build(deps): bump the rust-dependencies group with 23 updates by dependabot[bot] · Pull Request #52 · rust-proxy/wind

dependabot · 2026-07-01T21:18:25Z

Bumps the rust-dependencies group with 23 updates:

Package	From	To
quinn	`ce60e5b`	`b87bf72`
quinn-proto	`ce60e5b`	`b87bf72`
bytes	`1.11.1`	`1.12.0`
socks5-proto	`0.3.3`	`0.4.1`
socks5-server	`0.8.3`	`0.10.1`
uuid	`1.23.2`	`1.23.4`
rustls	`0.23.40`	`0.23.41`
aws-lc-rs	`1.17.0`	`1.17.1`
anyhow	`1.0.102`	`1.0.103`
time	`0.3.47`	`0.3.53`
chrono	`0.4.44`	`0.4.45`
tikv-jemallocator	`0.6.1`	`0.7.0`
snafu	`0.8.9`	`0.9.1`
arc-swap	`1.9.1`	`1.9.2`
sha2	`0.10.9`	`0.11.0`
rcgen	`0.13.2`	`0.14.8`
regex	`1.12.3`	`1.12.4`
rand	`0.9.4`	`0.10.1`
http	`1.4.1`	`1.4.2`
quinn-udp	`0.5.14`	`0.6.1`
memmap2	`0.9.10`	`0.9.11`
ctor	`0.6.3`	`1.0.7`
crossfire	`3.1.16`	`3.1.18`

Updates quinn from ce60e5b to b87bf72

Commits

b87bf72 removed previous BBR implementation
80806fa added BBRv3 algorithm, including MaxFilter from Kathleen Nichols
df940ac modified Pacer such that congestion controller metrics can be used to adjust ...
75ec8c3 added more granular packet events for congestion controllers, necessary for s...
76020ba fix(quinn): handle overdue timers without polling the async timer
485f9b6 refactor(quinn): use let-else in drive_timer
d4fc3ef quinn-proto: drop Initials silently when saturated
1b17cc7 build(deps): bump log from 0.4.31 to 0.4.32
00b4b74 build(deps): bump libfuzzer-sys from 0.4.12 to 0.4.13
00cc7c4 Use binary search in ArrayRangeSet
Additional commits viewable in compare view

Updates quinn-proto from ce60e5b to b87bf72

Commits

b87bf72 removed previous BBR implementation
80806fa added BBRv3 algorithm, including MaxFilter from Kathleen Nichols
df940ac modified Pacer such that congestion controller metrics can be used to adjust ...
75ec8c3 added more granular packet events for congestion controllers, necessary for s...
76020ba fix(quinn): handle overdue timers without polling the async timer
485f9b6 refactor(quinn): use let-else in drive_timer
d4fc3ef quinn-proto: drop Initials silently when saturated
1b17cc7 build(deps): bump log from 0.4.31 to 0.4.32
00b4b74 build(deps): bump libfuzzer-sys from 0.4.12 to 0.4.13
00cc7c4 Use binary search in ArrayRangeSet
Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

91402ce Release bytes v1.12.0 (#831)
2256e6d chore: add safety comments on unsafe blocks (#827)
245adff Pass vtable data by value (#826)
00cc5ff Implement BytesMut::extend_from_within (#818)
5b79d31 Merge tag 'v1.11.1'
804ee6d Make try_unsplit method public (#746)
fd426ca Exclude development scripts from published package (#810)
b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
94e4291 Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capac...
acd1e0f Fix get_int if nbytes is zero (#806)
See full diff in compare view

Updates socks5-proto from 0.3.3 to 0.4.1

Commits

See full diff in compare view

Updates socks5-server from 0.8.3 to 0.10.1

Commits

See full diff in compare view

Updates uuid from 1.23.2 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

Commits

3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
cba53d0 prepare for 1.23.4 release
e347af4 Merge pull request #889 from frostyplanet/main
e9bf55c doc: Fix broken link warnings
5351af4 doc: Enable feature flag label for docs.rs
1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
c9619f6 fix up name of fuzz script in readme
20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
62232ca prepare for 1.23.3 release
2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.41

Commits

642a103 ci: drop Taplo job
752c144 Drop nightly clippy tests
8d8611a Fix new clippy::useless-borrows-in-formatting
ebf3297 Fix new clippy::manual_clear
46808e7 ci: sync cargo-check-external-types nightly
041a8d2 Cargo deny: allow RUSTSEC-2026-0173
62e220e Take semver-compatible dependency updates
3c14696 Upgrade to hickory-resolver 0.26
848a2cc connect-tests: delete ech.rs
5ce9cac Bump version to 0.23.41
Additional commits viewable in compare view

Updates aws-lc-rs from 1.17.0 to 1.17.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

[Certificate #5314](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314) (static)

[Certificate #5298](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298) (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

Support linking against a system-installed AWS-LC:

Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @justsmth in aws/aws-lc-rs#1129

Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @justsmth in aws/aws-lc-rs#1143

Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @justsmth in aws/aws-lc-rs#1156

Gate system AWS-LC on a declared minimum version by @justsmth in aws/aws-lc-rs#1152

Implement Send/Sync for RSA hazmat encryption key types by @justsmth in aws/aws-lc-rs#1128

Add Salt::none constructor for HKDF by @justsmth in aws/aws-lc-rs#1135

Add wasm32-unknown-emscripten build and test support by @justsmth in aws/aws-lc-rs#1059

Report specific key rejection reasons for invalid RSA key sizes by @justsmth in aws/aws-lc-rs#1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @jakemas in aws/aws-lc#3195 and aws/aws-lc#3219

Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

Fix memcmp_check build failure when CFLAGS contains LTO flags by @justsmth in aws/aws-lc-rs#1134

Fix missing poly_Rq_mul symbol in Linux x86_64 build by @Lebei2046 in aws/aws-lc-rs#1130

Apply -ffile-prefix-map to jitterentropy builder by @justsmth in aws/aws-lc-rs#1139

Select compiler flag dialect by driver mode, not target ABI by @justsmth in aws/aws-lc-rs#1147

Issues Being Closed

RSA hazmat encryption key types missing Send/Sync -- aws/aws-lc-rs#1125

RSA key rejection reports generic Unspecified for invalid key sizes -- aws/aws-lc-rs#1082

Build failure when CFLAGS contains LTO flags (Windows/clang) -- aws/aws-lc-rs#1132

cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- aws/aws-lc-rs#1146

Support system-provided AWS-LC library -- aws/aws-lc-rs#936

cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- aws/aws-lc-rs#1108

jitterentropy embeds absolute paths to files -- aws/aws-lc-rs#1137

Other Merged PRs

Add ML-DSA aarch64 native assembly to CC builder scripts by @jakemas in aws/aws-lc-rs#1113

Clarify HKDF info concatenation and encoding responsibility by @justsmth in aws/aws-lc-rs#1145

CI: support zig cross compile for arm32 by @justsmth in aws/aws-lc-rs#1124

fix(clippy): fix truncate warnings by @justsmth in aws/aws-lc-rs#1126

ci: replace dtolnay/rust-toolchain with direct rustup invocations by @justsmth in aws/aws-lc-rs#1133

... (truncated)

Commits

741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
00e016a Bump actions/checkout from 6 to 7 (#1157)
e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
26838da rsa: report specific key rejection for invalid sizes (#1153)
Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates time from 0.3.47 to 0.3.53

Release notes

Sourced from time's releases.

v0.3.53

See the changelog for details.

v0.3.52

See the changelog for details.

v0.3.51

See the changelog for details.

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result in a loss of precision and even invalid values.

The date! macro could previously create an invalid value that would then panic at compile time. The macro now emits a proper error instead.

When parsing an invalid format description, an edge case would inadvertently panic. This now returns an error as intended.

Added

Support default values when parsing

0.3.51 [2026-06-22]

Fixed

time compiles with macros enabled. This version is otherwise identical to v0.3.50.

0.3.50 [2026-06-22] [YANKED]

This version was yanked because it would not compile when the macros feature was enabled.

Added

Timestamp type

Fixed

[year] in a runtime-parsed version 3 format description when the large-dates feature is not enabled now succeeds. This previously failed due to a missing #[cfg].

Performance

Further gains when parsing with the non-deprecated parts of the RFC 2822 well-known format

Gains when formatting with the ISO 8601 well-known format

Date arithmetic is improved in common situations

0.3.49 [2026-06-13]

... (truncated)

Commits

0ae2f84 v0.3.53 release
cea8c96 Avoid issue with cookie crate temporarily
55e1f2b Require private type to properly seal traits
7cf4780 v0.3.52 release
0e5b04f Fix trusted publishing workflow
6e4140a Support default values when parsing
10ac36a Add more doctests to Timestamp
6b0d468 Restore lexer depth on the unclosed-bracket error path
0abc06d Add trusted publishing
43cf0c0 Preferentially group shards by target
Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in chronotope/chrono#1787

tz_data: fix tzdata locations on Android by @caruschalalamove in chronotope/chrono#1789

Commits

1703382 Prepare 0.4.45 release
881f9ab tz_data: fix tzdata locations on Android
f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
120686c Bump codecov/codecov-action from 5 to 6
See full diff in compare view

Updates tikv-jemallocator from 0.6.1 to 0.7.0

Release notes

Sourced from tikv-jemallocator's releases.

0.7.0

Reverse order of MAKEFLAGS priority (#152)

Define ALIGNOF_MAX_ALIGN_T for riscv32 (#153)

Remove build directory once build of jemalloc-sys finishes (#119)

Fix cross-compile for tier-3 riscv64a23 target (#141)

sys: support *-windows-gnullvm targets (#150)

Propagate LDFLAGS, if present (#155)

jemalloc-ctl: fix invalid update implementation

add new free ffi

Update jemalloc to 5.3.1 (#161)

Add profiling_libunwind feature (#159)

passthrough cc env/args using native cc features (#158)

Changelog

Sourced from tikv-jemallocator's changelog.

0.7.0 - 2026-05-25

Reverse order of MAKEFLAGS priority (#152)

Define ALIGNOF_MAX_ALIGN_T for riscv32 (#153)

Remove build directory once build of jemalloc-sys finishes (#119)

Fix cross-compile for tier-3 riscv64a23 target (#141)

sys: support *-windows-gnullvm targets (#150)

Propagate LDFLAGS, if present (#155)

jemalloc-ctl: fix invalid update implementation

add new free ffi

Update jemalloc to 5.3.1 (#161)

Add profiling_libunwind feature (#159)

passthrough cc env/args using native cc features (#158)

Commits

0e91291 *: bump 0.7.0 (#164)
e16f89e passthrough cc env/args using native cc features (#158)
3bc06e9 Add profiling_libunwind feature (#159)
c7101ce Update jemalloc to 5.3.1
741a86b enable CI for nightly branch
7e5e78a add new free ffi
1809195 switch to facebook/jemalloc
ccc2bfc jemalloc-ctl: fix invalid update implementation
baae33d Upgrade from macos-13 to macos-15-intel
4400f09 Propagate LDFLAGS, if present
Additional commits viewable in compare view

Updates snafu from 0.8.9 to 0.9.1

Changelog

Sourced from snafu's changelog.

0.9.1 - 2026-05-29

Fixed

Error types that use Self in fields or trait bounds are now supported.

[0.9.0] - 2026-03-02

Added

WhateverLocal is an alternate to Whatever that does not implement or require Send or Sync.

Errors that do not use context selectors (e.g. opaque errors, #[snafu(context(false))] errors, or #[snafu(transparent)] errors) may now be constructed using a generic value when they are annotated with the #[snafu(source(from(generic)))] attribute.

When using the unstable-provider-api feature flag, Report will check if each error provides a Location. When it does, the Location will be appended to the error message.

Fixed

Opaque errors which use const generics with default values are now supported.

Changed

Rust 1.65 is now the minimum supported Rust version. This is a breaking change.

Rust 1.81 is now the default supported Rust version. This is a breaking change.

Whatever implements Send and Sync, allowing it to be sent between threads. This requires that wrapped errors also implement Send and Sync. This is a breaking change.

snafu::Location has been replaced with a type alias to the standard library's Location (specifically a reference to that type: &'static core::panic::Location<'static>). This improves interoperability and access to features. This is a breaking change.

Opaque errors default to allowing construction from any value that implements Into for the wrapped type. The previous behavior can be

... (truncated)

Commits

ff50133 Release 0.9.1
c425b0a Update the changelog
8f50dc7 Merge pull request #556 from legeana/self-error
757eeec Expand Self to the original error type before parsing
1f8e75f Merge pull request #557 from legeana/ui-report
a656885 Fix cargo fmt for Rust 1.95.0
e0a2c25 Update compile-fail's ui/report test for Rust 1.95.0
a658cc6 Merge pull request #554 from jplatte/cargo-feat-cleanup
fa8a8bd Use namespaced dependency activation
9af844a Merge pull request #555 from shepmaster/maint
Additional commits viewable in compare view

Updates arc-swap from 1.9.1 to 1.9.2

Changelog

Sourced from arc-swap's changelog.

1.9.2

Document RefCnt must not panic (#208).

Commits

See full diff in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

ffe0939 Release sha2 0.11.0 (#806)
8991b65 Use the standard order of the [package] section fields (#807)
3d2bc57 sha2: refactor backends (#802)
faa55fb sha3: bump keccak to v0.2 (#803)
d3e6489 sha3 v0.11.0-rc.9 (#801)
bbf6f51 sha2: tweak backend docs (#800)
155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
ed514f2 Use published version of keccak v0.2 (#799)
702bcd8 Migrate to closure-based keccak (#796)
827c043 sha3 v0.11.0-rc.8 (#794)
Additional commits viewable in compare view

Updates rcgen from 0.13.2 to 0.14.8

Release notes

Sourced from rcgen's releases.

0.14.8

What's Changed

Fix incorrect identifier for ML-DSA signature algorithms by @DarkmatterVale in rustls/rcgen#412

Upgrade yasna to 0.6 by @djc in rustls/rcgen#419

Add support for is_ca in CSR Params by @5Dev24 in rustls/rcgen#420

Add support for serializing BasicConstraints in CSR's by @5Dev24 in rustls/rcgen#422

update key_pair to signing_key in README.md by @fakelozic in rustls/rcgen#427

Fix encoding of directoryName constraints by @sfackler in rustls/rcgen#429

0.14.7

What's Changed

Implement From<KeyPair> for PrivateKeyDer<'static> by @LebedevRI in rustls/rcgen#403

update copyright year in LICENSE by @jasmyhigh in rustls/rcgen#407

Add P521-SHA256 and P521-SHA384 signing algorithms by @djc in rustls/rcgen#408

0.14.6

What's Changed

Use private cfg for docs.rs-like builds by @ctz in rustls/rcgen#384

Expand rustdoc for CertificateSigningRequestParams::from_der by @dwhjames in rustls/rcgen#386

Group imports by @iamjpotts in rustls/rcgen#381

examples: add signing new cert using existing ca pem files by @iamjpotts in rustls/rcgen#379

Tweak CSR parsing errors/documentation by @djc in rustls/rcgen#390

Rename invalid CSR signature error variant by @djc in rustls/rcgen#393

chore: fix some typos in comments by @black5box in rustls/rcgen#395

ci: sync cargo-check-external-types nightly by @cpu in rustls/rcgen#399

Forward selected crypto backend to x509-parser by @djc in rustls/rcgen#398

0.14.5

Implement SigningKey for &impl SigningKey to make Issuer more broadly useful.

What's Changed

Forward signing and public key data through references by @djc in rustls/rcgen#380

0.14.4

What's Changed

Upgrade botan to 0.12 by @djc in rustls/rcgen#377

Upgrade x509-parser to 0.18 by @djc in rustls/rcgen#376

Add unstable support for ML-DSA algorithms by @djc in rustls/rcgen#374

0.14.3

What's Changed

docs: fix typo in PKCS_RSA_SHA384 doc comment by @Bravo555 in rustls/rcgen#367

Fix regression in key usage purpose encoding by @djc in rustls/rcgen#369

... (truncated)

Commits

a70f083 Bump version to 0.14.8
a32fdb1 Fix encoding of directoryName constraints
7111a79 update key_pair to signing_key
10664c9 Take semver-compatible dependency updates
0ec4d09 Add testing of CSR serializing basic constraints
5f94ef9 Add support for serializing BasicConstraints in CSR's
fb835c1 Add writing basic constraints logic
0cf161d Bump codecov/codecov-action from 5 to 6
4909041 Add testing of CSR Params parsing Basic Constraints variants
6675a94 Add support for is_ca in CSR Params
Additional commits viewable in compare view

Updates regex from 1.12.3 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

#1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.

Commits

7b96fdc 1.12.4
7b89cf0 deps: update to regex-syntax 0.8.11
1401679 regex-syntax-0.8.11
d709000 changelog: 1.12.4
9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
a7f2ff6 docs: clarify regex-lite word boundaries
2c7b172 docs: clarify unsupported Anchored::Pattern searches
839d16b regex-syntax-0.8.10
c4865a0 syntax: fix negation handling in HIR translation
d8761c0 cargo: also include benches
Additional commits viewable in compare view

Updates rand from 0.9.4 to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

Document panic behavior of make_rng and add #[track_caller] (#1761)

Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).

Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)

Use Edition 2024 and MSRV 1.85 (#1653)

Let Fill be implemented for element types, not sliceable types (#1652)

Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)

Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)

Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)

Remove Clone support for StdRng, ReseedingRng (#1677)

Use postcard instead of bincode to test the serde feature (#1693)

Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)

Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)

Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)

Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)

Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)

Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

Removed ReseedingRng (#1722)

Removed unused feature "nightly" (#1732)

Removed feature small_rng (#1732)

#1632: rust-random/rand#1632 #1642: rust-random/rand#1642 #1649: rust-random/rand#1649 #1652: rust-random/rand#1652 #1653: rust-random/rand#1653 #1659: rust-random/rand#1659 #1665: rust-random/rand#1665 #1669: rust-random/rand#1669 #1674: rust-random/rand#1674 #16...
Description has been truncated

Bumps the rust-dependencies group with 23 updates: | Package | From | To | | --- | --- | --- | | [quinn](https://github.com/Tipuch/quinn) | ``ce60e5b`` | ``b87bf72`` | | [quinn-proto](https://github.com/Tipuch/quinn) | ``ce60e5b`` | ``b87bf72`` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.0` | | [socks5-proto](https://github.com/EAimTY/socks5-server) | `0.3.3` | `0.4.1` | | [socks5-server](https://github.com/EAimTY/socks5-server) | `0.8.3` | `0.10.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.2` | `1.23.4` | | [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.41` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.17.0` | `1.17.1` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [time](https://github.com/time-rs/time) | `0.3.47` | `0.3.53` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [tikv-jemallocator](https://github.com/tikv/jemallocator) | `0.6.1` | `0.7.0` | | [snafu](https://github.com/shepmaster/snafu) | `0.8.9` | `0.9.1` | | [arc-swap](https://github.com/vorner/arc-swap) | `1.9.1` | `1.9.2` | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` | | [rcgen](https://github.com/rustls/rcgen) | `0.13.2` | `0.14.8` | | [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.12.4` | | [rand](https://github.com/rust-random/rand) | `0.9.4` | `0.10.1` | | [http](https://github.com/hyperium/http) | `1.4.1` | `1.4.2` | | [quinn-udp](https://github.com/quinn-rs/quinn) | `0.5.14` | `0.6.1` | | [memmap2](https://github.com/RazrFalcon/memmap2-rs) | `0.9.10` | `0.9.11` | | [ctor](https://github.com/mmastrac/linktime) | `0.6.3` | `1.0.7` | | [crossfire](https://github.com/frostyplanet/crossfire-rs) | `3.1.16` | `3.1.18` | Updates `quinn` from `ce60e5b` to `b87bf72` - [Commits](Tipuch/quinn@ce60e5b...b87bf72) Updates `quinn-proto` from `ce60e5b` to `b87bf72` - [Commits](Tipuch/quinn@ce60e5b...b87bf72) Updates `bytes` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.0) Updates `socks5-proto` from 0.3.3 to 0.4.1 - [Commits](https://github.com/EAimTY/socks5-server/commits) Updates `socks5-server` from 0.8.3 to 0.10.1 - [Commits](https://github.com/EAimTY/socks5-server/commits) Updates `uuid` from 1.23.2 to 1.23.4 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.2...v1.23.4) Updates `rustls` from 0.23.40 to 0.23.41 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.40...v/0.23.41) Updates `aws-lc-rs` from 1.17.0 to 1.17.1 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.17.0...v1.17.1) Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `time` from 0.3.47 to 0.3.53 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.47...v0.3.53) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `tikv-jemallocator` from 0.6.1 to 0.7.0 - [Release notes](https://github.com/tikv/jemallocator/releases) - [Changelog](https://github.com/tikv/jemallocator/blob/main/CHANGELOG.md) - [Commits](tikv/jemallocator@0.6.1...0.7.0) Updates `snafu` from 0.8.9 to 0.9.1 - [Changelog](https://github.com/shepmaster/snafu/blob/main/CHANGELOG.md) - [Commits](shepmaster/snafu@0.8.9...0.9.1) Updates `arc-swap` from 1.9.1 to 1.9.2 - [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md) - [Commits](https://github.com/vorner/arc-swap/commits) Updates `sha2` from 0.10.9 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) Updates `rcgen` from 0.13.2 to 0.14.8 - [Release notes](https://github.com/rustls/rcgen/releases) - [Commits](rustls/rcgen@v0.13.2...v0.14.8) Updates `regex` from 1.12.3 to 1.12.4 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.3...1.12.4) Updates `rand` from 0.9.4 to 0.10.1 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.9.4...0.10.1) Updates `http` from 1.4.1 to 1.4.2 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.1...v1.4.2) Updates `quinn-udp` from 0.5.14 to 0.6.1 - [Release notes](https://github.com/quinn-rs/quinn/releases) - [Commits](quinn-rs/quinn@quinn-udp-0.5.14...quinn-udp-0.6.1) Updates `memmap2` from 0.9.10 to 0.9.11 - [Changelog](https://github.com/RazrFalcon/memmap2-rs/blob/master/CHANGELOG.md) - [Commits](RazrFalcon/memmap2-rs@v0.9.10...v0.9.11) Updates `ctor` from 0.6.3 to 1.0.7 - [Release notes](https://github.com/mmastrac/linktime/releases) - [Changelog](https://github.com/mmastrac/linktime/blob/master/CHANGELOG.md) - [Commits](https://github.com/mmastrac/linktime/commits/ctor-1.0.7) Updates `crossfire` from 3.1.16 to 3.1.18 - [Release notes](https://github.com/frostyplanet/crossfire-rs/releases) - [Changelog](https://github.com/frostyplanet/crossfire-rs/blob/master/CHANGELOG.md) - [Commits](frostyplanet/crossfire-rs@v3.1.16...v3.1.18) --- updated-dependencies: - dependency-name: quinn dependency-version: b87bf72a644f42592ebb64caf4303f86d260a538 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: quinn-proto dependency-version: b87bf72a644f42592ebb64caf4303f86d260a538 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: bytes dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: socks5-proto dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: socks5-server dependency-version: 0.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: uuid dependency-version: 1.23.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rustls dependency-version: 0.23.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: aws-lc-rs dependency-version: 1.17.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: time dependency-version: 0.3.53 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tikv-jemallocator dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: snafu dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: arc-swap dependency-version: 1.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: rcgen dependency-version: 0.14.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: regex dependency-version: 1.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rand dependency-version: 0.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: http dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: quinn-udp dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: memmap2 dependency-version: 0.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: ctor dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: crossfire dependency-version: 3.1.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

codspeed-hq · 2026-07-02T07:09:13Z

Merging this PR will not alter performance

✅ 22 untouched benchmarks
⏩ 11 skipped benchmarks¹

_{Comparing dependabot/cargo/rust-dependencies-353802c036 (c6fc077) with main (e9fee22)}

11 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 1, 2026

update

c6fc077

Itsusinn merged commit 3232b45 into main Jul 2, 2026
4 checks passed

Itsusinn deleted the dependabot/cargo/rust-dependencies-353802c036 branch July 2, 2026 06:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the rust-dependencies group with 23 updates#52

build(deps): bump the rust-dependencies group with 23 updates#52
Itsusinn merged 2 commits into
mainfrom
dependabot/cargo/rust-dependencies-353802c036

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

Uh oh!

codspeed-hq Bot commented Jul 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

v1.23.4

What's Changed

New Contributors

v1.23.3

What's Changed

aws-lc-rs v1.17.1

What's Changed

Upstream AWS-LC (v5.1.0)

Build Improvements

Issues Being Closed

Other Merged PRs

1.0.103

v0.3.53

v0.3.52

v0.3.51

v0.3.49

v0.3.48

0.3.53 [2026-07-01]

0.3.52 [2026-06-30]

Fixed

Added

0.3.51 [2026-06-22]

Fixed

0.3.50 [2026-06-22] [YANKED]

Added

Fixed

Performance

0.3.49 [2026-06-13]

0.4.45

What's Changed

0.7.0

0.7.0 - 2026-05-25

0.9.1 - 2026-05-29

Fixed

[0.9.0] - 2026-03-02

Added

Fixed

Changed

1.9.2

0.14.8

What's Changed

0.14.7

What's Changed

0.14.6

What's Changed

0.14.5

What's Changed

0.14.4

What's Changed

0.14.3

What's Changed

1.12.4 (2025-06-09)

[0.10.1] — 2026-02-11

Changes

[0.10.0] - 2026-02-08

Changes

Additions

Removals

Uh oh!

Uh oh!

codspeed-hq Bot commented Jul 2, 2026

Merging this PR will not alter performance

Footnotes

Uh oh!

Reviewers

Assignees