Skip to content

chore(deps): bump the all-deps group with 5 updates #2129

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore(deps): bump the all-deps group with 5 updates #2129

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Bumps the all-deps group with 5 updates:

Package From To
rand_core 0.10.0-rc-2 0.10.0-rc-3
scrypt 0.12.0-rc.6 0.12.0-rc.7
itoa 1.0.15 1.0.16
ryu 1.0.20 1.0.21
toml_parser 1.0.4 1.0.6+spec-1.1.0

Updates rand_core from 0.10.0-rc-2 to 0.10.0-rc-3

Commits
  • 583060f Merge pull request #39 from rust-random/version
  • 2f5d34e Bump crate version to 0.10.0-rc-3
  • 29b1630 Merge pull request #38 from rust-random/utils
  • d89a82f Use MCG in doc example
  • 52994fa CHANGELOG
  • 50813a7 Drop bounds on <G as Generator>::Output for impl Debug for BlockRng<G>
  • 18c9b9f Utils: add doc example
  • 6b63c44 Rename mod le -> utils
  • 8f95967 Inline fill_via_chunks
  • 3c168c1 Replace fns read_u{32,64}_into with read_words
  • Additional commits viewable in compare view

Updates scrypt from 0.12.0-rc.6 to 0.12.0-rc.7

Commits

Updates itoa from 1.0.15 to 1.0.16

Release notes

Sourced from itoa's releases.

1.0.16

  • Synchronize algorithm improvements from libcore (#65)
Commits
  • 4c18677 Release 1.0.16
  • 2e6134d Exclude benchmark dependencies from being compiled by miri
  • 2c7311b Merge pull request #65 from dtolnay/up
  • bb76a9c Update libcore implementation links
  • 83539d1 Ignore cast_lossless pedantic clippy lint
  • 4394758 Update benchmark chart
  • 997a4ef Write last digit without table lookup
  • bae1746 Copy fast divmod100 from zmij
  • 1087e9d Remove DECIMAL_PAIRS bounds checks
  • 200d064 Delete unreachable_unchecked hints
  • Additional commits viewable in compare view

Updates ryu from 1.0.20 to 1.0.21

Release notes

Sourced from ryu's releases.

1.0.21

  • Documentation improvements
Commits
  • aaa2f8d Release 1.0.21
  • 03f8148 Remove supported compiler version statement from readme
  • b9121ee Update actions/upload-artifact@v5 -> v6
  • 56ac8ca Update actions/upload-artifact@v4 -> v5
  • 23a8290 Raise minimum tested compiler to rust 1.86
  • 7d5e43a Switch from cargo bench to criterion
  • e537df3 Benchmark using e from consts module
  • 6199a2b Switch from test::black_box to std::hint::black_box
  • 221e3d4 Resolve uninlined_format_args pedantic clippy lint
  • c667b72 Update to 2021 edition
  • Additional commits viewable in compare view

Updates toml_parser from 1.0.4 to 1.0.6+spec-1.1.0

Commits
  • e32c7a2 chore: Release
  • df1c328 docs: Update changelog
  • b826cf4 feat(edit)!: Allow set_position(None) (#1080)
  • 8043f20 feat(edit)!: Allow set_position(None)
  • a02c0db feat: Support TOML 1.1 (#1079)
  • 5cfb838 feat(edit): Support TOML 1.1
  • 1eb4d60 feat(toml): Support TOML 1.1
  • 695d788 feat(edit)!: Multi-line inline tables with trailing commas
  • cc4f7ac feat(toml): Multi-line inline tables with trailing commas
  • 539f8c1 feat(datetime): Make seconds optional
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all-deps group with 5 updates
981f9ad 
Bumps the all-deps group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [rand_core](https://github.com/rust-random/rand_core) | `0.10.0-rc-2` | `0.10.0-rc-3` |
| [scrypt](https://github.com/RustCrypto/password-hashes) | `0.12.0-rc.6` | `0.12.0-rc.7` |
| [itoa](https://github.com/dtolnay/itoa) | `1.0.15` | `1.0.16` |
| [ryu](https://github.com/dtolnay/ryu) | `1.0.20` | `1.0.21` |
| [toml_parser](https://github.com/toml-rs/toml) | `1.0.4` | `1.0.6+spec-1.1.0` |


Updates `rand_core` from 0.10.0-rc-2 to 0.10.0-rc-3
- [Release notes](https://github.com/rust-random/rand_core/releases)
- [Changelog](https://github.com/rust-random/rand_core/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand_core@v0.10.0-rc-2...v0.10.0-rc-3)

Updates `scrypt` from 0.12.0-rc.6 to 0.12.0-rc.7
- [Commits](RustCrypto/password-hashes@scrypt-v0.12.0-rc.6...scrypt/v0.12.0-rc.7)

Updates `itoa` from 1.0.15 to 1.0.16
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](dtolnay/itoa@1.0.15...1.0.16)

Updates `ryu` from 1.0.20 to 1.0.21
- [Release notes](https://github.com/dtolnay/ryu/releases)
- [Commits](dtolnay/ryu@1.0.20...1.0.21)

Updates `toml_parser` from 1.0.4 to 1.0.6+spec-1.1.0
- [Commits](toml-rs/toml@toml_parser-v1.0.4...toml_parser-v1.0.6)

---
updated-dependencies:
- dependency-name: rand_core
  dependency-version: 0.10.0-rc-3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: scrypt
  dependency-version: 0.12.0-rc.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: itoa
  dependency-version: 1.0.16
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: ryu
  dependency-version: 1.0.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: toml_parser
  dependency-version: 1.0.6+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Dec 22, 2025
@baloo
Copy link
Member

baloo commented Dec 23, 2025

This will need to wait for a release of RustCrypto/stream-ciphers#491

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@baloo