[renovate]

This PR contains the following updates:

Package	Type	Update	Change
flate2	dependencies	patch	1.1.10 → 1.1.11
mc_protocol	dependencies	minor	2.4.0 → 2.5.0
uuid	dependencies	patch	1.29.0 → 1.29.2

---

Release Notes

rust-lang/flate2-rs (flate2)

v1.1.11

Compare Source

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#​581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#​571)

Other

• Merge pull request #​582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #​574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #​577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#​581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #​579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #​567 from ndossche/more-asserts
• Merge pull request #​566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#​576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #​565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #​573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#​570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

kauri-off/mc_protocol (mc_protocol)

v2.5.0: mc_protocol 2.5.0

Compare Source

Hardens decoding and encrypted writes. See #​8.

• Limits Vec<T> nesting (MAX_VEC_NESTING) and decoded memory (MAX_DECODED_VEC_BYTES).
• Keeps the CFB8 cipher in sync when the writer fails.
• Returns an error instead of misframing when a compression threshold is active without the compression feature.
• Caps frame preallocation at 64 KiB.
• Derive (2.0.4): W/R generics compile; packet ID expressions are parenthesized.

Stricter decoding: frame prefixes over 3 bytes, non-zero data_length below the threshold and trailing bytes after the zlib stream are now rejected.

uuid-rs/uuid (uuid)

v1.29.2

Compare Source

What's Changed

• Support wasm64 in the js feature by @​nickbabcock in #​928
• Prepare for 1.29.2 release by @​KodrAus in #​929

New Contributors

• @​nickbabcock made their first contribution in #​928

Full Changelog: uuid-rs/uuid@v1.29.1...v1.29.2

v1.29.1

Compare Source

What's Changed

• Remove some deprecated attrs and resolve Cargo lints by @​KodrAus in #​921
• Deprecate the borsh feature of uuid in favour of a uuid feature in borsh by @​KodrAus in #​923
• Fix up several bugs in v7 monotonicity raised by automated scanning by @​KodrAus in #​926
• Prepare for 1.29.1 release by @​KodrAus in #​927

Full Changelog: uuid-rs/uuid@v1.29.0...v1.29.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.