Skip to content

Bump the cargo group across 1 directory with 10 updates#3

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/cargo-6a667c0486
Closed

Bump the cargo group across 1 directory with 10 updates#3
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/cargo-6a667c0486

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 14, 2026

Bumps the cargo group with 9 updates in the / directory:

Package From To
bytes 1.4.0 1.11.1
evm 0.37.0 0.41.1
rand 0.8.5 0.9.3
h2 0.3.21 0.3.27
keccak 0.1.3 0.1.6
mio 0.8.9 0.8.11
openssl 0.10.57 0.10.68
ruint 1.7.0 1.9.0
tokio 1.33.0 1.51.1

Updates bytes from 1.4.0 to 1.11.1

Release notes

Sourced from bytes's releases.

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

  • Fix integer overflow in BytesMut::reserve

Bytes v1.11.0

1.11.0 (November 14th, 2025)

  • Bump MSRV to 1.57 (#788)

Fixed

  • fix: BytesMut only reuse if src has remaining (#803)
  • Specialize BytesMut::put::<Bytes> (#793)
  • Reserve capacity in BytesMut::put (#794)
  • Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

  • Guarantee address in slice() for empty slices. (#780)
  • Rename Vtable::to_* -> Vtable::into_* (#776)
  • Fix latest clippy warnings (#787)
  • Ignore BytesMut::freeze doctest on wasm (#790)
  • Move drop_fn of from_owner into vtable (#801)

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

  • Fix memory leak when using to_vec with Bytes::from_owner (#773)

#773: tokio-rs/bytes#773

Bytes v1.10.0

1.10.0 (February 3rd, 2025)

Added

  • Add feature to support platforms without atomic CAS (#467)
  • try_get_* methods for Buf trait (#753)
  • Implement Buf::chunks_vectored for Take (#617)
  • Implement Buf::chunks_vectored for VecDeque<u8> (#708)

Fixed

  • Remove incorrect guarantee for chunks_vectored (#754)
  • Ensure that tests pass under panic=abort (#749)

... (truncated)

Changelog

Sourced from bytes's changelog.

1.11.1 (February 3rd, 2026)

  • Fix integer overflow in BytesMut::reserve

1.11.0 (November 14th, 2025)

  • Bump MSRV to 1.57 (#788)

Fixed

  • fix: BytesMut only reuse if src has remaining (#803)
  • Specialize BytesMut::put::<Bytes> (#793)
  • Reserve capacity in BytesMut::put (#794)
  • Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

  • Guarantee address in slice() for empty slices. (#780)
  • Rename Vtable::to_* -> Vtable::into_* (#776)
  • Fix latest clippy warnings (#787)
  • Ignore BytesMut::freeze doctest on wasm (#790)
  • Move drop_fn of from_owner into vtable (#801)

1.10.1 (March 5th, 2025)

Fixed

  • Fix memory leak when using to_vec with Bytes::from_owner (#773)

1.10.0 (February 3rd, 2025)

Added

  • Add feature to support platforms without atomic CAS (#467)
  • try_get_* methods for Buf trait (#753)
  • Implement Buf::chunks_vectored for Take (#617)
  • Implement Buf::chunks_vectored for VecDeque<u8> (#708)

Fixed

  • Remove incorrect guarantee for chunks_vectored (#754)
  • Ensure that tests pass under panic=abort (#749)

1.9.0 (November 27, 2024)

Added

  • Add Bytes::from_owner to enable externally-allocated memory (#742)

Documented

... (truncated)

Commits

Updates evm from 0.37.0 to 0.41.1

Commits

Updates rand from 0.8.5 to 0.9.3

Changelog

Sourced from rand's changelog.

[0.9.3] — 2026-02-11

This release back-ports a fix from v0.10. See also #1763.

Changes

  • Deprecate feature log (#1764)
  • Replace usages of doc_auto_cfg (#1764)

#1763: rust-random/rand#1763

[0.9.2] — 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)
  • Remove implicit feature rand_chacha; use std_rng instead. (#1473)
  • Rename feature serde1 to serde (#1477)
  • Rename feature getrandom to os_rng (#1537)
  • Add feature thread_rng (#1547)

API changes: rand_core traits

... (truncated)

Commits

Updates ethereum from 0.14.0 to 0.15.0

Commits

Updates h2 from 0.3.21 to 0.3.27

Release notes

Sourced from h2's releases.

v0.3.26

What's Changed

  • Limit number of CONTINUATION frames for misbehaving connections.

See https://seanmonstar.com/blog/hyper-http2-continuation-flood/ for more info.

v0.3.25

What's Changed

Full Changelog: hyperium/h2@v0.3.24...v0.3.25

v0.3.24

Fixed

  • Limit error resets for misbehaving connections.

v0.3.23

What's Changed

v0.3.22

What's Changed

  • Add header_table_size(usize) option to client and server builders.
  • Improve throughput when vectored IO is not available.
  • Update indexmap to 2.

New Contributors

Changelog

Sourced from h2's changelog.

0.3.27 (July 11, 2025)

  • Fix notifying wakers when detecting local stream errors.

0.3.26 (April 3, 2024)

  • Limit number of CONTINUATION frames for misbehaving connections.

0.3.25 (March 15, 2024)

  • Improve performance decoding many headers.

0.3.24 (January 17, 2024)

  • Limit error resets for misbehaving connections.

0.3.23 (January 10, 2024)

  • Backport fix from 0.4.1 for stream capacity assignment.

0.3.22 (November 15, 2023)

  • Add header_table_size(usize) option to client and server builders.
  • Improve throughput when vectored IO is not available.
  • Update indexmap to 2.
Commits
  • f6237ac v0.3.27
  • f61332e refactor: change local reset counter to use type system more
  • 3f1a8e3 style: fix anonymous lifetime syntax
  • 778aa7e fix: notify_recv after send_reset() in reset_on_recv_stream_err() to ensure l...
  • be10b77 ci: pin more deps for MSRV job (#817)
  • c0d9feb ci: pin deps for MSRV
  • 5ccd9cf lints: fix unexpected cfgs warnings
  • e6e3e9c fix: return a WriteZero error if frames cannot be written (#783)
  • 357127e v0.3.26
  • 1a357aa fix: limit number of CONTINUATION frames allowed
  • Additional commits viewable in compare view

Updates keccak from 0.1.3 to 0.1.6

Commits

Updates mio from 0.8.9 to 0.8.11

Changelog

Sourced from mio's changelog.

0.8.11

0.8.10

Added

Commits

Updates openssl from 0.10.57 to 0.10.68

Release notes

Sourced from openssl's releases.

openssl-v0.10.68

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.67...openssl-v0.10.68

openssl-v0.10.67

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.66...openssl-v0.10.67

openssl-v0.10.66

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.65...openssl-v0.10.66

openssl-v0.10.65

... (truncated)

Commits
  • be8dcfd Merge pull request #2318 from alex/msrv-fix
  • 065cc77 fixes #2317 -- restore compatibility with our MSRV and release openssl 0.9.68
  • 7b3ec80 Merge pull request #2316 from alex/bump-for-release
  • b510e8c Release openssl v0.10.67 and openssl-sys v0.9.104
  • ee3b024 Merge pull request #2315 from botovq/libressl-4.0.0
  • c4dabc2 CI: Update LibreSSL CI
  • f9027b7 LibreSSL 4.0.0 is released & stable
  • 1b51ba5 Merge pull request #2313 from sfackler/sfackler-patch-1
  • de8a97c Bump to 3.4.0-beta1
  • 3930464 Merge pull request #2312 from sfackler/alex-patch-1
  • Additional commits viewable in compare view

Updates ruint from 1.7.0 to 1.9.0

Release notes

Sourced from ruint's releases.

v1.9.0

What's Changed

New Contributors

Full Changelog: recmo/uint@v1.8.0...v1.9.0

Changelog

Sourced from ruint's changelog.

[1.9.0] - 2023-07-25

Added

  • Introduce ark-ff-04 feature flag for conversion to ark-ff@0.4 types
  • Support for alloy-rlp
  • MSRV (Minimum Supported Rust Version) is now set at 1.65.0, from previously undefined
  • Implement TryFrom<bool> for Uint
  • New method: byte

Changed

  • Make serde::Deserialize impl more permissive
  • Use Ethereum Quantity encoding for serde serialization when human-readable
  • Fix error in from_base_be that allowed instantiation of overflowing Uint
  • Updated fastrlp to 0.3, pyo3 to 0.19, and sqlx-core to 0.7
  • Improved fastrlp perfomance
  • Improved proptest performance
  • Made support module and its modules public
  • Made more algorithm functions public
  • Constified as_le_slice and as_le_bytes

Removed

  • Automatic detection of nightly features. Enable them instead with the nightly cargo feature
  • Dependency on derive_more

Fixed

  • from_base_le implementation by reversing the input iterator

[1.8.0] — 2023-04-19

Added

  • Support bn-rs, serde and uint! for Bits

Fixed

  • Serde human readable now encodes the empty bitstring as 0x0 and rejects zero prefixes.
Commits
  • 4b04138 Merge pull request #272 from DaniPopes/release-1-9-0
  • 4d989b8 chore: release 1.9.0
  • e4a7270 Merge pull request #270 from DaniPopes/byte-fn
  • 8d6ea93 Merge branch 'main' into byte-fn
  • c8a021f feat: add Uint::byte
  • 1519f44 Merge pull request #271 from DaniPopes/fix-doctests
  • 8679e17 Merge branch 'main' into fix-doctests
  • 36480e3 Merge pull request #269 from DaniPopes/from-bool
  • d109f37 fix: ruint-macro doctests
  • af00163 feat: implement TryFrom<bool>
  • Additional commits viewable in compare view

Updates tokio from 1.33.0 to 1.51.1

Release notes

Sourced from tokio's releases.

Tokio v1.51.1

1.51.1 (April 8th, 2026)

Fixed

  • sync: fix semaphore reopens after forget (#8021)
  • net: surface errors from SO_ERROR on recv for UDP sockets on Linux (#8001)

Fixed (unstable)

  • metrics: fix worker_local_schedule_count test (#8008)
  • rt: do not leak fd when cancelling io_uring open operation (#7983)

#7983: tokio-rs/tokio#7983 #8001: tokio-rs/tokio#8001 #8008: tokio-rs/tokio#8008 #8021: tokio-rs/tokio#8021

Tokio v1.51.0

1.51.0 (April 3rd, 2026)

Added

  • net: implement get_peer_cred on Hurd (#7989)
  • runtime: add tokio::runtime::worker_index() (#7921)
  • runtime: add runtime name (#7924)
  • runtime: stabilize LocalRuntime (#7557)
  • wasm: add wasm32-wasip2 networking support (#7933)

Changed

  • runtime: steal tasks from the LIFO slot (#7431)

Fixed

  • docs: do not show "Available on non-loom only." doc label (#7977)
  • macros: improve overall macro hygiene (#7997)
  • sync: fix notify_waiters priority in Notify (#7996)
  • sync: fix panic in Chan::recv_many when called with non-empty vector on closed channel (#7991)

#7431: tokio-rs/tokio#7431 #7557: tokio-rs/tokio#7557 #7921: tokio-rs/tokio#7921 #7924: tokio-rs/tokio#7924 #7933: tokio-rs/tokio#7933 #7977: tokio-rs/tokio#7977 #7989: tokio-rs/tokio#7989 #7991: tokio-rs/tokio#7991 #7996: tokio-rs/tokio#7996 #7997: tokio-rs/tokio#7997

... (truncated)

Commits
  • 98df02d chore: prepare Tokio v1.51.1 (#8023)
  • 3ea11e2 sync: fix semaphore reopens after forget (#8021)
  • c791213 rt: do not leak fd when cancelling io_uring open operation (#7983)
  • ad8c59a net: surface errors from SO_ERROR on recv for UDP sockets on Linux (#8001)
  • 654d38b metrics: fix worker_local_schedule_count test (#8008)
  • 857ba80 docs: improve contributing docs on how to specify crates dependency versions ...
  • 95b9342 chore: remove path deps for tokio-macros 2.7.0 (#8007)
  • 0af06b7 chore: prepare Tokio v1.51.0 (#8005)
  • 01a7f1d chore: prepare tokio-macros v2.7.0 (#8004)
  • eeb55c7 runtime: steal tasks from the LIFO slot (#7431)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the cargo group across 1 directory with 10 updates
8231310 
Bumps the cargo group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bytes](https://github.com/tokio-rs/bytes) | `1.4.0` | `1.11.1` |
| [evm](https://github.com/rust-ethereum/evm) | `0.37.0` | `0.41.1` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.3` |
| [h2](https://github.com/hyperium/h2) | `0.3.21` | `0.3.27` |
| [keccak](https://github.com/RustCrypto/sponges) | `0.1.3` | `0.1.6` |
| [mio](https://github.com/tokio-rs/mio) | `0.8.9` | `0.8.11` |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.57` | `0.10.68` |
| [ruint](https://github.com/recmo/uint) | `1.7.0` | `1.9.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.33.0` | `1.51.1` |



Updates `bytes` from 1.4.0 to 1.11.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.4.0...v1.11.1)

Updates `evm` from 0.37.0 to 0.41.1
- [Release notes](https://github.com/rust-ethereum/evm/releases)
- [Commits](https://github.com/rust-ethereum/evm/commits)

Updates `rand` from 0.8.5 to 0.9.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.3/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.9.3)

Updates `ethereum` from 0.14.0 to 0.15.0
- [Commits](https://github.com/rust-blockchain/ethereum/commits)

Updates `h2` from 0.3.21 to 0.3.27
- [Release notes](https://github.com/hyperium/h2/releases)
- [Changelog](https://github.com/hyperium/h2/blob/v0.3.27/CHANGELOG.md)
- [Commits](hyperium/h2@v0.3.21...v0.3.27)

Updates `keccak` from 0.1.3 to 0.1.6
- [Commits](RustCrypto/sponges@keccak-v0.1.3...keccak-v0.1.6)

Updates `mio` from 0.8.9 to 0.8.11
- [Release notes](https://github.com/tokio-rs/mio/releases)
- [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/mio@v0.8.9...v0.8.11)

Updates `openssl` from 0.10.57 to 0.10.68
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.57...openssl-v0.10.68)

Updates `ruint` from 1.7.0 to 1.9.0
- [Release notes](https://github.com/recmo/uint/releases)
- [Changelog](https://github.com/recmo/uint/blob/main/CHANGELOG.md)
- [Commits](recmo/uint@v1.7.0...v1.9.0)

Updates `tokio` from 1.33.0 to 1.51.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.33.0...tokio-1.51.1)

---
updated-dependencies:
- dependency-name: bytes
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: evm
  dependency-version: 0.41.1
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: rand
  dependency-version: 0.9.3
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: ethereum
  dependency-version: 0.15.0
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: h2
  dependency-version: 0.3.27
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: keccak
  dependency-version: 0.1.6
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: mio
  dependency-version: 0.8.11
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: openssl
  dependency-version: 0.10.68
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: ruint
  dependency-version: 1.9.0
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.51.1
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 14, 2026
@dependabot dependabot Bot mentioned this pull request Apr 14, 2026
Closed
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 23, 2026

Superseded by #5.

@dependabot dependabot Bot closed this Apr 23, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/cargo-6a667c0486 branch April 23, 2026 01:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants