build(deps): bump the cargo-minor-patch group across 1 directory with 8 updates by dependabot[bot] · Pull Request #494 · rnabioco/escapepod-rs

dependabot · 2026-10-30T10:55:52Z

Bumps the cargo-minor-patch group with 8 updates in the / directory:

Package	From	To
memmap2	`0.9.11`	`0.9.12`
sha2	`0.11.0`	`0.11.1`
ureq	`3.4.2`	`3.5.0`
uuid	`1.27.0`	`1.29.0`
zstd	`0.14.0`	`0.14.3`
serde_json	`1.0.151`	`1.0.154`
libc	`0.2.190`	`0.2.191`
ort	`2.0.0-rc.13`	`2.0.0-rc.15`

Updates memmap2 from 0.9.11 to 0.9.12

Changelog

Sourced from memmap2's changelog.

[0.9.12] - 2026-10-21

Added

Add MmapOptions::map_if_safe() to allow creation read-only mappings of a file from safe code if the kernel can guarantee the file is immutable and large enough. @alexlarsson

Add MmapOptions::no_probe_handle() to disable probing of file handles on Windows to improve performance, at the cost of no longer being able to remap later with more capabilities. @mat-gas

Add support for OpenHarmony targets (*-unknown-linux-ohos). @hiyms

Changed

Cache allocation granularity on Windows to prevent repeated syscalls. @mat-gas

Commits

4692b05 Merge pull request #180 from RazrFalcon/release/v0.9.12
9e5c0ee Bump version to 0.9.12.
b98035d Merge pull request #177 from JaskRendix/extract-test-suite
0986677 Merge branch 'master' into extract-test-suite
d26cc84 Fix map_if_safe() stub.
145ee36 Silence clippy warning about trivial identical match arms.
b402ef2 Fix check_safe_to_map() on Apple targets.
b544238 Fix formatting.
f50e480 Move tests to test/ folder.
0994bf7 Merge pull request #176 from hiyms/feat/support-ohos
Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates ureq from 3.4.2 to 3.5.0

Changelog

Sourced from ureq's changelog.

3.5.0

Prepare 3.5.0 and fix dependency advisories and warnings - #1217

Add Agent::shutdown() to interrupt requests in flight and close all connections #1211

Preserve validated request header casing with RequestBuilder::header_raw #1214

Decode proxy URL credentials once; literal percent signs must be escaped as %25 #1215

Encode ProxyBuilder credentials and preserve colons in proxy passwords #1215

Apply remaining timeout budgets to SOCKS setup and drop the socks dependency #1209

Check NO_PROXY before resolving a SOCKS proxy, so excluded hosts connect directly #1209

Clarify timeout budgets, phase boundaries, and proxy DNS #1213

Bound TLS handshake I/O by the remaining connect/global timeout #1208

Retry socket reads interrupted by EINTR when timeout (technically breaking) #1205

Fix native-tls-no-default enabling dependencies without enabling the TLS connector

Add timeout_per_read and timeout_per_write independently of total phase budgets

3.4.3

Update TLS dependencies for security fixes #1218

Commits

1bd534e Fix changelog
fee0ad2 Prepare 3.5.0 and fix dependency advisories and warnings
7de0ab7 Remove realtime dependencies from tests
3f18f90 Add Agent::shutdown() for active and pooled connections
04572f2 Expose validated request header casing
6b1c275 Fix proxy credential encoding and decoding
6a609b4 Apply the connect timeout to the SOCKS handshake and check NO_PROXY first
3c818f4 Clarify timeout budgets and phase boundaries
af3e959 Bound TLS handshake I/O by remaining timeout budgets
0ebb046 Retry socket reads interrupted by a signal when a timeout applies (#1205)
Additional commits viewable in compare view

Updates uuid from 1.27.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Add versioned constructors to NonNilUuid by @RanaPriyansh in uuid-rs/uuid#919

Prepare for 1.29.0 release by @KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

v1.28.0

What's Changed

Add optional serde format adapters by @RanaPriyansh in uuid-rs/uuid#916

Prepare for 1.28.0 release by @KodrAus in uuid-rs/uuid#918

New Contributors

@RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

Commits

4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
a3631fd prepare for 1.29.0 release
304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
d49f963 Reuse existing version tests for NonNilUuid constructors
2f02404 Add versioned constructors to NonNilUuid
276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
4b3b9f5 prepare for 1.28.0 release
cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
784a022 Inline expected tokens in optional compact serde test
a5678c3 Simplify optional serde adapter tests to option tokens
Additional commits viewable in compare view

Updates zstd from 0.14.0 to 0.14.3

Commits

75bc740 Release zstd 0.14.3, zstd-safe 8.2.0, and zstd-sys 2.1.2
1c580b6 zstd-safe: keep the one-shot reset check inline
502ee2f zstd-safe: only reset after one-shot decompression if a stream may be open
5ded6e0 zstd-safe: apply rustfmt
e224018 zstd-safe: refuse to unload a dictionary under unfinished zstdmt jobs
6a1065b Stop a single_frame() decoder when finish_frame() ends the frame
c7156df Don't let finish_frame() start a frame nothing was read from
b0fb8a7 Add write::Decoder::finish() to report incomplete frames
ab34d01 Don't retry a panicked writer when dropping AutoFlushDecoder/AutoFinishEncoder
74ace2d Reset the borrowed context's session in raw::{Encoder,Decoder}::with_context
Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates libc from 0.2.190 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

Commits

ccc2ff4 libc: Release 0.2.191
bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
9c7f568 apple: add ifaliasreq and in6_aliasreq
018c7e9 wasi: Add pthread_condattr_{get,set}clock
2c77185 openbsd: add sensordev structure
e10813c hurd: Add missing POSIX_SPAWN_* flags
2ea4bc1 Fix FreeBSD/aarch64
6d666fd dragonfly: Parse version from headers rather than CLI
Additional commits viewable in compare view

Updates ort from 2.0.0-rc.13 to 2.0.0-rc.15

Release notes

Sourced from ort's releases.

v2.0.0-rc.15

2.0.0-rc.15

💖 If you find ort useful, please consider supporting us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

✨ Supporters get priority (<24h) issue resolution & support!

rc.15 fixes over 30 instances of undefined behavior and adds no new features. It is highly recommended to upgrade to rc.15 as soon as possible, as multiple memory leaks/memory safety issues were fixed.

Alternative backends will be updated sometime before Oct 23.

run_async now only accepts owned inputs.

ExecutionProviderLibrary::unregister has been removed. You can still unregister EP libraries via the unsafe -sys API.

ValueRefMut no longer implements DerefMut to Value. It has the same methods as &mut Value and can be used in the same places in the ort API. It is recommended to take ValueRefMut anywhere you used to take &mut Value.

InMemorySession no longer implements DerefMut to Session. It has the same methods as &mut Session.

Kernel now requires Send; ThreadManager requires Send + Sync.

SessionBuilder::with_external_initializer_file_in_memory now takes Arc<[u8]> instead of Cow<'static, [u8]>.

v2.0.0-rc.14

2.0.0-rc.14

💖 If you find ort useful, please consider supporting us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

✨ Supporters get priority (<24h) issue resolution & support!

... (truncated)

Commits

5c564c5 2.0.0-rc.15
5acdda4 fix!: take external initializer file buffers as Arc\<[u8]>
24cc24a fix(editor): attribute/initializer UAFs
43bac17 fix!: prevent moves out of DerefMut for in-memory sessions/ValueRefMut
8993b93 fix: wasm & no_std build
262d9aa fix: 2 potential IoBinding UAFs
5fe022f fix(sys): make OrtAllocator::default const
593d821 fix: tensors can have MemoryInfo but no AllocatorHandle
a27c6f9 fix(adapter): hold onto the Allocator that created it
6fe7776 fix(sys): add missing graph & tensor op attr variants
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 8 updates Bumps the cargo-minor-patch group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [memmap2](https://github.com/RazrFalcon/memmap2-rs) | `0.9.11` | `0.9.12` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [ureq](https://github.com/algesten/ureq) | `3.4.2` | `3.5.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.27.0` | `1.29.0` | | [zstd](https://github.com/gyscos/zstd-rs) | `0.14.0` | `0.14.3` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` | | [ort](https://github.com/pykeio/ort) | `2.0.0-rc.13` | `2.0.0-rc.15` | Updates `memmap2` from 0.9.11 to 0.9.12 - [Changelog](https://github.com/RazrFalcon/memmap2-rs/blob/master/CHANGELOG.md) - [Commits](RazrFalcon/memmap2-rs@v0.9.11...v0.9.12) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `ureq` from 3.4.2 to 3.5.0 - [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md) - [Commits](algesten/ureq@3.4.2...3.5.0) Updates `uuid` from 1.27.0 to 1.29.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.27.0...v1.29.0) Updates `zstd` from 0.14.0 to 0.14.3 - [Release notes](https://github.com/gyscos/zstd-rs/releases) - [Commits](gyscos/zstd-rs@v0.14.0...v0.14.3) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `libc` from 0.2.190 to 0.2.191 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.190...0.2.191) Updates `ort` from 2.0.0-rc.13 to 2.0.0-rc.15 - [Release notes](https://github.com/pykeio/ort/releases) - [Commits](pykeio/ort@v2.0.0-rc.13...v2.0.0-rc.15) --- updated-dependencies: - dependency-name: memmap2 dependency-version: 0.9.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: ureq dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zstd dependency-version: 0.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: libc dependency-version: 0.2.191 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: ort dependency-version: 2.0.0-rc.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

…downcast)

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 30, 2026

fix(demux): migrate to ort 2.0.0-rc.15 (explicit Environment, Value::…

8c6d1ce

…downcast)

jayhesselberth merged commit 1ec9609 into main Oct 31, 2026
9 checks passed

jayhesselberth deleted the dependabot/cargo/cargo-minor-patch-2a043f45bf branch October 31, 2026 12:49

Navigation Menu

Repository navigation

build(deps): bump the cargo-minor-patch group across 1 directory with 8 updates - #494

build(deps): bump the cargo-minor-patch group across 1 directory with 8 updates#494
jayhesselberth merged 2 commits into
mainfrom
dependabot/cargo/cargo-minor-patch-2a043f45bf

dependabot Bot commented on behalf of github Oct 30, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 30, 2026

[0.9.12] - 2026-10-21

Added

Changed

3.5.0

3.4.3

v1.29.0

What's Changed

v1.28.0

What's Changed

New Contributors

v1.0.154

v1.0.153

v1.0.152

0.2.191

Support

Added

Fixed

Changed

0.2.191 - 2026-10-16

Support

Added

Fixed

Changed

v2.0.0-rc.15

2.0.0-rc.15

💖 If you find ort useful, please consider supporting us on Open Collective 💖

v2.0.0-rc.14

2.0.0-rc.14

💖 If you find ort useful, please consider supporting us on Open Collective 💖

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

💖 If you find `ort` useful, please consider supporting us on Open Collective 💖

💖 If you find `ort` useful, please consider supporting us on Open Collective 💖