Bump the cargo-patch group across 1 directory with 9 updates by dependabot[bot] · Pull Request #21 · OpenHTTPA/openhttpa-rs

dependabot · 2026-07-13T20:48:38Z

Bumps the cargo-patch group with 9 updates in the / directory:

Package	From	To
bytes	`1.12.0`	`1.12.1`
aws-lc-rs	`1.17.0`	`1.17.1`
http-body-util	`0.1.3`	`0.1.4`
rustls	`0.23.41`	`0.23.42`
uuid	`1.23.4`	`1.23.5`
napi-derive	`3.5.7`	`3.5.10`
winnow	`1.0.3`	`1.0.4`
der	`0.8.0`	`0.8.1`
lru	`0.18.0`	`0.18.1`

Updates bytes from 1.12.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

Properly handle when Box::new panics (#837)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

Properly handle when Box::new panics (#837)

Commits

76c0fbb Release bytes v1.12.1 (#838)
924c82b Handle unwinding from Box::new (#837)
See full diff in compare view

Updates aws-lc-rs from 1.17.0 to 1.17.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

[Certificate #5314](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314) (static)

[Certificate #5298](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298) (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

Support linking against a system-installed AWS-LC:

Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @justsmth in aws/aws-lc-rs#1129

Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @justsmth in aws/aws-lc-rs#1143

Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @justsmth in aws/aws-lc-rs#1156

Gate system AWS-LC on a declared minimum version by @justsmth in aws/aws-lc-rs#1152

Implement Send/Sync for RSA hazmat encryption key types by @justsmth in aws/aws-lc-rs#1128

Add Salt::none constructor for HKDF by @justsmth in aws/aws-lc-rs#1135

Add wasm32-unknown-emscripten build and test support by @justsmth in aws/aws-lc-rs#1059

Report specific key rejection reasons for invalid RSA key sizes by @justsmth in aws/aws-lc-rs#1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @jakemas in aws/aws-lc#3195 and aws/aws-lc#3219

Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

Fix memcmp_check build failure when CFLAGS contains LTO flags by @justsmth in aws/aws-lc-rs#1134

Fix missing poly_Rq_mul symbol in Linux x86_64 build by @Lebei2046 in aws/aws-lc-rs#1130

Apply -ffile-prefix-map to jitterentropy builder by @justsmth in aws/aws-lc-rs#1139

Select compiler flag dialect by driver mode, not target ABI by @justsmth in aws/aws-lc-rs#1147

Issues Being Closed

RSA hazmat encryption key types missing Send/Sync -- aws/aws-lc-rs#1125

RSA key rejection reports generic Unspecified for invalid key sizes -- aws/aws-lc-rs#1082

Build failure when CFLAGS contains LTO flags (Windows/clang) -- aws/aws-lc-rs#1132

cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- aws/aws-lc-rs#1146

Support system-provided AWS-LC library -- aws/aws-lc-rs#936

cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- aws/aws-lc-rs#1108

jitterentropy embeds absolute paths to files -- aws/aws-lc-rs#1137

Other Merged PRs

Add ML-DSA aarch64 native assembly to CC builder scripts by @jakemas in aws/aws-lc-rs#1113

Clarify HKDF info concatenation and encoding responsibility by @justsmth in aws/aws-lc-rs#1145

CI: support zig cross compile for arm32 by @justsmth in aws/aws-lc-rs#1124

fix(clippy): fix truncate warnings by @justsmth in aws/aws-lc-rs#1126

ci: replace dtolnay/rust-toolchain with direct rustup invocations by @justsmth in aws/aws-lc-rs#1133

... (truncated)

Commits

741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
00e016a Bump actions/checkout from 6 to 7 (#1157)
e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
26838da rsa: report specific key rejection for invalid sizes (#1153)
Additional commits viewable in compare view

Updates http-body-util from 0.1.3 to 0.1.4

Release notes

Sourced from http-body-util's releases.

http-body-util-v0.1.4

What's Changed

Add Fused body combinator that always returns None once completed.

Add BodyExt::into_stream() to convert a body into a Stream.

Add Full::into_inner() to get the full Buf.

Add InspectFrame and InspectErr combinators.

Commits

7685047 http-body-util v0.1.4
3396328 http-body v1.1.0
2fb78de chore: bump license year (#170)
b16554b chore(ci): bump checkout to v7
c0c53ca chore(ci): use msrv aware update for msrv job
5ed15d2 tests: fix clippy::double_parens
c8cb37f Derive Copy trait to SizeHint struct (#164)
915d6d5 feat(util): add InspectErr, InspectFrame combinators (#161)
0fc0a94 docs: fix broken intradoc links (#162)
5a849d4 chore: add FUNDING.yml
Additional commits viewable in compare view

Updates rustls from 0.23.41 to 0.23.42

Commits

411fb02 Bump version to 0.23.42
aff9845 implement rfc 9149 ticket_request extension
8bd3d1b server: add max_tls13_tickets configuration
4cce222 Address new std_instead_of_core in nightly
d3ffdc1 Address new std_instead_of_core in nightly
75d1b7a Take semver-compatible dependency updates
See full diff in compare view

Updates uuid from 1.23.4 to 1.23.5

Release notes

Sourced from uuid's releases.

v1.23.5

What's Changed

doc: Fix broken link by @frostyplanet in uuid-rs/uuid#891

perf: Optimize UUID hex parsing and formatting by @geeknoid in uuid-rs/uuid#894

Prepare for 1.23.5 release by @KodrAus in uuid-rs/uuid#895

New Contributors

@geeknoid made their first contribution in uuid-rs/uuid#894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

Commits

5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
5a7dfe5 prepare for 1.23.5 release
9b4bfc8 Merge pull request #894 from geeknoid/main
5acc5a5 perf: Optimize UUID hex parsing and formatting
1e5d867 Merge pull request #891 from frostyplanet/doc
49310f0 doc: Fix broken link
See full diff in compare view

Updates napi-derive from 3.5.7 to 3.5.10

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.5.10

Other

updated the following local packages: napi-derive-backend

napi-derive-v3.5.9

Other

updated the following local packages: napi-derive-backend

napi-derive-v3.5.8

Other

updated the following local packages: napi-derive-backend

Commits

3812aa7 chore: release (#3380)
ce56779 chore(release): publish
b9825c7 fix(derive): defer receiver borrow until argument conversion (#3392)
aa49714 fix(cli): align build and project configuration (#3387)
68cbb8d chore(deps): update yarn to v4.17.1 (#3385)
3069f44 fix(sys): fall back to libnode.dll for symbol loading on MSVC targets (#3384)
b015713 fix(cli): validate cross-compilation flags upfront and document them accurate...
81a35ce chore(deps): update dependency oxc-parser to ^0.139.0 (#3382)
4bff127 docs(readme): point sponsors image at napi.rs/sponsors.svg (#3379)
1ac467e chore(napi): release v3.10.3 (#3376)
Additional commits viewable in compare view

Updates winnow from 1.0.3 to 1.0.4

Changelog

Sourced from winnow's changelog.

[1.0.4] - 2026-07-13

Fixes

Expand the number of supported fields for seq! from 22 to 32

Commits

7539ec0 chore: Release
6c51cfa docs: Update changelog
278451f Merge pull request #928 from weifanglab/fix-seq-many-fields
c04179e chore(deps): Update Rust Stable to v1.97 (#929)
ae574a2 style: Make clippy happy
3305231 fix(macros): allow seq! with more fields
84cc03a Merge pull request #926 from winnow-rs/renovate/actions-checkout-7.x
8d50527 Merge pull request #925 from winnow-rs/renovate/crate-ci-typos-1.x
2444381 chore(deps): Update actions/checkout action to v7
26d4dae chore(deps): Update pre-commit hook crate-ci/typos to v1.48.0
Additional commits viewable in compare view

Updates der from 0.8.0 to 0.8.1

Commits

905717f der v0.8.1 (#2377)
2556627 der: cap maximum number of nested messages at 64 (#2379)
b45caa8 der: have SliceReader use reader::position::Position (#2378)
42b4325 x509-cert: re-enable minimal-versions checks (#2374)
233eb65 chore(deps): bump the all-deps group across 1 directory with 8 updates (#2373)
f9e2ab5 chore(deps): bump crate-ci/typos from 1.47.2 to 1.48.0 (#2372)
4bfdd7c chore(deps): bump p256 from 0.14.0-rc.15 to 0.14 (#2371)
235839f tls_codec: 0.4.3 prep (#2365)
de2aa55 der: simplify SetOfVec sorting test (#2367)
cb02c0f chore(deps): bump p256 to 0.14.0-rc.15 (#2364)
Additional commits viewable in compare view

Updates lru from 0.18.0 to 0.18.1

Changelog

Sourced from lru's changelog.

v0.18.1 - 2026-07-09

Add find_and_promote method.

Commits

c6620d1 Merge pull request #237 from jeromefroe/jerome/prepare-0-18-1-release
da3c0fc Prepare 0.18.1 release
1166263 Merge pull request #236 from pixmaip/find-and-promote
2daba12 Apply suggestions from code review
2ea00dc feat: add find_and_promote API
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [bytes](https://github.com/tokio-rs/bytes) | `1.12.0` | `1.12.1` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.17.0` | `1.17.1` | | [http-body-util](https://github.com/hyperium/http-body) | `0.1.3` | `0.1.4` | | [rustls](https://github.com/rustls/rustls) | `0.23.41` | `0.23.42` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.4` | `1.23.5` | | [napi-derive](https://github.com/napi-rs/napi-rs) | `3.5.7` | `3.5.10` | | [winnow](https://github.com/winnow-rs/winnow) | `1.0.3` | `1.0.4` | | [der](https://github.com/RustCrypto/formats) | `0.8.0` | `0.8.1` | | [lru](https://github.com/jeromefroe/lru-rs) | `0.18.0` | `0.18.1` | Updates `bytes` from 1.12.0 to 1.12.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.12.0...v1.12.1) Updates `aws-lc-rs` from 1.17.0 to 1.17.1 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.17.0...v1.17.1) Updates `http-body-util` from 0.1.3 to 0.1.4 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@http-body-util-v0.1.3...http-body-util-v0.1.4) Updates `rustls` from 0.23.41 to 0.23.42 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.41...v/0.23.42) Updates `uuid` from 1.23.4 to 1.23.5 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.4...v1.23.5) Updates `napi-derive` from 3.5.7 to 3.5.10 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-derive-v3.5.7...napi-derive-v3.5.10) Updates `winnow` from 1.0.3 to 1.0.4 - [Changelog](https://github.com/winnow-rs/winnow/blob/main/CHANGELOG.md) - [Commits](winnow-rs/winnow@v1.0.3...v1.0.4) Updates `der` from 0.8.0 to 0.8.1 - [Commits](RustCrypto/formats@der/v0.8.0...der/v0.8.1) Updates `lru` from 0.18.0 to 0.18.1 - [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md) - [Commits](jeromefroe/lru-rs@0.18.0...0.18.1) --- updated-dependencies: - dependency-name: bytes dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: aws-lc-rs dependency-version: 1.17.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: http-body-util dependency-version: 0.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: rustls dependency-version: 0.23.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: uuid dependency-version: 1.23.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: napi-derive dependency-version: 3.5.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: winnow dependency-version: 1.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: der dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: lru dependency-version: 0.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-13T20:48:39Z

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-07-20T07:29:15Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot closed this Jul 20, 2026

dependabot Bot deleted the dependabot/cargo/cargo-patch-21396d9422 branch July 20, 2026 07:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the cargo-patch group across 1 directory with 9 updates - #21

Bump the cargo-patch group across 1 directory with 9 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-patch-21396d9422

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

1.12.1 (July 8th, 2026)

Fixed

aws-lc-rs v1.17.1

What's Changed

Upstream AWS-LC (v5.1.0)

Build Improvements

Issues Being Closed

Other Merged PRs

http-body-util-v0.1.4

What's Changed

v1.23.5

What's Changed

New Contributors

napi-derive-v3.5.10

Other

napi-derive-v3.5.9

Other

napi-derive-v3.5.8

Other

[1.0.4] - 2026-07-13

Fixes

v0.18.1 - 2026-07-09

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading