Bump the rust-dependencies group with 25 updates #1488

dependabot · 2025-10-06T08:52:13Z

Bumps the rust-dependencies group with 25 updates:

Package	From	To
base64	`0.13.1`	`0.22.1`
bitflags	`1.3.2`	`2.9.0`
flate2	`1.1.2`	`1.1.4`
rand	`0.8.5`	`0.9.1`
serde_with	`3.14.1`	`3.15.0`
socket2	`0.5.10`	`0.6.0`
thiserror	`1.0.69`	`2.0.12`
webpki-roots	`0.26.11`	`1.0.0`
aws-credential-types	`1.2.6`	`1.2.7`
pbkdf2	`0.11.0`	`0.12.2`
windows-sys	`0.60.2`	`0.61.0`
aws-lc-sys	`0.32.1`	`0.32.2`
aws-runtime	`1.5.10`	`1.5.11`
aws-sdk-sts	`1.86.0`	`1.87.0`
aws-smithy-http-client	`1.1.1`	`1.1.2`
cc	`1.2.39`	`1.2.40`
find-msvc-tools	`0.1.2`	`0.1.3`
lock_api	`0.4.13`	`0.4.14`
parking_lot	`0.12.4`	`0.12.5`
parking_lot_core	`0.9.11`	`0.9.12`
redox_syscall	`0.5.17`	`0.5.18`
rustls-webpki	`0.103.6`	`0.103.7`
serde_with_macros	`3.14.1`	`3.15.0`
typenum	`1.18.0`	`1.19.0`
zeroize	`1.8.1`	`1.8.2`

Updates base64 from 0.13.1 to 0.22.1

Changelog

Sourced from base64's changelog.

0.22.1

Correct the symbols used for the predefined alphabet::BIN_HEX.

0.22.0

DecodeSliceError::OutputSliceTooSmall is now conservative rather than precise. That is, the error will only occur if the decoded output cannot fit, meaning that Engine::decode_slice can now be used with exactly-sized output slices. As part of this, Engine::internal_decode now returns DecodeSliceError instead of DecodeError, but that is not expected to affect any external callers.

DecodeError::InvalidLength now refers specifically to the number of valid symbols being invalid (i.e. len % 4 == 1), rather than just the number of input bytes. This avoids confusing scenarios when based on interpretation you could make a case for either InvalidLength or InvalidByte being appropriate.

Decoding is somewhat faster (5-10%)

0.21.7

Support getting an alphabet's contents as a str via Alphabet::as_str()

0.21.6

Improved introductory documentation and example

0.21.5

Add Debug and Clone impls for the general purpose Engine

0.21.4

Make encoded_len const, allowing the creation of arrays sized to encode compile-time-known data lengths

0.21.3

Implement source instead of cause on Error types

Roll back MSRV to 1.48.0 so Debian can continue to live in a time warp

Slightly faster chunked encoding for short inputs

Decrease binary size

0.21.2

Rollback MSRV to 1.57.0 -- only dev dependencies need 1.60, not the main code

0.21.1

Remove the possibility of panicking during decoded length calculations

DecoderReader no longer sometimes erroneously ignores padding #226

Breaking changes

Engine.internal_decode return type changed

Update MSRV to 1.60.0

0.21.0

... (truncated)

Commits

e144006 v0.22.1
64cca59 Merge pull request #271 from JobanSD/patch-1
838355e Correct BinHex 4.0 alphabet according to specifications
bf15ccf Merge pull request #270 from marshallpierce/mp/clippy
fc6aabe Appease clippy
9a518a2 Merge pull request #267 from bdura/patch-1
d96c80f Merge branch 'marshallpierce:master' into patch-1
5d70ba7 Merge pull request #269 from marshallpierce/mp/decode-precisely
efb6c00 Release notes
2b91084 Add some tests to boost coverage
Additional commits viewable in compare view

Updates bitflags from 1.3.2 to 2.9.0

Release notes

Sourced from bitflags's releases.

2.9.0

What's Changed

Flags trait: add clear(&mut self) method by @wysiwys in bitflags/bitflags#437

Fix up UI tests by @KodrAus in bitflags/bitflags#438

Prepare for 2.9.0 release by @KodrAus in bitflags/bitflags#439

Full Changelog: bitflags/bitflags@2.8.0...2.9.0

2.8.0

What's Changed

feat(core): Add bitflags_match macro for bitflag matching by @YuniqueUnic in bitflags/bitflags#423

Finalize bitflags_match by @KodrAus in bitflags/bitflags#431

Prepare for 2.8.0 release by @KodrAus in bitflags/bitflags#432

New Contributors

@YuniqueUnic made their first contribution in bitflags/bitflags#423

Full Changelog: bitflags/bitflags@2.7.0...2.8.0

2.7.0

What's Changed

Fix clippy::doc_lazy_continuation lints by @waywardmonkeys in bitflags/bitflags#414

Run clippy on extra features in CI. by @waywardmonkeys in bitflags/bitflags#415

Fix CI: trybuild refresh, allow some clippy restrictions. by @waywardmonkeys in bitflags/bitflags#417

Update zerocopy version in example by @KodrAus in bitflags/bitflags#422

Add method to check if unknown bits are set by @wysiwys in bitflags/bitflags#426

Update error messages by @KodrAus in bitflags/bitflags#427

Add truncate(&mut self) method to unset unknown bits by @wysiwys in bitflags/bitflags#428

Update error messages by @KodrAus in bitflags/bitflags#429

Prepare for 2.7.0 release by @KodrAus in bitflags/bitflags#430

New Contributors

@wysiwys made their first contribution in bitflags/bitflags#426

Full Changelog: bitflags/bitflags@2.6.0...2.7.0

2.6.0

What's Changed

Sync CHANGELOG.md with github release notes by @dextero in bitflags/bitflags#402

Update error messages and zerocopy by @KodrAus in bitflags/bitflags#403

Bump minimum declared versions of dependencies by @dextero in bitflags/bitflags#404

chore(deps): bump serde_derive and bytemuck versions by @joshka in bitflags/bitflags#405

add OSFF Scorecard workflow by @KodrAus in bitflags/bitflags#396

Update stderr messages by @KodrAus in bitflags/bitflags#408

Fix typo by @waywardmonkeys in bitflags/bitflags#410

Allow specifying outer attributes in impl mode by @KodrAus in bitflags/bitflags#411

Prepare for 2.6.0 release by @KodrAus in bitflags/bitflags#412

New Contributors

... (truncated)

Changelog

Sourced from bitflags's changelog.

2.9.0

What's Changed

Flags trait: add clear(&mut self) method by @wysiwys in bitflags/bitflags#437

Fix up UI tests by @KodrAus in bitflags/bitflags#438

Full Changelog: bitflags/bitflags@2.8.0...2.9.0

2.8.0

What's Changed

feat(core): Add bitflags_match macro for bitflag matching by @YuniqueUnic in bitflags/bitflags#423

Finalize bitflags_match by @KodrAus in bitflags/bitflags#431

New Contributors

@YuniqueUnic made their first contribution in bitflags/bitflags#423

Full Changelog: bitflags/bitflags@2.7.0...2.8.0

2.7.0

What's Changed

Fix clippy::doc_lazy_continuation lints by @waywardmonkeys in bitflags/bitflags#414

Run clippy on extra features in CI. by @waywardmonkeys in bitflags/bitflags#415

Fix CI: trybuild refresh, allow some clippy restrictions. by @waywardmonkeys in bitflags/bitflags#417

Update zerocopy version in example by @KodrAus in bitflags/bitflags#422

Add method to check if unknown bits are set by @wysiwys in bitflags/bitflags#426

Update error messages by @KodrAus in bitflags/bitflags#427

Add truncate(&mut self) method to unset unknown bits by @wysiwys in bitflags/bitflags#428

Update error messages by @KodrAus in bitflags/bitflags#429

New Contributors

@wysiwys made their first contribution in bitflags/bitflags#426

Full Changelog: bitflags/bitflags@2.6.0...2.7.0

2.6.0

What's Changed

Sync CHANGELOG.md with github release notes by @dextero in bitflags/bitflags#402

Update error messages and zerocopy by @KodrAus in bitflags/bitflags#403

Bump minimum declared versions of dependencies by @dextero in bitflags/bitflags#404

chore(deps): bump serde_derive and bytemuck versions by @joshka in bitflags/bitflags#405

add OSFF Scorecard workflow by @KodrAus in bitflags/bitflags#396

Update stderr messages by @KodrAus in bitflags/bitflags#408

Fix typo by @waywardmonkeys in bitflags/bitflags#410

Allow specifying outer attributes in impl mode by @KodrAus in bitflags/bitflags#411

New Contributors

... (truncated)

Commits

e197bf5 Merge pull request #439 from KodrAus/cargo/2.9.0
8df6e80 prepare for 2.9.0 release
e92f0ae Merge pull request #438 from KodrAus/fix/ui-tests
226ff75 fix up UI tests
2170a26 Merge pull request #437 from wysiwys/wysiwys/add-clear-method
76dde58 add tests for clear() trait method
ce5d420 add clear() method to trait
9e45d36 Merge pull request #434 from bitflags/KodrAus-patch-1
617645a pin checkout action for miri job
2c836f2 Merge pull request #433 from bitflags/ci/remove-scorecard
Additional commits viewable in compare view

Updates flate2 from 1.1.2 to 1.1.4

Release notes

Sourced from flate2's releases.

1.1.4

What's Changed

use zlibVersion() instead of a const for the version by @folkertdev in rust-lang/flate2-rs#491

Switch from adler2 to simd-adler32 crate when using miniz_oxide backend by @Shnatsel in rust-lang/flate2-rs#492

Correct documentation typo by @fintelia in rust-lang/flate2-rs#495

Use partial flushes with miniz_oxide backend by @fintelia in rust-lang/flate2-rs#496

Undo introducing straight up incorrect documentation by @Shnatsel in rust-lang/flate2-rs#497

Update cloudflare-zlib-sys crate by @jongiddy in rust-lang/flate2-rs#503

Add (de)compress_uninit that accepts &[MaybeUninit<u8>] by @NobodyXu in rust-lang/flate2-rs#502

bump the patch level for a new release by @Byron in rust-lang/flate2-rs#504

New Contributors

@fintelia made their first contribution in rust-lang/flate2-rs#495

Full Changelog: rust-lang/flate2-rs@1.1.2...1.1.4

1.1.3

What's Changed

use zlibVersion() instead of a const for the version by @folkertdev in rust-lang/flate2-rs#491

Switch from adler2 to simd-adler32 crate when using miniz_oxide backend by @Shnatsel in rust-lang/flate2-rs#492

Correct documentation typo by @fintelia in rust-lang/flate2-rs#495

Use partial flushes with miniz_oxide backend by @fintelia in rust-lang/flate2-rs#496

Undo introducing straight up incorrect documentation by @Shnatsel in rust-lang/flate2-rs#497

Update cloudflare-zlib-sys crate by @jongiddy in rust-lang/flate2-rs#503

Add (de)compress_uninit that accepts &[MaybeUninit<u8>] by @NobodyXu in rust-lang/flate2-rs#502

bump the patch level for a new release by @Byron in rust-lang/flate2-rs#504

New Contributors

@fintelia made their first contribution in rust-lang/flate2-rs#495

Full Changelog: rust-lang/flate2-rs@1.1.2...1.1.3

Commits

ac412e9 Merge pull request #506 from NobodyXu/patch-1
bf0315b Release flste2 1.1.4
350de28 Merge pull request #505 from NobodyXu/patch-1
29552c7 Fix docs.rs build
3be6590 Merge pull request #504 from Byron/release
7ad1bad bump the patch level for a new release
3cae7da Merge pull request #502 from NobodyXu/patch-1
ee3d877 Add (de)compress_uninit impl for uninit buffer
b9afa93 Merge pull request #503 from jongiddy/update-cloudflare-zlib
cfd60be Update cloudflare-zlib-sys crate
Additional commits viewable in compare view

Updates rand from 0.8.5 to 0.9.1

Changelog

Sourced from rand's changelog.

[0.9.1] - 2025-04-17

Security and unsafe

Revise "not a crypto library" policy again (#1565)

Remove zerocopy dependency from rand (#1579)

Fixes

Fix feature simd_support for recent nightly rust (#1586)

Changes

Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

Add rand::distr::Alphabetic distribution. (#1587)

Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

Policy: "rand is not a crypto library" (#1514)

Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)

Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version

Update to rand_core v0.9.0 (#1558)

Features

Support std feature without getrandom or rand_chacha (#1354)

Enable feature small_rng by default (#1455)

Remove implicit feature rand_chacha; use std_rng instead. (#1473)

Rename feature serde1 to serde (#1477)

Rename feature getrandom to os_rng (#1537)

Add feature thread_rng (#1547)

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read (#1267)

Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)

Add traits TryRngCore, TryCryptoRng (#1424, #1499)

Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)

Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)

Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)

Remove fn rand::random() from the prelude (#1506)

Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)

Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)

Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)

Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)

Annotate panicking methods with #[track_caller] (#1442, #1447)

... (truncated)

Commits

ec6d5c0 Prepare rand_core v0.9.1 (#1591)
6a06056 rand_core: introduce an UnwrapMut wrapper (#1589)
8929123 Add Alphabetic distribution (#1587)
06b1642 Remove unnecessary underscore from `impl<T, const N: usize> Distribution<[T; ...
49d76cd rename extract to extract_lane (#1586)
e0a70fd Change to use array::from_fn in Distribution\<[T; N]> for StandardUniform ...
0bc3f65 Move rand distr (#1577)
2677c49 Revise "not a crypto library" policy and SECURITY.md (#1565)
bfd1826 SeedableRng docs: add note on (lack of) reproducibility (#1572)
c01aee7 Fix some links (#1571)
Additional commits viewable in compare view

Updates serde_with from 3.14.1 to 3.15.0

Release notes

Sourced from serde_with's releases.

serde_with v3.15.0

Added
Added error inspection to VecSkipError and MapSkipError by @michelhe (#878) This allows interacting with the previously hidden error, for example for logging. Checkout the newly added example to both types.
Allow documenting the types generated by serde_conv!. The serde_conv! macro now acceps outer attributes before the optional visibility modifier. This allow adding doc comments in the shape of #[doc = "..."] or any other attributes, such as lint modifiers.
serde_conv!(
    #[doc = "Serialize bools as string"]
    #[allow(dead_code)]
    pub BoolAsString,
    bool,
    |x: &bool| ::std::string::ToString::to_string(x),
    |x: ::std::string::String| x.parse()
);
Add support for hashbrown v0.16 (#877)

This extends the existing support for hashbrown v0.14 and v0.15 to the newly released version.
Changed

Bump MSRV to 1.76, since that is required for toml dev-dependency.

Commits

ea38dce Bump version to 3.15.0 (#892)
a3da8e6 Bump version to 3.15.0
c36e692 Bump dev-dependencies (#891)
ae8466d Bump dev-dependencies
f7337ff Support serde_core and remove dependencies on serde_derive (#889)
c1d73b3 Replace serde with serde_core in all files
320d292 Remove dependency on serde_derive
dca6df8 Remove version-sync crate and reimplement needed functionality with regex and...
6c6e53f Remove version-sync crate and reimplement needed functionality with regex and...
f64ea40 Add support for hashbrown v0.16 (#888)
Additional commits viewable in compare view

Updates socket2 from 0.5.10 to 0.6.0

Changelog

Sourced from socket2's changelog.

0.6.0

Breaking changes

All IPv4 methods now have a _v4 suffix, IPv6 uses _v6. TCP methods have a tcp_ prefix (looked better than a suffix).

Furthermore we removed all types from external libraries (i.e. libc or windows-sys) from the public API, allowing us to update those without breaking the API.

Renamed Socket::freebind_ipv6 to freebind_v6 (rust-lang/socket2#592).

Renamed Socket::freebind to freebind_v4 (rust-lang/socket2#592).

Renamed Socket::original_dst to original_dst_v4 (rust-lang/socket2#592).

Renamed Socket::original_dst_ipv6 to original_dst_v6 (rust-lang/socket2#592).

Bump MSRV to 1.70 (rust-lang/socket2#597).

Use c_int from std::ffi instead of from libc (rust-lang/socket2#599, rust-lang/socket2#595).

SockAddr's methods now accept/return SockAddrStorage instead of sockaddr_storage/SOCKADDR_STORAGE (rust-lang/socket2#576):

new

try_init

as_ptr

as_storage

Add SockFilter, wrapper around libc::sock_filter, argument to Socket::attach_filter (rust-lang/socket2#581).

Various renames of TCP methods on Socket (rust-lang/socket2#592):

keepalive_time -> tcp_keepalive_time

keepalive_interval -> tcp_keepalive_interval

keepalive_retries -> tcp_keepalive_retries

nodelay -> tcp_nodelay

set_nodelay -> set_tcp_nodelay

tcp_mss -> mss

tcp_set_mss -> set_mss

tcp_cork -> cork

tcp_set_cork -> set_cork

tcp_quickack -> quickack

tcp_set_quickack -> set_quickack

thin_linear_timeouts -> tcp_thin_linear_timeouts.

Non-breaking changes

... (truncated)

Commits

See full diff in compare view

Updates thiserror from 1.0.69 to 2.0.12

Release notes

Sourced from thiserror's releases.

2.0.12

Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)

2.0.11

Add feature gate to tests that use std (#409, #410, thanks @Maytha8)

2.0.10

Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @zertosh)

2.0.6

Suppress deprecation warning on generated From impls (#396)

2.0.5

Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @matt-phylum)

2.0.3

Support the same Path field being repeated in both Debug and Display representation in error message (#383)

Improve error message when a format trait used in error message is not implemented by some field (#384)

2.0.2

Fix hang on invalid input inside #[error(...)] attribute (#382)

2.0.1

Support errors that contain a dynamically sized final field (#375)

Improve inference of trait bounds for fields that are interpolated multiple times in an error message (#377)

2.0.0

Breaking changes
Referencing keyword-named fields by a raw identifier like {r#type} inside a format string is no longer accepted; simply use the unraw name like {type} (#347)

This aligns thiserror with the standard library's formatting macros, which gained support for implicit argument capture later than the release of this feature in thiserror 1.x.
#[derive(Error, Debug)]
#[error("... {type} ...")]  // Before: {r#type}
pub struct Error {
    pub r#type: Type,

... (truncated)

Commits

95a5126 Release 2.0.12
76490f7 Merge pull request #413 from dtolnay/elidablelifetime
9f27b76 Ignore elidable_lifetime_names pedantic clippy lint
daf2a6f Resolve some elidable_lifetime_names pedantic clippy lint
5f07160 Point standard library links to stable
6706a51 Convert html links to intra-doc links
2706873 More precise gitignore patterns
70bc20d Remove **/*.rs.bk from project-specific gitignore
0f532e3 Release 2.0.11
3d15543 Merge pull request #410 from dtolnay/testnostd
Additional commits viewable in compare view

Updates webpki-roots from 0.26.11 to 1.0.0

Release notes

Sourced from webpki-roots's releases.

1.0.0

After 51 releases over about nine years, this is the first stable release of the webpki-roots and webpki-root-certs crates.

The 1.0.0 release is functionally equal to the 0.26.10 release. We will make a 0.26.11 release that uses 1.0.0 using the semver trick.

What's Changed

Refine CI workflow triggers by @djc in rustls/webpki-roots#97

Prepare 1.0.0 by @ctz in rustls/webpki-roots#98

Full Changelog: rustls/webpki-roots@v/0.26.10...v/1.0.0

Commits

d37be11 Declare crates as 1.0.0
See full diff in compare view

Updates aws-credential-types from 1.2.6 to 1.2.7

Commits

See full diff in compare view

Updates pbkdf2 from 0.11.0 to 0.12.2

Commits

165f4a8 pbkdf2 v0.12.2 (#443)
cb56812 pbkdf2: use RECOMMENDED_ROUNDS in Default impl (#442)
795c424 argon2: add benchmarks using criterion (#437)
3571f10 argon2: add Params::DEFAULT constant (#439)
b0cc634 scrypt: Update docs for recommended log_n parameter (#435)
c8c1114 password-auth v0.3.0 (#434)
54d68a4 password-auth: derive Eq/PartialEq on *Error (#433)
5e7e8c7 password-auth: rename Error (back) to VerifyError (#432)
58975ef password-auth: fix is_hash_obsolete docs (#431)
2d45c3e password-auth v0.2.0 (#430)
Additional commits viewable in compare view

Updates windows-sys from 0.60.2 to 0.61.0

Release notes

Sourced from windows-sys's releases.

61

Major crate updates:

windows 0.59.0

windows-core 0.59.0

windows-implement 0.59.0

windows-interface 0.59.0

windows-targets 0.53.0

windows_i686_msvc 0.53.0

windows_x86_64_msvc 0.53.0

windows_aarch64_msvc 0.53.0

windows_i686_gnu 0.53.0

windows_x86_64_gnu 0.53.0

windows_i686_gnullvm 0.53.0

windows_x86_64_gnullvm 0.53.0

windows_aarch64_gnullvm 0.53.0

windows-bindgen 0.59.0

windows-registry 0.4.0

windows-result 0.3.0

windows-strings 0.3.0

cppwinrt 0.2.0

Minor crate updates:

windows-version 0.1.2

Excluded:

windows-sys 0.59.0

Things to keep in mind:

The tag/release names no longer map directly to the crate versions, so to find samples for a particular release requires looking at the releases page and finding the release that most recently updated a particular crate.

The windows-bindgen crate includes the major code generation overhaul that brings many improvements - be sure to check out the PR description for more information. The resulting code gen depends on the new version of windows-core and its dependencies, unless you include the --sys option. #3359

The cppwinrt crate constitutes a major update due to streamlining the error handling. #3415

The windows-registry, windows-strings, and windows-result crates are also major version updates since they include small breaking changes.

The windows-targets crate finally receives a major version update, the first in over a year. This is due to #3359 and #3342 potentially introducing breaking changes. Although unlikely, these updates introduced sufficient changes that make it hard to ensure that the windows-targets libs don't break existing code. As we're updating windows-targets anyway, I took the liberty to bump the MSRV to 1.60 - to match the latest version of windows-sys - and remove the old but unused doc macro feature. Both remained for compatibility with very old dependents of the windows-targets crate.

The windows-version crate receives a minor update to update its dependency on the windows-targets crate.

Beyond these specifics, this update is the culmination of around 6 months worth of work on the windows-rs project. The biggest improvements comes from the new code generation engine, but many other improvements are now also available for production. This includes support for many new lints, warnings, and suggestions provided by the Rust toolchain; much smaller code gen thanks to deriving many more traits; more efficient code gen; major improvements to WinRT type system and implementation support; more robust and consistent error handling; stock collection and async support; improved support for class hierarchies; and much more!

In addition to "what's changed" below, check out what's changed for notes for 0.60.0 and 0.59.0 for additional changes that roll up to the crates published as part of this release.

What's Changed

Remove improper_ctypes workaround by @ChrisDenton in microsoft/windows-rs#3296

... (truncated)

Commits

See full diff in compare view

Updates aws-lc-sys from 0.32.1 to 0.32.2

Commits

4b35869 Prepare aws-lc-sys v0.32.2 (#901)
e2c9bc3 Failure when CFLAGS provides -O3 (#900)
cea4296 Adds AES CBC mode no padding (#895)
See full diff in compare view

Updates aws-runtime from 1.5.10 to 1.5.11

Commits

See full diff in compare view

Updates aws-sdk-sts from 1.86.0 to 1.87.0

Commits

See full diff in compare view

Updates aws-smithy-http-client from 1.1.1 to 1.1.2

Commits

See full diff in compare view

Updates cc from 1.2.39 to 1.2.40

Release notes

Sourced from cc's releases.

cc-v1.2.40

Other

Reorder changelog and remove duplicate Unreleased section (#1579)

Prefer clang if linker-plugin-lto specified (#1573)

Fix building for Mac Catalyst (#1577)

Improve ESP microcontroller targets (#1574)

Changelog

Sourced from cc's changelog.

1.2.40 - 2025-10-03

Other

Reorder changelog and remove duplicate Unreleased section (#1579)

Prefer clang if linker-plugin-lto specified (#1573)

Fix building for Mac Catalyst (#1577)

Improve ESP microcontroller targets (#1574)

Commits

1ca8b2a chore: release (#1583)
6fb2a8f Reorder changelog and remove duplicate Unreleased section (#1579)
bcc5a38 Prefer clang if linker-plugin-lto specified (#1573)
89fb94c Fix building for Mac Catalyst (#1577)

Bumps the rust-dependencies group with 25 updates: | Package | From | To | | --- | --- | --- | | [base64](https://github.com/marshallpierce/rust-base64) | `0.13.1` | `0.22.1` | | [bitflags](https://github.com/bitflags/bitflags) | `1.3.2` | `2.9.0` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.2` | `1.1.4` | | [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.1` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.14.1` | `3.15.0` | | [socket2](https://github.com/rust-lang/socket2) | `0.5.10` | `0.6.0` | | [thiserror](https://github.com/dtolnay/thiserror) | `1.0.69` | `2.0.12` | | [webpki-roots](https://github.com/rustls/webpki-roots) | `0.26.11` | `1.0.0` | | [aws-credential-types](https://github.com/smithy-lang/smithy-rs) | `1.2.6` | `1.2.7` | | [pbkdf2](https://github.com/RustCrypto/password-hashes) | `0.11.0` | `0.12.2` | | [windows-sys](https://github.com/microsoft/windows-rs) | `0.60.2` | `0.61.0` | | [aws-lc-sys](https://github.com/aws/aws-lc-rs) | `0.32.1` | `0.32.2` | | [aws-runtime](https://github.com/smithy-lang/smithy-rs) | `1.5.10` | `1.5.11` | | [aws-sdk-sts](https://github.com/awslabs/aws-sdk-rust) | `1.86.0` | `1.87.0` | | [aws-smithy-http-client](https://github.com/smithy-lang/smithy-rs) | `1.1.1` | `1.1.2` | | [cc](https://github.com/rust-lang/cc-rs) | `1.2.39` | `1.2.40` | | [find-msvc-tools](https://github.com/rust-lang/cc-rs) | `0.1.2` | `0.1.3` | | [lock_api](https://github.com/Amanieu/parking_lot) | `0.4.13` | `0.4.14` | | [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.4` | `0.12.5` | | [parking_lot_core](https://github.com/Amanieu/parking_lot) | `0.9.11` | `0.9.12` | | redox_syscall | `0.5.17` | `0.5.18` | | [rustls-webpki](https://github.com/rustls/webpki) | `0.103.6` | `0.103.7` | | [serde_with_macros](https://github.com/jonasbb/serde_with) | `3.14.1` | `3.15.0` | | [typenum](https://github.com/paholg/typenum) | `1.18.0` | `1.19.0` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.1` | `1.8.2` | Updates `base64` from 0.13.1 to 0.22.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.13.1...v0.22.1) Updates `bitflags` from 1.3.2 to 2.9.0 - [Release notes](https://github.com/bitflags/bitflags/releases) - [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md) - [Commits](bitflags/bitflags@1.3.2...2.9.0) Updates `flate2` from 1.1.2 to 1.1.4 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.2...1.1.4) Updates `rand` from 0.8.5 to 0.9.1 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.8.5...rand_core-0.9.1) Updates `serde_with` from 3.14.1 to 3.15.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.14.1...v3.15.0) Updates `socket2` from 0.5.10 to 0.6.0 - [Release notes](https://github.com/rust-lang/socket2/releases) - [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-lang/socket2/commits) Updates `thiserror` from 1.0.69 to 2.0.12 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@1.0.69...2.0.12) Updates `webpki-roots` from 0.26.11 to 1.0.0 - [Release notes](https://github.com/rustls/webpki-roots/releases) - [Commits](rustls/webpki-roots@v/0.26.11...v/1.0.0) Updates `aws-credential-types` from 1.2.6 to 1.2.7 - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) Updates `pbkdf2` from 0.11.0 to 0.12.2 - [Commits](RustCrypto/password-hashes@pbkdf2-v0.11.0...pbkdf2-v0.12.2) Updates `windows-sys` from 0.60.2 to 0.61.0 - [Release notes](https://github.com/microsoft/windows-rs/releases) - [Commits](https://github.com/microsoft/windows-rs/commits/0.61.0) Updates `aws-lc-sys` from 0.32.1 to 0.32.2 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@aws-lc-sys/v0.32.1...aws-lc-sys/v0.32.2) Updates `aws-runtime` from 1.5.10 to 1.5.11 - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) Updates `aws-sdk-sts` from 1.86.0 to 1.87.0 - [Release notes](https://github.com/awslabs/aws-sdk-rust/releases) - [Commits](https://github.com/awslabs/aws-sdk-rust/commits) Updates `aws-smithy-http-client` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) Updates `cc` from 1.2.39 to 1.2.40 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@cc-v1.2.39...cc-v1.2.40) Updates `find-msvc-tools` from 0.1.2 to 0.1.3 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@find-msvc-tools-v0.1.2...find-msvc-tools-v0.1.3) Updates `lock_api` from 0.4.13 to 0.4.14 - [Release notes](https://github.com/Amanieu/parking_lot/releases) - [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md) - [Commits](Amanieu/parking_lot@lock_api-v0.4.13...lock_api-v0.4.14) Updates `parking_lot` from 0.12.4 to 0.12.5 - [Release notes](https://github.com/Amanieu/parking_lot/releases) - [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md) - [Commits](Amanieu/parking_lot@parking_lot-v0.12.4...parking_lot-v0.12.5) Updates `parking_lot_core` from 0.9.11 to 0.9.12 - [Release notes](https://github.com/Amanieu/parking_lot/releases) - [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md) - [Commits](Amanieu/parking_lot@parking_lot_core-v0.9.11...parking_lot_core-v0.9.12) Updates `redox_syscall` from 0.5.17 to 0.5.18 Updates `rustls-webpki` from 0.103.6 to 0.103.7 - [Release notes](https://github.com/rustls/webpki/releases) - [Commits](rustls/webpki@v/0.103.6...v/0.103.7) Updates `serde_with_macros` from 3.14.1 to 3.15.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.14.1...v3.15.0) Updates `typenum` from 1.18.0 to 1.19.0 - [Release notes](https://github.com/paholg/typenum/releases) - [Changelog](https://github.com/paholg/typenum/blob/main/CHANGELOG.md) - [Commits](paholg/typenum@v1.18.0...v1.19.0) Updates `zeroize` from 1.8.1 to 1.8.2 - [Commits](RustCrypto/utils@zeroize-v1.8.1...zeroize-v1.8.2) --- updated-dependencies: - dependency-name: base64 dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: bitflags dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: flate2 dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rand dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: serde_with dependency-version: 3.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: socket2 dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: thiserror dependency-version: 2.0.12 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: webpki-roots dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: aws-credential-types dependency-version: 1.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: pbkdf2 dependency-version: 0.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: windows-sys dependency-version: 0.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: aws-lc-sys dependency-version: 0.32.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: aws-runtime dependency-version: 1.5.11 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: aws-sdk-sts dependency-version: 1.87.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: aws-smithy-http-client dependency-version: 1.1.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: cc dependency-version: 1.2.40 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: find-msvc-tools dependency-version: 0.1.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: lock_api dependency-version: 0.4.14 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: parking_lot dependency-version: 0.12.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: parking_lot_core dependency-version: 0.9.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: redox_syscall dependency-version: 0.5.18 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rustls-webpki dependency-version: 0.103.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: serde_with_macros dependency-version: 3.15.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: typenum dependency-version: 1.19.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: zeroize dependency-version: 1.8.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 6, 2025

dependabot bot requested a review from a team as a code owner October 6, 2025 08:52

dependabot bot requested a review from abr-egn October 6, 2025 08:52

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 6, 2025

abr-egn approved these changes Oct 6, 2025

View reviewed changes

abr-egn merged commit 3bf5ff6 into main Oct 6, 2025
17 of 20 checks passed

dependabot bot deleted the dependabot/cargo/rust-dependencies-bd873c1dbe branch October 6, 2025 13:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the rust-dependencies group with 25 updates #1488

Bump the rust-dependencies group with 25 updates #1488

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025

Uh oh!

Uh oh!

Uh oh!

Bump the rust-dependencies group with 25 updates #1488

Bump the rust-dependencies group with 25 updates #1488

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 6, 2025

0.22.1

0.22.0

0.21.7

0.21.6

0.21.5

0.21.4

0.21.3

0.21.2

0.21.1

Breaking changes

0.21.0

2.9.0

What's Changed

2.8.0

What's Changed

New Contributors

2.7.0

What's Changed

New Contributors

2.6.0

What's Changed

New Contributors

2.9.0

What's Changed

2.8.0

What's Changed

New Contributors

2.7.0

What's Changed

New Contributors

2.6.0

What's Changed

New Contributors

1.1.4

What's Changed

New Contributors

1.1.3

What's Changed

New Contributors

[0.9.1] - 2025-04-17

Security and unsafe

Fixes

Changes

Additions

[0.9.0] - 2025-01-27

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

serde_with v3.15.0

Added

Changed

0.6.0

Breaking changes

Non-breaking changes

2.0.12

2.0.11

2.0.10

2.0.9

2.0.8

2.0.7

2.0.6

2.0.5

2.0.4

2.0.3

2.0.2

2.0.1

2.0.0

Breaking changes

1.0.0

What's Changed

61

What's Changed

cc-v1.2.40