Skip to content

Bump the fuzz-minor-patch group across 1 directory with 9 updates - #138

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/fuzz/fuzz-minor-patch-bd36ff6763
Open

Bump the fuzz-minor-patch group across 1 directory with 9 updates#138
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/fuzz/fuzz-minor-patch-bd36ff6763

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the fuzz-minor-patch group with 9 updates in the /fuzz directory:

Package From To
arbitrary 1.4.2 1.5.0
hyper 1.11.1 1.12.0
redb 4.3.0 4.4.0
serde_json 1.0.151 1.0.154
sha2 0.11.0 0.11.1
tokio 1.53.1 1.53.3
tokio-util 0.7.19 0.7.20
uuid 1.26.1 1.28.0
zeroize 1.9.0 1.9.1

Updates arbitrary from 1.4.2 to 1.5.0

Changelog

Sourced from arbitrary's changelog.

1.5.0

Released 2026-10-05.

Added

  • Added support for deriving Arbitrary for types with raw identifiers.

Changed

  • Updated derive_arbitrary to syn 3. This raises the MSRV from 1.63.0 to 1.71.0, which is the MSRV of syn 3.

Fixed

  • Fixed soundness when generating arrays.
  • Fixed nonzero integer generation to always produce a nonzero value.
  • Updated derive_arbitrary to include fixes for fully qualified paths.
Commits
  • 9807b59 Merge pull request #243 from fitzgen/bump-to-1.5.0
  • 7a49e61 Bump to version 1.5.0
  • aa2802b Merge pull request #242 from drakeo338/claude/241-fix
  • a9f7ca5 Update derive_arbitrary to syn 3 and raise MSRV to 1.71
  • cd35bd2 Merge pull request #239 from Manishearth/fix-soundness
  • 53a651d agent-driven: Fix soundness in try_create_array
  • df8afe9 Merge pull request #238 from baloo/baloo/push-lopsmyosqnpv
  • 15f5c08 Bring fix for fully qualified path
  • 341a8fd Merge pull request #237 from ngildenhuys/downgrading_msrv_deps
  • 9b68ef4 ci: adding update commands to downgrade dependencies to fix MSRV test
  • Additional commits viewable in compare view

Updates hyper from 1.11.1 to 1.12.0

Release notes

Sourced from hyper's releases.

v1.12.0

Features

Bug Fixes

  • http1:
    • withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)
    • remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)
    • always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)
    • let a Connection close token win over a later keep-alive (#4201) (5dadff76)
    • preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)
  • http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Everything

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.12.0 (2026-10-06)

Bug Fixes

  • http1:
    • withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)
    • remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)
    • always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)
    • let a Connection close token win over a later keep-alive (#4201) (5dadff76)
    • preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)
  • http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

Commits
  • 7f67699 v1.12.0
  • 254bf12 perf(body): skip waking a closed peer when a channel end drops (#4225)
  • c44f1cc fix(http1): withdraw a stale want when the client dispatcher takes a request ...
  • 69396fd fix(http1): remove content-length if transfer-encoding is auto-added (#4224)
  • a5d7fd7 fix(http1): always remove content-length if transfer-encoding is sent (#4223)
  • 5dadff7 fix(http1): let a Connection close token win over a later keep-alive (#4201)
  • d1cd14e feat(http1): add max_header_size limit for server and client (#4183)
  • 714c7cf style(lib): address cast-possible-truncation clippy findings (#4192)
  • 0d47440 style(lib): mark partial Debug impls as non-exhaustive (#4218)
  • da3b1b1 style(lib): remove useless_borrows_in_formatting from the clippy allowlist (#...
  • Additional commits viewable in compare view

Updates redb from 4.3.0 to 4.4.0

Release notes

Sourced from redb's releases.

4.4.0

New features

  • Implement Value and Key for the NonZero integer types, NonZeroU8 to NonZeroU128 and NonZeroI8 to NonZeroI128.
  • Add Value::NICHE, an optional byte string that a type never encodes to. When a type declares one, Option of that type encodes None as it, in place of a tag byte. Adding a niche to a type changes the encoding of Option of it, and its type name with it, so the two are not equivalent types: a table that stores Option of the type from before it declared the niche fails to open with TableTypeMismatch instead of being misread, and can be read through a copy of the type that declares no niche.
  • Stabilize ReadableTable::lower_bound() and ReadableTable::upper_bound(), which return a read-only Cursor, modeled on the standard library's BTreeMap cursors.
  • Stabilize Table::lower_bound_mut() and Table::upper_bound_mut(), which return a CursorMut modeled on the standard library's BTreeMap cursors. Inserting sorted data through insert_before() can be around 3x faster than insert().

Bug fixes

  • Fix a bug where check_integrity() could report that it repaired corruption, after a transaction that grew the file size was aborted.
  • Fix Database::create() repairing the database it had just created, which failed with RepairAborted under a repair callback that aborts.
  • Fix unbounded memory growth in the page cache under write workloads, when the cache never reached its configured size limit.
  • Fix Durability::None commits being lost on a clean close, after a panic was caught inside an earlier write transaction.
  • Fix compact() leaving free regions at the end of the file, when the compaction emptied more of them than it made commits.
  • Fix compact() waiting forever when the caller holds a write transaction. It fails with CompactionError::TransactionInProgress, as it does for a read transaction.
Changelog

Sourced from redb's changelog.

4.4.0 - 2026-10-13

New features

  • Implement Value and Key for the NonZero integer types, NonZeroU8 to NonZeroU128 and NonZeroI8 to NonZeroI128.
  • Add Value::NICHE, an optional byte string that a type never encodes to. When a type declares one, Option of that type encodes None as it, in place of a tag byte. Adding a niche to a type changes the encoding of Option of it, and its type name with it, so the two are not equivalent types: a table that stores Option of the type from before it declared the niche fails to open with TableTypeMismatch instead of being misread, and can be read through a copy of the type that declares no niche.
  • Stabilize ReadableTable::lower_bound() and ReadableTable::upper_bound(), which return a read-only Cursor, modeled on the standard library's BTreeMap cursors.
  • Stabilize Table::lower_bound_mut() and Table::upper_bound_mut(), which return a CursorMut modeled on the standard library's BTreeMap cursors. Inserting sorted data through insert_before() can be around 3x faster than insert().

Bug fixes

  • Fix a bug where check_integrity() could report that it repaired corruption, after a transaction that grew the file size was aborted.
  • Fix Database::create() repairing the database it had just created, which failed with RepairAborted under a repair callback that aborts.
  • Fix unbounded memory growth in the page cache under write workloads, when the cache never reached its configured size limit.
  • Fix Durability::None commits being lost on a clean close, after a panic was caught inside an earlier write transaction.
  • Fix compact() leaving free regions at the end of the file, when the compaction emptied more of them than it made commits.
  • Fix compact() waiting forever when the caller holds a write transaction. It fails with CompactionError::TransactionInProgress, as it does for a read transaction.

2.6.4 - 2026-10-02

  • Fix unbounded memory growth in the page cache under write workloads, when the cache never reached its configured size limit.
Commits
  • 7061f7e Bump version to 4.4.0
  • 8c29eee Update changelog
  • f403a51 Refuse to compact while a write transaction is live
  • f26a843 Take the consistent byte before the open publishes the recovery flag
  • 0bb989a Retry every fcntl lock request interrupted by a signal
  • c849ed0 Drop every free trailing region when compacting
  • faae676 Make non-durable commits durable when closing after a caught panic
  • 87a17ff Update changelog
  • f95d460 Bound the page cache LRU queue when the cache never fills
  • e9d0c06 Do not repair a database in which nothing has been committed
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

  • io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

  • io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

  • io: wake and drop DuplexStream wakers outside the lock (#8618)
  • macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
  • runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
  • sync: wake waiters outside the lock when closing a semaphore (#8529)
  • test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

  • rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits
  • a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
  • df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
  • f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
  • 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
  • 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
  • c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
  • 0448618 sync: make tracing_sync tests synchronous (#8427)
  • 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
  • bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
  • 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
  • Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

Updates uuid from 1.26.1 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits
  • 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
  • 4b3b9f5 prepare for 1.28.0 release
  • cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
  • 784a022 Inline expected tokens in optional compact serde test
  • a5678c3 Simplify optional serde adapter tests to option tokens
  • 638a518 Refactor optional serde adapter tests and share byte wrapper
  • b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
  • ffd8ec5 prepare for 1.27.0 release
  • 654fa5b Add optional serde format adapters
  • 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
  • Additional commits viewable in compare view

Updates zeroize from 1.9.0 to 1.9.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the fuzz-minor-patch group across 1 directory with 9 updates
960cf59 
Bumps the fuzz-minor-patch group with 9 updates in the /fuzz directory:

| Package | From | To |
| --- | --- | --- |
| [arbitrary](https://github.com/rust-fuzz/arbitrary) | `1.4.2` | `1.5.0` |
| [hyper](https://github.com/hyperium/hyper) | `1.11.1` | `1.12.0` |
| [redb](https://github.com/cberner/redb) | `4.3.0` | `4.4.0` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.3` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.28.0` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.9.0` | `1.9.1` |



Updates `arbitrary` from 1.4.2 to 1.5.0
- [Changelog](https://github.com/rust-fuzz/arbitrary/blob/main/CHANGELOG.md)
- [Commits](rust-fuzz/arbitrary@v1.4.2...v1.5.0)

Updates `hyper` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.11.1...v1.12.0)

Updates `redb` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/cberner/redb/releases)
- [Changelog](https://github.com/cberner/redb/blob/master/CHANGELOG.md)
- [Commits](cberner/redb@v4.3.0...v4.4.0)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `tokio` from 1.53.1 to 1.53.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.3)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

Updates `uuid` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.28.0)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

---
updated-dependencies:
- dependency-name: arbitrary
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: fuzz-minor-patch
- dependency-name: hyper
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: fuzz-minor-patch
- dependency-name: redb
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: fuzz-minor-patch
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fuzz-minor-patch
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fuzz-minor-patch
- dependency-name: tokio
  dependency-version: 1.53.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fuzz-minor-patch
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fuzz-minor-patch
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: fuzz-minor-patch
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fuzz-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 17, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants