Skip to content

build(deps): bump the cargo group across 1 directory with 5 updates - #3395

Merged
kixelated merged 2 commits into
mainfrom
dependabot/cargo/cargo-a91d2afc15
Sep 4, 2026
Merged

build(deps): bump the cargo group across 1 directory with 5 updates#3395
kixelated merged 2 commits into
mainfrom
dependabot/cargo/cargo-a91d2afc15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 5 updates in the / directory:

Package From To
web-transport-wasm 0.5.10 0.6.0
rubato 4.0.0 5.0.0
webm-iterable 0.6.4 0.7.0
dns-lookup 3.0.1 4.0.1
str0m 0.22.0 0.23.1

Updates web-transport-wasm from 0.5.10 to 0.6.0

Commits
  • bba6900 chore: bump crate versions by hand (#384)
  • ab5001c feat(qmux): report RTT and delivery rate from Session::stats() (#380)
  • 791f555 fix(wasm): report None when no subprotocol was negotiated (#381)
  • 48195f6 fix(quiche): keep per-stream teardown out of the connection (#379)
  • 37cafb4 chore(deps-dev): bump the bun group with 4 updates (#377)
  • 7b61627 build(nix): pin wasm-bindgen-cli to the version the workspace links (#376)
  • 819c46a fix(wasm): resubscribe to ready instead of waiting on closed (#374)
  • e825225 fix(wasm): set rustdocflags so cargo doc and doctests compile (#373)
  • a13c7b8 refactor(quiche)!: move the priority inversion into ez (#372)
  • 2450296 refactor(wasm)!: implement the poll traits natively (#369)
  • Additional commits viewable in compare view

Updates rubato from 4.0.0 to 5.0.0

Release notes

Sourced from rubato's releases.

v5.0.0

What's Changed

Full Changelog: HEnquist/rubato@v4.0.0...v5.0.0

Commits
  • 6b72d0f Merge pull request #139 from HEnquist/next5
  • ee15e98 Fix the process_all_into_buffer doctest without default features
  • 1fbcf3d Simplify and tidy up the examples
  • 3c3c254 Process the last frames in the ramp example
  • 8f85c2d Read whole samples in the examples
  • 3249382 Address review comments
  • 1116c1a Update the examples section of the README
  • ed77619 Parse example arguments with clap
  • 4406cf0 Drop two redundant examples
  • 03950dc Fix clippy warnings
  • Additional commits viewable in compare view

Updates webm-iterable from 0.6.4 to 0.7.0

Commits

Updates dns-lookup from 3.0.1 to 4.0.1

Commits

Updates str0m from 0.22.0 to 0.23.1

Changelog

Sourced from str0m's changelog.

0.23.1

  • Guard SRTP/SRTCP and RTCP parsing against malformed input #1029

0.23.0

  • Respond to RRTR with DLRR #1022
  • Use a local SSRC as the originator of outgoing RRTR reports #1027
  • Add DirectApi::send_pli_feedback to send a PLI with a chosen sender SSRC #1025
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [web-transport-wasm](https://github.com/moq-dev/web-transport) | `0.5.10` | `0.6.0` |
| [rubato](https://github.com/HEnquist/rubato) | `4.0.0` | `5.0.0` |
| [webm-iterable](https://github.com/austinleroy/webm-iterable) | `0.6.4` | `0.7.0` |
| [dns-lookup](https://github.com/keeperofdakeys/dns-lookup) | `3.0.1` | `4.0.1` |
| [str0m](https://github.com/algesten/str0m) | `0.22.0` | `0.23.1` |



Updates `web-transport-wasm` from 0.5.10 to 0.6.0
- [Release notes](https://github.com/moq-dev/web-transport/releases)
- [Changelog](https://github.com/moq-dev/web-transport/blob/main/release-plz.toml)
- [Commits](moq-dev/web-transport@web-transport-wasm-v0.5.10...web-transport-wasm-v0.6.0)

Updates `rubato` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/HEnquist/rubato/releases)
- [Commits](HEnquist/rubato@v4.0.0...v5.0.0)

Updates `webm-iterable` from 0.6.4 to 0.7.0
- [Commits](https://github.com/austinleroy/webm-iterable/commits)

Updates `dns-lookup` from 3.0.1 to 4.0.1
- [Commits](keeperofdakeys/dns-lookup@3.0.1...4.0.1)

Updates `str0m` from 0.22.0 to 0.23.1
- [Changelog](https://github.com/algesten/str0m/blob/main/CHANGELOG.md)
- [Commits](algesten/str0m@0.22.0...0.23.1)

---
updated-dependencies:
- dependency-name: web-transport-wasm
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rubato
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: webm-iterable
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: dns-lookup
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: str0m
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 4, 2026
Forward numeric stream error codes through both browser transport adapters and keep the feature-only getrandom dependency exempt from workspace shear checks.

Co-Authored-By: GPT-5 <noreply@openai.com>

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: efc81a8ad0

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread rs/moq-rtc/Cargo.toml
moq-net = { workspace = true }
reqwest = { workspace = true, features = ["rustls"] }
str0m = "0.22"
str0m = "0.23"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Route the breaking str0m bump through dev

When this main-based commit is released as another moq-rtc 0.2.x, changing str0m from 0.22 to 0.23 changes the crate identity of types exposed by pub use str0m and by public Error payloads. Existing embedders that pass or match 0.22 types therefore stop compiling even though they requested a compatible moq-rtc update; the crate's own documentation explicitly classifies this bump as breaking, so it needs to be based on dev or deferred until a breaking release rather than landed on main.

AGENTS.md reference: AGENTS.md:L224-L226

Useful? React with 👍 / 👎.

Comment thread rs/moq-audio/Cargo.toml
# Fixed-capacity SPSC rings keep buffer handoff lock-free on the capture callback.
ringbuf = { version = "0.5.1", optional = true }
rubato = { version = "4.0", default-features = false }
rubato = { version = "5.0", default-features = false }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep both resampler stacks on one rubato version

With moq-audio's default features, playback enables fixed-resample 0.12.1, whose locked dependency remains rubato 4.0.0; this line independently pulls rubato 5.0.0 and the audioadapter 5 stack while the lockfile retains the v4 stack. Normal native builds consequently build two generations of the resampler dependencies even though the nearby manifest comment says fixed-resample wraps the same rubato, adding avoidable compile and binary footprint. Align the direct dependency with fixed-resample, or upgrade both together.

Useful? React with 👍 / 👎.

@kixelated
kixelated merged commit e23330c into main Sep 4, 2026
5 checks passed
@kixelated
kixelated deleted the dependabot/cargo/cargo-a91d2afc15 branch September 4, 2026 19:56
@moq-bot moq-bot Bot mentioned this pull request Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant