Skip to content

deps: bump the rust-minor group across 1 directory with 3 updates#57

Merged
nitecon merged 1 commit into
mainfrom
dependabot/cargo/rust-minor-2a551ffd17
May 30, 2026
Merged

deps: bump the rust-minor group across 1 directory with 3 updates#57
nitecon merged 1 commit into
mainfrom
dependabot/cargo/rust-minor-2a551ffd17

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Bumps the rust-minor group with 3 updates in the / directory: zerocopy, hyper and webpki-roots.

Updates zerocopy from 0.8.48 to 0.8.50

Commits

Updates hyper from 1.9.0 to 1.10.1

Release notes

Sourced from hyper's releases.

v1.10.1

What's Changed

Full Changelog: hyperium/hyper@v1.10.0...v1.10.1

v1.10.0

Features

Bug Fixes

  • http1:
  • http2:
    • do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)
    • reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Refactors, chores, et al

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.10.1 (2026-05-29)

Bug Fixes

  • http1: fix busy loop when peer half-closes and open body (#4086) (c6cb906f, closes #4085)

v1.10.0 (2026-05-27)

Bug Fixes

  • http1:
  • http2:
    • do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)
    • reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Features

Commits

Updates webpki-roots from 1.0.6 to 1.0.7

Release notes

Sourced from webpki-roots's releases.

1.0.7

For their April 2026 root store changes, Mozilla has made more changes than usual:

These changes are part of Mozilla’s ongoing root store maintenance under the Mozilla Root Store Policy (MRSP), including §7.4 (Root CA Lifecycles) and §7.5.3 (Transition Plans). They reflect a combination of lifecycle-based transitions, CA operator requests, and alignment with intended certificate usage, including retiring older or less suitable root certificates, enforcing clear separation of trust purposes (e.g., TLS vs. S/MIME), and reducing unnecessary trust surface in the Web PKI ecosystem. Collectively, these actions help to ensure that root certificates are relied upon only for their intended and actively maintained use cases, or are retired in accordance with established distrust timelines.

This removes:

  • CN=Certigna O=Dhimyotis
  • CN=COMODO Certification Authority O=COMODO CA Limited
  • CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=FIRMAPROFESIONAL CA ROOT-A WEB O=Firmaprofesional SA
  • CN=GTS Root R2 O=Google Trust Services LLC
  • CN=QuoVadis Root CA 2 O=QuoVadis Limited
  • CN=QuoVadis Root CA 3 O=QuoVadis Limited
  • CN=Secure Global CA O=SecureTrust Corporation
  • CN=SecureTrust CA O=SecureTrust Corporation
  • CN=SwissSign Gold CA - G2 O=SwissSign AG
  • CN=TeliaSonera Root CA v1 O=TeliaSonera
  • CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc.
  • CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc.
  • CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc.
  • O=certSIGN OU=certSIGN ROOT CA

See their announcement for more details.

What's Changed

Full Changelog: rustls/webpki-roots@v/1.0.6...v/1.0.7

Commits

@dependabot dependabot Bot added dependencies rust Rust / Cargo dependency or code change labels May 29, 2026
Bumps the rust-minor group with 3 updates in the / directory: [zerocopy](https://github.com/google/zerocopy), [hyper](https://github.com/hyperium/hyper) and [webpki-roots](https://github.com/rustls/webpki-roots).


Updates `zerocopy` from 0.8.48 to 0.8.50
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/zerocopy/commits)

Updates `hyper` from 1.9.0 to 1.10.1
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.9.0...v1.10.1)

Updates `webpki-roots` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/1.0.6...v/1.0.7)

---
updated-dependencies:
- dependency-name: hyper
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor
- dependency-name: webpki-roots
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: zerocopy
  dependency-version: 0.8.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/rust-minor-2a551ffd17 branch from 119a17a to 0b8d962 Compare May 29, 2026 20:37
@nitecon
Copy link
Copy Markdown
Owner

nitecon commented May 30, 2026

[Eventic] Holding auto-merge of this green group bump.

This PR's checks are green and it's mergeable, but the base branch main is currently CI-red on two pre-existing clippy lints (collapsible-if and manual_is_multiple_of), surfaced after an MSRV bump to 1.88. This PR's branch is still at MSRV 1.85, which is why its own clippy passes; merging would apply only the Cargo bumps and leave main red on the same lints.

No action needed on this PR — it will auto-merge once the main CI issue is resolved.

@nitecon nitecon merged commit d5f2dca into main May 30, 2026
19 checks passed
@dependabot dependabot Bot deleted the dependabot/cargo/rust-minor-2a551ffd17 branch May 30, 2026 00:54
nitecon added a commit that referenced this pull request May 30, 2026
…bump (#58)

The CI stable toolchain advanced 1.94.1 -> 1.96.0, surfacing new
default-deny clippy lints workspace-wide. Because CI runs
`cargo clippy --all-targets --all-features -- -D warnings`, ANY lint
fails the whole job, so main went red on Clippy / Clippy Strict / the
Release clippy gate after PR #57 merged. There is no minimal subset that
greens CI — all lints must be resolved.

All changes are mechanical and behavior-preserving (`cargo clippy --fix`
+ `cargo fmt`):
  - collapsible_if: nested `if`/`if let` collapsed into `&&`/`&& let` chains
  - manual_is_multiple_of: `x % y == 0` -> `x.is_multiple_of(y)`
  - is_some_and / is_none_or tidy-ups

Validated locally under the exact CI toolchain (1.96.0):
  - cargo clippy --all-targets --all-features -- -D warnings : clean
  - cargo fmt --all -- --check : clean
  - cargo test --workspace --lib --bins : all green (470+ tests)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies rust Rust / Cargo dependency or code change

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant