Skip to content

build: Bump the cargo group across 1 directory with 30 updates - #685

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src/cargo-96c3f6dc0b
Closed

build: Bump the cargo group across 1 directory with 30 updates#685
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src/cargo-96c3f6dc0b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 30 updates in the /src directory:

Package From To
serde_json 1.0.151 1.0.154
thiserror 2.0.20 2.0.21
clap 4.6.6 4.6.7
pollster 0.4.0 1.0.1
ort 2.0.0-rc.13 2.0.0-rc.15
log 0.4.34 0.4.35
toml 1.1.5+spec-1.1.0 1.1.6+spec-1.1.0
dirs 6.0.0 7.0.0
opener 0.8.5 0.9.0
libc 0.2.189 0.2.191
objc2 0.6.4 0.6.5
winresource 0.1.31 0.1.34
png 0.17.16 0.18.1
base64 0.22.1 0.23.1
ureq 2.12.1 3.4.1
webpki-roots 0.26.11 1.0.10
rustls-native-certs 0.8.4 0.8.5
sha2 0.10.9 0.11.1
cpal 0.16.0 0.18.2
memmap2 0.9.11 0.9.12
resvg 0.48.1 0.49.0
jni-sys 0.3.1 0.4.1
getrandom 0.3.4 0.4.3
tonic 0.14.6 0.14.9
tonic-prost 0.14.6 0.14.9
tokio 1.53.3 1.54.1
tonic-prost-build 0.14.6 0.14.9
protox 0.9.1 0.10.0
fontdb 0.23.0 0.24.0
unicode-script 0.5.8 0.5.9

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates pollster from 0.4.0 to 1.0.1

Changelog

Sourced from pollster's changelog.

[1.0.1] - 2026-07-10

Fixed

  • Use doc_cfg instead of doc_auto_cfg for docsrs builds

[1.0.0] - 2026-07-09

Changed

  • FutureExt is now implemented for IntoFuture, not just Future
Commits

Updates ort from 2.0.0-rc.13 to 2.0.0-rc.15

Release notes

Sourced from ort's releases.

v2.0.0-rc.15

2.0.0-rc.15

💖 If you find ort useful, please consider supporting us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

✨ Supporters get priority (<24h) issue resolution & support!

rc.15 fixes over 30 instances of undefined behavior and adds no new features. It is highly recommended to upgrade to rc.15 as soon as possible, as multiple memory leaks/memory safety issues were fixed.

Alternative backends will be updated sometime before Oct 23.

  • run_async now only accepts owned inputs.
  • ExecutionProviderLibrary::unregister has been removed. You can still unregister EP libraries via the unsafe -sys API.
  • ValueRefMut no longer implements DerefMut to Value. It has the same methods as &mut Value and can be used in the same places in the ort API. It is recommended to take ValueRefMut anywhere you used to take &mut Value.
  • InMemorySession no longer implements DerefMut to Session. It has the same methods as &mut Session.
  • Kernel now requires Send; ThreadManager requires Send + Sync.
  • SessionBuilder::with_external_initializer_file_in_memory now takes Arc<[u8]> instead of Cow<'static, [u8]>.

v2.0.0-rc.14

2.0.0-rc.14

💖 If you find ort useful, please consider supporting us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

✨ Supporters get priority (<24h) issue resolution & support!

... (truncated)

Commits
  • 5c564c5 2.0.0-rc.15
  • 5acdda4 fix!: take external initializer file buffers as Arc\<[u8]>
  • 24cc24a fix(editor): attribute/initializer UAFs
  • 43bac17 fix!: prevent moves out of DerefMut for in-memory sessions/ValueRefMut
  • 8993b93 fix: wasm & no_std build
  • 262d9aa fix: 2 potential IoBinding UAFs
  • 5fe022f fix(sys): make OrtAllocator::default const
  • 593d821 fix: tensors can have MemoryInfo but no AllocatorHandle
  • a27c6f9 fix(adapter): hold onto the Allocator that created it
  • 6fe7776 fix(sys): add missing graph & tensor op attr variants
  • Additional commits viewable in compare view

Updates log from 0.4.34 to 0.4.35

Release notes

Sourced from log's releases.

v0.4.35

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

  • rework CI/CD to align with Rust project standards
Changelog

Sourced from log's changelog.

0.4.35 - 2026-10-30

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

  • rework CI/CD to align with Rust project standards
Commits
  • a46450b Update CHANGELOG.md
  • a715f17 chore: release v0.4.35
  • b4e2b12 Merge pull request #747 from rust-lang/chore/release-plz-mgnt
  • 6b490b6 run fmt
  • 2c7fd52 simplify some crate release tasks for easier automation
  • 5bc5545 Merge pull request #745 from marcoienibot/release-plz-disable-semver-check
  • 4234b8c Disable release-plz semver check
  • 95918ff Merge pull request #744 from Kobzol/trusted-publishing
  • e7ed747 Fix Zizmor lints
  • e87a3c6 Setup trusted publishing
  • Additional commits viewable in compare view

Updates toml from 1.1.5+spec-1.1.0 to 1.1.6+spec-1.1.0

Commits
  • 572c005 chore: Release
  • 66d0c53 docs: Update changelog
  • 07af4e7 perf: Reduce allocations in toml_edit parsing and dumping (#1215)
  • 0ff90db perf(display): Write encoded strings directly
  • efb2536 perf(display): Move generated representation strings
  • 075c444 refactor(display): Consolidate key-path encoding
  • b48f338 perf(display): Borrow table keys during document output
  • c6c1de3 perf(parser): Move completed table header keys
  • ec90463 perf(parser): Borrow input when creating editable documents
  • d76a48a test: Benchmark rendering generated keys and values
  • Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates opener from 0.8.5 to 0.9.0

Changelog

Sourced from opener's changelog.

[0.9.0] - 2026-09-29

Changed

  • The minimum supported Rust version (MSRV) is now 1.77, and is declared in Cargo.toml.
  • On WSL, open() now uses the Windows shell via PowerShell instead of the discontinued wslview, and reports when Windows cannot open the target. xdg-open is used only if PowerShell is unavailable.
  • Updated the bundled xdg-open to xdg-utils 1.2.1, with a fix so that file URLs for other hosts aren't treated as local relative paths.
  • Clarified that open() and open_browser() do not wait for the opened application to exit, but may block while preparing or dispatching the launch.
  • Documented that a program installed with Flatpak, such as a browser, is given access only to the opened file, and how users can let it read the files that file refers to.
  • OpenError::Io now displays the underlying error's message instead of just "IO error". Its source() is now that error's own source, so error reports don't repeat the message.

Fixed

  • On Linux and other platforms that use xdg-open, open() now returns an error for a path that doesn't exist, instead of Ok(()). Other xdg-open failures are still not reported, since it may not exit until the opened application does.
  • On Windows and WSL, open_browser() now correctly handles percent-encoded file URLs and preserves queries and fragments when BROWSER is unset.
  • On Windows, open() now handles percent-encoded non-ASCII characters in file URLs.
  • On WSL, open_browser() no longer mangles URLs when BROWSER names a Windows executable.
  • open_browser() no longer closes the stderr pipe of the BROWSER program, which could kill it with SIGPIPE.
  • The bundled xdg-open script now handles paths that start with -.
  • On Linux and other Unix platforms, programs launched without waiting, such as xdg-open and the BROWSER program, no longer remain as zombie processes after they exit.
Commits
  • e1e3495 Release v0.9.0
  • 446bc2a Declare an MSRV of 1.77 and check it in CI
  • 5463029 Add a justfile for running CI checks locally
  • 4b2f065 Name release commits after the version again
  • c77ca6a Gate releases on CI and use trusted publishing
  • 664fc0a Overhaul the CI workflow
  • c50ec95 Document Flatpak's single-file access when opening
  • de5dc8a Report missing files when opening with xdg-open
  • cfcdaa4 Document the reveal feature on docs.rs again
  • 2b33026 Keep remote file URLs intact in bundled xdg-open
  • Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

  • 32-bit Linux-GNU
  • 32-bit Linux-uClibc
  • 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
  • 32-bit Windows-GNU
  • ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...

Note that there may still be some changes to features gated by this config option, hence "unstable"

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

  • 32-bit Linux-GNU
  • 32-bit Linux-uClibc
  • 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
  • 32-bit Windows-GNU
  • ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
</tr></table>

... (truncated)

Commits
  • ccc2ff4 libc: Release 0.2.191
  • bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
  • ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
  • b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
  • 9c7f568 apple: add ifaliasreq and in6_aliasreq
  • 018c7e9 wasi: Add pthread_condattr_{get,set}clock
  • 2c77185 openbsd: add sensordev structure
  • e10813c hurd: Add missing POSIX_SPAWN_* flags
  • 2ea4bc1 Fix FreeBSD/aarch64
  • 6d666fd dragonfly: Parse version from headers rather than CLI
  • Additional commits viewable in compare view

Updates objc2 from 0.6.4 to 0.6.5

Commits

Updates winresource from 0.1.31 to 0.1.34

Commits

Updates png from 0.17.16 to 0.18.1

Changelog

Sourced from png's changelog.

0.18.1

Additions

  • Added Filter::MinEntropy for encoding, which selects the filter that minimizes the Shannon entropy of the filtered row. (#647)
  • Made ScaledFloat::SCALING constant public. (#650)
  • Support skipping chunks without loading them into memory. (#630)
  • Allow full unfiltering for partial data, enabling progressive decoding use cases. (#664)

Changes

  • Improved Paeth unfilter auto-vectorization by changing how loop state is maintained. (#635)
  • Added portable_simd Paeth unfiltering for 3bpp and 4bpp images on nightly. (#632, #633)
  • Add early exit for adaptive filter selection when a perfect filter is found. (#646)
  • Ignore duplicate acTL chunks instead of producing errors. (#651)
  • Require IDAT chunk(s) before fdAT chunks, as mandated by PNG specification. (#653)
  • Enforce acTL frame counts to be valid PNG 4-byte integers (capped at 2^31-1). (#673)

Fixes

  • Fixed and improved intra-doc links in documentation comments. (#665)
  • Fixed nightly portable_simd build. (#675)

#630: image-rs/image-png#630 #632: image-rs/image-png#632 #633: image-rs/image-png#633 #635: image-rs/image-png#635 #645: image-rs/image-png#645 #646: image-rs/image-png#646 #647: image-rs/image-png#647 #650: image-rs/image-png#650 #651: image-rs/image-png#651 #653: image-rs/image-png#653 #664: image-rs/image-png#664 #665: image-rs/image-png#665 #673: image-rs/image-png#673 #675: image-rs/image-png#675

0.18.0

API Breaking Changes

  • Removed deprecated Info::encode and Encoder::set_srgb methods.

... (truncated)

Commits

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates ureq from 2.12.1 to 3.4.1

Changelog

Sourced from ureq's changelog.

3.4.1

  • Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
  • Do not pool connections with unconsumed buffered input #1198
  • Fix timeout budgets restarting and applying to later phases #1194
  • Complete TLS handshake during connect so timeout_connect covers it #1193
  • Speed up read_json for responses with a known, small body size #1191

3.4.0

  • Seal RequestExt (technically breaking) #1189
  • Send canonical Basic authentication scheme to CONNECT proxies #1185
  • Establish target TLS through HTTPS CONNECT proxies #1183
  • Update rustls-platform-verifier to 0.7.0 #1174
  • Fix pooled connections never aging out according to max_idle_age #1172
  • Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #1171
  • RequestExt::middleware_config for conf inside middleware #1169

3.3.0

  • Bump MSRV 1.71 -> 1.85, edition 2024 #1167

3.2.1

  • Switch archived utf-8 crate for utf8-zero #1163

3.2.0

  • Strip Content-Encoding/Content-Length headers after decompression #1156
  • Timeout per resolved ip for try_connect #1152
  • Fix body header bug on redirect #1140
  • ureq-proto 0.5.3 to fix unsolicited 100-continue #1139
  • Make socks5:// locally resolve before calling proxy #1138
  • Add socks5h:// which DOESN'T locally resolve before calling proxy #1138

3.1.4

  • Set content-type with new Multipart form #1133

3.1.3

  • Fix short read with multi-byte charset #1131
  • Replace rustls-pemfile usage with rustls-pki-types #1122
  • Support for env NO_PROXY and proxy config #1118
  • Experimental multi-part form support #1102

3.1.2

  • Fix bug when query is after host "example.com?query" #1115

... (truncated)

Commits

Updates webpki-roots from 0.26.11 to 1.0.10

Release notes

Sourced from webpki-roots's releases.

1.0.10

Changes:

  • Removed "emSign ECC Root CA - G3"

What's Changed

1.0.9

Changes:

What's Changed

New Contributors

Full Changelog: rustls/webpki-roots@v/1.0.8...v/1.0.9

1.0.8

What's Changed

Full Changelog: rustls/webpki-roots@v/1.0.7...v/1.0.8

1.0.7

For their April 2026 root store changes, Mozilla has made more changes than usual:

These changes are part of Mozilla’s ongoing root store maintenance under the Mozilla Root Store Policy (MRSP), including §7.4 (Root CA Lifecycles) and §7.5.3 (Transition Plans). They reflect a combination of lifecycle-based transitions, CA operator requests, and alignment with intended certificate usage, including retiring older or less suitable root certificates, enforcing clear separation of trust purposes (e.g., TLS vs. S/MIME), and reducing unnecessary trust surface in the Web PKI ecosystem. Collectively, these actions help to ensure that root certificates are relied upon only for their intended and actively maintained use cases, or are retired in accordance with established distrust timelines.

This removes:

  • CN=Certigna O=Dhimyotis
  • CN=COMODO Certification Authority O=COMODO CA Limited
  • CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com
  • CN=FIRMAPROFESIONAL CA ROOT-A WEB O=Firmaprofesional SA
  • CN=GTS Root R2 O=Google Trust Services LLC

... (truncated)

Commits
  • 7076047 webpki-roots|webpki-root-certs: 1.0.9 -> 1.0.10
  • c644e3e webpki-roots|webpki-root-certs: remove emSign roots
  • b7815ff ccadb: bump version to 0.2.2
  • 86423a8 ccadb: replace chrono with jiff
  • 3d8edab Upgrade num-bigint to 0.5
  • aa88673 ccadb: add crl_hosts() API
  • bb89979 ccadb: extract specific root PEM from build_client()
  • 782238f ccadb: extract build_client() helper function
  • 24886ba webpki-ccadb: only trust the CCADB root CA
  • 77edb21 Take semver-compatible dependency updates
  • Additional commits viewable in compare view

Updates rustls-native-certs from 0.8.4 to 0.8.5

Release notes

Sourced from rustls-native-certs's releases.

0.8.5

Avoid unnecessary work by keeping track of duplicate files on Unix systems.

What's Changed

Commits
  • 4bcc4bb Bump version to 0.8.5
  • 2d13547 Take semver-compatible dependency updates
  • c231965 Read each file in cert directories only once
  • da7d23d build(deps): bump rustls from 0.23.44 to 0.23.45 in the crates-io group
  • 3f866a2 build(deps): bump rustls from 0.23.43 to 0.23.44 in the crates-io group
  • e7d065e build(deps): bump rustls-webpki in the crates-io group
  • 1196259 build(deps): bump rustls-webpki in the crates-io group
  • 589e968 build(deps): bump rustls from 0.23.42 to 0.23.43 in the crates-io group
  • 1d93e38 build(deps): bump serial_test from 3.5.0 to 4.0.1 in the crates-io group
  • a54aba3 build(deps): bump the crates-io group with 2 updates
  • Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.1

Commits

Updates cpal from 0.16.0 to 0.18.2

Release notes

Sourced from cpal's releases.

cpal 0.18.2

Added

  • AAudio: Xruns are now reported as ErrorKind::Xrun.
  • CoreAudio: Xruns are now reported as ErrorKind::Xrun.
  • PipeWire: Xruns are now reported as ErrorKind::Xrun.
  • WASAPI: Capture xruns are now reported as ErrorKind::Xrun.

Changed

  • BSD: Clarify that realtime-dbus has no effect there.
  • CoreAudio: Bump objc2-core-foundation dependency lower bound to 0.3.1.
  • iOS: Timestamps now include hardware latency and update when the audio route changes.
  • JACK: Timestamps now include port latency.
  • Linux: Clarify that realtime alone is a no-op without realtime-dbus.
  • PipeWire: Devices with multiple ports now get distinct, localized, per-port names.
  • WASAPI: The windows and windows-core dependencies are now both pinned to 0.62.

Fixed

  • Timestamps now stay monotonic across device and graph changes.
  • ALSA: A nonzero but sub-millisecond stream timeout is no longer treated as a non-blocking poll.
  • ALSA: Fix compilation on FreeBSD, DragonFly, and NetBSD.
  • ASIO: Fix duplex streams silently dropping audio when built from separate Device handles.
  • AudioWorklet: Fix Stream operations to work when called from any thread.
  • AudioWorklet: Fix stale audio output when a data callback wrote a partial buffer.
  • CoreAudio: Fix stale audio output when a data callback wrote a partial buffer.
  • CoreAudio: Default-output streams now report xrun status.
  • iOS: Streams now resume automatically when an audio session interruption ends.
  • JACK: Streams with more channels than physical system ports no longer fail to build.
  • JACK: Channel enumeration is no longer capped at the physical system port count.
  • JACK: Device::id no longer embeds the process ID, so DeviceId is now stable across application restarts.
  • PipeWire: Fix streams starting audio before play() ...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 7, 2026
@dependabot dependabot Bot changed the title build: bump the cargo group across 1 directory with 30 updates build: Bump the cargo group across 1 directory with 30 updates Nov 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/src/cargo-96c3f6dc0b branch from 1e83580 to eae16be Compare November 8, 2026 11:39
@dependabot
build: Bump the cargo group across 1 directory with 30 updates
ce0926c 
Bumps the cargo group with 30 updates in the /src directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` |
| [pollster](https://github.com/zesterer/pollster) | `0.4.0` | `1.0.1` |
| [ort](https://github.com/pykeio/ort) | `2.0.0-rc.13` | `2.0.0-rc.15` |
| [log](https://github.com/rust-lang/log) | `0.4.34` | `0.4.35` |
| [toml](https://github.com/toml-rs/toml) | `1.1.5+spec-1.1.0` | `1.1.6+spec-1.1.0` |
| dirs | `6.0.0` | `7.0.0` |
| [opener](https://github.com/Seeker14491/opener) | `0.8.5` | `0.9.0` |
| [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.191` |
| [objc2](https://github.com/madsmtm/objc2) | `0.6.4` | `0.6.5` |
| [winresource](https://github.com/BenjaminRi/winresource) | `0.1.31` | `0.1.34` |
| [png](https://github.com/image-rs/image-png) | `0.17.16` | `0.18.1` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [ureq](https://github.com/algesten/ureq) | `2.12.1` | `3.4.1` |
| [webpki-roots](https://github.com/rustls/webpki-roots) | `0.26.11` | `1.0.10` |
| [rustls-native-certs](https://github.com/rustls/rustls-native-certs) | `0.8.4` | `0.8.5` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.1` |
| [cpal](https://github.com/RustAudio/cpal) | `0.16.0` | `0.18.2` |
| [memmap2](https://github.com/RazrFalcon/memmap2-rs) | `0.9.11` | `0.9.12` |
| [resvg](https://github.com/linebender/resvg) | `0.48.1` | `0.49.0` |
| [jni-sys](https://github.com/jni-rs/jni-sys) | `0.3.1` | `0.4.1` |
| [getrandom](https://github.com/rust-random/getrandom) | `0.3.4` | `0.4.3` |
| [tonic](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [tonic-prost](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.3` | `1.54.1` |
| [tonic-prost-build](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [protox](https://github.com/andrewhickman/protox) | `0.9.1` | `0.10.0` |
| [fontdb](https://github.com/RazrFalcon/fontdb) | `0.23.0` | `0.24.0` |
| [unicode-script](https://github.com/unicode-rs/unicode-script) | `0.5.8` | `0.5.9` |



Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `thiserror` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `clap` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7)

Updates `pollster` from 0.4.0 to 1.0.1
- [Changelog](https://github.com/zesterer/pollster/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zesterer/pollster/commits)

Updates `ort` from 2.0.0-rc.13 to 2.0.0-rc.15
- [Release notes](https://github.com/pykeio/ort/releases)
- [Commits](pykeio/ort@v2.0.0-rc.13...v2.0.0-rc.15)

Updates `log` from 0.4.34 to 0.4.35
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/main/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.34...v0.4.35)

Updates `toml` from 1.1.5+spec-1.1.0 to 1.1.6+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.5...toml-v1.1.6)

Updates `dirs` from 6.0.0 to 7.0.0

Updates `opener` from 0.8.5 to 0.9.0
- [Changelog](https://github.com/Seeker14491/opener/blob/master/CHANGELOG.md)
- [Commits](Seeker14491/opener@v0.8.5...v0.9.0)

Updates `libc` from 0.2.189 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.189...0.2.191)

Updates `objc2` from 0.6.4 to 0.6.5
- [Commits](madsmtm/objc2@objc2-0.6.4...objc2-0.6.5)

Updates `winresource` from 0.1.31 to 0.1.34
- [Commits](https://github.com/BenjaminRi/winresource/commits)

Updates `png` from 0.17.16 to 0.18.1
- [Changelog](https://github.com/image-rs/image-png/blob/master/CHANGES.md)
- [Commits](https://github.com/image-rs/image-png/commits)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `ureq` from 2.12.1 to 3.4.1
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@2.12.1...3.4.1)

Updates `webpki-roots` from 0.26.11 to 1.0.10
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/0.26.11...v/1.0.10)

Updates `rustls-native-certs` from 0.8.4 to 0.8.5
- [Release notes](https://github.com/rustls/rustls-native-certs/releases)
- [Commits](rustls/rustls-native-certs@v/0.8.4...v/0.8.5)

Updates `sha2` from 0.10.9 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.1)

Updates `cpal` from 0.16.0 to 0.18.2
- [Release notes](https://github.com/RustAudio/cpal/releases)
- [Changelog](https://github.com/RustAudio/cpal/blob/master/CHANGELOG.md)
- [Commits](RustAudio/cpal@v0.16.0...v0.18.2)

Updates `memmap2` from 0.9.11 to 0.9.12
- [Changelog](https://github.com/RazrFalcon/memmap2-rs/blob/master/CHANGELOG.md)
- [Commits](RazrFalcon/memmap2-rs@v0.9.11...v0.9.12)

Updates `resvg` from 0.48.1 to 0.49.0
- [Release notes](https://github.com/linebender/resvg/releases)
- [Changelog](https://github.com/linebender/resvg/blob/main/CHANGELOG.md)
- [Commits](linebender/resvg@v0.48.1...v0.49.0)

Updates `jni-sys` from 0.3.1 to 0.4.1
- [Release notes](https://github.com/jni-rs/jni-sys/releases)
- [Changelog](https://github.com/jni-rs/jni-sys/blob/master/CHANGELOG.md)
- [Commits](jni-rs/jni-sys@v0.3.1...v0.4.1)

Updates `getrandom` from 0.3.4 to 0.4.3
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.3.4...v0.4.3)

Updates `tonic` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-v0.14.6...tonic-v0.14.9)

Updates `tonic-prost` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-prost-v0.14.6...tonic-prost-v0.14.9)

Updates `tokio` from 1.53.3 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.3...tokio-1.54.1)

Updates `tonic-prost-build` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-prost-build-v0.14.6...tonic-prost-build-v0.14.9)

Updates `protox` from 0.9.1 to 0.10.0
- [Release notes](https://github.com/andrewhickman/protox/releases)
- [Changelog](https://github.com/andrewhickman/protox/blob/main/CHANGELOG.md)
- [Commits](andrewhickman/protox@protox-v0.9.1...protox-v0.10.0)

Updates `fontdb` from 0.23.0 to 0.24.0
- [Changelog](https://github.com/RazrFalcon/fontdb/blob/master/CHANGELOG.md)
- [Commits](RazrFalcon/fontdb@v0.23.0...v0.24.0)

Updates `unicode-script` from 0.5.8 to 0.5.9
- [Commits](unicode-rs/unicode-script@v0.5.8...v0.5.9)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: cpal
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: dirs
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: fontdb
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: getrandom
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: jni-sys
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: log
  dependency-version: 0.4.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: memmap2
  dependency-version: 0.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: objc2
  dependency-version: 0.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: opener
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: ort
  dependency-version: 2.0.0-rc.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: png
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: pollster
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: protox
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: resvg
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rustls-native-certs
  dependency-version: 0.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: toml
  dependency-version: 1.1.6+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tonic
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tonic-prost
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tonic-prost-build
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: unicode-script
  dependency-version: 0.5.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: ureq
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: webpki-roots
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: winresource
  dependency-version: 0.1.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/src/cargo-96c3f6dc0b branch from eae16be to ce0926c Compare November 10, 2026 06:06
@dependabot @github

dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 10, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/src/cargo-96c3f6dc0b branch November 10, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants