Skip to content

deps(cargo): bump the cargo-all group across 1 directory with 19 updates - #95

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-all-23720477c8
Closed

deps(cargo): bump the cargo-all group across 1 directory with 19 updates#95
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-all-23720477c8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-all group with 19 updates in the / directory:

Package From To
base64 0.22.1 0.23.1
rusqlite 0.39.0 0.41.1
dirs 6.0.0 7.0.0
sysinfo 0.38.4 0.39.6
rodio 0.22.2 0.23.0
sha2 0.10.9 0.11.1
rand 0.9.5 0.10.3
tower-http 0.6.11 0.7.1
tokio-tungstenite 0.28.0 0.29.0
tao 0.34.8 0.37.2
wry 0.54.4 0.57.1
totp-rs 5.7.2 6.0.0
hotpath 0.16.1 0.30.2
jsonschema 0.46.10 0.60.2
safetensors 0.5.3 0.7.0
fancy-regex 0.14.0 0.19.2
espeak-ng 0.1.3 0.2.0
cpal 0.17.3 0.18.2
tokenizers 0.22.2 0.23.2

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates rusqlite from 0.39.0 to 0.41.1

Release notes

Sourced from rusqlite's releases.

0.41.1

What's Changed

  • No check of PRAGMA name with SQLCipher #1923 (#1924)
  • Fix panic with a zero-argument deterministic scalar function #1925 (#1927)

Full Changelog: rusqlite/rusqlite@v0.41.0...v0.41.1

0.41.0

What's Changed

  • Check PRAGMA is valid with the help of pragma_list #1857
  • Fix UtcDateTime #1859
  • Bump sqlite3-parser version #1864
  • Edition 2024 #1863
  • Use u64 for zeroblob #1867
  • Fix virtual table set_result #1868
  • Bump bundled SQLCipher to version 4.17.0 #1870
  • Refactor bind_parameter and set_result #1871
  • Update prettyplease requirement from 0.2.20 to 0.3.0 #1872
  • Update syn requirement from 2.0.89 to 3.0.1 #1873
  • Fix Connection::serialize #1874 (#1875)
  • Make Statement::column_names,columns,columns_with_metadata return Iterator #1877
  • Introduce DEFAULT_NAME #1883
  • Expose sqlite3_file_control #1881 (#1882)
  • Replace assert!(matches! with assert_matches! #1851
  • Lower MSRV to 1.88.0 #1885
  • Fix clippy warnings #1888
  • Apply and check MSRV #1890
  • Bump minimal SQLite version to 3.45.3 #1894
  • sqlite3_set_clientdata / sqlite3_get_clientdata #977, #1708 (#1791)
  • Fix discrepancy between backup and restore #1893
  • Don't enable SQLITE_ENABLE_MEMORY_MANAGEMENT in the bundled build #1900
  • create_aggregate_function / create_window_function are missing a Send bound #1898
  • use-after-free from safe code in trace_v2 / busy_handler / ... #1899
  • feat: add Values::get_subtype to read SQLite value subtype in vtab callbacks #1879
  • Bump bindgen version to 0.73 #1903
  • Bump sqlite-wasm-rs to 0.6.1 #1904
  • Relax sqlite-wasm-rs version #1906
  • Rerun bundled-sqlcipher build when OPENSSL_* env changes #1910
  • Bump bundled SQLite version to 3.54.0 #1913
  • Fix possible memory leak on error in deserialize_read_exact #1909
  • Move sqlite3_wal_checkpoint_v2 binding #1667 (#1915)
  • Bump uuid version to 1.28 #1916

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.41.0

0.40.2

What's Changed

  • Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

... (truncated)

Commits
  • 18ee76d Prepare next release
  • 11ac8f5 Merge pull request #1924 from gwenn/pragma_name_check
  • 4d2be94 Merge pull request #1927 from gwenn/from_raw_parts
  • a60e76b Merge pull request #1919 from gwenn/0.41.0
  • f652850 Prepare release
  • 661107f Merge pull request #1917 from LucaCappelletti94/feat/sqlcipher-src
  • dd770f6 Fix the SQLCipher license link and match upstream style
  • 2daf10a Select the SQLCipher source with cfg_select
  • bb40153 Merge pull request #1916 from gwenn/uuid
  • 92a7d49 Bump uuid version to 1.28
  • Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates sysinfo from 0.38.4 to 0.39.6

Changelog

Sourced from sysinfo's changelog.

0.39.6

  • NetBSD: Add support for disk I/O usage.
  • NetBSD: Improve retrieval of disk information.

0.39.5

  • macOS: Fix build for apple app store

0.39.4

  • Unix: Fix soundness issue when retrieving user's groups.
  • macOS: Add new macOS version name.
  • macOS: Fix inaccurate open_files returned value.

0.39.3

  • Unix: Fix retrieval of Network::mac_addr.
  • Linux: Improve retrieval of process information if process terminates while doing so.

0.39.2

  • Windows: Greatly improve performance of System::refresh_cpu_specifics when CPU usage is not requested.
  • iOS: Fix compilation error when user feature is enabled.
  • Linux: Correctly set thread information for processes.

0.39.1

  • Linux: Fix wrong network numbers computation.

0.39.0

  • Update minimum supported rust version to 1.95.
  • Add new NetworkData::operational_state API.
  • Add new Process::cgroup_limits API (only returning data on Linux).
  • All supported systems other than Windows: Improve performance of Networks::refresh*.
  • All supported systems other than Windows: Fix soundness issue when retrieving users.
  • Linux: Take into account parent cgroup memory limits.
  • Linux: Fix panic when retrieving process information on ESXi.
  • FreeBSD: Use the name of dataset as name for zfs disks.
Commits
  • 1bc6ed4 Update crate version to 0.39.6
  • da9bea0 Update CHANGELOG for 0.39.6
  • cefd877 Update src/unix/bsd/netbsd/system.rs
  • 9d79f93 Fix NetBSD disk I/O and process I/O statistics
  • 029025e Update crate version to 0.39.5
  • 78205e7 Update CHANGELOG for 0.39.5
  • 2a39746 Fix build for apple app store
  • c07bb44 Update CHANGELOG for 0.39.4
  • 559b07d Update crate version to 0.39.4
  • 07e3177 Linux: Fix soundness issue when retrieving user groups
  • Additional commits viewable in compare view

Updates rodio from 0.22.2 to 0.23.0

Changelog

Sourced from rodio's changelog.

Version [0.23.0] (2026-10-11)

A minimal release for users blocked on old cpal version while we are working on a bigger release.

Changed

  • Breaking: Updated cpal to v0.18.2. Wherever rodio exposed a cpal error type (StreamError, BuildStreamError, PlayStreamError, DevicesError, DefaultStreamConfigError, SupportedStreamConfigsError) it now uses the unified cpal::Error, re-exported as CpalError together with CpalErrorKind. rodio::DevicesError is removed.
Commits
  • c93a661 try and squeeze a release out of ci
  • 3f4dc1c fix: replace an if/else block with ? for clippy 1.97
  • 3307764 docs: changelog and upgrade notes for cpal 0.18
  • 35e6d78 chore: update cpal to 0.18.2
  • See full diff in compare view

Updates sha2 from 0.10.9 to 0.11.1

Commits

Updates rand from 0.9.5 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)

... (truncated)

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates tower-http from 0.6.11 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

  • fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)
  • fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)
  • request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

  • fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

  • behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)
  • decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)
  • decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)
  • fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)
  • fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)
  • set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

... (truncated)

Commits
  • c941451 chore(release): prepare 0.7.1 (#729)
  • 9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
  • e2582e2 Allow ignoring multi-range requests (#727)
  • 888f7fe feat(services): configure directory redirects (#728)
  • 5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
  • d154adb fix: reject multipart ranges before validation (#661)
  • d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
  • 90c072b Propagate ServeDir::try_call I/O errors (#718)
  • 860922e fix(decompression): don't end the body on an empty data frame (#722)
  • 8532252 docs(example)/custom future with multiple bodies (#711)
  • Additional commits viewable in compare view

Updates tokio-tungstenite from 0.28.0 to 0.29.0

Changelog

Sourced from tokio-tungstenite's changelog.

0.29.0

Commits

Updates tao from 0.34.8 to 0.37.2

Release notes

Sourced from tao's releases.

tao v0.37.2

Updating crates.io index
     Locking 361 packages to highest compatible versions
      Adding dlopen2 v0.8.2 (available: v0.9.0)
      Adding gdkwayland-sys v0.18.2 (available: v0.19.0)
      Adding gdkx11-sys v0.18.2 (available: v0.19.0)
      Adding gtk v0.18.2 (available: v0.19.0)
      Adding jni v0.21.1 (available: v0.22.4)
      Adding parking_lot v0.12.5 (available: v0.13.0)
      Adding raw-window-handle v0.4.3 (available: v0.6.2)
      Adding raw-window-handle v0.5.2 (available: v0.6.2)
      Adding syn v2.0.119 (available: v3.0.9)
      Adding toml v0.8.2 (available: v0.8.23)
      Adding toml_datetime v0.6.3 (available: v0.6.11)
      Adding toml_edit v0.20.2 (available: v0.20.7)
      Adding windows-core v0.62.2 (available: v0.100.0)
      Adding windows-version v0.1.7 (available: v0.100.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1350 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (363 crate dependencies)
Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate:     proc-macro-error
Version:   1.0.4
Warning:   unmaintained
Title:     proc-macro-error is unmaintained
Date:      2024-09-01
ID:        RUSTSEC-2024-0370
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0370


Crate:     glib
Version:   0.18.5
Warning:   unsound
Title:     Unsoundness in Iterator and DoubleEndedIterator impls for glib::VariantStrIter
Date:      2024-03-30
ID:        RUSTSEC-2024-0429
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0429


warning: 3 allowed warnings found
</tr></table>

... (truncated)

Changelog

Sourced from tao's changelog.

[0.37.2]

  • d19f4c12 (#1356 by @​yuezk) Fix compilation on FreeBSD, OpenBSD, NetBSD, and DragonFly BSD by enabling the resize hit-test helper used by the GTK backend.
  • 3fcda65f (#1351 by @​marrionesa) Fixed undefined behavior in the Linux raw_display_handle_rwh_06 implementations: a failed XOpenDisplay (null) no longer reaches XDefaultScreen / NonNull::new_unchecked, the null Wayland wl_display is checked, and both now return Err(HandleError::Unavailable). The rwh_05 implementations also skip the XDefaultScreen call when the display is null. See #1347.
  • 176eaef4 (#1381 by @​helenanova) Fix a Linux session crash where every touch event near the border of an undecorated window re-issued begin_resize_drag_for_device; a resize drag now only starts on touch begin.
  • 1316232d (#1267 by @​osman-yuksel) On macOS, fix an abort (SIGABRT) when a drag entered or was dropped on a window while carrying no NSFilenamesPboardType entry, which is the case for text, URLs and promised files (for example a track dragged out of Music.app). The pasteboard was unwrapped unconditionally inside the draggingEntered: and performDragOperation: callbacks, and since those cannot unwind, the resulting panic aborted the process instead of propagating. Such drags now report no paths.
  • 749385b4 (#1391 by @​RaphaelFakhri) On Linux, fix KeyCode::to_scancode returning the scancode of a different key for KeyM, BracketRight, Numpad4, Numpad5, Numpad6 and Numpad7.
  • 19a43d27 (#1372 by @​ali-issa) On macOS, Window::drag_window no longer panics in debug builds when there is no current event (for example when the drag is requested after the mouse-down was handled); it logs a warning and returns Ok(()) without dragging.
  • 9aa859e1 (#1368 by @​Tunglies) Fix excessive memory growth when repeatedly creating and closing windows on macOS.
  • 8423382b (#1354 by @​nedtwigg) On macOS and iOS, declare the Objective-C method implementations and CFRunLoop callbacks extern "C-unwind", so an Objective-C exception raised beneath one (for example inside [super sendEvent:]) unwinds to the system's handler instead of aborting the process with "panic in a function that cannot unwind". Apps built with panic = "abort" still abort.
  • 2514c69d (#1361 by @​4o3F) On Windows, fix incorrect client sizes when creating or resizing an initially hidden, undecorated window with shadows by applying consistent client-area calculations to both WM_NCCALCSIZE parameter forms.
  • 2831c7d6 (#1353 by @​zzentq) On Windows, fix a gap at the bottom of an undecorated window that goes fullscreen while maximized: the client area was clamped to the monitor work area.
  • 2d918a69 (#1352 by @​Legend-Master) On Windows, delay unmaximizing the window if it's hidden to avoid it flashing briefly.

[0.37.1]

  • 365089b6 (#1341 by @​Legend-Master) On Windows, fix visibility flickers when calling windowing functions

  • f79aa3a1 (#1342 by @​Legend-Master) On Windows, fix set_maximized and set_minimized calls don't work if the window's built with with_focused(false).

    Note: this change will also make that if the window is created through with_focused(false), subsequent window.set_visible(true) calls will now focus the window (the current behavior is the window only gets focus if you call window.set_focus() or window.set_maximized(true)) this is consistent with the other platforms.

[0.37.0]

  • beb88249 (#1304) Fix Android event loop hanging on first IPC call. When the ndk_glue event pipe and the wake fd became ready at the same time, ALooper_pollAll could return the fd event instead of ALOOPER_POLL_WAKE, so the loop never drained the user-event channel and every invoke response sat there forever. The event loop now drains pending user events on every iteration, regardless of what the poll reported.
  • 27e4d01e (#1298) Fix a mismatched meta-variable name in the android_binding macro.
  • 992909ac On Windows, skip set_skip_taskbar if skip_taskbar is false when creating the window and on taskbar restars.
  • 95636d5f (#1301) On iOS, fixed a startup panic in debug builds on iOS versions older than 26, caused by registering the iOS 26-only preferredWindowingControlStyleForScene: method inside the UIWindowSceneDelegate protocol block.
  • a3ff3f03 On iOS, always implement application:configurationForConnectingSceneSession:options: on the application delegate, using the role of the connecting session, so the tao scene delegate is installed whenever the system runs the app on the scene lifecycle - which iOS 26 and above does even for apps whose Info.plist does not declare a UIApplicationSceneManifest. Windows are now attached to a scene whenever one is connected instead of only when the Info.plist enables multiple scenes, and windows created before the first scene connects are adopted by it, so they are still displayed.
  • eebd58f9 (#1261) On iOS, emit WindowEvent::Destroyed for a scene's windows when the scene disconnects. Previously sceneDidDisconnect: was a no-op, so windows tied to a scene never reported their destruction when the system reclaimed the scene.
  • f6671e34 (#1291) Bumped MSRV to 1.85
  • 04394e48 (#1313) On Windows, fix Window functions panics after the parent event loop dropped, they log the errors instead
  • f8722bd3 (#1292) Updated windows and windows-core to 0.62, this drop Windows 7 support, see microsoft/windows-rs#3808
  • 493dc3a8 (#1306) On Windows, delay maximizing the window if it's hidden to avoid it flashing briefly. This also changed the size and position returned to pre-maximized states if you query them with the window being hidden and called maximize
  • bd1b990b (#1296) On Windows, fixed flashing title bar on undecorated windows creation
  • 36b31b79 (#1157) Exits the process on receiving WM_ENDSESSION message, this fixes the cannot move state from Destroyed crash after receiving the message from Restart Manager

[0.36.0]

  • 2b818c4e (#1288 by @​Legend-Master) Breaking Change:

    Changed the names of the Android JNI lifecycle functions exposed by android_binding! as follows:

    • create to onFirstActivityCreate
    • onActivityCreate to onCreate
    • start to onStart
    • resume to onResume

... (truncated)

Commits
  • 2d9b2ba publish new versions (#1357)
  • 1316232 fix(macos): don't abort on drags without file paths (#1267)
  • 749385b fix(linux): return the right scancode from KeyCode::to_scancode (#1391)
  • 9977d58 refactor(macos): migrate WindowDelegate to define_class! (#1384)
  • 176eaef fix(linux): begin touch resize drag only on TouchBegin (#1381)
  • 0c025d2 refactor(macos): migrate TaoView to define_class! (#1383)
  • 1580630 refactor(macos): migrate some msg_send to objc2 framework crate functions (...
  • dfabffb chore: disable CODEOWNERS file (#1374)
  • 9aa859e fix(macos): correct window ownership and superclass deallocation (#1368)
  • 19a43d2 fix(macos): don't panic in drag_window without a current event (#1372)
  • Additional commits viewable in compare view

Updates wry from 0.54.4 to 0.57.1

Release notes

Sourced from wry's releases.

wry v0.57.1

Updating crates.io index
     Locking 425 packages to highest Rust 1.85 compatible versions
      Adding gdkx11 v0.18.2 (available: v0.19.0, requires Rust 1.92)
      Adding generic-array v0.14.7 (available: v0.14.9)
      Adding getrandom v0.3.4 (available: v0.4.3)
      Adding gtk v0.18.2 (available: v0.19.0, requires Rust 1.92)
      Adding icu_collections v2.1.1 (available: v2.4.0, requires Rust 1.88)
      Adding icu_locale_core v2.1.1 (available: v2.4.0, requires Rust 1.88)
      Adding icu_normalizer v2.1.1 (available: v2.4.0, requires Rust 1.88)
      Adding icu_normalizer_data v2.1.1 (available: v2.4.0, requires Rust 1.88)
      Adding icu_properties v2.1.2 (available: v2.4.0, requires Rust 1.88)
      Adding icu_properties_data v2.1.2 (available: v2.4.0, requires Rust 1.88)
      Adding icu_provider v2.1.1 (available: v2.4.0, requires Rust 1.88)
      Adding idna_adapter v1.2.1 (available: v1.2.2, requires Rust 1.86)
      Adding javascriptcore-rs v1.1.2 (available: v2.0.0)
      Adding jni v0.21.1 (available: v0.22.4)
      Adding libloading v0.8.9 (available: v0.9.0, requires Rust 1.88.0)
      Adding sha2 v0.10.9 (available: v0.11.0)
      Adding soup3 v0.5.0 (available: v0.8.0)
      Adding time v0.3.45 (available: v0.3.55, requires Rust 1.88.0)
      Adding time-core v0.1.7 (available: v0.1.9, requires Rust 1.88.0)
      Adding time-macros v0.2.25 (available: v0.2.32, requires Rust 1.88.0)
      Adding toml v0.8.2 (available: v0.8.23)
      Adding toml_datetime v0.6.3 (available: v0.6.11)
      Adding toml_edit v0.20.2 (available: v0.20.7)
      Adding wasip2 v1.0.1+wasi-0.2.4 (available: v1.0.4+wasi-0.2.12, requires Rust 1.87.0)
      Adding wayland-protocols v0.32.12 (available: v0.32.13, requires Rust 1.86)
      Adding wgpu v23.0.1 (available: v26.0.1)
      Adding windows-core v0.62.2 (available: v0.100.0, requires Rust 1.95)
      Adding windows-version v0.1.7 (available: v0.100.0, requires Rust 1.95)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1350 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (426 crate dependencies)
Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate:     proc-macro-error
Version:   1.0.4
Warning:   unmaintained
</tr></table>

... (truncated)

Changelog

Sourced from wry's changelog.

[0.57.1]

  • f9b8bee (#1885 by @​LucaCappelletti94) On Android, read __wryActivityId only when the intent or saved state contains it.
  • 1f86475 (#1895 by @​Arthurmtro) On Android, run initialization scripts once on URLs that are not intercepted by a custom protocol when the WebView supports DOCUMENT_START_SCRIPT, instead of a second time from onPageStarted.
  • b6bef41 (#1865 by @​velocitysystems) On Android, stop the WebView from applying the Range header a second time to a custom protocol 206 response, and serve ranges past 2 GiB.
  • d8fe88d (#1847 by @​Legend-Master) Moved to edition 2024
  • 75f2b48 (#1893 by @​TimeToBuildBob) On Linux, isolate download failure state per download so a canceled or failed download does not make later successful downloads report failure.
  • 9a5f3aa (#1868 by @​Legend-Master) Log eval exceptions when tracing feature's enabled at debug level. (thanks #1849 for bring this up)
  • 66cdfa1 (#1866 by @​steipete) On macOS, only activate the application and request initial keyboard focus when the new webview is both visible and focused. Creating hidden or unfocused webviews no longer steals focus.
  • d93a812 (#1844 by @​cpruijsen) On macOS, collect dragged file paths via NSPasteboard....

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 2, 2026
@dependabot
dependabot Bot requested a review from eugenehp as a code owner November 2, 2026 18:56
@dependabot
deps(cargo): bump the cargo-all group across 1 directory with 19 updates
73c98e1 
Bumps the cargo-all group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.39.0` | `0.41.1` |
| dirs | `6.0.0` | `7.0.0` |
| [sysinfo](https://github.com/GuillaumeGomez/sysinfo) | `0.38.4` | `0.39.6` |
| [rodio](https://github.com/RustAudio/rodio) | `0.22.2` | `0.23.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.1` |
| [rand](https://github.com/rust-random/rand) | `0.9.5` | `0.10.3` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.11` | `0.7.1` |
| [tokio-tungstenite](https://github.com/snapview/tokio-tungstenite) | `0.28.0` | `0.29.0` |
| [tao](https://github.com/tauri-apps/tao) | `0.34.8` | `0.37.2` |
| [wry](https://github.com/tauri-apps/wry) | `0.54.4` | `0.57.1` |
| [totp-rs](https://github.com/constantoine/totp-rs) | `5.7.2` | `6.0.0` |
| [hotpath](https://github.com/hotpath-rs/hotpath) | `0.16.1` | `0.30.2` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.46.10` | `0.60.2` |
| [safetensors](https://github.com/huggingface/safetensors) | `0.5.3` | `0.7.0` |
| [fancy-regex](https://github.com/fancy-regex/fancy-regex) | `0.14.0` | `0.19.2` |
| [espeak-ng](https://github.com/eugenehp/espeak-ng-rs) | `0.1.3` | `0.2.0` |
| [cpal](https://github.com/RustAudio/cpal) | `0.17.3` | `0.18.2` |
| [tokenizers](https://github.com/huggingface/tokenizers) | `0.22.2` | `0.23.2` |



Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `rusqlite` from 0.39.0 to 0.41.1
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.39.0...v0.41.1)

Updates `dirs` from 6.0.0 to 7.0.0

Updates `sysinfo` from 0.38.4 to 0.39.6
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.38.4...v0.39.6)

Updates `rodio` from 0.22.2 to 0.23.0
- [Changelog](https://github.com/RustAudio/rodio/blob/v0.23.0/CHANGELOG.md)
- [Commits](RustAudio/rodio@v0.22.2...v0.23.0)

Updates `sha2` from 0.10.9 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.1)

Updates `rand` from 0.9.5 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.9.5...0.10.3)

Updates `tower-http` from 0.6.11 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.11...tower-http-0.7.1)

Updates `tokio-tungstenite` from 0.28.0 to 0.29.0
- [Changelog](https://github.com/snapview/tokio-tungstenite/blob/master/CHANGELOG.md)
- [Commits](snapview/tokio-tungstenite@v0.28.0...v0.29.0)

Updates `tao` from 0.34.8 to 0.37.2
- [Release notes](https://github.com/tauri-apps/tao/releases)
- [Changelog](https://github.com/tauri-apps/tao/blob/dev/CHANGELOG.md)
- [Commits](tauri-apps/tao@tao-v0.34.8...tao-v0.37.2)

Updates `wry` from 0.54.4 to 0.57.1
- [Release notes](https://github.com/tauri-apps/wry/releases)
- [Changelog](https://github.com/tauri-apps/wry/blob/dev/CHANGELOG.md)
- [Commits](tauri-apps/wry@wry-v0.54.4...wry-v0.57.1)

Updates `totp-rs` from 5.7.2 to 6.0.0
- [Release notes](https://github.com/constantoine/totp-rs/releases)
- [Changelog](https://github.com/constantoine/totp-rs/blob/master/CHANGELOG.md)
- [Commits](constantoine/totp-rs@v5.7.2...v6.0.0)

Updates `hotpath` from 0.16.1 to 0.30.2
- [Release notes](https://github.com/hotpath-rs/hotpath/releases)
- [Changelog](https://github.com/hotpath-rs/hotpath/blob/main/CHANGELOG.md)
- [Commits](hotpath-rs/hotpath@v0.16.1...v0.30.2)

Updates `jsonschema` from 0.46.10 to 0.60.2
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.46.10...ruby-v0.60.2)

Updates `safetensors` from 0.5.3 to 0.7.0
- [Release notes](https://github.com/huggingface/safetensors/releases)
- [Changelog](https://github.com/safetensors/safetensors/blob/main/RELEASE.md)
- [Commits](safetensors/safetensors@v0.5.3...v0.7.0)

Updates `fancy-regex` from 0.14.0 to 0.19.2
- [Release notes](https://github.com/fancy-regex/fancy-regex/releases)
- [Changelog](https://github.com/fancy-regex/fancy-regex/blob/main/CHANGELOG.md)
- [Commits](fancy-regex/fancy-regex@0.14.0...0.19.2)

Updates `espeak-ng` from 0.1.3 to 0.2.0
- [Release notes](https://github.com/eugenehp/espeak-ng-rs/releases)
- [Changelog](https://github.com/eugenehp/espeak-ng-rs/blob/main/CHANGELOG.md)
- [Commits](eugenehp/espeak-ng-rs@v0.1.3...v0.2.0)

Updates `cpal` from 0.17.3 to 0.18.2
- [Release notes](https://github.com/RustAudio/cpal/releases)
- [Changelog](https://github.com/RustAudio/cpal/blob/master/CHANGELOG.md)
- [Commits](RustAudio/cpal@v0.17.3...v0.18.2)

Updates `tokenizers` from 0.22.2 to 0.23.2
- [Release notes](https://github.com/huggingface/tokenizers/releases)
- [Commits](huggingface/tokenizers@v0.22.2...v0.23.2)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: cpal
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: dirs
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-all
- dependency-name: espeak-ng
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: fancy-regex
  dependency-version: 0.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: hotpath
  dependency-version: 0.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: jsonschema
  dependency-version: 0.60.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: rodio
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: rusqlite
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: safetensors
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: sysinfo
  dependency-version: 0.39.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: tao
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: tokenizers
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: tokio-tungstenite
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: totp-rs
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-all
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: wry
  dependency-version: 0.57.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps(cargo): bump the cargo-all group with 19 updates deps(cargo): bump the cargo-all group across 1 directory with 19 updates Nov 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-all-23720477c8 branch from fcbe15c to 73c98e1 Compare November 2, 2026 19:43
@eugenehp eugenehp mentioned this pull request Nov 3, 2026
Open
@eugenehp

eugenehp commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Superseded: these updates already landed on release/0.1.1 (#96), so closing.

@eugenehp eugenehp closed this Nov 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-all-23720477c8 branch November 3, 2026 09:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@eugenehp eugenehp Awaiting requested review from eugenehp eugenehp is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@eugenehp