pull request #242 from drakeo338/claude/241-fix
• a9f7ca5 Update derive_arbitrary to syn 3 and raise MSRV to 1.71
• cd35bd2 Merge pull request #239 from Manishearth/fix-soundness
• 53a651d agent-driven: Fix soundness in try_create_array
• df8afe9 Merge pull request #238 from baloo/baloo/push-lopsmyosqnpv
• 15f5c08 Bring fix for fully qualified path
• 341a8fd Merge pull request #237 from ngildenhuys/downgrading_msrv_deps
• 9b68ef4 ci: adding update commands to downgrade dependencies to fix MSRV test
• Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.1 to 1.19.0

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.19.0

What's Changed

• Add AES OFB, CFB8, and CFB1 modes by @​lokeswarivejju in aws/aws-lc-rs#1259
  • Adds OperatingMode::OFB, OperatingMode::CFB8, and OperatingMode::CFB1 for AES-128, AES-192, and AES-256 through both the one-shot and streaming cipher APIs.
• Add an on-demand AWS-LC self-test API by @​Elvrarin in aws/aws-lc-rs#1262
  • Adds aws_lc_rs::try_fips_self_test(), allowing applications to re-run all AWS-LC cryptographic algorithm self-tests without calling the sys crate through unsafe FFI. This does not re-run the module integrity test.
• Add Keccak-256 digest support behind "unstable" feature flag by @​fabrice102 in aws/aws-lc-rs#1266
  • Adds aws_lc_rs::unstable::digest::KECCAK256 and KECCAK256_OUTPUT_LEN behind the unstable feature for use with the existing digest::digest and digest::Context APIs.
• Add configurable RSA-PSS salt lengths by @​PaulDance in aws/aws-lc-rs#1267
  • Adds RsaPssSaltLength::{Digest, Max, Custom} and with_pss_salt_length builders on RsaSignatureEncoding and RsaParameters, covering signing and verification for both message and precomputed-digest APIs.
• Implement Clone for signing key pairs by @​JakeHuneau in aws/aws-lc-rs#1277
  • rsa::KeyPair, EcdsaKeyPair, Ed25519KeyPair, and PqdsaKeyPair can now be cloned directly rather than wrapped in an Arc.
  • Clones share the immutable, reference-counted EVP_PKEY; key material is not duplicated, and a clone remains usable after the original is dropped.

Upstream AWS-LC

• aws-lc-sys v0.47.0 aligns with AWS-LC v5.12.0 (previously v5.11.0).
• aws-lc-fips-sys v0.14.4 updates its bundled AWS-LC FIPS 4.2.0 snapshot with recent FIPS 4.x backports.

Build Improvements

• Lower the minimum system-installed AWS-LC version to 4.2.0 by @​justsmth in aws/aws-lc-rs#1268
  • The default aws-lc-sys system-library path now accepts AWS-LC 4.2.0 or newer, previously 5.7.0, allowing use of a FIPS 4.x system library.
  • Enabling the unstable feature requires AWS-LC 5.7.0 or newer because unstable APIs currently include Keccak-256. Bundled-source builds are unaffected.
• Share cc compiler detection across builds by @​johncarmack1984 in aws/aws-lc-rs#1273
  • Reuses compiler detection results across the main library build and compiler feature probes, reducing repeated compiler invocations during cold builds.

Issues Being Closed

• Implement Clone for rsa::KeyPair -- aws/aws-lc-rs#1260
• Expose AWS-LC FIPS on-demand self-test -- aws/aws-lc-rs#1261
• Add a way to specify the RSA-PSS salt length -- aws/aws-lc-rs#1263

Other Merged PRs

• build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @​dependabot[bot] in aws/aws-lc-rs#1264
• build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @​dependabot[bot] in aws/aws-lc-rs#1265
• fix: satisfy Clippy deprecated-since lint and lint legacy-des in CI by @​justsmth in aws/aws-lc-rs#1269
• ci: keep upstream Cargo.lock in rustls integration by @​justsmth in aws/aws-lc-rs#1270
• ci: use dynamic musl CRT for ARM FIPS tests by @​justsmth in aws/aws-lc-rs#1271
• Prepare aws-lc-fips-sys v0.14.4 by @​justsmth in aws/aws-lc-rs#1275
• Prepare aws-lc-sys v0.47.0 by @​justsmth in aws/aws-lc-rs#1274
• Prepare aws-lc-rs v1.19.0 by @​justsmth in aws/aws-lc-rs#1278

New Contributors

• @​lokeswarivejju made their first contribution in aws/aws-lc-rs#1259
• @​johncarmack1984 made their first contribution in aws/aws-lc-rs#1273
• @​JakeHuneau made their first contribution in aws/aws-lc-rs#1277

... (truncated)

Commits

• 5d496f8 Prepare aws-lc-rs v1.19.0 (#1278)
• d099134 Feat: Add the ability to specify an RSA-PSS salt length (#1267)
• b639322 feat(signature): implement Clone for signing key pairs (#1277)
• 7548d5c Prepare aws-lc-sys v0.47.0 (#1274)
• a5862bd Prepare aws-lc-fips-sys v0.14.4 (#1275)
• 9bba3fb perf(builder): share cc's compiler detection across builds (#1273)
• 6a66144 Add Keccak-256 digest algorithm (unstable) (#1266)
• cf4f62b feat(fips): add on-demand AWS-LC self-test API (#1262)
• 825d0e3 feat: support AES OFB, CFB8 and CFB1 modes (#1259)
• c225ce4 Lower minimum system AWS-LC to 4.2.0 and add an unstable floor (#1268)
• Additional commits viewable in compare view

Updates aws-lc-sys from 0.45.0 to 0.47.0

Commits

• 5d496f8 Prepare aws-lc-rs v1.19.0 (#1278)
• d099134 Feat: Add the ability to specify an RSA-PSS salt length (#1267)
• b639322 feat(signature): implement Clone for signing key pairs (#1277)
• 7548d5c Prepare aws-lc-sys v0.47.0 (#1274)
• a5862bd Prepare aws-lc-fips-sys v0.14.4 (#1275)
• 9bba3fb perf(builder): share cc's compiler detection across builds (#1273)
• 6a66144 Add Keccak-256 digest algorithm (unstable) (#1266)
• cf4f62b feat(fips): add on-demand AWS-LC self-test API (#1262)
• 825d0e3 feat: support AES OFB, CFB8 and CFB1 modes (#1259)
• c225ce4 Lower minimum system AWS-LC to 4.2.0 and add an unstable floor (#1268)
• Additional commits viewable in compare view

Updates bitflags from 2.13.1 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

• Flags: adjust order of elements in manual implementation example by @​DanielEScherzer in bitflags/bitflags#494
• Re-pull const declarations outside of nested const by @​KodrAus in bitflags/bitflags#496
• Prepare for 2.13.2 release by @​KodrAus in bitflags/bitflags#497

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

• Flags: adjust order of elements in manual implementation example by @​DanielEScherzer in bitflags/bitflags#494
• Re-pull const declarations outside of nested const by @​KodrAus in bitflags/bitflags#496

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Commits

• 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
• 5822493 prepare for 2.13.2 release
• 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
• 2c0b042 re-pull const declarations outside of nested const
• c3f8d31 Merge pull request

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 3 packages with OpenSSF Scorecard issues.

View full job summary