[dependabot]

Bumps the rust-deps group with 3 updates in the / directory: pyo3, flume and parking_lot.

Updates pyo3 from 0.29.1 to 0.30.1

Release notes

Sourced from pyo3's releases.

PyO3 0.30.1 is a re-release of PyO3 0.30.0 after investments in CI security unfortunately led to a failed crates.io publish. Rather than delete the failed tag, this new tag comes after the CI issues have (hopefully) been corrected.

Thanks to @​davidhewitt @​Tpt and @​viicos for the investigation and fixes.

PyO3 0.30.0

This release brings confirmed testing against Python 3.15.0 final. Support for Python 3.8 has been dropped. The minimum supported Rust version has also been increased to 1.85.

The largest sets of improvements come to PyO3 0.29.0's experimental-inspect feature, which has received substantial feedback since 0.29.0 and subsequently has seen many refinements to improve the quality and coverage to the generated stubs. Thank you to everyone who has helped to continue to drive this feature towards completion.

New safe wrappers for PyFrozenDict (3.15+) and PyContext have been added.

PyO3 now contains meson build files, which should make it possible for projects using meson-python to more straightforwardly use Rust and PyO3 for additional components.

Additionally, a number of small optimizations have landed, including:

• simplifications to core implementations of PyAnyMethods,
• reduced overhead from PyO3's internal "reference pool" used to dispose of Py<T> values dropped when not attached to the interpreter,
• optimizations to num-bigint conversions, and
• better generated code from IntoPyObject and IntoPyObjectRef derives.

There are also many other incremental improvements, bug fixes and smaller features; full detail can be found in the CHANGELOG.

Please consult the migration guide for help upgrading.

Thank you to everyone who contributed code, documentation, design ideas, bug reports, and feedback. The following contributors' commits are included in this release:

@​adamgerhant-ai @​alex @​bschoenmaeckers @​charliermarsh @​chirizxc @​clin1234 @​davidhewitt @​dependabot[bot] @​dylanpulver @​elbaro @​exg @​florentinl @​FranciscoTGouveia @​Icxolu @​imfeh2 @​IvanIsCoding @​JMak-Security @​jonasdedden @​jorenham @​konstin @​latent-9 @​MatthieuDartiailh @​mattip @​mejrs @​msimacek

... (truncated)

Changelog

Sourced from pyo3's changelog.

[0.30.1] - 2026-10-14

Packaging

• Support PyPy 3.12. #6448

[0.30.0] - 2026-10-13

NB PyO3 0.30.0 failed to push to crates.io due to a CI issue, so 0.30.1 was prepared and pushed with minimal other changes other than confirming support for PyPy 3.12.

Packaging

• Drop support for Python 3.8. #6128
• Bump MSRV to 1.85. #6459
• Support meson-python as a build backend. #6483
• Bump minimum supported GraalPy version to 25.4. #6491
• Support Python 3.15.0 final. #6517

Added

• Add support for PyFrozenDict on 3.15+ #6174
• Add PyContext type. #6227
• experimental-inspect: classes which extend their base's instance layout are now decorated with disjoint_base in the generated stubs, as per PEP 800. #6362
• Add methods PyBuffer::as_slice_ptr and PyBuffer::as_fortran_slice_ptr. #6382
• Implement Copy for PyVisit. #6412
• Add non-poisoning variant of PyMutex #6437
• Add PyStringMethods::code_point_len. #6455
• FFI Definitions:
  • Add FFI definition PyThread_get_thread_ident. #6056
  • Add FFI definitions for PEP 731 (PyInitConfig). #6152
  • Add FFI definitions PyContext_AddWatcher and PyContext_ClearWatcher on Python 3.14+. #6204
  • Add FFI definitions for PEP 539 ("Thread-Specific Storage" API). #6262
  • Enable FFI definitions PyObject_GC_Track and PyObject_GC_UnTrack on PyPy. #6299
  • Add FFI definitions PyUnicode_DecodeMBCS, PyUnicode_DecodeMBCSStateful, PyUnicode_DecodeCodePagetateful, PyUnicode_AsMBCSString, PyUnicode_EncodeCodePage, and PyUnicode_Equal. #6349
  • Add FFI definitions PyFloat_Pack{2,4,8} and PyFloat_Unpack{2,4,8}. #6350
  • Add FFI definitions PyFunction_GET_CODE, PyFunction_GET_GLOBALS, PyFunction_GET_MODULE, PyFunction_GET_DEFAULTS, PyFunction_GET_KW_DEFAULTS, PyFunction_GET_CLOSURE, PyFunction_GET_ANNOTATIONS, PyClassMethod_Type, PyStaticMethod_Type, PyClassMethod_New, and PyStaticMethod_New. #6351

Changed

• Optimized num-bigint conversions on Python 3.14 and newer. #6144
• Change #[pyclass] to not emit FromPyObject implementation by default (this was previously deprecated). #6188
• Deprecate #[pyclass(skip_from_py_object)] option (as it is now the default). #6188
• Deprecate pyo3_build_config::PythonAbi::from_build_env in favor of pyo3_build_config::PythonAbi::from_stable_abi. #6192
• Change pyo3_build_config::InterpreterConfig::from_sysconfigdata to no longer select a target ABI based on the content of abi3 or abi3t cargo features (it will now always select a version-specific ABI). #6192
• Optimize PyO3's internal reference pool used for disposal of Py<T> values dropped when not attached to the Python interpreter. #6200
• experimental-inspect: Emit __all__ for complete modules in the type stubs. #6242
• Change PyBytes::new_with_writer to take &mut PyBytesWriter instead of &mut dyn Write. #6251
• Change #[pymodule_init] to allow functions which do not take a module argument (for experimental-inspect, such modules are not marked Incomplete). #6271
• Change #[pymodule_init] to optionally allow functions to take a Python<'_> marker. #6271

... (truncated)

Commits

• f168538 release: 0.30.1
• b3c7361 pyo3-introspection sdist: skip maturin license lookup (#6528)
• b564d8c ci: require Cargo.lock to be up to date during testing (#6522)
• bbd862c support PyPy 3.12 (#6448)
• 196ca35 release: 0.30.0 (#6493)
• d3befaa remove all functionality deprecated in PyO3 0.28 (#6519)
• 3ee4e56 experimental-inspect: emit __all__ in the generated stubs (#6242)
• 071edec test against 3.15 final (#6517)
• 4c68d9c internal: remove no longer needed non_local_definitions allows (#6508)
• 65c8c7d Add example building with meson-python (#6483)
• Additional commits viewable in compare view

Updates flume from 0.11.1 to 0.12.0

Changelog

Sourced from flume's changelog.

[0.12.0] - 2025-12-08

Added

• fastrand feature

Removed

• nanorand feature

Fixed

• Panic when using Duration::MAX as timeout

Commits

• See full diff in compare view

Updates parking_lot from 0.12.5 to 0.13.0

Release notes

Sourced from parking_lot's releases.

parking_lot-v0.13.0

• Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
• Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
• Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
• Removed the hardware-lock-elision feature. (#533)
• Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
• Removed the no-op lock_api/nightly feature. (#533)
• Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
• Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
• Added Once::new_completed for constructing a Once in the completed state. (#520)
• Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
• Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
• Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
• Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
• Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
• Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
• Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
• Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
• Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
• Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
• Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
• Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)
• Documented that parking-lot-based synchronization primitives must not be used

... (truncated)

Changelog

Sourced from parking_lot's changelog.

0.13.0 (parking_lot), 0.10.0 (parking_lot_core), 0.5.0 (lock_api) - 2026-10-21

• Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
• Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
• Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
• Removed the hardware-lock-elision feature. (#533)
• Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
• Removed the no-op lock_api/nightly feature. (#533)
• Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
• Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
• Added Once::new_completed for constructing a Once in the completed state. (#520)
• Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
• Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
• Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
• Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
• Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
• Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
• Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
• Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
• Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
• Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
• Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
• Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)

... (truncated)

Commits

• 1a5c3dd Update changelog
• ec07063 chore: release
• f369d24 Merge pull request #538 from napi-rs/wasi-threads-parker
• 2f4103f Remove the WASI backend note from stable restrictions
• a3e8717 Reuse existing CI jobs for WASI coverage
• c2bfc7b Merge pull request #549 from Amanieu/fix-l4re-condvar-clock
• 696f28b Don't use pthread_condattr_setclock on L4RE
• 52941c0 Share the libc dependency between Unix and WASI
• 4fde6a7 Align the Rust setup action with existing workflows
• f0ce547 Reuse the pthread backend for WASI on stable
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions