Skip to content

chore(deps): bump the cargo-version group in /runtime/rust with 8 updates - #504

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/runtime/rust/cargo-version-c3362330c2
Open

chore(deps): bump the cargo-version group in /runtime/rust with 8 updates#504
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/runtime/rust/cargo-version-c3362330c2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-version group in /runtime/rust with 8 updates:

Package From To
rand 0.9.4 0.10.2
ribboncurls 0.2.1 0.5.0
serial_test 3.5.0 4.0.1
reqwest 0.12.28 0.13.4
azure_identity 0.23.0 1.0.0
azure_core 0.23.0 1.1.0
base64 0.22.1 0.23.1
sha2 0.10.9 0.11.0

Updates rand from 0.9.4 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

... (truncated)

Commits

Updates ribboncurls from 0.2.1 to 0.5.0

Release notes

Sourced from ribboncurls's releases.

v0.5.0

Changed

  • Upgrade dependencies

Fixed

  • In tests, use CARGO_BIN_EXE_ribboncurls env var for the binary path instead of assuming it exists in ./target/release directory

v0.4.1

Fixed

  • Update to latest ribboncurls which fixes bug where a nested inverted-section gives an error.

v0.4.0

Removed

  • Update to latest ribboncurls library, where a previously existing "feature" has been removed because the feature, allowing for mustache data properties to include dots in the name, is disallowed in the mustache spec.

v0.3.2

Changed

  • Update to latest ribboncurls dependency which includes bug fixes

v0.3.1

Changed

  • Add musl and darwin-universal binaries to release build
  • Update deps

v0.3.0

Changed

  • Changed project license to MPL-2.0
Commits
  • ccdabec Release v0.5.0
  • dc6c3ac Upgrade lib and cli dependencies
  • 258144c Use strict clippy options and fix clippy errors
  • 0b503d6 Lock included GitHub actions to a specific hash for security
  • 14122ce Adjust test and add missing nested inverted section test
  • 4df2705 Fix test bug where release binary path could not exist
  • 1aeb316 Add missing git submodule pulls to workflows
  • 0df0680 Release 0.4.1 for lib and cli
  • 990b8ea Fix bug where a nested inverted-section gives an error
  • bb01b17 Use a git submodule for the mustache spec tests
  • Additional commits viewable in compare view

Updates serial_test from 3.5.0 to 4.0.1

Release notes

Sourced from serial_test's releases.

v4.0.1

As per v4.0.0, but with the root MSRV correctly set to 1.93.1

v4.0.0

What's Changed

New Contributors

Full Changelog: palfrey/serial_test@v3.5.0...v4.0.0

Commits
  • 383c894 4.0.1
  • 4298adf MSRV is actually 1.93.1
  • f25d56f 4.0.0
  • 7984bdc Merge pull request #160 from palfrey/pre-release-fixes
  • ec74212 Don't need to split build-all-features now
  • 03cd910 Upgrade MSRV to 1.93.1
  • 7cf8563 Add a "finish" CI job that depends on everything
  • d7c4137 Upgrade actix-macros to reduce syn 1.x needs
  • ae268b0 Merge pull request #159 from AudaciousAxiom/refactor/syn-v3
  • 98b2c36 refactor(derive): bump syn to v3
  • Additional commits viewable in compare view

Updates reqwest from 0.12.28 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

  • Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
  • Add ClientBuilder::http2_keep_alive_* options for the blocking client.
  • Add TLS 1.3 support when using native-tls backend.
  • Fix redirect handling to strip sensitive headers when the scheme changes.
  • Fix HTTP/3 happy-eyeball connection creation.
  • Upgrade hickory-resolver to 0.26.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

v0.13.3

tl;dr

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.4

  • Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
  • Add ClientBuilder::http2_keep_alive_* options for the blocking client.
  • Add TLS 1.3 support when using native-tls backend.
  • Fix redirect handling to strip sensitive headers when the scheme changes.
  • Fix HTTP/3 happy-eyeball connection creation.
  • Upgrade hickory-resolver to 0.26.

v0.13.3

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

v0.13.2

  • Fix HTTP/2 and native-tls ALPN feature combinations.
  • Fix HTTP/3 to send h3 ALPN.
  • (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().
Commits
  • 11489b3 v0.13.4
  • d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
  • 79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
  • fb7bf6a fix: remove unwrap in hickory initialization (#3041)
  • 3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
  • c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
  • 9cbb65b chore: clean up minimal-versions CI job (#3039)
  • 17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
  • 03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
  • 4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
  • Additional commits viewable in compare view

Updates azure_identity from 0.23.0 to 1.0.0

Release notes

Sourced from azure_identity's releases.

azure_identity@1.0.0

1.0.0 (2026-05-11)

Features Added

  • Initial stable release.

Breaking Changes

  • Added #[non_exhaustive] to UserAssignedId.

azure_identity@0.35.0

0.35.0 (Unreleased)

Features Added

Breaking Changes

Bugs Fixed

Other Changes

  • Updated dependencies.

azure_identity@0.34.0

0.34.0 (2026-04-08)

Other Changes

  • Upgraded dependencies

azure_identity@0.33.0

0.33.0 (2026-03-09)

Breaking Changes

  • Support for wasm32-unknown-unknown has been removed (#3377)
  • ClientCertificateCredential::new() now takes SecretBytes instead of Secret for the certificate parameter. Pass the raw PKCS12 bytes wrapped in SecretBytes instead of a base64-encoded string wrapped in Secret.
Commits
  • c3c92ed Sync eng/common directory with azure-sdk-tools for PR 14495 (#4390)
  • 21d9225 [Storage] Clean-up cspell for storage crates (#4385)
  • 44e2b7d Upgrade openssl (#4384)
  • bba3112 [Storage] Remove get_page_ranges from azure_storage_blob, other misc fixe...
  • bcf905a Sync eng/common directory with azure-sdk-tools for PR 15357 (#4309)
  • 5af6821 Add per-operation latency tracking for perf tests (#4381)
  • 8d66f9b Prepare for 1.0.0 release of core, identity (#4383)
  • 4d2ed7d Removed .into_stream() from Keyvault readme files since it is not necessary...
  • eb73b7e [Storage] Unify blob_tags_string and BlobTags usage (#4374)
  • 0e71ec1 [Storage] Patch trust boundary in partitioned_stream (#4364)
  • Additional commits viewable in compare view

Updates azure_core from 0.23.0 to 1.1.0

Release notes

Sourced from azure_core's releases.

azure_core@1.1.0

1.1.0 (2026-07-09)

Features Added

  • Error now captures a std::backtrace::Backtrace at construction time and includes it in Debug output (e.g., {:?}) when RUST_BACKTRACE=1 is set.

Other Changes

  • Added #[must_use] to AsyncRuntime functions.
  • Added #[must_use] to ItemIterator (Pager) and PageIterator types.
  • Added #[must_use] to Poller type.

azure_core_amqp@1.1.0

1.1.0 (2026-07-09)

Features Added

  • Added AmqpSessionOptions::with_unbounded_windows(), a shared constructor that sets both session flow-control windows to u32::MAX for messaging crates that rely on per-link credit for flow control.

azure_core@1.0.0

1.0.0 (2026-05-11)

Features Added

  • Initial stable release.

Breaking Changes

  • Added #[non_exhaustive] to AttributeArray, AttributeValue, SpanStatus, and SpanKind.
  • Bearer token authorization now requires TLS (https).

azure_core_amqp@1.0.0

1.0.0 (2026-05-11)

Features Added

  • Initial stable release.

azure_core_macros@1.0.0

1.0.0 (2026-05-11)

Features Added

  • Initial stable release.

azure_core_opentelemetry@1.0.0

1.0.0 (2026-05-11)

Features Added

... (truncated)

Commits
  • 9a8a5f7 Handle Cargo crate path layouts (#4738)
  • 0eeacac Run cargo deny in PRs without advisories (#4735)
  • 18d3cd9 Make core test crates unpublished (#4736)
  • 51116c3 Refine core agent instructions (#4732)
  • b88ddcd Update dependencies with advisories (#4731)
  • 33703fe Prepare azure_core et. al. for a 1.1.0 release (#4724)
  • 83e95ec Fix HPK prefix and cross-partition query bugs (#4729)
  • 3624506 Sync eng/common directory with azure-sdk-tools for PR 16080 (#4727)
  • 0f2a30d [Storage] Remove public resource scenario from upload_blob_from_url (#4688)
  • d3c22f4 Add Gateway 2.0 (thin client) implementation to Cosmos driver (#4319)
  • Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo-version group
88598d9 
Bumps the cargo-version group in /runtime/rust with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [rand](https://github.com/rust-random/rand) | `0.9.4` | `0.10.2` |
| [ribboncurls](https://github.com/tinted-theming/ribboncurls) | `0.2.1` | `0.5.0` |
| [serial_test](https://github.com/palfrey/serial_test) | `3.5.0` | `4.0.1` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.28` | `0.13.4` |
| [azure_identity](https://github.com/azure/azure-sdk-for-rust) | `0.23.0` | `1.0.0` |
| [azure_core](https://github.com/azure/azure-sdk-for-rust) | `0.23.0` | `1.1.0` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |


Updates `rand` from 0.9.4 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.9.4...0.10.2)

Updates `ribboncurls` from 0.2.1 to 0.5.0
- [Release notes](https://github.com/tinted-theming/ribboncurls/releases)
- [Commits](tinted-theming/ribboncurls@v0.2.1...v0.5.0)

Updates `serial_test` from 3.5.0 to 4.0.1
- [Release notes](https://github.com/palfrey/serial_test/releases)
- [Commits](palfrey/serial_test@v3.5.0...v4.0.1)

Updates `reqwest` from 0.12.28 to 0.13.4
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.28...v0.13.4)

Updates `azure_identity` from 0.23.0 to 1.0.0
- [Release notes](https://github.com/azure/azure-sdk-for-rust/releases)
- [Commits](https://github.com/azure/azure-sdk-for-rust/compare/azure_identity@0.23.0...azure_identity@1.0.0)

Updates `azure_core` from 0.23.0 to 1.1.0
- [Release notes](https://github.com/azure/azure-sdk-for-rust/releases)
- [Commits](https://github.com/azure/azure-sdk-for-rust/compare/azure_core@0.23.0...azure_core@1.1.0)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-version
- dependency-name: ribboncurls
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-version
- dependency-name: serial_test
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-version
- dependency-name: reqwest
  dependency-version: 0.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-version
- dependency-name: azure_identity
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-version
- dependency-name: azure_core
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-version
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-version
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-version
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants