Bump the cargo group across 3 directories with 18 updates by dependabot[bot] · Pull Request #49 · SbruiceS/solana

dependabot · 2026-04-23T02:11:50Z

Bumps the cargo group with 16 updates in the / directory:

Package	From	To
rand	`0.7.3`	`0.8.5`
borsh	`0.9.3`	`0.10.4`
tokio	`1.14.1`	`1.26.0`
tar	`0.4.38`	`0.4.45`
tungstenite	`0.17.3`	`0.20.1`
ouroboros	`0.15.0`	`0.15.6`
bytes	`1.2.1`	`1.11.1`
openssl	`0.10.41`	`0.10.68`
quinn-proto	`0.8.4`	`0.10.6`
users	`0.10.0`	`0.11.0`
h2	`0.3.11`	`0.3.27`
keccak	`0.1.0`	`0.1.6`
shlex	`1.1.0`	`1.3.0`
time	`0.1.43`	`0.1.45`
tracing-subscriber	`0.3.7`	`0.3.23`
unsafe-libyaml	`0.2.4`	`0.2.11`

Bumps the cargo group with 10 updates in the /programs/sbf directory:

Package	From	To
rand	`0.7.3`	`0.8.5`
tar	`0.4.38`	`0.4.45`
ouroboros	`0.15.0`	`0.15.6`
bytes	`1.2.1`	`1.11.1`
openssl	`0.10.41`	`0.10.68`
h2	`0.3.11`	`0.3.21`
keccak	`0.1.0`	`0.1.6`
remove_dir_all	`0.5.2`	`0.5.3`
shlex	`1.1.0`	`1.3.0`
unsafe-libyaml	`0.2.4`	`0.2.11`

Bumps the cargo group with 1 update in the /storage-bigtable/build-proto directory: bytes.

Updates rand from 0.7.3 to 0.8.5

Changelog

Sourced from rand's changelog.

[0.8.5] - 2021-08-20

Fixes

Fix build on non-32/64-bit architectures (#1144)

Fix "min_const_gen" feature for no_std (#1173)

Check libc::pthread_atfork return value with panic on error (#1178)

More robust reseeding in case ReseedingRng is used from a fork handler (#1178)

Fix nightly: remove unused slice_partition_at_index feature (#1215)

Fix nightly + simd_support: update packed_simd (#1216)

Rngs

StdRng: Switch from HC128 to ChaCha12 on emscripten (#1142). We now use ChaCha12 on all platforms.

Documentation

Added docs about rand's use of const generics (#1150)

Better random chars example (#1157)

#1142: rust-random/rand#1142 #1144: rust-random/rand#1144 #1150: rust-random/rand#1150 #1157: rust-random/rand#1157 #1173: rust-random/rand#1173 #1178: rust-random/rand#1178 #1215: rust-random/rand#1215 #1216: rust-random/rand#1216

[0.8.4] - 2021-06-15

Additions

Use const-generics to support arrays of all sizes (#1104)

Implement Clone and Copy for Alphanumeric (#1126)

Add Distribution::map to derive a distribution using a closure (#1129)

Add Slice distribution (#1107)

Add DistString trait with impls for Standard and Alphanumeric (#1133)

Other

Reorder asserts in Uniform float distributions for easier debugging of non-finite arguments (#1094, #1108)

Add range overflow check in Uniform float distributions (#1108)

Deprecate rngs::adapter::ReadRng (#1130)

[0.8.3] - 2021-01-25

Fixes

Fix no-std + alloc build by gating choose_multiple_weighted on std (#1088)

[0.8.2] - 2021-01-12

Fixes

Fix panic in UniformInt::sample_single_inclusive and Rng::gen_range when providing a full integer range (eg 0..=MAX) (#1087)

... (truncated)

Commits

937320c Update CHANGELOG for 0.8.5 (#1221)
2924af6 Merge pull request #1183 from vks/fill-float-doc
dbbc1bf Merge pull request #1218 from Will-Low/master
9f20df0 Making distributions comparable by deriving PartialEq. Tests included
a407bdf Merge pull request #1216 from rust-random/work5
d3ca11b Update to packed_simd_2 0.3.7
fa04c15 Merge pull request #1215 from Lantern-chat/master
73f8ffd Remove unused slice_partition_at_index feature
8f37250 Merge pull request #1208 from newpavlov/rand_distr/fix_no_std
9ef737b update changelog
Additional commits viewable in compare view

Updates borsh from 0.9.3 to 0.10.4

Release notes

Sourced from borsh's releases.

borsh-derive-internal-v0.10.4

No release notes provided.

borsh-derive-v0.10.4

No release notes provided.

borsh-schema-derive-internal-v0.10.4

No release notes provided.

borsh-v0.10.4

Backported a fix for RUSTSEC-2023-0033: Forbid Vectors of Zero-sized types from de-/serialization (#145)

Changelog

Sourced from borsh's changelog.

[0.10.4] - 2024-09-23

Backported a fix for RUSTSEC-2023-0033: Forbid Vectors of Zero-sized types from de-/serialization (#145)

[0.10.3] - 2022-03-22

Add optional bytes/bytesmut support

[0.10.2] - 2022-02-14

Prevent unbound allocation for vectors on deserialization

[0.10.1] - 2022-02-08

Implemented (de)ser for core::ops::range

Introduce de::EnumExt trait with deserialize_variant method

[0.10.0] - 2023-01-19

Fix no-std feature (some of the imports incorrectly used std:: instead of crate::maybestd::)

Fix borsh-schema derives with for bounds

Implemented BorshSchema for HashSet

Add support for isize, usize types

Delete schema for char

Implement ser/de and schema for (T,)

Add clone impls to borsh schema types

Remove unnecessary trait bounds requirements for array

BREAKING CHANGE: BorshDeserialize now works by receiving an &mut std::io::Read instead of a &mut &[u8]. This is a breaking change for code that provides custom implementations of BorshDeserialize; there is no impact on code that uses only the derive macro.

Added BorshDeserialize::try_from_reader and BorshDeserialize::deserialize_reader.

Upgrade hashbrown version to be >=0.11,<0.14 to allow wider range of versions.

Commits

a1fe363 release: 0.10.4
c545f3c chore: revert workspace and exclude changes (#311)
27843bc chore: prepare 0.10.4 with backported fix (#310)
79097e3 release: Prepare for 0.10.3 release
ad25b07 ci: Removed release-plz as it does not play well with the workspaces setup we...
c93d434 ci: Add release-plz CI action which will create a PR with a suggestion to cut...
e91f405 feat: Add optional bytes/bytesmut support (#132)
9e68316 release: Prepare for 0.10.2 release (#130)
d431291 feat(deserialize): prevent unbound allocation (#129)
d915ab5 chore: Updated Minimum Supported Rust Version to 1.55 (manually confirmed wit...
Additional commits viewable in compare view

Updates tokio from 1.14.1 to 1.26.0

Release notes

Sourced from tokio's releases.

Tokio v1.26.0

Fixed

macros: fix empty join! and try_join! ([https://redirect.github.com/fix empty join! and try_join! tokio-rs/tokio#5504])

sync: don't leak tracing spans in mutex guards ([https://redirect.github.com/sync: don't leak tracing spans in mutex guards tokio-rs/tokio#5469])

sync: drop wakers after unlocking the mutex in Notify ([https://redirect.github.com/Drop wakers after unlocking the mutex in Notify tokio-rs/tokio#5471])

sync: drop wakers outside lock in semaphore ([https://redirect.github.com/Solve deadlock in Semaphore tokio-rs/tokio#5475])

Added

fs: add fs::try_exists ([https://redirect.github.com/Add fs::try_exists tokio-rs/tokio#4299])

net: add types for named unix pipes ([https://redirect.github.com/net: add types for named Unix pipes tokio-rs/tokio#5351])

sync: add MappedOwnedMutexGuard ([https://redirect.github.com/Add MappedOwnedMutexGuard tokio-rs/tokio#5474])

Changed

chore: update windows-sys to 0.45 ([https://redirect.github.com/chore: update windows-sys to 0.45 tokio-rs/tokio#5386])

net: use Message Read Mode for named pipes ([https://redirect.github.com/Named Pipes: Support Message Read Mode tokio-rs/tokio#5350])

sync: mark lock guards with #[clippy::has_significant_drop] ([https://redirect.github.com/Mark MutexGuard with #[clippy::has_significant_drop] tokio-rs/tokio#5422])

sync: reduce contention in watch channel ([https://redirect.github.com/Reduce contention in watch channel tokio-rs/tokio#5464])

time: remove cache padding in timer entries ([https://redirect.github.com/time: remove cache padding in timer entries tokio-rs/tokio#5468])

time: Improve Instant::now() perf with test-util ([https://redirect.github.com/time: Improve Instant::now() perf with test-util tokio-rs/tokio#5513])

Internal Changes

io: use poll_fn in copy_bidirectional ([https://redirect.github.com/Use poll_fn in copy_bidirectional tokio-rs/tokio#5486])

net: refactor named pipe builders to not use bitfields ([https://redirect.github.com/net: refactor named pipe builders to not use bitfields tokio-rs/tokio#5477])

rt: remove Arc from Clock ([https://redirect.github.com/rt: remove Arc from Clock tokio-rs/tokio#5434])

sync: make notify_waiters calls atomic ([https://redirect.github.com/sync: make notify_waiters calls atomic tokio-rs/tokio#5458])

time: don't store deadline twice in sleep entries ([https://redirect.github.com/remove double store of deadline, saving 128 bytes tokio-rs/tokio#5410])

Unstable

metrics: add a new metric for budget exhaustion yields ([https://redirect.github.com/metrics: add a new metric for budget exhaustion yields tokio-rs/tokio#5517])

Documented

io: improve AsyncFd example ([https://redirect.github.com/io: improve AsyncFd example tokio-rs/tokio#5481])

runtime: document the nature of the main future ([https://redirect.github.com/Document the nature of the main future tokio-rs/tokio#5494])

runtime: remove extra period in docs ([https://redirect.github.com/chore: remove unnecessary dot in comment tokio-rs/tokio#5511])

signal: updated Documentation for Signals ([https://redirect.github.com/Updated Documentation for Signals tokio-rs/tokio#5459])

sync: add doc aliases for blocking_* methods ([https://redirect.github.com/sync: add doc aliases for blocking_* methods tokio-rs/tokio#5448])

sync: fix docs for Send/Sync bounds in broadcast ([https://redirect.github.com/sync: fix docs for Send/Sync bounds in broadcast tokio-rs/tokio#5480])

sync: document drop behavior for channels ([https://redirect.github.com/sync: document drop behavior for channels tokio-rs/tokio#5497])

task: clarify what happens to spawned work during runtime shutdown ([https://redirect.github.com/clarify what happens to spawned work during runtime shutdown tokio-rs/tokio#5394])

task: clarify process::Command docs ([https://redirect.github.com/Clarify process::Command docs (fixing #5406) tokio-rs/tokio#5413])

task: fix wording with 'unsend' ([https://redirect.github.com/fix: fix wording with 'unsend' tokio-rs/tokio#5452])

time: document immediate completion guarantee for timeouts ([https://redirect.github.com/time: document immediate completion guarantee for timeouts tokio-rs/tokio#5509])

tokio: document supported platforms ([https://redirect.github.com/Document supported platforms tokio-rs/tokio#5483])

... (truncated)

Commits

a377240 chore: prepare for Tokio v1.26.0 release (#5521)
52da177 metrics: add a new metric for budget exhaustion yields (#5517)
ee1c940 time: Improve Instant::now() perf with test-util (#5513)
815d89a runtime: remove extra period in docs (#5511)
54aaf3d time: document immediate completion guarantee for timeouts (#5509)
5a3abe5 net: add types for named unix pipes (#5351)
d44b1ca io: ignore SplitByUtf8BoundaryIfWindows test on miri (#5507)
e23c6f3 signal: updated Documentation for Signals (#5459)
0a50cb3 net: fix test compilation failure (#5506)
2298679 runtime: document the nature of the main future (#5494)
Additional commits viewable in compare view

Updates tar from 0.4.38 to 0.4.45

Commits

096e3d1 Bump to 0.4.45 (#443)
17b1fd8 archive: Prevent symlink-directory collision chmod attack (#442)
de1a587 archive: Unconditionally honor PAX size (#441)
6071cbe ci: Consolidate workflows (#439)
ad1fde9 build-sys: Promote unused_code to an error
c8cb250 tests: Squash a warning
638c495 ci: Add xtask infra + reverse dependency testing (#435)
32a9bbb tests: Add RandomReader to exercise partial-read resilience (#436)
9c5df0b Fix GNU long-name extension stream corruption on validation error (#434)
88b1e3b Fix docs typo in header.rs (#431)
Additional commits viewable in compare view

Updates tungstenite from 0.17.3 to 0.20.1

Changelog

Sourced from tungstenite's changelog.

0.20.1

Fixes CVE-2023-43669.

0.20.0

Remove many implicit flushing behaviours. In general reading and writing messages will no longer flush until calling flush. An exception is automatic responses (e.g. pongs) which will continue to be written and flushed when reading and writing. This allows writing a batch of messages and flushing once, improving performance.

Add WebSocket::read, write, send, flush. Deprecate read_message, write_message, write_pending.

Add FrameSocket::read, write, send, flush. Remove read_frame, write_frame, write_pending. Note: Previous use of write_frame may be replaced with send.

Add WebSocketContext::read, write, flush. Remove read_message, write_message, write_pending. Note: Previous use of write_message may be replaced with write + flush.

Remove send_queue, replaced with using the frame write buffer to achieve similar results.

Add WebSocketConfig::max_write_buffer_size. Deprecate max_send_queue.

Add Error::WriteBufferFull. Remove Error::SendQueueFull. Note: WriteBufferFull returns the message that could not be written as a Message::Frame.

Add ability to buffer multiple writes before writing to the underlying stream, controlled by WebSocketConfig::write_buffer_size (default 128 KiB). Improves batch message write performance.

Panic on receiving invalid WebSocketConfig.

0.19.0

Update TLS dependencies.

Exchanging base64 for data-encoding.

0.18.0

Make handshake dependencies optional with a new handshake feature (now a default one!).

Return HTTP error responses (their HTTP body) upon non 101 status codes.

Commits

219075e Merge pull request #379 from snapview/CVE-2023-43669
f0f1a06 Bump crate version
2e50292 Add checking for header sanity
f916b33 Add AttackAttempt error variant
53914c1 Include examples so that cargo publish works
5323559 Bump version
6e63b17 Update changelog
f2ed7aa Merge pull request #365 from snapview/dependabot/cargo/webpki-roots-0.24
8d8f0da Merge pull request #362 from alexheretic/config-asserts
dac07ea Merge pull request #361 from alexheretic/docs++
Additional commits viewable in compare view

Updates ouroboros from 0.15.0 to 0.15.6

Commits

See full diff in compare view

Updates bytes from 1.2.1 to 1.11.1

Release notes

Sourced from bytes's releases.

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

Fix integer overflow in BytesMut::reserve

Bytes v1.11.0

1.11.0 (November 14th, 2025)

Bump MSRV to 1.57 (#788)

Fixed

fix: BytesMut only reuse if src has remaining (#803)

Specialize BytesMut::put::<Bytes> (#793)

Reserve capacity in BytesMut::put (#794)

Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

Guarantee address in slice() for empty slices. (#780)

Rename Vtable::to_* -> Vtable::into_* (#776)

Fix latest clippy warnings (#787)

Ignore BytesMut::freeze doctest on wasm (#790)

Move drop_fn of from_owner into vtable (#801)

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

Fix memory leak when using to_vec with Bytes::from_owner (#773)

#773: tokio-rs/bytes#773

Bytes v1.10.0

1.10.0 (February 3rd, 2025)

Added

Add feature to support platforms without atomic CAS (#467)

try_get_* methods for Buf trait (#753)

Implement Buf::chunks_vectored for Take (#617)

Implement Buf::chunks_vectored for VecDeque<u8> (#708)

Fixed

Remove incorrect guarantee for chunks_vectored (#754)

Ensure that tests pass under panic=abort (#749)

... (truncated)

Changelog

Sourced from bytes's changelog.

1.11.1 (February 3rd, 2026)

Fix integer overflow in BytesMut::reserve

1.11.0 (November 14th, 2025)

Bump MSRV to 1.57 (#788)

Fixed

fix: BytesMut only reuse if src has remaining (#803)

Specialize BytesMut::put::<Bytes> (#793)

Reserve capacity in BytesMut::put (#794)

Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

Guarantee address in slice() for empty slices. (#780)

Rename Vtable::to_* -> Vtable::into_* (#776)

Fix latest clippy warnings (#787)

Ignore BytesMut::freeze doctest on wasm (#790)

Move drop_fn of from_owner into vtable (#801)

1.10.1 (March 5th, 2025)

Fixed

Fix memory leak when using to_vec with Bytes::from_owner (#773)

1.10.0 (February 3rd, 2025)

Added

Add feature to support platforms without atomic CAS (#467)

try_get_* methods for Buf trait (#753)

Implement Buf::chunks_vectored for Take (#617)

Implement Buf::chunks_vectored for VecDeque<u8> (#708)

Fixed

Remove incorrect guarantee for chunks_vectored (#754)

Ensure that tests pass under panic=abort (#749)

1.9.0 (November 27, 2024)

Added

Add Bytes::from_owner to enable externally-allocated memory (#742)

Documented

... (truncated)

Commits

417dccd Release bytes v1.11.1 (#820)
d0293b0 Merge commit from fork
a7952fb chore: prepare bytes v1.11.0 (#804)
60cbb77 fix: BytesMut only reuse if src has remaining (#803)
7ce330f Move drop_fn of from_owner into vtable (#801)
4b53a29 Tweak BytesMut::remaining_mut (#795)
016fdbd Reserve capacity in BytesMut::put (#794)
ef7f257 Specialize BytesMut::put::<Bytes> (#793)
8b4f54d Ignore BytesMut::freeze doctest on wasm (#790)
16132ad Fix latest clippy warnings (#787)
Additional commits viewable in compare view

Updates openssl from 0.10.41 to 0.10.68

Release notes

Sourced from openssl's releases.

openssl-v0.10.68

What's Changed

fixes #2317 -- restore compatibility with our MSRV and release openssl 0.9.68 by @alex in sfackler/rust-openssl#2318

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.67...openssl-v0.10.68

openssl-v0.10.67

What's Changed

Added a utility function to ensure we never have an issue with 0-length slices from pointers again by @alex in sfackler/rust-openssl#2268

Fix CI for the latest rustc by @alex in sfackler/rust-openssl#2271

Add binding for EVP_DigestSqueeze by @initsecret in sfackler/rust-openssl#2270

libressl 4.0: const correctness for X509_LOOKUP_METHOD by @botovq in sfackler/rust-openssl#2276

Bump hex dev-dependency version by @alex in sfackler/rust-openssl#2277

Raise bindgen version by @alex in sfackler/rust-openssl#2278

Ensure Rsa::check_key doesn't leave errors on the stack by @alex in sfackler/rust-openssl#2279

Update some docs to use the corresponds macro by @rushilmehra in sfackler/rust-openssl#2282

Don't leave errors on the stack in MdCtxRef::digest_verify_final by @alex in sfackler/rust-openssl#2283

Adjustments for LibreSSL 4 by @botovq in sfackler/rust-openssl#2287

Explicit rustfmt config by @kornelski in sfackler/rust-openssl#2285

add basic EVP_KDF bindings by @reaperhulk in sfackler/rust-openssl#2289

add ossl3 thread pool bindings by @reaperhulk in sfackler/rust-openssl#2293

add argon2id support for ossl 3.2+ by @reaperhulk in sfackler/rust-openssl#2290

fix 3.2.0 thread support and simplify by @reaperhulk in sfackler/rust-openssl#2294

add libctx arg to argon2id by @reaperhulk in sfackler/rust-openssl#2295

support using threads in argon2id by @reaperhulk in sfackler/rust-openssl#2296

Ensure beginning and end of the error output is readable by @kornelski in sfackler/rust-openssl#2284

Test against 3.4.0-alpha1 by @sfackler in sfackler/rust-openssl#2302

Resolve clippy warnings from nightly by @alex in sfackler/rust-openssl#2310

fixes #2311 -- silencer resolver warnings by @alex in sfackler/rust-openssl#2312

Bump to 3.4.0-beta1 by @sfackler in sfackler/rust-openssl#2313

LibreSSL 4.0.0 by @botovq in sfackler/rust-openssl#2315

Release openssl v0.10.67 and openssl-sys v0.9.104 by @alex in sfackler/rust-openssl#2316

New Contributors

@initsecret made their first contribution in sfackler/rust-openssl#2270

@rushilmehra made their first contribution in sfackler/rust-openssl#2282

@kornelski made their first contribution in sfackler/rust-openssl#2285

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.66...openssl-v0.10.67

openssl-v0.10.66

What's Changed

Fixed invariant violation in MemBio::get_buf with empty results by @alex in sfackler/rust-openssl#2266

Release openssl v0.10.66 by @alex in sfackler/rust-openssl#2267

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.65...openssl-v0.10.66

openssl-v0.10.65

... (truncated)

Commits

be8dcfd Merge pull request #2318 from alex/msrv-fix
065cc77 fixes #2317 -- restore compatibility with our MSRV and release openssl 0.9.68
7b3ec80 Merge pull request #2316 from alex/bump-for-release
b510e8c Release openssl v0.10.67 and openssl-sys v0.9.104
ee3b024 Merge pull request #2315 from botovq/libressl-4.0.0
c4dabc2 CI: Update LibreSSL CI
f9027b7 LibreSSL 4.0.0 is released & stable
1b51ba5 Merge pull request #2313 from sfackler/sfackler-patch-1
de8a97c Bump to 3.4.0-beta1
3930464 Merge pull request #2312 from sfackler/alex-patch-1
Additional commits viewable in compare view

Updates quinn-proto from 0.8.4 to 0.10.6

Release notes

Sourced from quinn-proto's releases.

quinn-proto 0.11.13, quinn 0.11.9

What's Changed

quinn: Remove explicit write future structs by @gretchenfrage in quinn-rs/quinn#2226

proto: Make BytesSource private by @gretchenfrage in quinn-rs/quinn#2233

feat: Make the future returned by SendStream::stopped static by @Frando in quinn-rs/quinn#2220

refactor(quinn): Remove some usage of execute_poll by @gretchenfrage in quinn-rs/quinn#2232

Fix false positive GSO detection by @inetic in quinn-rs/quinn#2248

expose Connection::side() in quinn by @abonander in quinn-rs/quinn#2261

refactor(quinn): Configure out async_io::UdpSocket when unused by @matheus23 in quinn-rs/quinn#2264

proto: upgrade to rustls-platform-verifier 0.6 by @djc in quinn-rs/quinn#2276

Don't violate client CID limits when advertising a preferred address by @Ralith in quinn-rs/quinn#2282

Various enhancement to quinn perf by @stormshield-damiend in quinn-rs/quinn#2279

Updated quinn::Connection::send_datagram() docs by @gry8t in quinn-rs/quinn#2284

Collect qlog recovery metrics by @stormshield-fabs in quinn-rs/quinn#2278

proto: Add option to pad all application data packets to MTU by @FlorianUekermann in quinn-rs/quinn#2274

Update to socket2 v0.6 by @Thomasdezeeuw in quinn-rs/quinn#2291

Upgrade to fastbloom 0.12 by @djc in quinn-rs/quinn#2290

Fix flaky key update test by @Ralith in quinn-rs/quinn#2292

chore(Cargo.toml): support both socket2 v0.5 and v0.6 by @mxinden in quinn-rs/quinn#2294

Tiny clean up of a comment that was in the wrong place by @flub in quinn-rs/quinn#2306

Do not track lost_packets twice by @flub in quinn-rs/quinn#2308

proto: fix NewConnectionId size bound by @djc in quinn-rs/quinn#2311

Configure qlog in TransportConfig by @Ralith in quinn-rs/quinn#2305

Wake endpoint driver on rebind by @Ralith in quinn-rs/quinn#2325

Check for in-flight data on-demand by @Ralith in quinn-rs/quinn#2326

Fix in-flight byte count underflow by @Ralith in quinn-rs/quinn#2319

build(deps): bump criterion from 0.6.0 to 0.7.0 by @dependabot[bot] in quinn-rs/quinn#2330

build(deps): bump windows-sys from 0.59.0 to 0.60.2 by @dependabot[bot] in quinn-rs/quinn#2332

docs(quinn): Revise SendStream::write docs by @gretchenfrage in quinn-rs/quinn#2227

Improve quinn::ConnectionStats docs by @gry8t in quinn-rs/quinn#2340

Various enhancement for perf binaries by @stormshield-damiend in quinn-rs/quinn#2342

Perf/Bench enhancement by @stormshield-damiend in quinn-rs/quinn#2352

feat: add Connection::set_send_window() by @abonander in quinn-rs/quinn#2268

perf: add max udp payload size option by @Dreamacro in quinn-rs/quinn#2343

perf: move client and server on one binary by @Dreamacro in quinn-rs/quinn#2354

perf: rename perf binary to quinn-perf to prevent name clash with linux perf by @stormshield-damiend in quinn-rs/quinn#2360

Ignore async-std advisory for now by @djc in quinn-rs/quinn#2362

Upgrade to fastbloom 0.14 by @djc in quinn-rs/quinn#2363

Catch EOPNOTSUPP for opportunistic socket flags by @gongy in quinn-rs/quinn#2273

quinn-proto 0.11.10, quinn 0.11.7

Fixes potential issues building rustls-platform-verifier 0.4.x with rustls 0.23.24 and newer by upgrading to rustls-platform-verifier 0.5.x. Also contains a large number of small bug fixes and improvements and (hopefully) fixes the broken docs on docs.rs.

We added @gretchenfrage as a maintainer, thanks for all your contributions so far and hope for many more!

What's Changed

Avoid FIPS in docs.rs builds by @djc in quinn-rs/quinn#2040

chore(ci): Remove workaround for broken cc version by @matheus23 in quinn-rs/quinn#2044

... (truncated)

Commits

db2df61 Bump quinn-proto version
8d07b88 Downgrade duplicate packet message to debug level
bd171f8 Set workspace resolver explicitly
60da97e Avoid redundant link target in docs
d8b016c Use or_default() as suggested by clippy
da2e193 Silence clippy false positive
fbd1c6c Don't pre-allocate memory for every possible stream per connection
f659258 streams: extract max_send_data() helper
53830b6 Bump quinn-proto version to 0.10.5
c31f62b More principled error handling for invalid frames
Additional commits viewable in compare view

Updates users from 0.10.0 to 0.11.0

Release notes

Sourced from users's releases.

v0.11.0

Breaking changes

Certain functions now return Arc<OsStr> rather than Arc<OsString>

Bug fixes and other changes

Retry lookups with larger buffer sizes on ERANGE error condition (#38)

Switch logging to use Trace level rather than Debug (#39)

Commits

d6883b4 v0.11.0
f12df3b Add MSRV badge
092ffe3 Run all feature tests on CI, too
d705de3 Use cargo-hack to test all feature combinations
cde6740 Continue using the Entry API... for now
af2d86a Use Arc<OsStr> to avoid double redirection
5765d03 Fix doctest warnings
16de943 Add a Justfile
4b927ff Merge pull request #38 from Freaky/handle-erange
0bfda43 Merge pull request #39 from intgr/log-level-trace
Additional commits viewable in compare view

Updates h2 from 0.3.11 to 0.3.27

Release notes

Sourced from h2's releases.

v0.3.26

What's Changed

Limit number of CONTINUATION frames for misbehaving connections.

See https://seanmonstar.com/blog/hyper-http2-continuation-flood/ for more info.

v0.3.25

What's Changed

perf: optimize header list size calculations by @Noah-Kennedy in hyperium/h2#750

Full Changelog: hyperium/h2@v0.3.24...v0.3.25

v0.3.24

Fixed

Limit error resets for misbehaving connections.

v0.3.23

What's Changed

cherry-pick fix: streams awaiting capacity lockout in hyperium/h2#734

v0.3.22

What's Changed

Add header_table_size(usize) option to client and server builders.

Improve throughput when vectored IO is not available.

Update indexmap to 2.

New Contributors

@tottoto made their first contribution in hyperium/h2#714

@xiaoyawei made their first contribution in hyperium/h2#712

@Protryon made their first contribution in hyperium/h2#719

@4JX made their first contribution in hyperium/h2#638

@vuittont60 made their first contribution in hyperium/h2#724

v0.3.21

What's Changed

Fix opening of new streams over peer's max concurrent limit.

Fix RecvStream to return data even if it has received a CANCEL stream error.

Update MSRV to 1.63.

New Contributors

@DDtKey made their first contribution in hyperium/h2#703

@jwilm made their first contribution in hyperium/h2#707

v0.3.20

Bug Fixes

Bumps the cargo group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rand](https://github.com/rust-random/rand) | `0.7.3` | `0.8.5` | | [borsh](https://github.com/near/borsh-rs) | `0.9.3` | `0.10.4` | | [tokio](https://github.com/tokio-rs/tokio) | `1.14.1` | `1.26.0` | | [tar](https://github.com/alexcrichton/tar-rs) | `0.4.38` | `0.4.45` | | [tungstenite](https://github.com/snapview/tungstenite-rs) | `0.17.3` | `0.20.1` | | [ouroboros](https://github.com/someguynamedjosh/ouroboros) | `0.15.0` | `0.15.6` | | [bytes](https://github.com/tokio-rs/bytes) | `1.2.1` | `1.11.1` | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.41` | `0.10.68` | | [quinn-proto](https://github.com/quinn-rs/quinn) | `0.8.4` | `0.10.6` | | [users](https://github.com/ogham/rust-users) | `0.10.0` | `0.11.0` | | [h2](https://github.com/hyperium/h2) | `0.3.11` | `0.3.27` | | [keccak](https://github.com/RustCrypto/sponges) | `0.1.0` | `0.1.6` | | [shlex](https://github.com/comex/rust-shlex) | `1.1.0` | `1.3.0` | | [time](https://github.com/time-rs/time) | `0.1.43` | `0.1.45` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.7` | `0.3.23` | | [unsafe-libyaml](https://github.com/dtolnay/unsafe-libyaml) | `0.2.4` | `0.2.11` | Bumps the cargo group with 10 updates in the /programs/sbf directory: | Package | From | To | | --- | --- | --- | | [rand](https://github.com/rust-random/rand) | `0.7.3` | `0.8.5` | | [tar](https://github.com/alexcrichton/tar-rs) | `0.4.38` | `0.4.45` | | [ouroboros](https://github.com/someguynamedjosh/ouroboros) | `0.15.0` | `0.15.6` | | [bytes](https://github.com/tokio-rs/bytes) | `1.2.1` | `1.11.1` | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.41` | `0.10.68` | | [h2](https://github.com/hyperium/h2) | `0.3.11` | `0.3.21` | | [keccak](https://github.com/RustCrypto/sponges) | `0.1.0` | `0.1.6` | | [remove_dir_all](https://github.com/XAMPPRocky/remove_dir_all) | `0.5.2` | `0.5.3` | | [shlex](https://github.com/comex/rust-shlex) | `1.1.0` | `1.3.0` | | [unsafe-libyaml](https://github.com/dtolnay/unsafe-libyaml) | `0.2.4` | `0.2.11` | Bumps the cargo group with 1 update in the /storage-bigtable/build-proto directory: [bytes](https://github.com/tokio-rs/bytes). Updates `rand` from 0.7.3 to 0.8.5 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.7.3...0.8.5) Updates `borsh` from 0.9.3 to 0.10.4 - [Release notes](https://github.com/near/borsh-rs/releases) - [Changelog](https://github.com/near/borsh-rs/blob/borsh-v0.10.4/CHANGELOG.md) - [Commits](near/borsh-rs@v0.9.3...borsh-v0.10.4) Updates `tokio` from 1.14.1 to 1.26.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.14.1...tokio-1.26.0) Updates `tar` from 0.4.38 to 0.4.45 - [Commits](composefs/tar-rs@0.4.38...0.4.45) Updates `tungstenite` from 0.17.3 to 0.20.1 - [Changelog](https://github.com/snapview/tungstenite-rs/blob/master/CHANGELOG.md) - [Commits](snapview/tungstenite-rs@v0.17.3...v0.20.1) Updates `ouroboros` from 0.15.0 to 0.15.6 - [Commits](https://github.com/someguynamedjosh/ouroboros/commits) Updates `bytes` from 1.2.1 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.2.1...v1.11.1) Updates `openssl` from 0.10.41 to 0.10.68 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.41...openssl-v0.10.68) Updates `quinn-proto` from 0.8.4 to 0.10.6 - [Release notes](https://github.com/quinn-rs/quinn/releases) - [Commits](quinn-rs/quinn@0.8.4...0.10.6) Updates `users` from 0.10.0 to 0.11.0 - [Release notes](https://github.com/ogham/rust-users/releases) - [Commits](ogham/rust-users@v0.10.0...v0.11.0) Updates `h2` from 0.3.11 to 0.3.27 - [Release notes](https://github.com/hyperium/h2/releases) - [Changelog](https://github.com/hyperium/h2/blob/v0.3.27/CHANGELOG.md) - [Commits](hyperium/h2@v0.3.11...v0.3.27) Updates `keccak` from 0.1.0 to 0.1.6 - [Commits](RustCrypto/sponges@keccak-v0.1.0...keccak-v0.1.6) Updates `mio` from 0.7.14 to 0.8.11 - [Release notes](https://github.com/tokio-rs/mio/releases) - [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md) - [Commits](tokio-rs/mio@v0.7.14...v0.8.11) Updates `shlex` from 1.1.0 to 1.3.0 - [Changelog](https://github.com/comex/rust-shlex/blob/master/CHANGELOG.md) - [Commits](comex/rust-shlex@1.1.0...1.3.0) Updates `time` from 0.1.43 to 0.1.45 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](https://github.com/time-rs/time/commits) Updates `tracing-subscriber` from 0.3.7 to 0.3.23 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.7...tracing-subscriber-0.3.23) Updates `unsafe-libyaml` from 0.2.4 to 0.2.11 - [Release notes](https://github.com/dtolnay/unsafe-libyaml/releases) - [Commits](dtolnay/unsafe-libyaml@0.2.4...0.2.11) Updates `rand` from 0.7.3 to 0.8.5 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.7.3...0.8.5) Updates `tar` from 0.4.38 to 0.4.45 - [Commits](composefs/tar-rs@0.4.38...0.4.45) Updates `ouroboros` from 0.15.0 to 0.15.6 - [Commits](https://github.com/someguynamedjosh/ouroboros/commits) Updates `bytes` from 1.2.1 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.2.1...v1.11.1) Updates `openssl` from 0.10.41 to 0.10.68 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.41...openssl-v0.10.68) Updates `h2` from 0.3.11 to 0.3.21 - [Release notes](https://github.com/hyperium/h2/releases) - [Changelog](https://github.com/hyperium/h2/blob/v0.3.27/CHANGELOG.md) - [Commits](hyperium/h2@v0.3.11...v0.3.27) Updates `keccak` from 0.1.0 to 0.1.6 - [Commits](RustCrypto/sponges@keccak-v0.1.0...keccak-v0.1.6) Updates `remove_dir_all` from 0.5.2 to 0.5.3 - [Release notes](https://github.com/XAMPPRocky/remove_dir_all/releases) - [Changelog](https://github.com/XAMPPRocky/remove_dir_all/blob/master/CHANGELOG.md) - [Commits](https://github.com/XAMPPRocky/remove_dir_all/compare/v0.5.2...remove_dir_all@0.5.3) Updates `shlex` from 1.1.0 to 1.3.0 - [Changelog](https://github.com/comex/rust-shlex/blob/master/CHANGELOG.md) - [Commits](comex/rust-shlex@1.1.0...1.3.0) Updates `unsafe-libyaml` from 0.2.4 to 0.2.11 - [Release notes](https://github.com/dtolnay/unsafe-libyaml/releases) - [Commits](dtolnay/unsafe-libyaml@0.2.4...0.2.11) Updates `bytes` from 1.2.1 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.2.1...v1.11.1) --- updated-dependencies: - dependency-name: rand dependency-version: 0.8.5 dependency-type: direct:production dependency-group: cargo - dependency-name: borsh dependency-version: 0.10.4 dependency-type: direct:production dependency-group: cargo - dependency-name: tokio dependency-version: 1.26.0 dependency-type: direct:production dependency-group: cargo - dependency-name: tar dependency-version: 0.4.45 dependency-type: direct:production dependency-group: cargo - dependency-name: tungstenite dependency-version: 0.20.1 dependency-type: direct:production dependency-group: cargo - dependency-name: ouroboros dependency-version: 0.15.6 dependency-type: direct:production dependency-group: cargo - dependency-name: bytes dependency-version: 1.11.1 dependency-type: direct:production dependency-group: cargo - dependency-name: openssl dependency-version: 0.10.68 dependency-type: direct:production dependency-group: cargo - dependency-name: quinn-proto dependency-version: 0.10.6 dependency-type: direct:production dependency-group: cargo - dependency-name: users dependency-version: 0.11.0 dependency-type: direct:production dependency-group: cargo - dependency-name: h2 dependency-version: 0.3.27 dependency-type: indirect dependency-group: cargo - dependency-name: keccak dependency-version: 0.1.6 dependency-type: indirect dependency-group: cargo - dependency-name: mio dependency-version: 0.8.11 dependency-type: indirect dependency-group: cargo - dependency-name: shlex dependency-version: 1.3.0 dependency-type: indirect dependency-group: cargo - dependency-name: time dependency-version: 0.1.45 dependency-type: indirect dependency-group: cargo - dependency-name: tracing-subscriber dependency-version: 0.3.23 dependency-type: indirect dependency-group: cargo - dependency-name: unsafe-libyaml dependency-version: 0.2.11 dependency-type: indirect dependency-group: cargo - dependency-name: rand dependency-version: 0.8.5 dependency-type: direct:production dependency-group: cargo - dependency-name: tar dependency-version: 0.4.45 dependency-type: indirect dependency-group: cargo - dependency-name: ouroboros dependency-version: 0.15.6 dependency-type: indirect dependency-group: cargo - dependency-name: bytes dependency-version: 1.11.1 dependency-type: indirect dependency-group: cargo - dependency-name: openssl dependency-version: 0.10.68 dependency-type: indirect dependency-group: cargo - dependency-name: h2 dependency-version: 0.3.21 dependency-type: indirect dependency-group: cargo - dependency-name: keccak dependency-version: 0.1.6 dependency-type: indirect dependency-group: cargo - dependency-name: remove_dir_all dependency-version: 0.5.3 dependency-type: indirect dependency-group: cargo - dependency-name: shlex dependency-version: 1.3.0 dependency-type: indirect dependency-group: cargo - dependency-name: unsafe-libyaml dependency-version: 0.2.11 dependency-type: indirect dependency-group: cargo - dependency-name: bytes dependency-version: 1.11.1 dependency-type: indirect dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

codacy-production · 2026-04-23T02:14:47Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric Results

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes. Give us feedback}

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 23, 2026

Navigation Menu

Bump the cargo group across 3 directories with 18 updates - #49

Bump the cargo group across 3 directories with 18 updates#49
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-3d5a8c7d4c

dependabot Bot commented on behalf of github Apr 23, 2026

Uh oh!

codacy-production Bot commented Apr 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 23, 2026

[0.8.5] - 2021-08-20

Fixes

Rngs

Documentation

[0.8.4] - 2021-06-15

Additions

Other

[0.8.3] - 2021-01-25

Fixes

[0.8.2] - 2021-01-12

Fixes

borsh-derive-internal-v0.10.4

borsh-derive-v0.10.4

borsh-schema-derive-internal-v0.10.4

borsh-v0.10.4

[0.10.4] - 2024-09-23

[0.10.3] - 2022-03-22

[0.10.2] - 2022-02-14

[0.10.1] - 2022-02-08

[0.10.0] - 2023-01-19

Tokio v1.26.0

Fixed

Added

Changed

Internal Changes

Unstable

Documented

0.20.1

0.20.0

0.19.0

0.18.0

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

Bytes v1.11.0

1.11.0 (November 14th, 2025)

Fixed

Internal changes

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

Bytes v1.10.0

1.10.0 (February 3rd, 2025)

Added

Fixed

1.11.1 (February 3rd, 2026)

1.11.0 (November 14th, 2025)

Fixed

Internal changes

1.10.1 (March 5th, 2025)

Fixed

1.10.0 (February 3rd, 2025)

Added

Fixed

1.9.0 (November 27, 2024)

Added

Documented

openssl-v0.10.68

What's Changed

openssl-v0.10.67

What's Changed

New Contributors

openssl-v0.10.66

What's Changed

openssl-v0.10.65

quinn-proto 0.11.13, quinn 0.11.9

What's Changed

quinn-proto 0.11.10, quinn 0.11.7

What's Changed

v0.11.0

Breaking changes

Bug fixes and other changes

v0.3.26

What's Changed

v0.3.25

What's Changed

v0.3.24

Fixed

v0.3.23