fix(deps): update rust by bootc-bot[bot] · Pull Request #339 · composefs/composefs-rs

bootc-bot · 2026-06-30T18:52:14Z

This PR contains the following updates:

Package	Type	Update	Change
cap-std-ext	dependencies	major	`4.0` → `5.0`
containers-image-proxy	dependencies	minor	`0.10` → `0.11`
indicatif	dependencies	minor	`0.17.0` → `0.18.0`
libfuzzer-sys	dependencies	patch	`0.4.12` → `0.4.13`
oci-spec	dependencies	minor	`0.9` → `0.10`
ocidir	workspace.dependencies	minor	`0.7.2` → `0.8.0`
reqwest	dependencies	minor	`0.12.15` → `0.13.0`
sha2	dependencies	minor	`0.10` → `0.11`
similar-asserts	dev-dependencies	major	`1.7.0` → `2.0.0`
similar-asserts	dependencies	major	`1` → `2`
toml	dependencies	major	`0.8` → `1.0`

Release Notes

coreos/cap-std-ext (cap-std-ext)

`v5.1.2`

Compare Source

What's Changed

cmdext: Add pass_systemd_fds() for socket activation fd passing by @cgwalters in #92
Release 5.1.2 by @cgwalters in #93

Full Changelog: coreos/cap-std-ext@v5.1.1...v5.1.2

`v5.1.1`: 5.1.1

Compare Source

No actual changes, this is just to switch to https://crates.io/docs/trusted-publishing

`v5.0.0`

Compare Source

containers/containers-image-proxy-rs (containers-image-proxy)

`v0.11.0`

Compare Source

What's Changed

Update Rust to 0.10.0 by @bootc-bot[bot] in bootc-dev#140
ci: Enable merge queue support by @cgwalters in bootc-dev#141
Update Rust crate itertools to 0.15.0 by @bootc-bot[bot] in bootc-dev#143
Update actions/checkout action to v7 by @bootc-bot[bot] in bootc-dev#144
Add get_blob_stream (prefer GetRawBlob) by @0verflowme in bootc-dev#114
Update Rust crate sha2 to 0.11.0 by @bootc-bot[bot] in bootc-dev#145
Update actions/checkout action to v7 by @bootc-bot[bot] in bootc-dev#146
Sync common files from infra repository by @bootc-bot[bot] in bootc-dev#147
Sync common files from infra repository by @bootc-bot[bot] in bootc-dev#148
Release 0.11.0 by @jeckersb in bootc-dev#149

New Contributors

@0verflowme made their first contribution in bootc-dev#114

Full Changelog: bootc-dev/containers-image-proxy-rs@v0.10.1...v0.11.0

console-rs/indicatif (indicatif)

`v0.18.6`

Compare Source

What's Changed

fix: correctly detect dumb terminal on Windows by @ugur-eren in #818

`v0.18.5`

Compare Source

What's Changed

Upgrade to rand 0.10 by @djc in #768
multi: document common MultiProgress bugs + behavior (#595) by @chris-laplante in #786
Use div_duration_f64 by @ChrisDenton in #792
Clear the rest of line after drawing to the terminal by @ChrisDenton in #790
Fix ProgressDrawTarget.is_stderr() for MultiProgress by @kojiishi in #803
Fix height and filler when wrapped at the middle of wide characters by @kojiishi in #799
fix: respect NO_COLOR and TERM=dumb environment variable by @ValentinLeTallec in #808
Fix stray comma after minus sign in HumanFloatCount by @sueun-dev in #815
Fix HumanFloatCount dropping the fractional part by @greymoth-jp in #816
style module cleanup by @djc in #813
Drop screenshots from MultiProgress documentation by @djc in #817

`v0.18.4`

Compare Source

What's Changed

initial draft oft hold_max with heuristic by @djugei in #657
Fix duration after finish by @luolong in #748
Add refresh rate warning for ProgressDrawTarget::term_like() by @djc in #750
Seeking heuristic tweaks by @djc in #751
Expose the current tab width by @alexisfontaine in #754
Make WASM support optional via a feature flag by @SvenFinn in #761
fix: respect NO_COLOR and TERM=dumb environment variables by @shaanmajid in #764

`v0.18.3`

Compare Source

What's Changed

Add ProgressBar::set_elapsed by @sunshowers in #742

`v0.18.2`

Compare Source

What's Changed

Fix wide_msg truncation with a colored message by @glehmann in #740
style: tweak write_ansi_range() style by @djc in #741

`v0.18.1`

Compare Source

What's Changed

Do not render "current" char if no "current" char is configured by @Finomnis in #719
Update vt100 requirement from 0.15.1 to 0.16.1 by @dependabot[bot] in #723
Bump MSRV to 1.71 with versioned lockfile by @djc in #735
Fix wide_bar width computation with a multiline message by @glehmann in #738

`v0.18.0`

Compare Source

Unfortunately 0.17.12 had to be yanked because the console upgrade was a semver-incompatible change. Rerelease as 0.18.0 instead.

What's Changed

Bump version to 0.18.0 by @djc in #715

`v0.17.12`

Compare Source

What's Changed

Add ProgressBar::force_draw by @jaheba in #689
Use width to truncate HumanFloatCount values by @ReagentX in #696
ProgressStyle enable/disable colors based on draw target by @tonywu6 in #699
Switch dep number_prefix to unit_prefix by @kimono-koans in #709
draw_target: inline the format arg to silence clippy by @chris-laplante in #711
Upgrade to console 0.16 by @djc in #712

rust-fuzz/libfuzzer (libfuzzer-sys)

`v0.4.13`

Compare Source

Released 2026-06-04.

Changed

Updated docs for the fuzz_mutator! macro to link to the mutatis
crate, which is a helpful crate when writing complex
custom mutators.

youki-dev/oci-spec-rs (oci-spec)

`v0.10.0`

Compare Source

What's Changed

Breaking Changes

Update LinuxIntelRdt for v1.3.0 (Breaking Changes) by @tommady in #331

Test improvements and Misc Fixes

Bump the actions group with 3 updates by @dependabot[bot] in #332
Bump dtolnay/rust-toolchain from a54c7af to 3c5f7ea by @dependabot[bot] in #333
Bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the actions group by @dependabot[bot] in #334
Bump codecov/codecov-action from 6.0.0 to 6.0.1 in the actions group by @dependabot[bot] in #335

Other Changes

Bump to 0.9.0 by @utam0k in #318
Add PARISC, LOONGARCH64, M68K, SH, and SHEB seccomp architectures by @hayama17 in #327
style: remove useless conversions between Digests by @DavSanchez in #323
style: remove unneeded return statement by @DavSanchez in #324
feat: deprecate LinuxMemory.kernel field by @bells17 in #330
Deprecate uid_mappings/gid_mappings on top-level Spec by @nayuta723 in #328

New Contributors

@hayama17 made their first contribution in #327
@DavSanchez made their first contribution in #323
@bells17 made their first contribution in #330

Full Changelog: youki-dev/oci-spec-rs@v0.9.0...v0.10.0

containers/ocidir-rs (ocidir)

`v0.8.0`

Compare Source

What's Changed

Sync common files from infra repository by @bootc-bot[bot] in bootc-dev#72
Sync common files from infra repository by @bootc-bot[bot] in bootc-dev#75
Update Rust to 0.10.0 by @bootc-bot[bot] in bootc-dev#76
ci: Enable merge queue support by @cgwalters in bootc-dev#77
Add support for oci-archives by @alexlarsson in bootc-dev#78
Update actions/checkout action to v7 by @bootc-bot[bot] in bootc-dev#80
Sync common files from infra repository by @bootc-bot[bot] in bootc-dev#81
Sync common files from infra repository by @bootc-bot[bot] in bootc-dev#82
Release 0.8.0 by @jeckersb in bootc-dev#83

New Contributors

@alexlarsson made their first contribution in bootc-dev#78
@jeckersb made their first contribution in bootc-dev#83

Full Changelog: bootc-dev/ocidir-rs@v0.7.2...v0.8.0

seanmonstar/reqwest (reqwest)

`v0.13.4`

Compare Source

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
Add ClientBuilder::http2_keep_alive_* options for the blocking client.
Add TLS 1.3 support when using native-tls backend.
Fix redirect handling to strip sensitive headers when the scheme changes.
Fix HTTP/3 happy-eyeball connection creation.
Upgrade hickory-resolver to 0.26.

`v0.13.3`

Compare Source

Fix CertificateRevocationList parsing of PEM values.
Fix logging in resolver to only show host, not full URL.
Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
Fix HTTP/3 to handle STOP_SENDING as not an error.
Fix HTTP/3 pool to remove timed out QUIC connections.
Fix HTTP/3 connection establishment picking IPv4 and IPv6.
Upgrade rustls-platform-verifier.
(wasm) Only use wasm-bindgen on unknown-* targets.

`v0.13.2`

Compare Source

Fix HTTP/2 and native-tls ALPN feature combinations.
Fix HTTP/3 to send h3 ALPN.
(wasm) fix RequestBuilder::json() from override previously set content-type.

`v0.13.1`

Compare Source

Fixes compiling with rustls on Android targets.

`v0.13.0`

Compare Source

Breaking changes:
- rustls is now the default TLS backend, instead of native-tls.
- rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
- rustls-tls has been renamed to rustls.
- rustls roots features removed, rustls-platform-verifier is used by default.
  - To use different roots, call tls_certs_only(your_roots).
- native-tls now includes ALPN. To disable, use native-tls-no-alpn.
- query and form are now crate features, disabled by default.
- Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
- For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
Fix sending Proxy-Authorization if only username is configured.
Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
Refactor internal decompression handling to use tower-http.

v0.12.24

Refactor cookie handling to an internal middleware.
Refactor internal random generator.
Refactor base64 encoding to reduce a copy.
Documentation updates.

v0.12.23

Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
Add http3_* options to blocking::ClientBuilder.
Fix default TCP timeout values to enabled and faster.
Fix SOCKS proxies to default to port 1080
(wasm) Add cache methods to RequestBuilder.

v0.12.22

Fix socks proxies when resolving IPv6 destinations.

v0.12.21

Fix socks proxy to use socks4a:// instead of socks4h://.
Fix Error::is_timeout() to check for hyper and IO timeouts too.
Fix request Error to again include URLs when possible.
Fix socks connect error to include more context.
(wasm) implement Default for Body.

v0.12.20

Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
Fix proxy headers only using the first matched proxy.
(wasm) Fix re-adding Error::is_status().

v0.12.19

Fix redirect that changes the method to GET should remove payload headers.
Fix redirect to only check the next scheme if the policy action is to follow.
(wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

Fix compilation when socks enabled without TLS.

v0.12.17

Fix compilation on macOS.

v0.12.16

Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
Add Proxy::headers() to add extra headers that should be sent to a proxy.
Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
Fix HTTP/3 to support streaming request bodies.
(wasm) Fix null bodies when calling Response::bytes_stream().

v0.12.15

Fix Windows to support both ProxyOverride and NO_PROXY.
Fix http3 to support streaming response bodies.
Fix http3 dependency from public API misuse.

v0.12.14

Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

Add Form::into_reader() for blocking multipart forms.
Add Form::into_stream() for async multipart forms.
Add support for SOCKS4a proxies.
Fix decoding responses with multiple zstd frames.
Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.
Fix cloning of request timeout in blocking::Request.
Fix http3 synchronization of connection creation, reducing unneccesary extra connections.
Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.
Fix blocking read to correctly reserve and zero read buffer.
(wasm) Add support for request timeouts.
(wasm) Fix Error::is_timeout() to return true when from a request timeout.

v0.12.12

(wasm) Fix compilation by not compiler tokio/time on WASM.

v0.12.11

Fix decompression returning an error when HTTP/2 ends with an empty data frame.

v0.12.10

Add ClientBuilder::connector_layer() to allow customizing the connector stack.
Add ClientBuilder::http2_max_header_list_size() option.
Fix propagating body size hint (content-length) information when wrapping bodies.
Fix decompression of chunked bodies so the connections can be reused more often.

v0.12.9

Add tls::CertificateRevocationLists support.
Add crate features to enable webpki roots without selecting a rustls provider.
Fix connection_verbose() to output read logs.
Fix multipart::Part::file() to automatically include content-length.
Fix proxy to internally no longer cache system proxy settings.

v0.12.8

Add support for SOCKS4 proxies.
Add multipart::Form::file() method for adding files easily.
Add Body::wrap() to wrap any http_body::Body type.
Fix the pool configuration to use a timer to remove expired connections.

v0.12.7

Revert adding impl Service<http::Request<_>> for Client.

v0.12.6

Add support for danger_accept_invalid_hostnames for rustls.
Add impl Service<http::Request<Body>> for Client and &'_ Client.
Add support for !Sync bodies in Body::wrap_stream().
Enable happy eyeballs when hickory-dns is used.
Fix Proxy so that HTTP(S)_PROXY values take precedence over ALL_PROXY.
Fix blocking::RequestBuilder::header() from unsetting sensitive on passed header values.

v0.12.5

Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
Add http3 feature back, still requiring reqwest_unstable.
Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
Fix Accept-Encoding header combinations.
Fix http3 resolving IPv6 addresses.
Internal: upgrade to rustls 0.23.

v0.12.4

Add zstd support, enabled with zstd Cargo feature.
Add ClientBuilder::read_timeout(Duration), which applies the duration for each read operation. The timeout resets after a successful read.

v0.12.3

Add FromStr for dns::Name.
Add ClientBuilder::built_in_webpki_certs(bool) to enable them separately.
Add ClientBuilder::built_in_native_certs(bool) to enable them separately.
Fix sending content-length: 0 for GET requests.
Fix response body content_length() to return value when timeout is configured.
Fix ClientBuilder::resolve() to use lowercase domain names.

v0.12.2

Fix missing ALPN when connecting to socks5 proxy with rustls.
Fix TLS version limits with rustls.
Fix not detected ALPN h2 from server with native-tls.

v0.12.1

Fix ClientBuilder::interface() when no TLS is enabled.
Fix TlsInfo::peer_certificate() being truncated with rustls.
Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
Fix Display for Error to not include its source error.

RustCrypto/hashes (sha2)

`v0.11.0`

Compare Source

mitsuhiko/similar-asserts (similar-asserts)

`v2.0.0`

Compare Source

Raised the crate edition to Rust 2024 and updated the MSRV to Rust 1.85.
Upgraded the similar dependency to 3.0.0.
Modernized CI workflows to current GitHub Actions and added PR runs.
Replaced atomic env-var caching with OnceLock.
Minor documentation and wording fixes.

toml-rs/toml (toml)

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- "on sunday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

jeckersb · 2026-07-01T15:29:39Z

Few things here

sha2 doesn't have a std feature anymore so need to just remove that bit for the upgrade
containers-image-proxy and ocidir have been updated to use oci-spec = 0.10 on main but don't have published releases, so we need new releases for those and then we can update them in tandem with oci-spec here.

Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>

Signed-off-by: John Eckersberg <jeckersb@redhat.com>

jeckersb · 2026-07-01T20:31:02Z

Ok I released new versions of containers-image-proxy and oci-spec which this picked up correctly. I've added two one-liner commits to this to fix remaining issues so someone else will need to do final approval of my changes.

jeckersb · 2026-07-01T20:36:32Z

Nevermind looks like I missed something with toml, looking...

Signed-off-by: John Eckersberg <jeckersb@redhat.com>

bootc-bot · 2026-07-01T20:45:21Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

cgwalters · 2026-07-06T14:52:39Z

This PR motivated bootc-dev/infra#218

jeckersb · 2026-07-06T19:56:23Z

Hm debian tests are failing, timing out waiting for readiness with bcvk.

bootc-bot Bot force-pushed the bootc-renovate/rust branch from 46da655 to a99803b Compare July 1, 2026 09:24

bootc-bot Bot force-pushed the bootc-renovate/rust branch from a99803b to 47b84d5 Compare July 1, 2026 16:57

This was referenced Jul 1, 2026

Release 0.8.0 bootc-dev/ocidir-rs#83

Merged

Release 0.11.0 bootc-dev/containers-image-proxy-rs#149

Merged

fix(deps): update rust

2319d2f

Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>

bootc-bot Bot force-pushed the bootc-renovate/rust branch from 47b84d5 to 2319d2f Compare July 1, 2026 19:41

jeckersb added 2 commits July 1, 2026 16:24

sha2 0.11 no longer has a std feature

89eecf7

Signed-off-by: John Eckersberg <jeckersb@redhat.com>

oci: Use OciRead trait with ocidir 0.8 update

10ca0c7

Signed-off-by: John Eckersberg <jeckersb@redhat.com>

storage: toml 1.0 gates from_str behind the serde feature

29a1764

Signed-off-by: John Eckersberg <jeckersb@redhat.com>

cgwalters approved these changes Jul 6, 2026

View reviewed changes

cgwalters added this pull request to the merge queue Jul 6, 2026

github-merge-queue Bot removed this pull request from the merge queue due to no response for status checks Jul 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update rust#339

fix(deps): update rust#339
bootc-bot[bot] wants to merge 4 commits into
mainfrom
bootc-renovate/rust

bootc-bot Bot commented Jun 30, 2026 •

edited

Loading

Uh oh!

jeckersb commented Jul 1, 2026

Uh oh!

jeckersb commented Jul 1, 2026

Uh oh!

jeckersb commented Jul 1, 2026

Uh oh!

bootc-bot Bot commented Jul 1, 2026

Uh oh!

cgwalters commented Jul 6, 2026

Uh oh!

Uh oh!

jeckersb commented Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

bootc-bot Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

v5.1.1: 5.1.1

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Changed

What's Changed

Breaking Changes

Test improvements and Misc Fixes

Other Changes

New Contributors

What's Changed

New Contributors

v0.12.28

v0.12.27

v0.12.26

v0.12.25

v0.12.24

v0.12.23

v0.12.22

v0.12.21

v0.12.20

v0.12.19

v0.12.18

v0.12.17

v0.12.16

v0.12.15

v0.12.14

v0.12.13

v0.12.12

v0.12.11

v0.12.10

v0.12.9

v0.12.8

v0.12.7

v0.12.6

v0.12.5

v0.12.4

v0.12.3

v0.12.2

v0.12.1

Configuration

Uh oh!

jeckersb commented Jul 1, 2026

Uh oh!

jeckersb commented Jul 1, 2026

Uh oh!

jeckersb commented Jul 1, 2026

Uh oh!

bootc-bot Bot commented Jul 1, 2026

Edited/Blocked Notification

Uh oh!

cgwalters commented Jul 6, 2026

Uh oh!

Uh oh!

jeckersb commented Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

bootc-bot Bot commented Jun 30, 2026 •

edited

Loading

`v5.1.1`: 5.1.1