Skip to content

build(deps): bump the prod-deps group across 1 directory with 5 updates - #188

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-deps-d4404bb4a7
Open

build(deps): bump the prod-deps group across 1 directory with 5 updates#188
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-deps-d4404bb4a7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 5 updates in the / directory:

Package From To
tokio 1.53.3 1.54.1
flate2 1.1.10 1.1.11
sha2 0.11.0 0.11.1
parking_lot 0.12.5 0.13.0
tree-sitter 0.27.1 0.27.2

Updates tokio from 1.53.3 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

  • time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

  • fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
  • net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
  • runtime: add Builder::max_io_events_per_busy_tick (#8410)
  • runtime: stabilize tokio::runtime::worker_index() (#8431)
  • sync: add SemaphorePermit::semaphore() (#8482)
  • sync: add blocking_acquire methods to Semaphore (#8269)
  • sync: add watch::Receiver::is_closed (#8481)
  • wasm: support JSPI for Emscripten target (#8285, #8627)
  • wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

  • fs: reject zero in File::set_max_buf_size (#8449)
  • io: make copy_buf cooperative (#8459)
  • io: panic when BufReader or BufStream is created with zero capacity (#8494)
  • io: panic when in-memory pipe is created with zero capacity (#8397)
  • io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
  • io: support vectored writes in Sink (#8663)
  • net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
  • net: start accepted sockets as readable and writable (#8435)
  • net: support UCred on Fuchsia (#8257)
  • process: use mio::unix::pipe for Unix child stdio (#8603)
  • runtime: cache-pad the shared injection queue and idle state (#8622)
  • runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
  • runtime: make enable_io available whenever rt is enabled (#8387)
  • runtime: move block_in_place setup into a non-generic function (#8315)
  • runtime: move the multi-thread inject queue to its own mutex (#8382)
  • runtime: panic when max_io_events_per_tick is zero (#8476)
  • runtime: suggest .await in nested block_on panic message (#8501)
  • sync: avoid atomic reader count in broadcast slots (#8357)
  • sync: use acquire/release orderings in Notify (#8325)
  • time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

Updates flate2 from 1.1.10 to 1.1.11

Release notes

Sourced from flate2's releases.

v1.1.11

Fixed

  • fixup! Complete sync flushes across output buffer boundaries (#581)
  • Separate gzip header reads from compressed data
  • Defer gzip input errors without losing read progress
  • Preserve gzip header progress on input read errors (#571)

Other

  • Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
  • Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
  • Merge pull request #577 from rust-lang/fix-loop
  • Setup trusted publishing for the flate2 crate
  • Complete sync flushes across output buffer boundaries (#581)
  • Fix "can by extended" typos in deflate and zlib write docs
  • Merge pull request #579 from NUAAwqy/docs/fix-double-space
  • Fix double space in read module doc comment
  • Add missing preposition in README description
  • Cover decoder retries across the output buffer boundary
  • Drain output before refilling the buffer
  • Clarify partial-write buffering behavior
  • Avoid shifting buffered output on partial writes
  • Merge pull request #567 from ndossche/more-asserts
  • Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
  • Fix encoder writes hanging after try_finish (#576)
  • Avoid panicking when dropping unfinished compressors
  • Merge pull request #565 from HDauven/zlib-rs-uninit-output
  • still allow resetting incomplete write decoders
  • Assert return result of reset calls
  • Reject incomplete streams in write decoders
  • Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
  • review
  • Reject incomplete streams when finishing write-side decoders
  • Preserve window size and gzip mode across Decompress::reset
  • preserve runtime detection in backend examples (#570)
  • Make miniz_oxide dictionary clearing explicit on reset
  • Harden miniz_oxide decompressor reset
  • Deduplicate zlib-rs flush conversions
  • Use native zlib-rs uninitialized output
Changelog

Sourced from flate2's changelog.

1.1.11 - 2026-11-06

Fixed

  • fixup! Complete sync flushes across output buffer boundaries (#581)
  • Separate gzip header reads from compressed data
  • Defer gzip input errors without losing read progress
  • Preserve gzip header progress on input read errors (#571)

Other

  • Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
  • Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
  • Merge pull request #577 from rust-lang/fix-loop
  • Setup trusted publishing for the flate2 crate
  • Complete sync flushes across output buffer boundaries (#581)
  • Fix "can by extended" typos in deflate and zlib write docs
  • Merge pull request #579 from NUAAwqy/docs/fix-double-space
  • Fix double space in read module doc comment
  • Add missing preposition in README description
  • Cover decoder retries across the output buffer boundary
  • Drain output before refilling the buffer
  • Clarify partial-write buffering behavior
  • Avoid shifting buffered output on partial writes
  • Merge pull request #567 from ndossche/more-asserts
  • Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
  • Fix encoder writes hanging after try_finish (#576)
  • Avoid panicking when dropping unfinished compressors
  • Merge pull request #565 from HDauven/zlib-rs-uninit-output
  • still allow resetting incomplete write decoders
  • Assert return result of reset calls
  • Reject incomplete streams in write decoders
  • Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
  • review
  • Reject incomplete streams when finishing write-side decoders
  • Preserve window size and gzip mode across Decompress::reset
  • preserve runtime detection in backend examples (#570)
  • Make miniz_oxide dictionary clearing explicit on reset
  • Harden miniz_oxide decompressor reset
  • Deduplicate zlib-rs flush conversions
  • Use native zlib-rs uninitialized output
Commits
  • cd06529 chore: release v1.1.11
  • 6ff4098 Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
  • 5f68913 Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
  • 5582d95 fixup! Complete sync flushes across output buffer boundaries (#581)
  • d05c7c4 Merge pull request #577 from rust-lang/fix-loop
  • 5c7ee7a Merge pull request #583 from Kobzol/trusted-publishing
  • cc527c6 Setup trusted publishing for the flate2 crate
  • 54f49cd Merge pull request #580 from NUAAwqy/fix/can-by-extended-typo
  • 491df15 Complete sync flushes across output buffer boundaries (#581)
  • a7a1161 Fix "can by extended" typos in deflate and zlib write docs
  • Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates parking_lot from 0.12.5 to 0.13.0

Release notes

Sourced from parking_lot's releases.

parking_lot-v0.13.0

  • Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
  • Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
  • Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
  • Removed the hardware-lock-elision feature. (#533)
  • Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
  • Removed the no-op lock_api/nightly feature. (#533)
  • Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
  • Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
  • Added Once::new_completed for constructing a Once in the completed state. (#520)
  • Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
  • Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
  • Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
  • Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
  • Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
  • Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
  • Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
  • Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
  • Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
  • Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
  • Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
  • Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)
  • Documented that parking-lot-based synchronization primitives must not be used

... (truncated)

Changelog

Sourced from parking_lot's changelog.

0.13.0 (parking_lot), 0.10.0 (parking_lot_core), 0.5.0 (lock_api) - 2026-10-21

  • Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
  • Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
  • Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
  • Removed the hardware-lock-elision feature. (#533)
  • Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
  • Removed the no-op lock_api/nightly feature. (#533)
  • Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
  • Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
  • Added Once::new_completed for constructing a Once in the completed state. (#520)
  • Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
  • Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
  • Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
  • Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
  • Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
  • Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
  • Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
  • Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
  • Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
  • Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
  • Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
  • Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)

... (truncated)

Commits
  • 1a5c3dd Update changelog
  • ec07063 chore: release
  • f369d24 Merge pull request #538 from napi-rs/wasi-threads-parker
  • 2f4103f Remove the WASI backend note from stable restrictions
  • a3e8717 Reuse existing CI jobs for WASI coverage
  • c2bfc7b Merge pull request #549 from Amanieu/fix-l4re-condvar-clock
  • 696f28b Don't use pthread_condattr_setclock on L4RE
  • 52941c0 Share the libc dependency between Unix and WASI
  • 4fde6a7 Align the Rust setup action with existing workflows
  • f0ce547 Reuse the pthread backend for WASI on stable
  • Additional commits viewable in compare view

Updates tree-sitter from 0.27.1 to 0.27.2

Release notes

Sourced from tree-sitter's releases.

v0.27.2

What's Changed

Full Changelog: tree-sitter/tree-sitter@v0.27.1...v0.27.2

Commits
  • 3fb7be4 release v0.27.2
  • a7fd3a5 build(deps): bump wasmtime-c-api to v48.0.8
  • 270e885 fix(xtask): use zig fetch --save to update wasmtime in build.zig.zon
  • 292f963 build(zig): support Zig 0.17
  • f4739f9 fix(make): don't remove tree-sitter dir on uninstall
  • df4c34e fix(generate): preserve reserved-word behavior when merging states
  • d0051f8 fix(rust): address new unnecessary-box-pin lint
  • c2a14c7 fix(lib): retain siblings during byte-based child lookup
  • cfebeaa fix(lib): preserve descendant indices during reverse cursor traversal
  • bbc0e28 fix(lib): handle large child indices in reverse cursor traversal
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the prod-deps group across 1 directory with 5 updates
d429e56 
Bumps the prod-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.3` | `1.54.1` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.10` | `1.1.11` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.5` | `0.13.0` |
| [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.27.1` | `0.27.2` |



Updates `tokio` from 1.53.3 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.3...tokio-1.54.1)

Updates `flate2` from 1.1.10 to 1.1.11
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Changelog](https://github.com/rust-lang/flate2-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/flate2-rs@1.1.10...v1.1.11)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `parking_lot` from 0.12.5 to 0.13.0
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@parking_lot-v0.12.5...parking_lot-v0.13.0)

Updates `tree-sitter` from 0.27.1 to 0.27.2
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: flate2
  dependency-version: 1.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: parking_lot
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: tree-sitter
  dependency-version: 0.27.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from aliasfoxkde as a code owner November 10, 2026 20:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 10, 2026
@coderabbitai

coderabbitai Bot commented Nov 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 15108117-b9fd-46ea-b0ef-ec6c3c413b60

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aliasfoxkde aliasfoxkde Awaiting requested review from aliasfoxkde aliasfoxkde is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants