Skip to content

build(deps): bump the crates group across 1 directory with 21 updates - #3931

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/crates-60af4ef213
Open

build(deps): bump the crates group across 1 directory with 21 updates#3931
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/crates-60af4ef213

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the crates group with 21 updates in the / directory:

Package From To
rust-embed 8.12.0 8.13.0
zip 8.6.0 9.0.5
serde_json 1.0.151 1.0.154
cc 1.6.0 1.8.0
deranged 0.5.8 0.5.9
either 1.18.0 1.19.0
equivalent 1.0.2 1.0.3
find-msvc-tools 0.1.14 0.1.15
powerfmt 0.2.0 0.2.1
rust-embed-impl 8.12.0 8.13.0
rust-embed-utils 8.12.0 8.13.0
sha2 0.11.0 0.11.1
syn 3.0.6 3.0.9
tokio 1.53.2 1.53.3
toml_datetime 1.1.1+spec-1.1.0 1.1.2+spec-1.1.0
toml_edit 0.25.15+spec-1.1.0 0.25.17+spec-1.1.0
toml_parser 1.1.3+spec-1.1.0 1.1.5+spec-1.1.0
unicase 2.9.0 2.10.0
unicode-ident 1.0.26 1.0.27
zopfli 0.8.3 0.8.4
zstd-sys 2.1.0+zstd.1.5.7 2.1.2+zstd.1.5.7

Updates rust-embed from 8.12.0 to 8.13.0

Updates zip from 8.6.0 to 9.0.5

Release notes

Sourced from zip's releases.

v9.0.5

🐛 Bug Fixes

  • use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

  • Enable release-plz on backport branches in future (#1079)

v9.0.4

🐛 Bug Fixes

  • enclosed_name rejects a separator inside one verbatim path component (#1066)
  • return Ok(None) when read_zipfile_from_stream is called on an empty archive (#1063)

⚙️ Miscellaneous Tasks

  • Revert impl Copy for Zip64CentralDirectoryEndLocator due to failing semver check, fix CI where most Miri tests weren't running, and other fixes so other PRs can pass CI (#1065)
  • update lzma-rust2 and ppmd-rust dependencies (#1060)

v9.0.3

🐛 Bug Fixes

  • Preserve directories' read-only status when extracting on non-Unix systems (#1054)

v9.0.1

🐛 Bug Fixes

  • set_permissions was still following symlinks in non-streaming extraction (#1038)
  • two arithmetic overflows in the implode decoder (#1028)
  • reject an empty archive whose central directory offset is past the EOCD (#1025)
  • don't panic when two entries extract to the same path (#1023)
  • fail reads that exceed the declared uncompressed size (#1022)
  • shrink decoder skipped LZW code 8191 (#1029)
  • write only the sentinel-marked values in a central ZIP64 field (#1027)

v9.0.0

🚀 Features

  • add ZipFileBuilder for parallelizing compression (#911)
  • add method by_index_with_data_descriptor (#994)
  • add len, is_empty and entry to ZipArchiveMetadata (#1015)
  • read data descriptor from binary (#990)
  • add comment and test for ZipStreamReader and symlinks (#985)
  • (write) add ZipWriter::hide_file for in-place entry deletion (#924)
  • add compression (#948)
  • add test to in place modification (#945)
  • move CustomExtraField to own file (#941)
  • add a test on enum size (#939)

... (truncated)

Changelog

Sourced from zip's changelog.

9.0.5 - 2026-10-17

🐛 Bug Fixes

  • use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

  • Enable release-plz on backport branches in future (#1079)

9.0.4 - 2026-10-16

🐛 Bug Fixes

  • enclosed_name rejects a separator inside one verbatim path component (#1066)
  • return Ok(None) when read_zipfile_from_stream is called on an empty archive (#1063)

⚙️ Miscellaneous Tasks

  • Revert impl Copy for Zip64CentralDirectoryEndLocator due to failing semver check, fix CI where most Miri tests weren't running, and other fixes so other PRs can pass CI (#1065)
  • update lzma-rust2 and ppmd-rust dependencies (#1060)

9.0.3 - 2026-10-13

🐛 Bug Fixes

  • Preserve directories' read-only status when extracting on non-Unix systems (#1054)

9.0.2 - 2026-10-11

🐛 Bug Fixes

  • additional bug fixes for symlink extraction

9.0.1 - 2026-10-10

🐛 Bug Fixes

  • set_permissions was still following symlinks in non-streaming extraction (#1038)
  • two arithmetic overflows in the implode decoder (#1028)
  • reject an empty archive whose central directory offset is past the EOCD (#1025)
  • don't panic when two entries extract to the same path (#1023)
  • fail reads that exceed the declared uncompressed size (#1022)
  • shrink decoder skipped LZW code 8191 (#1029)
  • write only the sentinel-marked values in a central ZIP64 field (#1027)

9.0.0 - 2026-10-08

🚀 Features

... (truncated)

Commits
  • 0123ed1 chore: release v9.0.5 (#1093)
  • 00cf82b docs: Repeal policy of yanking versions with known vulnerabilities, add menti...
  • 52165b9 chore: Enable release-plz on backport branches in future (#1079)
  • ca51e64 docs: Remove doc links that break when doc build doesn't enable all features ...
  • 6639687 fix: use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • 5e06fa8 fix(write): prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)
  • b6f9fb8 Merge commit from fork
  • ea2ccfe Merge commit from fork
  • 8068ab4 Merge commit from fork
  • 0b51128 doc: Clarifications to security policy (#1074)
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates cc from 1.6.0 to 1.8.0

Release notes

Sourced from cc's releases.

cc-v1.8.0

Added

  • add CC_PREFER_CLANG_CL_OVER_MSVC to override prefer_clang_cl_over_msvc (#2001)

Fixed

  • (panic) fix panic in code and replace with error when appropriate (#2008)
  • (env) do not panic if WASM_MUSL_SYSROOT not set (#2007)
  • (jobserver) help thread gets more token than necessary (#2006)
  • stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)
  • do not apply target crt-static when target is overridden (#1999)

Other

  • (parallel) poll for process exit on linux (#2009)
  • document NVCC and other environment variables (#2005)
  • (jobserver) poll for new token (#2004)
  • (parallel) Use poll on unix (#2000)

cc-v1.7.0

Added

  • add Tool::get_envs, deprecate Tool::env and store tool env as Arc<OsStr> pairs (#1985)
  • link c++ when Clang uses libc++ (#1978)
  • add CC_MASM_ASM and fall back to llvm-ml for MASM files (#1975)

Fixed

  • (target parsing) for powerpc64-ibm-aix abi (#1989)
  • ignore ASCII case in program name checks (#1981)

Other

  • (compile) issue compilation cmds more frequently in parallel #1997 #1998
  • (cache) Optimize tool detection caching (#1995)
  • (cache) optimize EnvSnapshot Hash, PartialEq, Ord impl (#1994)
  • Regenerate target info (#1988)
Changelog

Sourced from cc's changelog.

1.8.0 - 2026-10-11

Added

  • add CC_PREFER_CLANG_CL_OVER_MSVC to override prefer_clang_cl_over_msvc (#2001)

Fixed

  • (panic) fix panic in code and replace with error when appropriate (#2008)
  • (env) do not panic if WASM_MUSL_SYSROOT not set (#2007)
  • (jobserver) help thread gets more token than necessary (#2006)
  • stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)
  • do not apply target crt-static when target is overridden (#1999)

Other

  • (parallel) poll for process exit on linux (#2009)
  • document NVCC and other environment variables (#2005)
  • (jobserver) poll for new token (#2004)
  • (parallel) Use poll on unix (#2000)

1.7.0 - 2026-10-10

Added

  • add Tool::get_envs, deprecate Tool::env and store tool env as Arc<OsStr> pairs (#1985)
  • link c++ when Clang uses libc++ (#1978)
  • add CC_MASM_ASM and fall back to llvm-ml for MASM files (#1975)

Fixed

  • (target parsing) for powerpc64-ibm-aix abi (#1989)
  • ignore ASCII case in program name checks (#1981)

Other

  • (compile) issue compilation cmds more frequently in parallel #1997 #1998
  • (cache) Optimize tool detection caching (#1995)
  • (cache) optimize EnvSnapshot Hash, PartialEq, Ord impl (#1994)
  • Regenerate target info (#1988)
Commits
  • d0454ee chore(cc): release v1.8.0 (#2010)
  • fd18a6c perf(parallel): poll for process exit on linux (#2009)
  • b69d7eb fix(panic): fix panic in code and replace with error when appropriate (#2008)
  • 78eaf8f fix(env): do not panic if WASM_MUSL_SYSROOT not set (#2007)
  • ca93d67 docs: document NVCC and other environment variables (#2005)
  • e4f1339 fix(jobserver): help thread gets more token than necessary (#2006)
  • 369070e perf(jobserver): poll for new token (#2004)
  • 360d734 fix: stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)
  • 5832160 refactor(forward_available): use let-else (#2002)
  • fb83356 feat: add CC_PREFER_CLANG_CL_OVER_MSVC to override `prefer_clang_cl_over_ms...
  • Additional commits viewable in compare view

Updates deranged from 0.5.8 to 0.5.9

Commits

Updates either from 1.18.0 to 1.19.0

Changelog

Sourced from either's changelog.

Commits

Updates equivalent from 1.0.2 to 1.0.3

Commits

Updates find-msvc-tools from 0.1.14 to 0.1.15

Release notes

Sourced from find-msvc-tools's releases.

find-msvc-tools-v0.1.15

Other

  • Regenerate windows sys bindings (#2019)
Commits
  • ffbb10d chore: release (#2038)
  • b30f5b4 fix: don't prefer clang for -Clinker-plugin-lto=no (#2046)
  • fb5eb51 feat: pass AddressSanitizer on to the C compiler (#2045)
  • 399d494 fix: keep the order of flag and flag_if_supported (#2044)
  • 53786d5 ci(deps): bump taiki-e/install-action from 2.87.21 to 2.87.28 (#2047)
  • 53d06d3 ci(deps): bump release-plz/action from 0.5.140 to 0.5.141 (#2048)
  • dfef159 ci(deps): bump tombi-toml/setup-tombi from 1.7.3 to 1.8.4 (#2049)
  • fd9c840 feat: add source root for stable external object names (#2034)
  • bf0c5fb feat: emit rerun-if-env-changed for the compiler's own env vars (#2035)
  • 2ba8b6d refactor(target): convert large match into data (#2043)
  • Additional commits viewable in compare view

Updates powerfmt from 0.2.0 to 0.2.1

Release notes

Sourced from powerfmt's releases.

v0.2.1

See the changelog for details.

Changelog

Sourced from powerfmt's changelog.

0.2.1 [2026-10-05]

Fixed

  • alternate() in the macro now calls the correct method.
  • Diagnostic messages had minor incorrectness fixed.

Updated

  • Depend on syn version 3 instead of version 2.
Commits

Updates rust-embed-impl from 8.12.0 to 8.13.0

Updates rust-embed-utils from 8.12.0 to 8.13.0

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates syn from 3.0.6 to 3.0.9

Release notes

Sourced from syn's releases.

3.0.9

  • Add Punctuated::retain (#2088)

3.0.8

  • Fix parsing of <- and -> tokens in expressions (#2086, #2087)

3.0.7

Commits

Updates tokio from 1.53.2 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

  • io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

  • io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

  • io: wake and drop DuplexStream wakers outside the lock (#8618)
  • macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
  • runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
  • sync: wake waiters outside the lock when closing a semaphore (#8529)
  • test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

  • rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Commits
  • a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
  • df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
  • f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
  • 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
  • 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
  • c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
  • 0448618 sync: make tracing_sync tests synchronous (#8427)
  • 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
  • bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
  • 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
  • Additional commits viewable in compare view

Updates toml_datetime from 1.1.1+spec-1.1.0 to 1.1.2+spec-1.1.0

Commits
  • f72038c chore: Release
  • 1ae5851 docs: Update changelog
  • 40edb38 perf(parser): Improve pre-allocation estimate (#1241)
  • 23ba129 perf(parser): Improve pre-allocation estimate
  • 9750f43 chore(deps): Update Rust Stable to v1.99 (#1227)
  • 66cdc5e style: Make clippy happy
  • 8ab3cc9 chore(deps): Update Rust Stable to v1.99
  • 08ef261 bench: Include tokio's published manifest (#1232)
  • 7054f9e bench: Include tokio's published manifest
  • 3423628 chore(deps): Update pre-commit hook zizmorcore/zizmor-pre-commit to v1.30.1 (...
  • Additional commits viewable in compare view

Updates toml_edit from 0.25.15+spec-1.1.0 to 0.25.17+spec-1.1.0

Commits
  • ceac6e4 chore: Release
  • 0fe9e93 docs: Update changelog
  • e3a64aa fix(display): Ensure all keys are encoded (#1245)
  • 76484d0 fix(display): Ensure all keys are encoded
  • 711b1ba refactor(display): Clarify that we are working with encoded keys
  • 4f73ebd test(display): Reproduce the key bug
  • 6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 4d45944 perf(parser): Remove no-op code (#1243)
  • 189c91c perf(parser): Remove no-op code
  • Additional commits viewable in compare view

Updates toml_parser from 1.1.3+spec-1.1.0 to 1.1.5+spec-1.1.0

Commits
  • ceac6e4 chore: Release
  • 0fe9e93 docs: Update changelog
  • e3a64aa fix(display): Ensure all keys are encoded (#1245)
  • 76484d0 fix(display): Ensure all keys are encoded
  • 711b1ba refactor(display): Clarify that we are working with encoded keys
  • 4f73ebd test(display): Reproduce the key bug
  • 6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 4d45944 perf(parser): Remove no-op code (#1243)
  • 189c91c perf(parser): Remove no-op code
  • Additional commits viewable in compare view

Updates unicase from 2.9.0 to 2.10.0

Release notes

Sourced from unicase's releases.

v2.10.0

What's Changed

New Contributors

Full Changelog: seanmonstar/unicase@v2.9.0...v2.10.0

Commits

Updates unicode-ident from 1.0.26 to 1.0.27

Release notes

Sourced from unicode-ident's releases.

1.0.27

  • Optimize trie layout to create headroom for new identifiers in future unicode versions (#54, #56)
Commits
  • c1ac3af Release 1.0.27
  • ff8907c Merge pull request #56 from dtolnay/segment
  • b57403f Split base address for two different lookups
  • 4e958c4 Merge pull request #55 from dtolnay/indexset
  • 7da4079 Replace chunk layout with IndexSet
  • 97d6034 Merge pull request #54 from dtolnay/overflow
  • c7e447b Defer half-chunk overflow enforcement
  • 639d388 Merge pull request #53 from dtolnay/triestat
  • 662f912 Update trie statistics in readme for Unicode 18.0.0
  • 2bdb95a Merge pull request #52 from dtolnay/naming
  • Additional commits viewable in compare view

Updates zopfli from 0.8.3 to 0.8.4

Release notes

Sourced from zopfli's releases.

v0.8.4

What's Changed

Bug Fixes

  • Preserve BitwiseWriter invariants when bit flushing encounters a retryable I/O error, preventing subsequent writes from panicking. (#85)
  • Match Zopfli's lz77_optimal statistics-randomization cutoff to avoid unintended output differences in edge cases. (#89)

Changes

  • Raise the minimum supported Rust version to 1.88 due to dependency requirements.
  • Address new Clippy lints and improve internal documentation and scripts.

Dependency Updates

  • Update Rust dependencies to their latest versions, including bumpalo, crc32fast, log, proptest, proptest-derive, and simd-adler32.
  • Update GitHub Actions dependencies, including actions/checkout and github/codeql-action.

New Contributors

Full Changelog: zopfli-rs/zopfli@v0.8.3...v0.8.4

Commits
  • 62df3ae Bump Zopfli version to 0.8.4 🎉
  • 245de58 chore: fix new Clippy lints
  • e2353bd docs(README): set shell language for shell command code blocks
  • acc5f4a chore: bump MSRV to 1.88 due to dependency MSRV bump
  • ff963fb fix(squeeze): match Zopfli's lz77_optimal stats randomization cutoff on cos...
  • 3222baf chore(deps): refresh dependency, remove now redundant Cargo manifest key
  • d0e9d23 chore(test/run.sh): fix shellcheck lints, format with shfmt
  • c9e7478 chore(deps): update rust crate crc32fast to v1.5.2 (#88)
  • 3878989 chore(deps): update rust crate log to v0.4.34 (#87)
  • 067cb1c chore(deps): update rust crate crc32fast to v1.5.1 (#86)
  • Additional commits viewable in compare view

Updates zstd-sys from 2.1.0+zstd.1.5.7 to 2.1.2+zstd.1.5.7

Commits
  • 75bc740 Release zstd 0.14.3, zstd-safe 8.2.0, and zstd-sys 2.1.2
  • 1c580b6 zstd-safe: keep the one-shot reset check inline
  • 502ee2f zstd-safe: only reset after one-shot decompression if a stream may be open
  • 5ded6e0 zstd-safe: apply rustfmt
  • e224018 zstd-safe: refuse to unload a dictionary under unfinished zstdmt jobs
  • 6a1065b Stop a single_frame() decoder when finish_frame() ends the frame
  • c7156df Don't let finish_frame() start a frame nothing was read from
  • b0fb8a7 Add write::Decoder::finish() to report incomplete frames
  • ab34d01 Don't retry a panicked writer when dropping AutoFlushDecoder/AutoFinishEncoder
  • 74ace2d Reset the borrowed context's session in raw::{Encoder,Decoder}::with_context
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the crates group across 1 directory with 21 updates
b728ffd 
Bumps the crates group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| rust-embed | `8.12.0` | `8.13.0` |
| [zip](https://github.com/zip-rs/zip2) | `8.6.0` | `9.0.5` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.6.0` | `1.8.0` |
| [deranged](https://github.com/jhpratt/deranged) | `0.5.8` | `0.5.9` |
| [either](https://github.com/rayon-rs/either) | `1.18.0` | `1.19.0` |
| [equivalent](https://github.com/indexmap-rs/equivalent) | `1.0.2` | `1.0.3` |
| [find-msvc-tools](https://github.com/rust-lang/cc-rs) | `0.1.14` | `0.1.15` |
| [powerfmt](https://github.com/jhpratt/powerfmt) | `0.2.0` | `0.2.1` |
| rust-embed-impl | `8.12.0` | `8.13.0` |
| rust-embed-utils | `8.12.0` | `8.13.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [syn](https://github.com/dtolnay/syn) | `3.0.6` | `3.0.9` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.2` | `1.53.3` |
| [toml_datetime](https://github.com/toml-rs/toml) | `1.1.1+spec-1.1.0` | `1.1.2+spec-1.1.0` |
| [toml_edit](https://github.com/toml-rs/toml) | `0.25.15+spec-1.1.0` | `0.25.17+spec-1.1.0` |
| [toml_parser](https://github.com/toml-rs/toml) | `1.1.3+spec-1.1.0` | `1.1.5+spec-1.1.0` |
| [unicase](https://github.com/seanmonstar/unicase) | `2.9.0` | `2.10.0` |
| [unicode-ident](https://github.com/dtolnay/unicode-ident) | `1.0.26` | `1.0.27` |
| [zopfli](https://github.com/zopfli-rs/zopfli) | `0.8.3` | `0.8.4` |
| [zstd-sys](https://github.com/gyscos/zstd-rs) | `2.1.0+zstd.1.5.7` | `2.1.2+zstd.1.5.7` |



Updates `rust-embed` from 8.12.0 to 8.13.0

Updates `zip` from 8.6.0 to 9.0.5
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v8.6.0...v9.0.5)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `cc` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.6.0...cc-v1.8.0)

Updates `deranged` from 0.5.8 to 0.5.9
- [Release notes](https://github.com/jhpratt/deranged/releases)
- [Commits](https://github.com/jhpratt/deranged/commits/v0.5.9)

Updates `either` from 1.18.0 to 1.19.0
- [Changelog](https://github.com/rayon-rs/either/blob/main/RELEASES.md)
- [Commits](rayon-rs/either@1.18.0...1.19.0)

Updates `equivalent` from 1.0.2 to 1.0.3
- [Commits](indexmap-rs/equivalent@v1.0.2...v1.0.3)

Updates `find-msvc-tools` from 0.1.14 to 0.1.15
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@find-msvc-tools-v0.1.14...find-msvc-tools-v0.1.15)

Updates `powerfmt` from 0.2.0 to 0.2.1
- [Release notes](https://github.com/jhpratt/powerfmt/releases)
- [Changelog](https://github.com/jhpratt/powerfmt/blob/main/CHANGELOG.md)
- [Commits](jhpratt/powerfmt@v0.2.0...v0.2.1)

Updates `rust-embed-impl` from 8.12.0 to 8.13.0

Updates `rust-embed-utils` from 8.12.0 to 8.13.0

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `syn` from 3.0.6 to 3.0.9
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.6...3.0.9)

Updates `tokio` from 1.53.2 to 1.53.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.2...tokio-1.53.3)

Updates `toml_datetime` from 1.1.1+spec-1.1.0 to 1.1.2+spec-1.1.0
- [Commits](toml-rs/toml@toml_datetime-v1.1.1...toml_datetime-v1.1.2)

Updates `toml_edit` from 0.25.15+spec-1.1.0 to 0.25.17+spec-1.1.0
- [Commits](toml-rs/toml@v0.25.15...v0.25.17)

Updates `toml_parser` from 1.1.3+spec-1.1.0 to 1.1.5+spec-1.1.0
- [Commits](toml-rs/toml@toml_parser-v1.1.3...toml_parser-v1.1.5)

Updates `unicase` from 2.9.0 to 2.10.0
- [Release notes](https://github.com/seanmonstar/unicase/releases)
- [Commits](seanmonstar/unicase@v2.9.0...v2.10.0)

Updates `unicode-ident` from 1.0.26 to 1.0.27
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](dtolnay/unicode-ident@1.0.26...1.0.27)

Updates `zopfli` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/zopfli-rs/zopfli/releases)
- [Commits](zopfli-rs/zopfli@v0.8.3...v0.8.4)

Updates `zstd-sys` from 2.1.0+zstd.1.5.7 to 2.1.2+zstd.1.5.7
- [Release notes](https://github.com/gyscos/zstd-rs/releases)
- [Commits](gyscos/zstd-rs@zstd-sys-2.1.0...zstd-sys-2.1.2)

---
updated-dependencies:
- dependency-name: rust-embed
  dependency-version: 8.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crates
- dependency-name: zip
  dependency-version: 9.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: crates
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: cc
  dependency-version: 1.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: crates
- dependency-name: deranged
  dependency-version: 0.5.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: either
  dependency-version: 1.19.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: crates
- dependency-name: equivalent
  dependency-version: 1.0.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: find-msvc-tools
  dependency-version: 0.1.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: powerfmt
  dependency-version: 0.2.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: rust-embed-impl
  dependency-version: 8.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: crates
- dependency-name: rust-embed-utils
  dependency-version: 8.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: crates
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: syn
  dependency-version: 3.0.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: tokio
  dependency-version: 1.53.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: toml_datetime
  dependency-version: 1.1.2+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: toml_edit
  dependency-version: 0.25.17+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: toml_parser
  dependency-version: 1.1.5+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: unicase
  dependency-version: 2.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: crates
- dependency-name: unicode-ident
  dependency-version: 1.0.27
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: zopfli
  dependency-version: 0.8.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
- dependency-name: zstd-sys
  dependency-version: 2.1.2+zstd.1.5.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: crates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 21, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants