iframe-proxy

dependabot · 2026-09-03T15:43:40Z

Bumps the rust-dependencies group with 11 updates:

Updates flate2 from 1.1.9 to 1.1.10

Release notes

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Updates rcgen from 0.14.9 to 0.14.10

Release notes

Sourced from rcgen's releases.

0.14.10

What's Changed

Spec compliance bug fixes by @cpu in rustls/rcgen#445

Take advantage of stable ML-DSA in aws-lc-rs by @djc in rustls/rcgen#447

Commits

f4a3b16 Bump version to 0.14.10
dea3d4d Upgrade to botan 0.13
788b093 Upgrade to pem 4
7ce21f4 Take advantage of stable ML-DSA in aws-lc-rs
e2dba45 Remove unused RSASSA-PSS signature algorithm
37070de Omit reasonCode unspecified(0) from CRL entry extensions
b247a87 Write extensions for certs that only set KeyUsage or CRLDP
85eafdd Reject empty CRL distribution point URIs
3a99b50 Encode CRL invalidityDate as GeneralizedTime
See full diff in compare view

Updates surrealkv from 0.21.3 to 0.21.4

Commits

ef29867 Release 0.21.4
9b87842 Add get_for_update locked point reads to transactions (#401)
29fda1b Release 0.21.3 (#392)
See full diff in compare view

Updates tower-http from 0.7.0 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)

fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)

request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)

decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)

decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)

fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)

fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)

set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in tower-rs/tower-http#708

fix(compression): reject non-empty data frames after codec is EOF by @seanmonstar in tower-rs/tower-http#712

Remove Clone derivations from SetMultipleResponseHeader* types by @skeet70 in tower-rs/tower-http#714

feat(request-id): Allow request-id constructor in const context by @tottoto in tower-rs/tower-http#716

fs: Avoid unnecessary conversions between SystemTime and HttpDate by @tottoto in tower-rs/tower-http#717

fs: Use HeaderValue::is_empty to check for empty values by @tottoto in tower-rs/tower-http#720

fs: Use HeaderValue::to_str for date headers by @tottoto in tower-rs/tower-http#721

... (truncated)

Commits

c941451 chore(release): prepare 0.7.1 (#729)
9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
e2582e2 Allow ignoring multi-range requests (#727)
888f7fe feat(services): configure directory redirects (#728)
5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
d154adb fix: reject multipart ranges before validation (#661)
d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
90c072b Propagate ServeDir::try_call I/O errors (#718)
860922e fix(decompression): don't end the body on an empty data frame (#722)
8532252 docs(example)/custom future with multiple bodies (#711)
Additional commits viewable in compare view

Updates uuid from 1.25.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

Add ContextV7::with_additional_precision_bits by @ChrisJr404 in uuid-rs/uuid#904

Prepare for 1.26.0 release by @KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

Commits

cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
34e4f49 don't test macros under miri
d9e7242 update nightly used for miri
ec16819 prepare for 1.26.0 release
162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
See full diff in compare view

Updates wasm-encoder from 0.257.1 to 0.258.0

Commits

See full diff in compare view

Updates wat from 1.257.1 to 1.258.0

Release notes

Sourced from wat's releases.

v1.258.0

What's Changed

Document that --realloc-via-memory-grow only affects adapters by @Lstarsky0 in bytecodealliance/wasm-tools#2613

fix: remap type indices of {stream,future}.cancel-{read,write} by @rvolosatovs in bytecodealliance/wasm-tools#2615

Remove post-return hooks, adjust sync task hooks by @alexcrichton in bytecodealliance/wasm-tools#2619

Add wasip3 compat to wit-dylib by @alexcrichton in bytecodealliance/wasm-tools#2617

Rebuild libdl.so without __wasi_init_tp import by @alexcrichton in bytecodealliance/wasm-tools#2616

Release wasm-tools 1.258.0 by @github-actions[bot] in bytecodealliance/wasm-tools#2620

Full Changelog: bytecodealliance/wasm-tools@v1.257.1...v1.258.0

Commits

5c6d31c Release wasm-tools 1.258.0 (#2620)
242aaa7 Rebuild libdl.so without __wasi_init_tp import (#2616)
43baa25 Add wasip3 compat to wit-dylib (#2617)
0a2c043 Remove post-return hooks, adjust sync task hooks (#2619)
a7ef477 fix: remap type indices of {stream,future}.cancel-{read,write} (#2615)
ef6cb38 Document that --realloc-via-memory-grow only affects adapters (#2613)
See full diff in compare view

Updates wasmparser from 0.257.1 to 0.258.0

Commits

See full diff in compare view

Updates wit-component from 0.257.1 to 0.258.0

Commits

See full diff in compare view

Updates wit-parser from 0.257.1 to 0.258.0

Commits

See full diff in compare view

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

fix: resolve relative PATH entries against the provided cwd by @RSS1102 in harryfei/which-rs#128

New Contributors

@RSS1102 made their first contribution in harryfei/which-rs#128

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @RSS1102 for your contribution to which!

Commits

17fde4a prepare patch release
48e49d5 Resolve relative PATH entries against cwd (#128)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [rcgen](https://github.com/rustls/rcgen) | `0.14.9` | `0.14.10` | | [surrealkv](https://github.com/surrealdb/surrealkv) | `0.21.3` | `0.21.4` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.7.0` | `0.7.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.25.0` | `1.26.0` | | [wasm-encoder](https://github.com/bytecodealliance/wasm-tools) | `0.257.1` | `0.258.0` | | [wat](https://github.com/bytecodealliance/wasm-tools) | `1.257.1` | `1.258.0` | | [wasmparser](https://github.com/bytecodealliance/wasm-tools) | `0.257.1` | `0.258.0` | | [wit-component](https://github.com/bytecodealliance/wasm-tools) | `0.257.1` | `0.258.0` | | [wit-parser](https://github.com/bytecodealliance/wasm-tools) | `0.257.1` | `0.258.0` | | [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` | Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `rcgen` from 0.14.9 to 0.14.10 - [Release notes](https://github.com/rustls/rcgen/releases) - [Commits](rustls/rcgen@v/0.14.9...v0.14.10) Updates `surrealkv` from 0.21.3 to 0.21.4 - [Release notes](https://github.com/surrealdb/surrealkv/releases) - [Changelog](https://github.com/surrealdb/surrealkv/blob/main/release.toml) - [Commits](surrealdb/surrealkv@v0.21.3...v0.21.4) Updates `tower-http` from 0.7.0 to 0.7.1 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1) Updates `uuid` from 1.25.0 to 1.26.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@1.25.0...v1.26.0) Updates `wasm-encoder` from 0.257.1 to 0.258.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/commits) Updates `wat` from 1.257.1 to 1.258.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](bytecodealliance/wasm-tools@v1.257.1...v1.258.0) Updates `wasmparser` from 0.257.1 to 0.258.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/commits) Updates `wit-component` from 0.257.1 to 0.258.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/commits) Updates `wit-parser` from 0.257.1 to 0.258.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/commits) Updates `which` from 8.0.5 to 8.0.6 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@8.0.5...8.0.6) --- updated-dependencies: - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rcgen dependency-version: 0.14.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: surrealkv dependency-version: 0.21.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tower-http dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: uuid dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: wasm-encoder dependency-version: 0.258.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: wat dependency-version: 1.258.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: wasmparser dependency-version: 0.258.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: wit-component dependency-version: 0.258.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: wit-parser dependency-version: 0.258.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: which dependency-version: 8.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 3, 2026

dependabot Bot requested a review from joshuajbouw as a code owner September 3, 2026 15:43

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 3, 2026

joshuajbouw mentioned this pull request Sep 4, 2026

feat(release): set Astrid workspace version to 2026.9.0 #1845

Merged

5 tasks

Package	From	To
flate2	`1.1.9`	`1.1.10`
rcgen	`0.14.9`	`0.14.10`
surrealkv	`0.21.3`	`0.21.4`
tower-http	`0.7.0`	`0.7.1`
uuid	`1.25.0`	`1.26.0`
wasm-encoder	`0.257.1`	`0.258.0`
wat	`1.257.1`	`1.258.0`
wasmparser	`0.257.1`	`0.258.0`
wit-component	`0.257.1`	`0.258.0`
wit-parser	`0.257.1`	`0.258.0`
which	`8.0.5`	`8.0.6`

Sunbelt Computer Software

PL/B Language Development and Support

Navigation Menu

Uh oh!

build(deps): bump the rust-dependencies group with 11 updates - #1835

build(deps): bump the rust-dependencies group with 11 updates#1835
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-8af5fd15a0

dependabot Bot commented on behalf of github Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Sunbelt Computer Software

PL/B Language Development and Support

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 3, 2026

1.1.10

What's Changed

New Contributors

0.14.10

What's Changed

tower-http-0.7.1

Added

Changed

Fixed

All the changes

v1.26.0

What's Changed

v1.258.0

What's Changed

8.0.6

What's Changed

New Contributors

8.0.6

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants