Skip to content

Build(deps): Bump the cargo-minor-and-patch group across 1 directory with 7 updates - #970

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-0fdc051675
Open

Build(deps): Bump the cargo-minor-and-patch group across 1 directory with 7 updates#970
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-0fdc051675

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-and-patch group with 7 updates in the / directory:

Package From To
flate2 1.1.10 1.1.11
globset 0.4.20 0.4.21
unicode-width 0.2.2 0.2.3
ureq 3.5.0 3.5.1
ignore 0.4.33 0.4.34
zip 9.0.5 9.4.1
log 0.4.34 0.4.35

Updates flate2 from 1.1.10 to 1.1.11

Release notes

Sourced from flate2's releases.

v1.1.11

Fixed

  • fixup! Complete sync flushes across output buffer boundaries (#581)
  • Separate gzip header reads from compressed data
  • Defer gzip input errors without losing read progress
  • Preserve gzip header progress on input read errors (#571)

Other

  • Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
  • Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
  • Merge pull request #577 from rust-lang/fix-loop
  • Setup trusted publishing for the flate2 crate
  • Complete sync flushes across output buffer boundaries (#581)
  • Fix "can by extended" typos in deflate and zlib write docs
  • Merge pull request #579 from NUAAwqy/docs/fix-double-space
  • Fix double space in read module doc comment
  • Add missing preposition in README description
  • Cover decoder retries across the output buffer boundary
  • Drain output before refilling the buffer
  • Clarify partial-write buffering behavior
  • Avoid shifting buffered output on partial writes
  • Merge pull request #567 from ndossche/more-asserts
  • Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
  • Fix encoder writes hanging after try_finish (#576)
  • Avoid panicking when dropping unfinished compressors
  • Merge pull request #565 from HDauven/zlib-rs-uninit-output
  • still allow resetting incomplete write decoders
  • Assert return result of reset calls
  • Reject incomplete streams in write decoders
  • Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
  • review
  • Reject incomplete streams when finishing write-side decoders
  • Preserve window size and gzip mode across Decompress::reset
  • preserve runtime detection in backend examples (#570)
  • Make miniz_oxide dictionary clearing explicit on reset
  • Harden miniz_oxide decompressor reset
  • Deduplicate zlib-rs flush conversions
  • Use native zlib-rs uninitialized output
Changelog

Sourced from flate2's changelog.

1.1.11 - 2026-11-06

Fixed

  • fixup! Complete sync flushes across output buffer boundaries (#581)
  • Separate gzip header reads from compressed data
  • Defer gzip input errors without losing read progress
  • Preserve gzip header progress on input read errors (#571)

Other

  • Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
  • Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
  • Merge pull request #577 from rust-lang/fix-loop
  • Setup trusted publishing for the flate2 crate
  • Complete sync flushes across output buffer boundaries (#581)
  • Fix "can by extended" typos in deflate and zlib write docs
  • Merge pull request #579 from NUAAwqy/docs/fix-double-space
  • Fix double space in read module doc comment
  • Add missing preposition in README description
  • Cover decoder retries across the output buffer boundary
  • Drain output before refilling the buffer
  • Clarify partial-write buffering behavior
  • Avoid shifting buffered output on partial writes
  • Merge pull request #567 from ndossche/more-asserts
  • Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
  • Fix encoder writes hanging after try_finish (#576)
  • Avoid panicking when dropping unfinished compressors
  • Merge pull request #565 from HDauven/zlib-rs-uninit-output
  • still allow resetting incomplete write decoders
  • Assert return result of reset calls
  • Reject incomplete streams in write decoders
  • Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
  • review
  • Reject incomplete streams when finishing write-side decoders
  • Preserve window size and gzip mode across Decompress::reset
  • preserve runtime detection in backend examples (#570)
  • Make miniz_oxide dictionary clearing explicit on reset
  • Harden miniz_oxide decompressor reset
  • Deduplicate zlib-rs flush conversions
  • Use native zlib-rs uninitialized output
Commits
  • cd06529 chore: release v1.1.11
  • 6ff4098 Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
  • 5f68913 Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
  • 5582d95 fixup! Complete sync flushes across output buffer boundaries (#581)
  • d05c7c4 Merge pull request #577 from rust-lang/fix-loop
  • 5c7ee7a Merge pull request #583 from Kobzol/trusted-publishing
  • cc527c6 Setup trusted publishing for the flate2 crate
  • 54f49cd Merge pull request #580 from NUAAwqy/fix/can-by-extended-typo
  • 491df15 Complete sync flushes across output buffer boundaries (#581)
  • a7a1161 Fix "can by extended" typos in deflate and zlib write docs
  • Additional commits viewable in compare view

Updates globset from 0.4.20 to 0.4.21

Commits
  • 55f2f69 globset-0.4.21
  • 65e072f ignore: respect linked worktree excludes without requiring Git
  • d19650f globset: match filename-only regexes against basenames
  • 9d07a92 ignore: reuse incremental matchers for directories without rules
  • 6892bc2 ignore: use byte keys for incremental parent lookups
  • 1752fb7 globset: reject impossible literal lengths before hashing
  • 2d4fa85 ignore: skip empty absolute parent matchers (#3557)
  • b5611fc ignore: reuse parent repository detection
  • c5e744c ignore: avoid scratch pools for empty matchers
  • fada8f9 ignore: benchmark Python workspace discovery and matching (#3554)
  • Additional commits viewable in compare view

Updates unicode-width from 0.2.2 to 0.2.3

Commits
  • f8c8b20 Publish 0.2.3 (#100)
  • 5180748 Fix documentation of Kirat Rai rules (#97)
  • 0b85fb8 Update to Unicode 18 (#96)
  • 832f7ca Fix typo in docs (#90)
  • c7b4d42 Fix halfwidth katakana voiced and semi-voiced sound marks in width calculatio...
  • a3d4ee6 Fix mistake in the specification of Arabic lam-alef ligature (#92)
  • d8654db Split generated file into multiple files, separating static code from generat...
  • ab7a6dc Support char iter width (#83)
  • b10a4d5 Exclude development scripts from published packages (#80)
  • See full diff in compare view

Updates ureq from 3.5.0 to 3.5.1

Changelog

Sourced from ureq's changelog.

3.5.1

  • Bump ureq-proto to 0.7.1 (fixes to connection reuse and transfer encoding) #1224
  • Send only cookie names and values in request Cookie headers #1222
  • Preserve readable responses after macOS rejects timeout changes on closed sockets #1220
Commits
  • 33ca9d3 3.5.1
  • d1b194c Bump ureq-proto to 0.7.1
  • 81d1b40 Bump ureq-proto to 0.7.0
  • 0cbee9a docs: clarify body read limit defaults (#1223)
  • f92baae Send only cookie names and values in the Cookie header
  • f60896d Preserve readable responses after macOS timeout setter failures
  • See full diff in compare view

Updates ignore from 0.4.33 to 0.4.34

Commits
  • 91f5d22 ignore-0.4.34
  • 55f2f69 globset-0.4.21
  • 65e072f ignore: respect linked worktree excludes without requiring Git
  • d19650f globset: match filename-only regexes against basenames
  • 9d07a92 ignore: reuse incremental matchers for directories without rules
  • 6892bc2 ignore: use byte keys for incremental parent lookups
  • 1752fb7 globset: reject impossible literal lengths before hashing
  • 2d4fa85 ignore: skip empty absolute parent matchers (#3557)
  • b5611fc ignore: reuse parent repository detection
  • c5e744c ignore: avoid scratch pools for empty matchers
  • Additional commits viewable in compare view

Updates zip from 9.0.5 to 9.4.1

Release notes

Sourced from zip's releases.

v9.4.1

🐛 Bug Fixes

🚜 Refactor

  • Use boxed slices instead of Vec when growability isn't needed (#1271)

v9.4.0

🚀 Features

  • Implement ZipIterable::files_with_reader (#1267)

v9.3.0

🚀 Features

  • (write) implement TryFrom for PreparedZipFile (#1258)

v9.2.3

🐛 Bug Fixes

  • (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

  • Replace std:: with core:: where possible (#1253)

v9.2.2

🚜 Refactor

  • Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

  • Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.1

🚜 Refactor

  • Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

  • Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.0

🚀 Features

  • (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)

... (truncated)

Changelog

Sourced from zip's changelog.

9.4.1 - 2026-11-06

🐛 Bug Fixes

🚜 Refactor

  • Use boxed slices instead of Vec when growability isn't needed (#1271)

9.4.0 - 2026-11-05

🚀 Features

  • Implement ZipIterable::files_with_reader (#1267)

9.3.0 - 2026-11-03

🚀 Features

  • (write) implement TryFrom for PreparedZipFile (#1258)

9.2.3 - 2026-11-03

🐛 Bug Fixes

  • (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

  • Replace std:: with core:: where possible (#1253)

9.2.2 - 2026-11-01

🚜 Refactor

  • Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

  • Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

9.2.0 - 2026-10-31

🚀 Features

  • (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
  • add index_for_name_raw (#1210)
  • (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
  • (read) add index-free iterable ZIP reader (#1218)

... (truncated)

Commits
  • 96e8cce chore: release v9.4.1 (#1272)
  • f1b82f2 docs(example): Fix bug in memory-tracking example where reallocations were co...
  • 2308d6d refactor: Use boxed slices instead of Vec when growability isn't needed (#1271)
  • b3ad5df fix: Add a OwnedZipFileEntry for #177 (#1270)
  • 196b805 chore(deps): update lzma-rust2 from 0.24 to 0.25 (#1268)
  • f347dd4 chore: release v9.4.0 (#1269)
  • e9b7dcd feat: Implement ZipIterable::files_with_reader (#1267)
  • 47765a9 docs(security): Clarify that some "vulnerabilities" are necessary for legitim...
  • 53cfe46 ci(deps): bump useblacksmith/checkout from 1.8.1 to 1.8.2 (#1260)
  • b66f6b1 ci(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#1262)
  • Additional commits viewable in compare view

Updates log from 0.4.34 to 0.4.35

Release notes

Sourced from log's releases.

v0.4.35

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

  • rework CI/CD to align with Rust project standards
Changelog

Sourced from log's changelog.

0.4.35 - 2026-10-30

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

  • rework CI/CD to align with Rust project standards
Commits
  • a46450b Update CHANGELOG.md
  • a715f17 chore: release v0.4.35
  • b4e2b12 Merge pull request #747 from rust-lang/chore/release-plz-mgnt
  • 6b490b6 run fmt
  • 2c7fd52 simplify some crate release tasks for easier automation
  • 5bc5545 Merge pull request #745 from marcoienibot/release-plz-disable-semver-check
  • 4234b8c Disable release-plz semver check
  • 95918ff Merge pull request #744 from Kobzol/trusted-publishing
  • e7ed747 Fix Zizmor lints
  • e87a3c6 Setup trusted publishing
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Build(deps): Bump the cargo-minor-and-patch group across 1 directory …
a244075 
…with 7 updates

Bumps the cargo-minor-and-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.10` | `1.1.11` |
| [globset](https://github.com/BurntSushi/ripgrep) | `0.4.20` | `0.4.21` |
| [unicode-width](https://github.com/unicode-rs/unicode-width) | `0.2.2` | `0.2.3` |
| [ureq](https://github.com/algesten/ureq) | `3.5.0` | `3.5.1` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.33` | `0.4.34` |
| [zip](https://github.com/zip-rs/zip2) | `9.0.5` | `9.4.1` |
| [log](https://github.com/rust-lang/log) | `0.4.34` | `0.4.35` |



Updates `flate2` from 1.1.10 to 1.1.11
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Changelog](https://github.com/rust-lang/flate2-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/flate2-rs@1.1.10...v1.1.11)

Updates `globset` from 0.4.20 to 0.4.21
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@globset-0.4.20...globset-0.4.21)

Updates `unicode-width` from 0.2.2 to 0.2.3
- [Commits](unicode-rs/unicode-width@v0.2.2...v0.2.3)

Updates `ureq` from 3.5.0 to 3.5.1
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@3.5.0...3.5.1)

Updates `ignore` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.33...ignore-0.4.34)

Updates `zip` from 9.0.5 to 9.4.1
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v9.0.5...v9.4.1)

Updates `log` from 0.4.34 to 0.4.35
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/main/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.34...v0.4.35)

---
updated-dependencies:
- dependency-name: flate2
  dependency-version: 1.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: globset
  dependency-version: 0.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: unicode-width
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: ureq
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: ignore
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: zip
  dependency-version: 9.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: log
  dependency-version: 0.4.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants