Skip to content

build(deps): Bump the rust group across 1 directory with 12 updates - #435

Merged
hyperb1iss merged 1 commit into
mainfrom
dependabot/cargo/rust-87f588d92f
Oct 19, 2026
Merged

hyperb1iss merged 1 commit into
mainfrom
dependabot/cargo/rust-87f588d92f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust group with 12 updates in the / directory:

Package From To
serde_json 1.0.151 1.0.154
tokio 1.53.2 1.53.3
tokio-util 0.7.19 0.7.20
uuid 1.27.0 1.28.0
sha2 0.11.0 0.11.1
zerocopy 0.8.62 0.8.63
nusb 0.2.7 0.2.8
tauri 2.12.1 2.12.2
tauri-plugin-single-instance 2.5.2 2.5.4
tauri-build 2.7.1 2.7.2
midir 0.11.0 0.11.1
proptest 1.11.0 1.12.0

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates tokio from 1.53.2 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

  • io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

  • io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

  • io: wake and drop DuplexStream wakers outside the lock (#8618)
  • macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
  • runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
  • sync: wake waiters outside the lock when closing a semaphore (#8529)
  • test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

  • rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Commits
  • a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
  • df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
  • f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
  • 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
  • 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
  • c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
  • 0448618 sync: make tracing_sync tests synchronous (#8427)
  • 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
  • bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
  • 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
  • Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

Updates uuid from 1.27.0 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

Commits
  • 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
  • 4b3b9f5 prepare for 1.28.0 release
  • cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
  • 784a022 Inline expected tokens in optional compact serde test
  • a5678c3 Simplify optional serde adapter tests to option tokens
  • 638a518 Refactor optional serde adapter tests and share byte wrapper
  • 654fa5b Add optional serde format adapters
  • See full diff in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates zerocopy from 0.8.62 to 0.8.63

Release notes

Sourced from zerocopy's releases.

v0.8.63

What's Changed

New Contributors

Full Changelog: google/zerocopy@v0.8.62...v0.8.63

Commits

Updates nusb from 0.2.7 to 0.2.8

Release notes

Sourced from nusb's releases.

v0.2.8

New Features

  • DeviceInfo::{get_manufacturer_string, get_product_string, get_serial_number_string} and InterfaceInfo::get_interface_string methods for fetching string descriptors when not cached on Windows (#235)

Bug fixes

  • linux+macOS: Fix memory leak if control transfer future is dropped along with all other references to the device (#239)
  • windows: Fix lost wakeup in hotplug events stream if probing a device fails (#237)
  • windows: Fix memory leak on hotplug initialization failure (#237)
  • windows: Check GetLastError only after a call fails (#237)
  • windows: Registry functions return an error code directly instead of using GetLastError (#237)
  • windows: Avoid potential panic in claim_interface if registry key is unavailable (#237)
  • windows: Fix null-pointer dereference on alloc failure (#237)

Internal changes

  • windows: simplify transfer completion error handling (#238)

Other

  • Add "tier 3" support for Windows 7 (without hotplug events) (#231)

Contributors

@​kevinmehall @​whitequark

Commits
  • c80218d v0.2.8
  • 985abdf Merge pull request #239 from kevinmehall/push-slrrmwtmolmu
  • e4b0e12 linux+macOS: Fix memory leak if control transfer future is dropped along with...
  • 57ff5ae CI: disable fail-fast
  • 08d7ad5 Merge pull request #238 from kevinmehall/windows-err
  • d309666 windows: Use UnsafeCell for TransferData::overlapped
  • 63fea24 windows: simplify transfer completion error handling
  • a387358 Merge pull request #237 from kevinmehall/windows-fixes
  • f785b52 Merge pull request #235 from kevinmehall/string-fetch
  • 5b08b0f DeviceInfo methods for fetching string descriptors when not cached
  • Additional commits viewable in compare view

Updates tauri from 2.12.1 to 2.12.2

Release notes

Sourced from tauri's releases.

tauri v2.12.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1295 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate: rustls-pemfile
Version: 2.2.0
Warning: unmaintained
Title: rustls-pemfile is unmaintained
Date: 2025-11-28
ID: RUSTSEC-2025-0134
URL: https://rustsec.org/advisories/RUSTSEC-2025-0134

Crate: rustybuzz
Version: 0.20.1
Warning: unmaintained
Title: rustybuzz is unmaintained
Date: 2026-07-11
ID: RUSTSEC-2026-0206
URL: https://rustsec.org/advisories/RUSTSEC-2026-0206

Crate: ttf-parser
Version: 0.25.1
Warning: unmaintained
Title: ttf-parser is unmaintained
Date: 2026-06-28
ID: RUSTSEC-2026-0192
URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found
</tr></table>

... (truncated)

Commits

Updates tauri-plugin-single-instance from 2.5.2 to 2.5.4

Release notes

Sourced from tauri-plugin-single-instance's releases.

single-instance v2.5.4

[2.5.4]

  • f83c5d3b (#3584 by @​vincentkoc) On Linux, a secondary instance that cannot deliver its arguments to the primary instance now returns a plugin initialization error instead of exiting successfully, and an invalid dbus_id returns an error instead of panicking. When the session bus is unavailable the app keeps launching normally, without single-instance support, and logs a warning.
  • b53d1984 (#3686 by @​lucasfernog) On Windows, an argument containing a | is no longer split into several arguments when it is forwarded to the running instance.

Dependencies

  • Upgraded to deep-link@2.6.2
Updating crates.io index
   Packaging tauri-plugin-single-instance v2.5.4 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Updating crates.io index
warning: package `yoke-derive v0.8.3` in Cargo.lock is yanked in registry `crates-io`
  |
  = help: consider updating to a version that is not yanked
    Packaged 16 files, 179.7KiB (49.2KiB compressed)
   Uploading tauri-plugin-single-instance v2.5.4 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Uploaded tauri-plugin-single-instance v2.5.4 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.5.4 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-single-instance v2.5.4 at registry `crates-io`

single-instance v2.5.3

[2.5.3]

  • 818d2e04 (#3645) On Windows, a second instance no longer waits indefinitely for a first instance that stopped processing messages: it stops waiting after 10 seconds and exits. The first instance may still receive the arguments once it resumes processing messages.
  • 323fe80d (#3644) A second instance no longer panics when a command-line argument is not valid Unicode: such an argument is forwarded with its invalid parts replaced by U+FFFD. A working directory that is not valid Unicode is now forwarded the same way instead of as an empty string.
Updating crates.io index
   Packaging tauri-plugin-single-instance v2.5.3 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Updating crates.io index
warning: package `yoke-derive v0.8.3` in Cargo.lock is yanked in registry `crates-io`
  |
  = help: consider updating to a version that is not yanked
    Packaged 15 files, 170.3KiB (46.5KiB compressed)
   Uploading tauri-plugin-single-instance v2.5.3 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Uploaded tauri-plugin-single-instance v2.5.3 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.5.3 to be available at registry `crates-io`
</tr></table> 

... (truncated)

Commits
  • e7a68fa publish new versions (#3068)
  • b5550a3 chore: temp delete updater changefile
  • 93426f8 fix: fix docsrs builds
  • 4ee61e0 Revert "chore: temp delete updater changefile"
  • 06124af publish new versions (#2972)
  • 060219e chore(deps): update dependency @​rollup/plugin-typescript to v12.3.0 (#3067)
  • c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
  • d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
  • cdc7eec chore(deps): update dependency @​rollup/plugin-typescript to v12.2.0 (#3066)
  • 6314b00 chore: temp delete updater changefile
  • Additional commits viewable in compare view

Updates tauri-build from 2.7.1 to 2.7.2

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1296 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1092 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate: rustls-pemfile
Version: 2.2.0
Warning: unmaintained
Title: rustls-pemfile is unmaintained
Date: 2025-11-28
ID: RUSTSEC-2025-0134
URL: https://rustsec.org/advisories/RUSTSEC-2025-0134

Crate: rustybuzz
Version: 0.20.1
Warning: unmaintained
Title: rustybuzz is unmaintained
Date: 2026-07-11
ID: RUSTSEC-2026-0206
URL: https://rustsec.org/advisories/RUSTSEC-2026-0206

Crate: ttf-parser
Version: 0.25.1
Warning: unmaintained
Title: ttf-parser is unmaintained
Date: 2026-06-28
ID: RUSTSEC-2026-0192
URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found
</tr></table>

... (truncated)

Commits
  • 5b23c82 apply version updates (#16243)
  • 05354a8 chore(deps): update swift-rs to 1.0.9
  • c48e1ca fix(ios): make @_cdecl entry points public so release builds link on Xcode ...
  • eeeaa0f fix(nsis): block downgrades in silent, passive and update modes (#16230)
  • 0204f6f fix(api): keep Channel messages flowing after the handler throws (#16244)
  • 7fcd8a7 fix(ci): retry switching to the Android webview context in e2e (#16239)
  • fd319dd chore(deps): update base64 to 0.23
  • 413cbdb Apply Version Updates From Current Changes (#16213)
  • 587ae48 chore: disable CODEOWNERS file (#16236)
  • a98038e fix: menu append doesn't take options like MenuItemOptions (#16235)
  • Additional commits viewable in compare view

Updates midir from 0.11.0 to 0.11.1

Changelog

Sourced from midir's changelog.

[0.11.1] 2026-10-10

Commits
  • db32c3f Prepare release of 0.11.1 (#209)
  • 4fe3641 winrt: Fixes suggested by Microsoft's review (#208)
  • 0ca01d4 winmm: Fixes suggested by Microsoft's review (#207)
  • 117506b winmm: return InvalidPort from port_name() for disconnected ports (#204)
  • 3f9cbbc Stop the CoreMIDI input handler reading past a truncated packet (#206)
  • 8d00b6f fix(android): stop re-delivering the last message when receive() returns 0 (#...
  • e5a60b5 Allow alsa 0.12 (bump upper bound to <0.13) (#199)
  • See full diff in compare view

Updates proptest from 1.11.0 to 1.12.0

Commits
  • 70cf37d Merge pull request #675 from proptest-rs/prep-1.12
  • 729e0ff prepare next releases and fix panic handling
  • 28c1fad Merge pull request #664 from Expyron/main
  • 5ddd9a4 Merge pull request #668 from toddATavail/fix-fork-persisted-failure
  • a6a9ac7 Merge pull request #673 from glaziermag/fix-book-deploy
  • d57d88b Replace rand_chacha with chacha20
  • 9411213 Deploy the book on pushes to main
  • 1719745 fix: terminate the fork replay when a persisted failure fails
  • 0f55b7a test: a persisted failure in a forked test must be reported
  • 4b0594e Merge pull request #669 from proptest-rs/no-fail-fast
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.2` | `1.53.3` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.27.0` | `1.28.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.62` | `0.8.63` |
| [nusb](https://github.com/kevinmehall/nusb) | `0.2.7` | `0.2.8` |
| [tauri](https://github.com/tauri-apps/tauri) | `2.12.1` | `2.12.2` |
| [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.5.2` | `2.5.4` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.7.1` | `2.7.2` |
| [midir](https://github.com/Boddlnagg/midir) | `0.11.0` | `0.11.1` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` |



Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `tokio` from 1.53.2 to 1.53.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.2...tokio-1.53.3)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

Updates `uuid` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.27.0...v1.28.0)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `zerocopy` from 0.8.62 to 0.8.63
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.62...v0.8.63)

Updates `nusb` from 0.2.7 to 0.2.8
- [Release notes](https://github.com/kevinmehall/nusb/releases)
- [Commits](kevinmehall/nusb@v0.2.7...v0.2.8)

Updates `tauri` from 2.12.1 to 2.12.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.12.1...tauri-v2.12.2)

Updates `tauri-plugin-single-instance` from 2.5.2 to 2.5.4
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.5.2...http-v2.5.4)

Updates `tauri-build` from 2.7.1 to 2.7.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.7.1...tauri-build-v2.7.2)

Updates `midir` from 0.11.0 to 0.11.1
- [Changelog](https://github.com/Boddlnagg/midir/blob/master/CHANGELOG.md)
- [Commits](Boddlnagg/midir@v0.11.0...v0.11.1)

Updates `proptest` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.11.0...v1.12.0)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: tokio
  dependency-version: 1.53.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: zerocopy
  dependency-version: 0.8.63
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: nusb
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: tauri
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: tauri-plugin-single-instance
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: tauri-build
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: midir
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: proptest
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 78f90629-5153-4518-ab77-ba5e3dbf6a93

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@hyperb1iss
hyperb1iss merged commit 7cf1ed2 into main Oct 19, 2026
125 of 127 checks passed
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-87f588d92f branch October 19, 2026 20:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant