From e222810bbdf17980fc1a5978c588dd47ff01259e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 10 Oct 2026 05:30:53 +0000 Subject: [PATCH 1/2] chore(deps): bump the cargo group across 1 directory with 2 updates Bumps the cargo group with 2 updates in the /rust directory: [tar](https://github.com/composefs/tar-rs) and [openssl](https://github.com/rust-openssl/rust-openssl). Updates `tar` from 0.4.45 to 0.4.46 - [Release notes](https://github.com/composefs/tar-rs/releases) - [Commits](https://github.com/composefs/tar-rs/compare/0.4.45...0.4.46) Updates `openssl` from 0.10.75 to 0.10.81 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.75...openssl-v0.10.81) --- updated-dependencies: - dependency-name: openssl dependency-version: 0.10.81 dependency-type: indirect - dependency-name: tar dependency-version: 0.4.46 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- rust/Cargo.lock | 29 ++++++++++++++--------------- 1 file changed, 14 insertions(+), 15 deletions(-) diff --git a/rust/Cargo.lock b/rust/Cargo.lock index 2dc0678d..30d73baa 100644 --- a/rust/Cargo.lock +++ b/rust/Cargo.lock @@ -88,7 +88,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -99,7 +99,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -750,7 +750,7 @@ dependencies = [ "maybe-owned", "rustix", "rustix-linux-procfs", - "windows-sys 0.61.2", + "windows-sys 0.60.2", "winx", ] @@ -1315,7 +1315,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -2539,7 +2539,7 @@ version = "0.50.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.59.0", ] [[package]] @@ -2626,15 +2626,14 @@ dependencies = [ [[package]] name = "openssl" -version = "0.10.75" +version = "0.10.81" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "08838db121398ad17ab8531ce9de97b244589089e290a384c900cb9ff7434328" +checksum = "77823a27f0babb03091cb9ed9ef80af3b39dbc82f97e8fa530374b7dafd87a45" dependencies = [ "bitflags 2.10.0", "cfg-if", "foreign-types", "libc", - "once_cell", "openssl-macros", "openssl-sys", ] @@ -2658,9 +2657,9 @@ checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e" [[package]] name = "openssl-sys" -version = "0.9.111" +version = "0.9.117" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "82cab2d520aa75e3c58898289429321eb788c3106963d0dc886ec7a5f4adc321" +checksum = "b47e7e6bb2c38cd930d25a23b40fa52e068c10e85f3e03a7f5ba5aaca5713695" dependencies = [ "cc", "libc", @@ -3305,7 +3304,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -3814,9 +3813,9 @@ checksum = "7b2093cf4c8eb1e67749a6762251bc9cd836b6fc171623bd0a9d324d37af2417" [[package]] name = "tar" -version = "0.4.45" +version = "0.4.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "22692a6476a21fa75fdfc11d452fda482af402c008cdbaf3476414e122040973" +checksum = "3f6221d9a6003c78398e3b239969f352578258df48c8eb051caadae0015bc840" dependencies = [ "filetime", "libc", @@ -3833,7 +3832,7 @@ dependencies = [ "getrandom 0.3.4", "once_cell", "rustix", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -4608,7 +4607,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.48.0", ] [[package]] From c37e7ba55e4f7462d576fff60aedd630d6e0ac67 Mon Sep 17 00:00:00 2001 From: Puma Date: Fri, 9 Oct 2026 22:39:25 -0700 Subject: [PATCH 2/2] Refresh tar and OpenSSL notices on the merged v0.8 source Keep only tar 0.4.46, openssl 0.10.81 and required openssl-sys 0.9.117. Preserve unrelated resolved dependency edges and regenerate both candidate attribution profiles from the actual package closure. --- .../0.8.0-rc.1-s3/THIRD-PARTY-NOTICES.txt | 12 +++++----- .../0.8.0-rc.1-s3/inventory.json | 22 +++++++++---------- .../0.8.0-rc.1/THIRD-PARTY-NOTICES.txt | 12 +++++----- .../0.8.0-rc.1/inventory.json | 22 +++++++++---------- rust/Cargo.lock | 16 +++++++------- 5 files changed, 42 insertions(+), 42 deletions(-) diff --git a/docs/release-attribution/0.8.0-rc.1-s3/THIRD-PARTY-NOTICES.txt b/docs/release-attribution/0.8.0-rc.1-s3/THIRD-PARTY-NOTICES.txt index c242ae98..29df1118 100644 --- a/docs/release-attribution/0.8.0-rc.1-s3/THIRD-PARTY-NOTICES.txt +++ b/docs/release-attribution/0.8.0-rc.1-s3/THIRD-PARTY-NOTICES.txt @@ -45772,8 +45772,8 @@ SUCH DAMAGE. ============================================================================== -openssl 0.10.75 (Rust normal/build dependency, all desktop targets; conservative superset) -Source: https://crates.io/api/v1/crates/openssl/0.10.75/download +openssl 0.10.81 (Rust normal/build dependency, all desktop targets; conservative superset) +Source: https://crates.io/api/v1/crates/openssl/0.10.81/download Declared license: Apache-2.0 --- LICENSE --- Copyright 2011-2017 Google Inc. @@ -46466,8 +46466,8 @@ DEALINGS IN THE SOFTWARE. ============================================================================== -openssl-sys 0.9.111 (Rust normal/build dependency, all desktop targets; conservative superset) -Source: https://crates.io/api/v1/crates/openssl-sys/0.9.111/download +openssl-sys 0.9.117 (Rust normal/build dependency, all desktop targets; conservative superset) +Source: https://crates.io/api/v1/crates/openssl-sys/0.9.117/download Declared license: MIT --- LICENSE-MIT --- Copyright (c) 2014 Alex Crichton @@ -62074,8 +62074,8 @@ SOFTWARE. ============================================================================== -tar 0.4.45 (Rust normal/build dependency, all desktop targets; conservative superset) -Source: https://crates.io/api/v1/crates/tar/0.4.45/download +tar 0.4.46 (Rust normal/build dependency, all desktop targets; conservative superset) +Source: https://crates.io/api/v1/crates/tar/0.4.46/download Declared license: MIT OR Apache-2.0 --- LICENSE-APACHE --- Apache License diff --git a/docs/release-attribution/0.8.0-rc.1-s3/inventory.json b/docs/release-attribution/0.8.0-rc.1-s3/inventory.json index a575d528..51eb5a6d 100644 --- a/docs/release-attribution/0.8.0-rc.1-s3/inventory.json +++ b/docs/release-attribution/0.8.0-rc.1-s3/inventory.json @@ -935,7 +935,7 @@ }, { "name": "openssl", - "version": "0.10.75" + "version": "0.10.81" }, { "name": "openssl-macros", @@ -947,7 +947,7 @@ }, { "name": "openssl-sys", - "version": "0.9.111" + "version": "0.9.117" }, { "name": "option-ext", @@ -1267,7 +1267,7 @@ }, { "name": "tar", - "version": "0.4.45" + "version": "0.4.46" }, { "name": "tempfile", @@ -5395,9 +5395,9 @@ }, { "name": "openssl", - "version": "0.10.75", + "version": "0.10.81", "license_declared": "Apache-2.0", - "source": "https://crates.io/api/v1/crates/openssl/0.10.75/download", + "source": "https://crates.io/api/v1/crates/openssl/0.10.81/download", "scope": "Rust normal/build dependency, all desktop targets; conservative superset", "texts": [ { @@ -5446,9 +5446,9 @@ }, { "name": "openssl-sys", - "version": "0.9.111", + "version": "0.9.117", "license_declared": "MIT", - "source": "https://crates.io/api/v1/crates/openssl-sys/0.9.111/download", + "source": "https://crates.io/api/v1/crates/openssl-sys/0.9.117/download", "scope": "Rust normal/build dependency, all desktop targets; conservative superset", "texts": [ { @@ -6786,9 +6786,9 @@ }, { "name": "tar", - "version": "0.4.45", + "version": "0.4.46", "license_declared": "MIT OR Apache-2.0", - "source": "https://crates.io/api/v1/crates/tar/0.4.45/download", + "source": "https://crates.io/api/v1/crates/tar/0.4.46/download", "scope": "Rust normal/build dependency, all desktop targets; conservative superset", "texts": [ { @@ -9236,7 +9236,7 @@ "electron/package.json": "2f635cf017e26ee7c0af5a7f5215319ce325e5d6cd806c0d0f1c6bc912a635ba", "frontend/package.json": "8e24aa7eceed7cdb9279a77d42a18e7183abefae32586ea4cdcac48a042729ae", "pnpm-lock.yaml": "78cac9b50e2f28d293420ffb8b9d57889a723669a3969b3a670dd3e6cbfdda18", - "rust/Cargo.lock": "4fca97f542f744e2343ae96fe7ce1a3b04526367c2a4240b27f4698a34e4ef77", + "rust/Cargo.lock": "91fb9823de2f0346211b4f68ca400f03a628890e55dca90e0803e2dd7ad47e42", "rust/Cargo.toml": "4b30d577dea5f46bb7eb459a2b66a22b534f9671d561207a0a23749d29872fec", "rust/crates/pumas-app-manager/Cargo.toml": "f344b89815164c0acc2f6758ad8313a2b8cccba1004354046d542ca5a3d22a73", "rust/crates/pumas-app-manager/src/version_manager/managed_python.rs": "e2e79a8c63500fa060e079edc21484bdc231e1941c6a5ebf65584c3efc95be6f", @@ -9246,5 +9246,5 @@ "scripts/release/licenses/managed-python-sources.json": "eabda4e2a25a92cfa8610865e79d11a50836930f53098efe89dd90778c4212ca", "scripts/release/torch-managed-python-acceptance.py": "b0486387627d6ae98b4b6533adcceed93e93ebf868385626f3b13f1fb949893b" }, - "notices_sha256": "6cc6069dc0779189acd14248de5273e78737e5fa09a26467e934839608b7830e" + "notices_sha256": "abf171b832a35b70752979877aaab3b9ad3fdbf2e9cb2a034e2bce3a832134df" } diff --git a/docs/release-attribution/0.8.0-rc.1/THIRD-PARTY-NOTICES.txt b/docs/release-attribution/0.8.0-rc.1/THIRD-PARTY-NOTICES.txt index 31405521..30306771 100644 --- a/docs/release-attribution/0.8.0-rc.1/THIRD-PARTY-NOTICES.txt +++ b/docs/release-attribution/0.8.0-rc.1/THIRD-PARTY-NOTICES.txt @@ -38547,8 +38547,8 @@ SUCH DAMAGE. ============================================================================== -openssl 0.10.75 (Rust normal/build dependency, all desktop targets; conservative superset) -Source: https://crates.io/api/v1/crates/openssl/0.10.75/download +openssl 0.10.81 (Rust normal/build dependency, all desktop targets; conservative superset) +Source: https://crates.io/api/v1/crates/openssl/0.10.81/download Declared license: Apache-2.0 --- LICENSE --- Copyright 2011-2017 Google Inc. @@ -39241,8 +39241,8 @@ DEALINGS IN THE SOFTWARE. ============================================================================== -openssl-sys 0.9.111 (Rust normal/build dependency, all desktop targets; conservative superset) -Source: https://crates.io/api/v1/crates/openssl-sys/0.9.111/download +openssl-sys 0.9.117 (Rust normal/build dependency, all desktop targets; conservative superset) +Source: https://crates.io/api/v1/crates/openssl-sys/0.9.117/download Declared license: MIT --- LICENSE-MIT --- Copyright (c) 2014 Alex Crichton @@ -53380,8 +53380,8 @@ SOFTWARE. ============================================================================== -tar 0.4.45 (Rust normal/build dependency, all desktop targets; conservative superset) -Source: https://crates.io/api/v1/crates/tar/0.4.45/download +tar 0.4.46 (Rust normal/build dependency, all desktop targets; conservative superset) +Source: https://crates.io/api/v1/crates/tar/0.4.46/download Declared license: MIT OR Apache-2.0 --- LICENSE-APACHE --- Apache License diff --git a/docs/release-attribution/0.8.0-rc.1/inventory.json b/docs/release-attribution/0.8.0-rc.1/inventory.json index fb3ea8aa..1f57472b 100644 --- a/docs/release-attribution/0.8.0-rc.1/inventory.json +++ b/docs/release-attribution/0.8.0-rc.1/inventory.json @@ -781,7 +781,7 @@ }, { "name": "openssl", - "version": "0.10.75" + "version": "0.10.81" }, { "name": "openssl-macros", @@ -793,7 +793,7 @@ }, { "name": "openssl-sys", - "version": "0.9.111" + "version": "0.9.117" }, { "name": "option-ext", @@ -1081,7 +1081,7 @@ }, { "name": "tar", - "version": "0.4.45" + "version": "0.4.46" }, { "name": "tempfile", @@ -4627,9 +4627,9 @@ }, { "name": "openssl", - "version": "0.10.75", + "version": "0.10.81", "license_declared": "Apache-2.0", - "source": "https://crates.io/api/v1/crates/openssl/0.10.75/download", + "source": "https://crates.io/api/v1/crates/openssl/0.10.81/download", "scope": "Rust normal/build dependency, all desktop targets; conservative superset", "texts": [ { @@ -4678,9 +4678,9 @@ }, { "name": "openssl-sys", - "version": "0.9.111", + "version": "0.9.117", "license_declared": "MIT", - "source": "https://crates.io/api/v1/crates/openssl-sys/0.9.111/download", + "source": "https://crates.io/api/v1/crates/openssl-sys/0.9.117/download", "scope": "Rust normal/build dependency, all desktop targets; conservative superset", "texts": [ { @@ -5890,9 +5890,9 @@ }, { "name": "tar", - "version": "0.4.45", + "version": "0.4.46", "license_declared": "MIT OR Apache-2.0", - "source": "https://crates.io/api/v1/crates/tar/0.4.45/download", + "source": "https://crates.io/api/v1/crates/tar/0.4.46/download", "scope": "Rust normal/build dependency, all desktop targets; conservative superset", "texts": [ { @@ -8276,7 +8276,7 @@ "electron/package.json": "2f635cf017e26ee7c0af5a7f5215319ce325e5d6cd806c0d0f1c6bc912a635ba", "frontend/package.json": "8e24aa7eceed7cdb9279a77d42a18e7183abefae32586ea4cdcac48a042729ae", "pnpm-lock.yaml": "78cac9b50e2f28d293420ffb8b9d57889a723669a3969b3a670dd3e6cbfdda18", - "rust/Cargo.lock": "4fca97f542f744e2343ae96fe7ce1a3b04526367c2a4240b27f4698a34e4ef77", + "rust/Cargo.lock": "91fb9823de2f0346211b4f68ca400f03a628890e55dca90e0803e2dd7ad47e42", "rust/Cargo.toml": "4b30d577dea5f46bb7eb459a2b66a22b534f9671d561207a0a23749d29872fec", "rust/crates/pumas-app-manager/Cargo.toml": "f344b89815164c0acc2f6758ad8313a2b8cccba1004354046d542ca5a3d22a73", "rust/crates/pumas-app-manager/src/version_manager/managed_python.rs": "e2e79a8c63500fa060e079edc21484bdc231e1941c6a5ebf65584c3efc95be6f", @@ -8286,5 +8286,5 @@ "scripts/release/licenses/managed-python-sources.json": "eabda4e2a25a92cfa8610865e79d11a50836930f53098efe89dd90778c4212ca", "scripts/release/torch-managed-python-acceptance.py": "b0486387627d6ae98b4b6533adcceed93e93ebf868385626f3b13f1fb949893b" }, - "notices_sha256": "049333d723eda4b5e71aeb7c921155621be803df9ab317a51b692d1f754c63b5" + "notices_sha256": "5e5e273c6d4a24563d91de8d9d349413481da992d714438d80e884d61eb13dfc" } diff --git a/rust/Cargo.lock b/rust/Cargo.lock index 30d73baa..51528e61 100644 --- a/rust/Cargo.lock +++ b/rust/Cargo.lock @@ -88,7 +88,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -99,7 +99,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -750,7 +750,7 @@ dependencies = [ "maybe-owned", "rustix", "rustix-linux-procfs", - "windows-sys 0.60.2", + "windows-sys 0.61.2", "winx", ] @@ -1315,7 +1315,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -2539,7 +2539,7 @@ version = "0.50.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5" dependencies = [ - "windows-sys 0.59.0", + "windows-sys 0.61.2", ] [[package]] @@ -3304,7 +3304,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -3832,7 +3832,7 @@ dependencies = [ "getrandom 0.3.4", "once_cell", "rustix", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -4607,7 +4607,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.48.0", + "windows-sys 0.61.2", ] [[package]]