Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Bump the all-updates group across 1 directory with 15 updates#160

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Open
dependabot wants to merge1 commit intomain
base:main
Choose a base branch
Loading
fromdependabot/cargo/core/all-updates-a5409f53c2

Conversation

@dependabot
Copy link
Contributor

@dependabotdependabotbot commented on behalf ofgithubNov 17, 2025
edited
Loading

Bumps the all-updates group with 13 updates in the /core directory:

PackageFromTo
anyhow1.0.981.0.100
tokio1.47.01.48.0
tonic0.14.00.14.2
tonic-prost0.14.00.14.2
tonic-reflection0.14.00.14.2
tonic-build0.14.00.14.2
tracing-subscriber0.3.190.3.20
bytemuck1.23.21.24.0
tonic-prost-build0.14.00.14.2
aya-ebpf44ec978d238b2e
which7.0.38.0.0
bytes1.10.11.11.0
libc0.2.1740.2.177

Updatesanyhow from 1.0.98 to 1.0.100

Release notes

Sourced fromanyhow's releases.

1.0.100

  • Teach clippy to lint formatting arguments inbail!,ensure!,anyhow! (#426)

1.0.99

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)
Commits
  • 18c2598 Release 1.0.100
  • f271988 Merge pull request#426 from dtolnay/clippyfmt
  • 52f2115 Mark macros with clippy::format_args
  • da5fd9d Raise minimum tested compiler to rust 1.76
  • 211e409 Opt in to generate-macro-expansion when building on docs.rs
  • b48fc02 Enforce trybuild >= 1.0.108
  • d5f59fb Update ui test suite to nightly-2025-09-07
  • 238415d Update ui test suite to nightly-2025-08-24
  • 3bab070 Update actions/checkout@v4 -> v5
  • 4249254 Order cap-lints flag in the same order as thiserror build script
  • Additional commits viewable incompare view

Updatestokio from 1.47.0 to 1.48.0

Release notes

Sourced fromtokio's releases.

Tokio v1.48.0

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

  • fs: addFile::max_buf_size (#7594)
  • io: exportChain ofAsyncReadExt::chain (#7599)
  • net: addSocketAddr::as_abstract_name (#7491)
  • net: addTcpStream::quickack andTcpStream::set_quickack (#7490)
  • net: implementAsRef<Self> forTcpStream andUnixStream (#7573)
  • task: addLocalKey::try_get (#7666)
  • task: implementOrd fortask::Id (#7530)

Changed

  • deps: bump windows-sys to version 0.61 (#7645)
  • fs: preservemax_buf_size when cloning aFile (#7593)
  • macros: suppressclippy::unwrap_in_result in#[tokio::main] (#7651)
  • net: removePollEvented noise from Debug formats (#7675)
  • process: upgradeCommand::spawn_with to useFnOnce (#7511)
  • sync: remove inner mutex inSetOnce (#7554)
  • sync: useUnsafeCell::get_mut inMutex::get_mut andRwLock::get_mut (#7569)
  • time: reduce the generated code size ofTimeout<T>::poll (#7535)

Fixed

  • macros: fix hygiene issue injoin! andtry_join! (#7638)
  • net: fix copy/paste errors in udp peek methods (#7604)
  • process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)
  • runtime: use release ordering inwake_by_ref() even if already woken (#7622)
  • sync: close thebroadcast::Sender inbroadcast::Sender::new() (#7629)
  • sync: fix implementation of unusedRwLock::try_* methods (#7587)

Unstable

  • tokio: use cargo features instead of--cfg flags fortaskdump andio_uring (#7655,#7621)
  • fs: supportio_uring infs::write (#7567)
  • fs: supportio_uring withFile::open() (#7617)
  • fs: supportio_uring withOpenOptions (#7321)
  • macros: addlocal runtime flavor (#7375,#7597)

Documented

  • io: clarify the zero capacity case ofAsyncRead::poll_read (#7580)
  • io: fix typos in the docs ofAsyncFd readiness guards (#7583)
  • net: clarify socket gets closed on drop (#7526)
  • net: clarify the behavior ofUCred::pid() on Cygwin (#7611)
  • net: clarify the supported platform ofset_reuseport() andreuseport() (#7628)

... (truncated)

Commits
  • 556820f chore: prepare Tokio v1.48.0 (#7677)
  • fd1659a chore: prepare tokio-macros v2.6.0 (#7676)
  • 53e8aca ci: update nightly version to 2025-10-12 (#7670)
  • 9e5527d process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)
  • 25a24de net: remove PollEvented noise from Debug formats (#7675)
  • c1fa25f task: clarify the behavior of severalspawn_local methods (#7669)
  • e7e02fc fs: useFileOptions insidefs::File to support uring (#7617)
  • f7a7f62 ci: remove cargo-deny Unicode-DFS-2016 license exception config (#7619)
  • d1f1499 tokio: use cargo feature for taskdump support instead of cfg (#7655)
  • ad6f618 runtime: clarify the behavior ofHandle::block_on (#7665)
  • Additional commits viewable incompare view

Updatestonic from 0.14.0 to 0.14.2

Release notes

Sourced fromtonic's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.0...v0.14.1

Commits

Updatestonic-prost from 0.14.0 to 0.14.2

Release notes

Sourced fromtonic-prost's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.0...v0.14.1

Commits

Updatestonic-reflection from 0.14.0 to 0.14.2

Release notes

Sourced fromtonic-reflection's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.0...v0.14.1

Commits

Updatestonic-build from 0.14.0 to 0.14.2

Release notes

Sourced fromtonic-build's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.0...v0.14.1

Commits

Updatestracing-subscriber from 0.3.19 to 0.3.20

Release notes

Sourced fromtracing-subscriber's releases.

tracing-subscriber 0.3.20

Security Fix: ANSI Escape Sequence Injection (CVE-TBD)

Impact

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

  • Manipulate terminal title bars
  • Clear screens or modify terminal display
  • Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

Solution

Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.

Affected Versions

All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability.

Recommendations

Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application:

  • Logs user-provided input (form data, HTTP headers, query parameters, etc.)
  • Runs in environments where terminal output is displayed to users

Migration

This is a patch release with no breaking API changes. Simply update your Cargo.toml:

[dependencies]tracing-subscriber ="0.3.20"

Acknowledgments

We would like to thankzefr0x who responsibly reported the issue atsecurity@tokio.rs.

If you believe you have found a security vulnerability in any tokio-rs project, please email us atsecurity@tokio.rs.

Commits

Updatesbytemuck from 1.23.2 to 1.24.0

Changelog

Sourced frombytemuck's changelog.

bytemuck changelog

1.24

Commits

Updatesbytemuck_derive from 1.10.1 to 1.10.2

Commits

Updatestonic-prost-build from 0.14.0 to 0.14.2

Release notes

Sourced fromtonic-prost-build's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog:hyperium/tonic@v0.14.0...v0.14.1

Commits

Updatesaya-ebpf from44ec978 tod238b2e

Commits
  • d238b2e Release crates
  • acb1ddd docs: Add release documentation
  • 75cd7e8 build(deps): bump DavidAnson/markdownlint-cli2-action
  • 7a8ad14 Add macos-latest
  • 46221ad probe: use RAII to clean up in the error path
  • 72810f0 aya: ProbeKind is Entry/Return
  • a4a3c16 probe: use exhaustive matches
  • 1944c4a perf_event: refactor perf_event_open_trace_point
  • d4b2dde perf_event: inlineperf_event_open_bpf
  • 7e07f85 perf_attach: privatize PerfLink
  • Additional commits viewable incompare view

Updatesaya-log-ebpf from44ec978 tod238b2e

Commits
  • d238b2e Release crates
  • acb1ddd docs: Add release documentation
  • 75cd7e8 build(deps): bump DavidAnson/markdownlint-cli2-action
  • 7a8ad14 Add macos-latest
  • 46221ad probe: use RAII to clean up in the error path
  • 72810f0 aya: ProbeKind is Entry/Return
  • a4a3c16 probe: use exhaustive matches
  • 1944c4a perf_event: refactor perf_event_open_trace_point
  • d4b2dde perf_event: inlineperf_event_open_bpf
  • 7e07f85 perf_attach: privatize PerfLink
  • Additional commits viewable incompare view

Updateswhich from 7.0.3 to 8.0.0

Release notes

Sourced fromwhich's releases.

8.0.0

What's Changed

  • Add newSys trait to allow abstracting over the underlying filesystem. Particularly useful forwasm32-unknown-unknown targets. Thanks@​dsherret for this contribution to which!
  • Add more debug level tracing for otherwise silent I/O errors.
  • Call theNonFatalHandler in more places to catch previously ignored I/O errors.
  • Remove use of theeither dependency.

New Contributors

Changelog

Sourced fromwhich's changelog.

8.0.0

  • Add newSys trait to allow abstracting over the underlying filesystem. Particularly useful forwasm32-unknown-unknown targets. Thanks@​dsherret for this contribution to which!
  • Add more debug level tracing for otherwise silent I/O errors.
  • Call theNonFatalHandler in more places to catch previously ignored I/O errors.
  • Remove use of theeither dependency.
Commits
  • adac2cd bump version, update changelog
  • 84e152e reduce sys::Sys requirements, add some tracing for otherwise silent errors (#...
  • a0a6daf feat: add Sys trait for swapping out system (#109)
  • eef1998 Add actively maintained badge
  • See full diff incompare view

Updatesbytes from 1.10.1 to 1.11.0

Release notes

Sourced frombytes's releases.

Bytes v1.11.0

1.11.0 (November 14th, 2025)

  • Bump MSRV to 1.57 (#788)

Fixed

  • fix:BytesMut only reuse if src has remaining (#803)
  • SpecializeBytesMut::put::<Bytes> (#793)
  • Reserve capacity inBytesMut::put (#794)
  • ChangeBytesMut::remaining_mut to useisize::MAX instead ofusize::MAX (#795)

Internal changes

  • Guarantee address inslice() for empty slices. (#780)
  • RenameVtable::to_* ->Vtable::into_* (#776)
  • Fix latest clippy warnings (#787)
  • IgnoreBytesMut::freeze doctest on wasm (#790)
  • Movedrop_fn offrom_owner into vtable (#801)
Changelog

Sourced frombytes's changelog.

1.11.0 (November 14th, 2025)

  • Bump MSRV to 1.57 (#788)

Fixed

  • fix:BytesMut only reuse if src has remaining (#803)
  • SpecializeBytesMut::put::<Bytes> (#793)
  • Reserve capacity inBytesMut::put (#794)
  • ChangeBytesMut::remaining_mut to useisize::MAX instead ofusize::MAX (#795)

Internal changes

  • Guarantee address inslice() for empty slices. (#780)
  • RenameVtable::to_* ->Vtable::into_* (#776)
  • Fix latest clippy warnings (#787)
  • IgnoreBytesMut::freeze doctest on wasm (#790)
  • Movedrop_fn offrom_owner into vtable (#801)
Commits

Updateslibc from 0.2.174 to 0.2.177

Release notes

Sourced fromlibc's releases.

0.2.177

Added

  • Apple: AddTIOCGETA,TIOCSETA,TIOCSETAW,TIOCSETAF constants (#4736)
  • Apple: Addpthread_cond_timedwait_relative_np (#4719)
  • BSDs: Add_CS_PATH constant (#4738)
  • Linux-like: AddSIGEMT for mips* and sparc* architectures (#4730)
  • OpenBSD: Addelf_aux_info (#4729)
  • Redox: Add more sysconf constants (#4728)
  • Windows: Addwcsnlen (#4721)

Changed

  • WASIP2: Invert conditional to include p2 APIs (#4733)

0.2.176

Support

  • The default FreeBSD version has been raised from 11 to 12. This matchesrustc since 1.78. (#2406)
  • Debug is now always implemented, rather than being gated behind theextra_traits feature. (#4624)

Added

Bumps the all-updates group with 13 updates in the /core directory:| Package | From | To || --- | --- | --- || [anyhow](https://github.com/dtolnay/anyhow) | `1.0.98` | `1.0.100` || [tokio](https://github.com/tokio-rs/tokio) | `1.47.0` | `1.48.0` || [tonic](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` || [tonic-prost](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` || [tonic-reflection](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` || [tonic-build](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` || [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.19` | `0.3.20` || [bytemuck](https://github.com/Lokathor/bytemuck) | `1.23.2` | `1.24.0` || [tonic-prost-build](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` || [aya-ebpf](https://github.com/aya-rs/aya) | ``44ec978`` | ``d238b2e`` || [which](https://github.com/harryfei/which-rs) | `7.0.3` | `8.0.0` || [bytes](https://github.com/tokio-rs/bytes) | `1.10.1` | `1.11.0` || [libc](https://github.com/rust-lang/libc) | `0.2.174` | `0.2.177` |Updates `anyhow` from 1.0.98 to 1.0.100- [Release notes](https://github.com/dtolnay/anyhow/releases)- [Commits](dtolnay/anyhow@1.0.98...1.0.100)Updates `tokio` from 1.47.0 to 1.48.0- [Release notes](https://github.com/tokio-rs/tokio/releases)- [Commits](tokio-rs/tokio@tokio-1.47.0...tokio-1.48.0)Updates `tonic` from 0.14.0 to 0.14.2- [Release notes](https://github.com/hyperium/tonic/releases)- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)- [Commits](hyperium/tonic@v0.14.0...v0.14.2)Updates `tonic-prost` from 0.14.0 to 0.14.2- [Release notes](https://github.com/hyperium/tonic/releases)- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)- [Commits](hyperium/tonic@v0.14.0...v0.14.2)Updates `tonic-reflection` from 0.14.0 to 0.14.2- [Release notes](https://github.com/hyperium/tonic/releases)- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)- [Commits](hyperium/tonic@v0.14.0...v0.14.2)Updates `tonic-build` from 0.14.0 to 0.14.2- [Release notes](https://github.com/hyperium/tonic/releases)- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)- [Commits](hyperium/tonic@v0.14.0...v0.14.2)Updates `tracing-subscriber` from 0.3.19 to 0.3.20- [Release notes](https://github.com/tokio-rs/tracing/releases)- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.19...tracing-subscriber-0.3.20)Updates `bytemuck` from 1.23.2 to 1.24.0- [Changelog](https://github.com/Lokathor/bytemuck/blob/main/changelog.md)- [Commits](Lokathor/bytemuck@v1.23.2...v1.24.0)Updates `bytemuck_derive` from 1.10.1 to 1.10.2- [Changelog](https://github.com/Lokathor/bytemuck/blob/main/changelog.md)- [Commits](Lokathor/bytemuck@bytemuck_derive-v1.10.1...bytemuck_derive-v1.10.2)Updates `tonic-prost-build` from 0.14.0 to 0.14.2- [Release notes](https://github.com/hyperium/tonic/releases)- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)- [Commits](hyperium/tonic@v0.14.0...v0.14.2)Updates `aya-ebpf` from `44ec978` to `d238b2e`- [Release notes](https://github.com/aya-rs/aya/releases)- [Commits](aya-rs/aya@44ec978...d238b2e)Updates `aya-log-ebpf` from `44ec978` to `d238b2e`- [Release notes](https://github.com/aya-rs/aya/releases)- [Commits](aya-rs/aya@44ec978...d238b2e)Updates `which` from 7.0.3 to 8.0.0- [Release notes](https://github.com/harryfei/which-rs/releases)- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)- [Commits](harryfei/which-rs@7.0.3...8.0.0)Updates `bytes` from 1.10.1 to 1.11.0- [Release notes](https://github.com/tokio-rs/bytes/releases)- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)- [Commits](tokio-rs/bytes@v1.10.1...v1.11.0)Updates `libc` from 0.2.174 to 0.2.177- [Release notes](https://github.com/rust-lang/libc/releases)- [Changelog](https://github.com/rust-lang/libc/blob/0.2.177/CHANGELOG.md)- [Commits](rust-lang/libc@0.2.174...0.2.177)---updated-dependencies:- dependency-name: anyhow  dependency-version: 1.0.100  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates- dependency-name: tokio  dependency-version: 1.48.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: all-updates- dependency-name: tonic  dependency-version: 0.14.2  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates- dependency-name: tonic-prost  dependency-version: 0.14.2  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates- dependency-name: tonic-reflection  dependency-version: 0.14.2  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates- dependency-name: tonic-build  dependency-version: 0.14.2  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates- dependency-name: tracing-subscriber  dependency-version: 0.3.20  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates- dependency-name: bytemuck  dependency-version: 1.24.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: all-updates- dependency-name: bytemuck_derive  dependency-version: 1.10.2  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates- dependency-name: tonic-prost-build  dependency-version: 0.14.2  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates- dependency-name: aya-ebpf  dependency-version: d238b2ea6f1b2c1aa09a9050415b1c96329af0aa  dependency-type: direct:production  dependency-group: all-updates- dependency-name: aya-log-ebpf  dependency-version: d238b2ea6f1b2c1aa09a9050415b1c96329af0aa  dependency-type: direct:production  dependency-group: all-updates- dependency-name: which  dependency-version: 8.0.0  dependency-type: direct:production  update-type: version-update:semver-major  dependency-group: all-updates- dependency-name: bytes  dependency-version: 1.11.0  dependency-type: direct:production  update-type: version-update:semver-minor  dependency-group: all-updates- dependency-name: libc  dependency-version: 0.2.177  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: all-updates...Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotbot added dependenciesPull requests that update a dependency file rustPull requests that update Rust code labelsNov 17, 2025
@dependabotdependabotbot added dependenciesPull requests that update a dependency file rustPull requests that update Rust code labelsNov 17, 2025
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

@LorenzoTettamantiLorenzoTettamantiAwaiting requested review from LorenzoTettamantiLorenzoTettamanti is a code owner

@lorebradalorebradaAwaiting requested review from lorebradalorebrada is a code owner

At least 1 approving review is required to merge this pull request.

Labels

dependenciesPull requests that update a dependency filerustPull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@LorenzoTettamanti

[8]ページ先頭

©2009-2025 Movatter.jp