Skip to content

chore(deps): bump the non-arrow group with 6 updates#280

Merged
gadomski merged 1 commit intomainfrom
dependabot/cargo/non-arrow-abe81d4baa
May 5, 2026
Merged

chore(deps): bump the non-arrow group with 6 updates#280
gadomski merged 1 commit intomainfrom
dependabot/cargo/non-arrow-abe81d4baa

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 5, 2026

Bumps the non-arrow group with 6 updates:

Package From To
openssl 0.10.78 0.10.79
rustac 6b5007a c7b1c69
stac 6b5007a c7b1c69
stac-duckdb 6b5007a c7b1c69
stac-io 6b5007a c7b1c69
tokio 1.52.1 1.52.2

Updates openssl from 0.10.78 to 0.10.79

Release notes

Sourced from openssl's releases.

openssl-v0.10.79

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

Commits
  • 649f2d9 Release openssl 0.10.79 and openssl-sys 0.9.115 (#2632)
  • 257f9b2 Fix output buffer overflow for AES key-wrap-with-padding ciphers (#2630)
  • d43e917 Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders (#2631)
  • f46519c Add PkeyCtxRef::set_context_string for ML-DSA (#2629)
  • ad9ae31 Bind OSSL_PARAM_modified and use it for seed_into (#2628)
  • 4e25c9b Fix process abort when verify/PSK callbacks fire after SSL_CTX swap (#2624)
  • 3dd8f42 Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction (#2626)
  • 2c5e5a8 parallelize more builds in CI for cold caches (#2625)
  • 6685591 Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import (#2621)
  • 8f8fdce Drop once_cell in favor of std::sync::{LazyLock, OnceLock} (#2623)
  • Additional commits viewable in compare view

Updates rustac from 6b5007a to c7b1c69

Commits
  • c7b1c69 chore(deps): bump postcss from 8.5.6 to 8.5.12 in /crates/wasm (#1039)
  • 03d0084 chore(deps): bump the github-actions group with 2 updates (#1037)
  • See full diff in compare view

Updates stac from 6b5007a to c7b1c69

Commits
  • c7b1c69 chore(deps): bump postcss from 8.5.6 to 8.5.12 in /crates/wasm (#1039)
  • 03d0084 chore(deps): bump the github-actions group with 2 updates (#1037)
  • See full diff in compare view

Updates stac-duckdb from 6b5007a to c7b1c69

Commits
  • c7b1c69 chore(deps): bump postcss from 8.5.6 to 8.5.12 in /crates/wasm (#1039)
  • 03d0084 chore(deps): bump the github-actions group with 2 updates (#1037)
  • See full diff in compare view

Updates stac-io from 6b5007a to c7b1c69

Commits
  • c7b1c69 chore(deps): bump postcss from 8.5.6 to 8.5.12 in /crates/wasm (#1039)
  • 03d0084 chore(deps): bump the github-actions group with 2 updates (#1037)
  • See full diff in compare view

Updates tokio from 1.52.1 to 1.52.2

Release notes

Sourced from tokio's releases.

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the non-arrow group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.78` | `0.10.79` |
| [rustac](https://github.com/stac-utils/rustac) | ``6b5007a`` | ``c7b1c69`` |
| [stac](https://github.com/stac-utils/rustac) | ``6b5007a`` | ``c7b1c69`` |
| [stac-duckdb](https://github.com/stac-utils/rustac) | ``6b5007a`` | ``c7b1c69`` |
| [stac-io](https://github.com/stac-utils/rustac) | ``6b5007a`` | ``c7b1c69`` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.1` | `1.52.2` |


Updates `openssl` from 0.10.78 to 0.10.79
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79)

Updates `rustac` from `6b5007a` to `c7b1c69`
- [Release notes](https://github.com/stac-utils/rustac/releases)
- [Commits](stac-utils/rustac@6b5007a...c7b1c69)

Updates `stac` from `6b5007a` to `c7b1c69`
- [Release notes](https://github.com/stac-utils/rustac/releases)
- [Commits](stac-utils/rustac@6b5007a...c7b1c69)

Updates `stac-duckdb` from `6b5007a` to `c7b1c69`
- [Release notes](https://github.com/stac-utils/rustac/releases)
- [Commits](stac-utils/rustac@6b5007a...c7b1c69)

Updates `stac-io` from `6b5007a` to `c7b1c69`
- [Release notes](https://github.com/stac-utils/rustac/releases)
- [Commits](stac-utils/rustac@6b5007a...c7b1c69)

Updates `tokio` from 1.52.1 to 1.52.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.1...tokio-1.52.2)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.79
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-arrow
- dependency-name: rustac
  dependency-version: c7b1c6993c7764e39668221c6679de597a6e0285
  dependency-type: direct:production
  dependency-group: non-arrow
- dependency-name: stac
  dependency-version: c7b1c6993c7764e39668221c6679de597a6e0285
  dependency-type: direct:production
  dependency-group: non-arrow
- dependency-name: stac-duckdb
  dependency-version: c7b1c6993c7764e39668221c6679de597a6e0285
  dependency-type: direct:production
  dependency-group: non-arrow
- dependency-name: stac-io
  dependency-version: c7b1c6993c7764e39668221c6679de597a6e0285
  dependency-type: direct:production
  dependency-group: non-arrow
- dependency-name: tokio
  dependency-version: 1.52.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-arrow
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 5, 2026
@gadomski gadomski merged commit 61aae37 into main May 5, 2026
5 checks passed
@gadomski gadomski deleted the dependabot/cargo/non-arrow-abe81d4baa branch May 5, 2026 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant