Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Bumps the patch group with 11 updates in the / directory:

Package From To
serde_json 1.0.145 1.0.146
reqwest 0.12.24 0.12.26
crypto-bigint 0.7.0-rc.8 0.7.0-rc.10
block-padding 0.4.0-rc.4 0.4.2
block-buffer 0.11.0-rc.5 0.11.0
password-hash 0.6.0-rc.1 0.6.0-rc.6
pem-rfc7468 1.0.0-rc.3 1.0.0
elliptic-curve 0.14.0-rc.15 0.14.0-rc.16
pkcs8 0.11.0-rc.7 0.11.0-rc.8
rfc6979 0.5.0-rc.1 0.5.0-rc.2
crypto-primes 0.7.0-pre.3 0.7.0-pre.4

Updates serde_json from 1.0.145 to 1.0.146

Release notes

Sourced from serde_json's releases.

v1.0.146

Commits
  • 75ad7e6 Release 1.0.146
  • bc6c827 Merge pull request #1305 from Xeonacid/patch-1
  • a09210a Set fast_arithmetic=64 for riscv64
  • 01182e5 Update actions/upload-artifact@v5 -> v6
  • 383b13a Update actions/upload-artifact@v4 -> v5
  • 04dd357 Raise required compiler to Rust 1.68
  • e047dfb Resolve manual_let_else pedantic clippy lint
  • a525d9c Raise required compiler to Rust 1.65
  • f815793 Remove rustc version badge from readme
  • 3f17d2c Update actions/checkout@v5 -> v6
  • Additional commits viewable in compare view

Updates reqwest from 0.12.24 to 0.12.26

Release notes

Sourced from reqwest's releases.

v0.12.26

tl;dr

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.25...v0.12.26

v0.12.25

Highlights

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.12.24...v0.12.25

Changelog

Sourced from reqwest's changelog.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.
Commits
  • 01f03a4 v0.12.26
  • e908f57 fix(http3): correct compression defaults (#2890)
  • 509c904 fix: disable default compression from tower-http if not enabled in reqwest (#...
  • 896aaea deps: update cookie_store to 0.22 (#2886)
  • f156a9f v0.12.25
  • fc1ff4f fix(proxy): forward Proxy-Authorization header to HTTPS proxies for HTTP targ...
  • b7c3712 Use decompression from tower-http (#2840)
  • 74e6f84 feat(error): add is_upgrade method to detect protocol upgrade errors (#2822)
  • c0c06b7 fix: send proxy-authorization even with empty password (#2868)
  • a2aa5a3 chore: minor improvement for docs (#2862)
  • Additional commits viewable in compare view

Updates crypto-bigint from 0.7.0-rc.8 to 0.7.0-rc.10

Commits

Updates block-padding from 0.4.0-rc.4 to 0.4.2

Commits

Updates block-buffer from 0.11.0-rc.5 to 0.11.0

Commits

Updates password-hash from 0.6.0-rc.1 to 0.6.0-rc.6

Commits

Updates pem-rfc7468 from 1.0.0-rc.3 to 1.0.0

Commits

Updates elliptic-curve from 0.14.0-rc.15 to 0.14.0-rc.16

Commits
  • b604e17 elliptic-curve v0.14.0-rc.16 (#2045)
  • b79f84d digest: tweak CollisionResistance docs (#2044)
  • 06e4e1a Update Cargo.lock (#2039)
  • 0a3871f build(deps): bump crate-ci/typos from 1.38.0 to 1.38.1 (#2040)
  • dd8e4ce elliptic-curve: use base16ct::mixed in FromStr impl for ScalarValue (#2...
  • c6ab1b1 Derive Default for enums (#2035)
  • 8a76ab7 chore(deps): bump block-padding from 0.4.0-rc.4 to 0.4.1 (#2032)
  • 8d36026 build(deps): bump crate-ci/typos from 1.36.3 to 1.38.0 (#2034)
  • c1047be build(deps): bump crate-ci/typos from 1.36.2 to 1.36.3 (#2031)
  • 4fb20b5 build(deps): bump hybrid-array from 0.4.4 to 0.4.5 in the all-deps group (#2030)
  • Additional commits viewable in compare view

Updates pkcs8 from 0.11.0-rc.7 to 0.11.0-rc.8

Commits
  • e031c36 pkcs8 v0.11.0-rc.8 (#2089)
  • 490993a pkcs5 v0.8.0-rc.9 (#2087)
  • 507f79b chore(deps): bump the all-deps group across 1 directory with 19 updates (#2088)
  • ef0c838 der: docs: rename variable encoder -> writer and improve example (#2078)
  • d5b06c5 Bump rand_core to v0.10.0-rc-2 (#2086)
  • a152ff1 base64ct, base32ct: proptests for decoder equivalence with base32/64 (#2085)
  • f4c5e14 base32ct: avoid panics when decoding inputs; enforce lengths (#2084)
  • a551024 chore(deps): bump crate-ci/typos from 1.38.1 to 1.39.0 (#2082)
  • 19aa61b der: track reader error position in ObjectIdentifier::decode_value (#2080)
  • 5755d9b der: track reader error position in GeneralizedTime::decode_value (#2079)
  • Additional commits viewable in compare view

Updates rfc6979 from 0.5.0-rc.1 to 0.5.0-rc.2

Commits

Updates crypto-primes from 0.7.0-pre.3 to 0.7.0-pre.4

Changelog

Sourced from crypto-primes's changelog.

[0.7.0-pre.4] - 2025-11-06

Changed

  • Bumped rand_core to 0.10.0-rc.2 and crypto-bigint to 0.7.0-pre.10. (#95)

#95: entropyxyz/crypto-primes#95

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.146` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.24` | `0.12.26` |
| [crypto-bigint](https://github.com/RustCrypto/crypto-bigint) | `0.7.0-rc.8` | `0.7.0-rc.10` |
| [block-padding](https://github.com/RustCrypto/utils) | `0.4.0-rc.4` | `0.4.2` |
| [block-buffer](https://github.com/RustCrypto/utils) | `0.11.0-rc.5` | `0.11.0` |
| [password-hash](https://github.com/RustCrypto/traits) | `0.6.0-rc.1` | `0.6.0-rc.6` |
| [pem-rfc7468](https://github.com/RustCrypto/formats) | `1.0.0-rc.3` | `1.0.0` |
| [elliptic-curve](https://github.com/RustCrypto/traits) | `0.14.0-rc.15` | `0.14.0-rc.16` |
| [pkcs8](https://github.com/RustCrypto/formats) | `0.11.0-rc.7` | `0.11.0-rc.8` |
| [rfc6979](https://github.com/RustCrypto/signatures) | `0.5.0-rc.1` | `0.5.0-rc.2` |
| [crypto-primes](https://github.com/entropyxyz/crypto-primes) | `0.7.0-pre.3` | `0.7.0-pre.4` |



Updates `serde_json` from 1.0.145 to 1.0.146
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.146)

Updates `reqwest` from 0.12.24 to 0.12.26
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.24...v0.12.26)

Updates `crypto-bigint` from 0.7.0-rc.8 to 0.7.0-rc.10
- [Changelog](https://github.com/RustCrypto/crypto-bigint/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/crypto-bigint@v0.7.0-rc.8...v0.7.0-rc.10)

Updates `block-padding` from 0.4.0-rc.4 to 0.4.2
- [Commits](RustCrypto/utils@block-padding-v0.4.0-rc.4...block-padding-v0.4.2)

Updates `block-buffer` from 0.11.0-rc.5 to 0.11.0
- [Commits](RustCrypto/utils@block-buffer-v0.11.0-rc.5...block-buffer-v0.11.0)

Updates `password-hash` from 0.6.0-rc.1 to 0.6.0-rc.6
- [Commits](RustCrypto/traits@password-hash-v0.6.0-rc.1...password-hash-v0.6.0-rc.6)

Updates `pem-rfc7468` from 1.0.0-rc.3 to 1.0.0
- [Commits](RustCrypto/formats@pem-rfc7468/v1.0.0-rc.3...pem-rfc7468/v1.0.0)

Updates `elliptic-curve` from 0.14.0-rc.15 to 0.14.0-rc.16
- [Commits](RustCrypto/traits@elliptic-curve-v0.14.0-rc.15...elliptic-curve-v0.14.0-rc.16)

Updates `pkcs8` from 0.11.0-rc.7 to 0.11.0-rc.8
- [Commits](RustCrypto/formats@pkcs8/v0.11.0-rc.7...pkcs8/v0.11.0-rc.8)

Updates `rfc6979` from 0.5.0-rc.1 to 0.5.0-rc.2
- [Commits](RustCrypto/signatures@rfc6979/v0.5.0-rc.1...rfc6979/v0.5.0-rc.2)

Updates `crypto-primes` from 0.7.0-pre.3 to 0.7.0-pre.4
- [Changelog](https://github.com/entropyxyz/crypto-primes/blob/master/CHANGELOG.md)
- [Commits](entropyxyz/crypto-primes@v0.7.0-pre.3...v0.7.0-pre.4)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.146
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: reqwest
  dependency-version: 0.12.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: crypto-bigint
  dependency-version: 0.7.0-rc.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: block-padding
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: block-buffer
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: password-hash
  dependency-version: 0.6.0-rc.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: pem-rfc7468
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: elliptic-curve
  dependency-version: 0.14.0-rc.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: pkcs8
  dependency-version: 0.11.0-rc.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: rfc6979
  dependency-version: 0.5.0-rc.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: crypto-primes
  dependency-version: 0.7.0-pre.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Dec 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Development

Successfully merging this pull request may close these issues.

2 participants