Skip to content

cargo(deps): bump the cargo-minor-and-patch group across 1 directory with 13 updates - #288

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-813dfba9a0
Open

cargo(deps): bump the cargo-minor-and-patch group across 1 directory with 13 updates#288
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-813dfba9a0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-and-patch group with 13 updates in the / directory:

Package From To
clap 4.6.4 4.6.6
toml 1.1.4+spec-1.1.0 1.1.5+spec-1.1.0
mail-parser 0.11.5 0.11.8
uuid 1.24.0 1.26.0
tokio-rustls 0.26.4 0.26.5
rustls 0.23.42 0.23.44
lettre 0.11.22 0.11.23
hickory-resolver 0.26.1 0.26.2
psl 2.1.223 2.1.231
ureq 3.3.0 3.4.1
flate2 1.1.9 1.1.10
lol_html 3.0.0 3.0.1
rcgen 0.14.8 0.14.10

Updates clap from 4.6.4 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • Additional commits viewable in compare view

Updates toml from 1.1.4+spec-1.1.0 to 1.1.5+spec-1.1.0

Commits
  • e93ed4e chore: Release
  • d23436d docs: Update changelog
  • 151afcd fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat (#1211)
  • 26a4050 fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat
  • 232f136 chore(deps): Update Prek to v0.5.1 (#1209)
  • 9ee4b4e chore(deps): Update crate-ci/typos digest to 4d9c206 (#1208)
  • 525f352 chore(deps): Update crate-ci/committed digest to 800a04e (#1207)
  • 46043ed chore(deps): Update crate-ci/typos digest to 4d9c206
  • c00e894 chore(deps): Update crate-ci/committed digest to 800a04e
  • 1ae0158 chore(deps): Update Prek to v0.5.0 (#1205)
  • Additional commits viewable in compare view

Updates mail-parser from 0.11.5 to 0.11.8

Changelog

Sourced from mail-parser's changelog.

mail-parser 0.11.8

  • Fix: HeaderName breaks rkyv serialization from <= 0.11.6.

mail-parser 0.11.7

  • Added more IANA headers.
  • Fix: DateTime::to_timezone corrupting non-whole-hour offsets by storing leftover seconds in tz_minute (#158)

mail-parser 0.11.6

  • Fix: Missing whitespace between a quoted name and a following encoded word (#150)
  • Fix: panic when a Received header ends with a folded line (#155)
  • Fix: Received header tokens losing their last character at the end of the input, retaining folding characters, and failing to parse a clause folded before its value (#155)
  • Fix: Multi-word display names followed by a comment no longer produce a fabricated address (#153)
Commits

Updates uuid from 1.24.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits
  • cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
  • 34e4f49 don't test macros under miri
  • d9e7242 update nightly used for miri
  • ec16819 prepare for 1.26.0 release
  • 162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
  • 97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
  • 302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
  • b7ccde8 prepare for 1.25.0 release
  • c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
  • 8c198b2 Add a serde::bytes module that encodes as a byte string
  • Additional commits viewable in compare view

Updates tokio-rustls from 0.26.4 to 0.26.5

Release notes

Sourced from tokio-rustls's releases.

0.26.5

What's Changed

Commits
  • f8832d2 Bump version to 0.26.5
  • c0fad2f return more data at once from TlsStream::poll_read (#198)
  • edc7306 build(deps): bump futures-util from 0.3.33 to 0.3.34
  • baeadaa build(deps): bump rcgen from 0.14.8 to 0.14.9
  • 1e138ad build(deps): bump taiki-e/cache-cargo-install-action from 3.0.7 to 3.0.8
  • b4ecff6 build(deps): bump taiki-e/cache-cargo-install-action from 3 to 3.0.7
  • f47a689 build(deps): bump rustls from 0.23.42 to 0.23.43
  • e25578e build(deps): bump tokio from 1.53.0 to 1.53.1
  • d2a6d98 server: add rustdoc hinting towards timeout wrapping
  • c2e9b4a client: add rustdoc hinting towards timeout wrapping
  • Additional commits viewable in compare view

Updates rustls from 0.23.42 to 0.23.44

Commits
  • 64ad386 Bump version to 0.23.44
  • 1efbf66 bogo: remove PostQuantum setup
  • e78162f aws-lc-rs: add support for ML-DSA signatures
  • d880772 bogo: extract Options::provider() helper
  • 87201d6 bogo: force all callers to get provider from Options
  • 93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
  • bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
  • eb57688 tls12: require known signature algorithm
  • e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
  • 06a546d bogo: take latest
  • Additional commits viewable in compare view

Updates lettre from 0.11.22 to 0.11.23

Release notes

Sourced from lettre's releases.

v0.11.23

Bug Fixes

  • Separate lines of multiline SMTP error replies (#1153)

Misc

  • Upgrade base64 to v0.23 (#1152)

#1152: lettre/lettre#1152 #1153: lettre/lettre#1153

Changelog

Sourced from lettre's changelog.

v0.11.23 (2026-08-03)

Bug Fixes

  • Separate lines of multiline SMTP error replies (#1153)

Misc

  • Upgrade base64 to v0.23 (#1152)

#1152: lettre/lettre#1152 #1153: lettre/lettre#1153

Commits
  • eb6136a Prepare v0.11.23
  • 859b5a6 fix(transport-smtp): separate lines of multiline error replies
  • c692519 style: fix clippy::useless_borrows_in_formatting
  • 5306fdd build(deps): upgrade base64 to v0.23
  • 6a63173 build(deps): upgrade semver compatible Rust dependencies
  • 80782a0 build(deps): upgrade semver compatible Rust dependencies
  • See full diff in compare view

Updates hickory-resolver from 0.26.1 to 0.26.2

Release notes

Sourced from hickory-resolver's releases.

v0.26.2

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in parsers. Other issues were related to UDP spoofing defenses, caching issues, and general DNS protocol correctness issues.

This is our first post-vulnpocalypse release, and most of these vulnerabilities were discovered through LLM-based workflows. The sheer volume of reports has been a challenge for our volunteer maintainers.

Resolved advisories:

Special thanks go out to @​qifan-sailboat and Palo Alto Networks for their research and for reporting the bulk of these vulnerabilities. Thanks to @​ATinyShoe, @​kirk-baird, @​thesmartshadow, @​BeaCox, @​jpds, @​N0zoM1z0, and @​JasonPap for reporting vulnerabilities as well.

If your organization is interested in coordinated disclosure of future security vulnerabilities, please contact @​djc for commercial support.

What's Changed

... (truncated)

Commits
  • 48323ef Bump version to 0.26.2
  • ccd6952 Only follow one CNAME record from each response
  • c04ad2b Better distinguish NODATA response and wildcards
  • 64b4291 Add test for bogus wildcard expansion
  • 478998b proto: constrain peer-controlled allocation sizes
  • 8392769 resolver: avoid caching empty nameserver pools
  • e2d21d8 Replace use of SOA name with NSEC3 record parents
  • 84fa8ab Check for correct zone name in covering NSEC3s too
  • 09803ba Look for correct zone name in matching NSEC3s
  • 26f45d3 Rename Nsec3RecordPair to Nsec3RecordInfo
  • Additional commits viewable in compare view

Updates psl from 2.1.223 to 2.1.231

Commits

Updates ureq from 3.3.0 to 3.4.1

Changelog

Sourced from ureq's changelog.

3.4.1

  • Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
  • Do not pool connections with unconsumed buffered input #1198
  • Fix timeout budgets restarting and applying to later phases #1194
  • Complete TLS handshake during connect so timeout_connect covers it #1193
  • Speed up read_json for responses with a known, small body size #1191

3.4.0

  • Seal RequestExt (technically breaking) #1189
  • Send canonical Basic authentication scheme to CONNECT proxies #1185
  • Establish target TLS through HTTPS CONNECT proxies #1183
  • Update rustls-platform-verifier to 0.7.0 #1174
  • Fix pooled connections never aging out according to max_idle_age #1172
  • Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #1171
  • RequestExt::middleware_config for conf inside middleware #1169
Commits

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates lol_html from 3.0.0 to 3.0.1

Release notes

Sourced from lol_html's releases.

v3.0.1

  • Improved performance of selector matching on deeply nested elements and on stray end tags.
  • Fixed element handlers never running for SVG and MathML integration-point elements when the preceding tag matched no selector.
  • Fixed attribute selectors with an uppercase attribute name: [HREF] silently matched nothing and [HREF=x] was rejected as a namespaced selector.
  • Fixed :nth-of-type() counting custom elements spelled with different ASCII case as distinct types.
Changelog

Sourced from lol_html's changelog.

v3.0.1

  • Improved performance of selector matching on deeply nested elements and on stray end tags.
  • Fixed element handlers never running for SVG and MathML integration-point elements when the preceding tag matched no selector.
  • Fixed attribute selectors with an uppercase attribute name: [HREF] silently matched nothing and [HREF=x] was rejected as a namespaced selector.
  • Fixed :nth-of-type() counting custom elements spelled with different ASCII case as distinct types.
Commits
  • 608cc4a Release v3.0.1.
  • cf6ae5c Match attribute selector names ASCII case-insensitively
  • 87f7987 selectors_vm: make stray end tags and descendant matching linear in depth
  • 633435e Fix selector matching being skipped for consecutive integration-point siblings
  • See full diff in compare view

Updates rcgen from 0.14.8 to 0.14.10

Release notes

Sourced from rcgen's releases.

0.14.10

What's Changed

0.14.9

Previous versions generated DER that is strictly incompatible with the spec, writing an explicit false value for IsCa::ExplicitNoCa where this should be omitted (as it's the default).

What's Changed

Commits
  • f4a3b16 Bump version to 0.14.10
  • dea3d4d Upgrade to botan 0.13
  • 788b093 Upgrade to pem 4
  • 7ce21f4 Take advantage of stable ML-DSA in aws-lc-rs
  • e2dba45 Remove unused RSASSA-PSS signature algorithm
  • 37070de Omit reasonCode unspecified(0) from CRL entry extensions
  • b247a87 Write extensions for certs that only set KeyUsage or CRLDP
  • 85eafdd Reject empty CRL distribution point URIs
  • 3a99b50 Encode CRL invalidityDate as GeneralizedTime
  • 7ca88d2 rcgen: bump version to 0.14.9
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
cargo(deps): bump the cargo-minor-and-patch group across 1 directory …
40917bb 
…with 13 updates

Bumps the cargo-minor-and-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.6` |
| [toml](https://github.com/toml-rs/toml) | `1.1.4+spec-1.1.0` | `1.1.5+spec-1.1.0` |
| [mail-parser](https://github.com/stalwartlabs/mail-parser) | `0.11.5` | `0.11.8` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.0` |
| [tokio-rustls](https://github.com/rustls/tokio-rustls) | `0.26.4` | `0.26.5` |
| [rustls](https://github.com/rustls/rustls) | `0.23.42` | `0.23.44` |
| [lettre](https://github.com/lettre/lettre) | `0.11.22` | `0.11.23` |
| [hickory-resolver](https://github.com/hickory-dns/hickory-dns) | `0.26.1` | `0.26.2` |
| [psl](https://github.com/addr-rs/psl) | `2.1.223` | `2.1.231` |
| [ureq](https://github.com/algesten/ureq) | `3.3.0` | `3.4.1` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |
| [lol_html](https://github.com/cloudflare/lol-html) | `3.0.0` | `3.0.1` |
| [rcgen](https://github.com/rustls/rcgen) | `0.14.8` | `0.14.10` |



Updates `clap` from 4.6.4 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.6)

Updates `toml` from 1.1.4+spec-1.1.0 to 1.1.5+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.4...toml-v1.1.5)

Updates `mail-parser` from 0.11.5 to 0.11.8
- [Release notes](https://github.com/stalwartlabs/mail-parser/releases)
- [Changelog](https://github.com/stalwartlabs/mail-parser/blob/main/CHANGELOG.md)
- [Commits](https://github.com/stalwartlabs/mail-parser/commits)

Updates `uuid` from 1.24.0 to 1.26.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...v1.26.0)

Updates `tokio-rustls` from 0.26.4 to 0.26.5
- [Release notes](https://github.com/rustls/tokio-rustls/releases)
- [Commits](rustls/tokio-rustls@v/0.26.4...v/0.26.5)

Updates `rustls` from 0.23.42 to 0.23.44
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.42...v/0.23.44)

Updates `lettre` from 0.11.22 to 0.11.23
- [Release notes](https://github.com/lettre/lettre/releases)
- [Changelog](https://github.com/lettre/lettre/blob/master/CHANGELOG.md)
- [Commits](lettre/lettre@v0.11.22...v0.11.23)

Updates `hickory-resolver` from 0.26.1 to 0.26.2
- [Release notes](https://github.com/hickory-dns/hickory-dns/releases)
- [Changelog](https://github.com/hickory-dns/hickory-dns/blob/main/CHANGELOG.md)
- [Commits](hickory-dns/hickory-dns@v0.26.1...v0.26.2)

Updates `psl` from 2.1.223 to 2.1.231
- [Release notes](https://github.com/addr-rs/psl/releases)
- [Commits](addr-rs/psl@v2.1.223...v2.1.231)

Updates `ureq` from 3.3.0 to 3.4.1
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@3.3.0...3.4.1)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

Updates `lol_html` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/cloudflare/lol-html/releases)
- [Changelog](https://github.com/cloudflare/lol-html/blob/main/CHANGELOG.md)
- [Commits](cloudflare/lol-html@v3.0.0...v3.0.1)

Updates `rcgen` from 0.14.8 to 0.14.10
- [Release notes](https://github.com/rustls/rcgen/releases)
- [Commits](rustls/rcgen@v0.14.8...v0.14.10)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: toml
  dependency-version: 1.1.5+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: mail-parser
  dependency-version: 0.11.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: uuid
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: tokio-rustls
  dependency-version: 0.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: rustls
  dependency-version: 0.23.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: lettre
  dependency-version: 0.11.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: hickory-resolver
  dependency-version: 0.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: psl
  dependency-version: 2.1.231
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: ureq
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: lol_html
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: rcgen
  dependency-version: 0.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants