Skip to content

Bump the non-critical group across 1 directory with 9 updates#2964

Merged
maciektr merged 1 commit intomainfrom
dependabot/cargo/non-critical-8f513105a8
Jan 26, 2026
Merged

Bump the non-critical group across 1 directory with 9 updates#2964
maciektr merged 1 commit intomainfrom
dependabot/cargo/non-critical-8f513105a8

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 23, 2026

Bumps the non-critical group with 9 updates in the / directory:

Package From To
chrono 0.4.42 0.4.43
proc-macro2 1.0.105 1.0.106
quote 1.0.43 1.0.44
ra_ap_toolchain 0.0.315 0.0.316
smol_str 0.3.2 0.3.5
thiserror 2.0.17 2.0.18
wasmtime 39.0.1 39.0.2
wasmtime-wasi 39.0.1 39.0.2
zip 7.0.0 7.2.0

Updates chrono from 0.4.42 to 0.4.43

Release notes

Sourced from chrono's releases.

0.4.43

What's Changed

Commits
  • 45caaa9 Update copyright year to 2026 in LICENSE.txt
  • 1c0b8f0 Bump version to 0.4.43
  • a03e43b Upgrade windows-bindgen to 0.66
  • 4fedaba Ignore bincode advisory
  • f4b7bbd Bump actions/checkout from 5 to 6
  • db12973 Added doctest for the NaiveDate years_since function (#1755)
  • 34b5f49 chore: minor improvement for docs
  • 8c82711 Bump actions/setup-node from 5 to 6
  • ea1f11b Drop deny lints, eager Debug impls are a mixed blessing
  • 35f9f2d Add feature gated defmt support.
  • Additional commits viewable in compare view

Updates proc-macro2 from 1.0.105 to 1.0.106

Release notes

Sourced from proc-macro2's releases.

1.0.106

  • Optimize Span::byte_range (#530)
Commits

Updates quote from 1.0.43 to 1.0.44

Release notes

Sourced from quote's releases.

1.0.44

  • Support raw lifetime syntax 'r#async (#323)
Commits

Updates ra_ap_toolchain from 0.0.315 to 0.0.316

Commits

Updates smol_str from 0.3.2 to 0.3.5

Commits

Updates thiserror from 2.0.17 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

Commits
  • dc0f6a2 Release 2.0.18
  • 0275292 Touch up PR 443
  • 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
  • 995939c Reproduce issue 442
  • 21653d1 Made clippy lifetime allows conditional
  • 45e5388 Update actions/upload-artifact@v5 -> v6
  • 386aac1 Update actions/upload-artifact@v4 -> v5
  • ec50561 Update actions/checkout@v5 -> v6
  • 247eab5 Update name of empty_enum clippy lint
  • 91b181f Raise required compiler to Rust 1.68
  • Additional commits viewable in compare view

Updates wasmtime from 39.0.1 to 39.0.2

Release notes

Sourced from wasmtime's releases.

v39.0.2

39.0.2

Released 2026-01-14.

Fixed

  • A possible stack overflow in the x64 backend with cmp emission has been fixed. #12333
Changelog

Sourced from wasmtime's changelog.

39.0.2

Released 2026-01-14.

Fixed

  • A possible stack overflow in the x64 backend with cmp emission has been fixed. #12333
Commits

Updates wasmtime-wasi from 39.0.1 to 39.0.2

Release notes

Sourced from wasmtime-wasi's releases.

v39.0.2

39.0.2

Released 2026-01-14.

Fixed

  • A possible stack overflow in the x64 backend with cmp emission has been fixed. #12333
Changelog

Sourced from wasmtime-wasi's changelog.

39.0.2

Released 2026-01-14.

Fixed

  • A possible stack overflow in the x64 backend with cmp emission has been fixed. #12333
Commits

Updates zip from 7.0.0 to 7.2.0

Release notes

Sourced from zip's releases.

v7.2.0

🚀 Features

  • add read_zipfile_from_stream_with_compressed_size (#70)
  • Allow choosing bzip2 rust backend (#329)

🐛 Bug Fixes

  • Need to include zip64 extra field in central directory (fix #353) (#360)
  • Fails to extract file which might or might not be malformed (#376) (#426)
  • (aes) Allow AES encryption while streaming (#463)
  • Default "platform" field in zip files should be set to the local platform, rather than always "Unix" (#470) (#471)

🚜 Refactor

  • Define cfg_if! and cfg_if_expr! internal macros (#438)

⚡ Performance

  • Change an assert to debug_assert when encrypting/decrypting AES, and eliminate a fallible operation (#521)
  • eliminate a String clone per new file added to archive, and other related refactors (#522)

⚙️ Miscellaneous Tasks

  • Fix another merge error, this one affecting only builds with flate2 and not zopfli
  • Fix more merge issues
  • Fix merge
  • Fix write_dir build errors on specific feature configs
  • Fix clippy warning
  • Fix --all-features build error
  • Fix merge

v7.1.0

🚀 Features

  • display the underlying error in Display impl for ZipError::Display (#483)
  • Enable creation of ZipArchive without reparsing (#485)

🐛 Bug Fixes

  • Return InvalidPassword rather than panic when AES key is the wrong length (#457)
  • bench with auto zip64 comment (#505)
  • add condition for getrandom dependency (#504)
  • (zipcrypto) Support streaming ZipCrypto encryption, don't store entire file in memory (#462)

🚜 Refactor

  • Clean up imports and move types (#461)
  • Replace handwritten Ord and PartialOrd for DateTime (#484)

... (truncated)

Changelog

Sourced from zip's changelog.

7.2.0 - 2026-01-20

🚀 Features

  • add read_zipfile_from_stream_with_compressed_size (#70)
  • Allow choosing bzip2 rust backend (#329)

🐛 Bug Fixes

  • Need to include zip64 extra field in central directory (fix #353) (#360)
  • Fails to extract file which might or might not be malformed (#376) (#426)
  • (aes) Allow AES encryption while streaming (#463)
  • Default "platform" field in zip files should be set to the local platform, rather than always "Unix" (#470) (#471)

🚜 Refactor

  • Define cfg_if! and cfg_if_expr! internal macros (#438)

⚡ Performance

  • Change an assert to debug_assert when encrypting/decrypting AES, and eliminate a fallible operation (#521)
  • eliminate a String clone per new file added to archive, and other related refactors (#522)

⚙️ Miscellaneous Tasks

  • Fix another merge error, this one affecting only builds with flate2 and not zopfli
  • Fix more merge issues
  • Fix merge
  • Fix write_dir build errors on specific feature configs
  • Fix clippy warning
  • Fix --all-features build error
  • Fix merge

7.1.0 - 2026-01-14

🚀 Features

  • display the underlying error in Display impl for ZipError::Display (#483)
  • Enable creation of ZipArchive without reparsing (#485)

🐛 Bug Fixes

  • Return InvalidPassword rather than panic when AES key is the wrong length (#457)
  • bench with auto zip64 comment (#505)
  • add condition for getrandom dependency (#504)
  • (zipcrypto) Support streaming ZipCrypto encryption, don't store entire file in memory (#462)

🚜 Refactor

  • Clean up imports and move types (#461)

... (truncated)

Commits
  • 46dc29c chore: release v7.2.0 (#526)
  • 8a586c6 test: Move a test that was in wrong folder and was using main() instead of `#...
  • cfbb476 docs(examples): Fix remaining log-injection alerts, and simplify writeln to e...
  • d905296 ci: Disable trigger on non-master push (#538)
  • a3a8696 chore(deps): Increase zstd minimum version to 0.13.3 (#539)
  • abd8bc8 ci: Add wasm tests and restore conditional wasm-bindgen dependency (#525)
  • c10c339 doc(examples): add delete/update examples (#56)
  • 9c1a9c7 docs(examples): Fix code scanning alert no. 228: Uncontrolled data used in pa...
  • a12eaaf ci: Combine rename invocations (#533)
  • e86d376 fix: Need to include zip64 extra field in central directory (fix #353) (#360)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
wasmtime [>= 38.a, < 39]
wasmtime-wasi [>= 38.a, < 39]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the non-critical group across 1 directory with 9 updates
4971a02 
Bumps the non-critical group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.43` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.105` | `1.0.106` |
| [quote](https://github.com/dtolnay/quote) | `1.0.43` | `1.0.44` |
| [ra_ap_toolchain](https://github.com/rust-lang/rust-analyzer) | `0.0.315` | `0.0.316` |
| [smol_str](https://github.com/rust-lang/rust-analyzer) | `0.3.2` | `0.3.5` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.17` | `2.0.18` |
| [wasmtime](https://github.com/bytecodealliance/wasmtime) | `39.0.1` | `39.0.2` |
| [wasmtime-wasi](https://github.com/bytecodealliance/wasmtime) | `39.0.1` | `39.0.2` |
| [zip](https://github.com/zip-rs/zip2) | `7.0.0` | `7.2.0` |



Updates `chrono` from 0.4.42 to 0.4.43
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.42...v0.4.43)

Updates `proc-macro2` from 1.0.105 to 1.0.106
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.105...1.0.106)

Updates `quote` from 1.0.43 to 1.0.44
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.43...1.0.44)

Updates `ra_ap_toolchain` from 0.0.315 to 0.0.316
- [Release notes](https://github.com/rust-lang/rust-analyzer/releases)
- [Commits](https://github.com/rust-lang/rust-analyzer/commits)

Updates `smol_str` from 0.3.2 to 0.3.5
- [Release notes](https://github.com/rust-lang/rust-analyzer/releases)
- [Commits](https://github.com/rust-lang/rust-analyzer/commits)

Updates `thiserror` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.17...2.0.18)

Updates `wasmtime` from 39.0.1 to 39.0.2
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v39.0.2/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v39.0.1...v39.0.2)

Updates `wasmtime-wasi` from 39.0.1 to 39.0.2
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v39.0.2/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v39.0.1...v39.0.2)

Updates `zip` from 7.0.0 to 7.2.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v7.0.0...v7.2.0)

---
updated-dependencies:
- dependency-name: chrono
  dependency-version: 0.4.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-critical
- dependency-name: proc-macro2
  dependency-version: 1.0.106
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-critical
- dependency-name: quote
  dependency-version: 1.0.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-critical
- dependency-name: ra_ap_toolchain
  dependency-version: 0.0.316
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-critical
- dependency-name: smol_str
  dependency-version: 0.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-critical
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-critical
- dependency-name: wasmtime
  dependency-version: 39.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-critical
- dependency-name: wasmtime-wasi
  dependency-version: 39.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-critical
- dependency-name: zip
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-critical
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 23, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 23, 2026 08:34
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 23, 2026
@dependabot dependabot bot requested review from FroyaTheHen and maciektr and removed request for a team January 23, 2026 08:34
@dependabot dependabot bot added the rust Pull requests that update Rust code label Jan 23, 2026
@maciektr maciektr added this pull request to the merge queue Jan 26, 2026
Merged via the queue into main with commit 601c8f5 Jan 26, 2026
48 of 58 checks passed
@maciektr maciektr deleted the dependabot/cargo/non-critical-8f513105a8 branch January 26, 2026 17:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wawel37 wawel37 wawel37 approved these changes

@integraledelebesgue integraledelebesgue integraledelebesgue approved these changes

@maciektr maciektr Awaiting requested review from maciektr maciektr is a code owner automatically assigned from software-mansion/scarb-maintainers

@FroyaTheHen FroyaTheHen Awaiting requested review from FroyaTheHen FroyaTheHen is a code owner automatically assigned from software-mansion/scarb-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@wawel37 @integraledelebesgue @maciektr