Skip to content

Bump the rust-dependencies group with 3 updates - #647

Merged
edmorley merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-dcab84d9ad
Oct 24, 2026
Merged

edmorley merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-dcab84d9ad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 3 updates: crc32fast, rustls-webpki and webpki-roots.

Updates crc32fast from 1.5.2 to 1.5.3

Commits
  • d2363ea Release 1.5.3
  • f694286 Publish to crates.io with trusted publishing
  • 348edd9 Expose the total byte length of a CRC32 hash state (#68)
  • ad14266 Centralize state handling (#67)
  • 92c03d6 bench: switch from bencher to criterion (#66)
  • 32b1983 Scope the msrv job to the published library, and take rand 0.10 (#65)
  • 369da36 Bump actions/checkout from 4 to 7 in the actions group (#63)
  • 6d5596e ci: enable dependabot version updates (#62)
  • See full diff in compare view

Updates rustls-webpki from 0.103.15 to 0.103.16

Release notes

Sourced from rustls-webpki's releases.

0.103.16

Distrust a small set of intermediate certificate subject public keys due to specific security concerns around their operation.

What's Changed

Full Changelog: rustls/webpki@v/0.103.14...v/0.103.16

Commits
  • 8ecdcc7 ci: fix no-std toolchain target expansion
  • 9b4d10d Cargo: 0.103.15 -> 0.103.16
  • bb7dcc8 reject cert paths containing distrusted SPKIs
  • See full diff in compare view

Updates webpki-roots from 1.0.9 to 1.0.10

Release notes

Sourced from webpki-roots's releases.

1.0.10

Changes:

  • Removed "emSign ECC Root CA - G3"

What's Changed

Commits
  • 7076047 webpki-roots|webpki-root-certs: 1.0.9 -> 1.0.10
  • c644e3e webpki-roots|webpki-root-certs: remove emSign roots
  • b7815ff ccadb: bump version to 0.2.2
  • 86423a8 ccadb: replace chrono with jiff
  • 3d8edab Upgrade num-bigint to 0.5
  • aa88673 ccadb: add crl_hosts() API
  • bb89979 ccadb: extract specific root PEM from build_client()
  • 782238f ccadb: extract build_client() helper function
  • 24886ba webpki-ccadb: only trust the CCADB root CA
  • 77edb21 Take semver-compatible dependency updates
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 3 updates: [crc32fast](https://github.com/srijs/rust-crc32fast), [rustls-webpki](https://github.com/rustls/webpki) and [webpki-roots](https://github.com/rustls/webpki-roots).


Updates `crc32fast` from 1.5.2 to 1.5.3
- [Commits](srijs/rust-crc32fast@v1.5.2...v1.5.3)

Updates `rustls-webpki` from 0.103.15 to 0.103.16
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](rustls/webpki@v/0.103.15...v/0.103.16)

Updates `webpki-roots` from 1.0.9 to 1.0.10
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/1.0.9...v/1.0.10)

---
updated-dependencies:
- dependency-name: crc32fast
  dependency-version: 1.5.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rustls-webpki
  dependency-version: 0.103.16
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: webpki-roots
  dependency-version: 1.0.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot requested a review from edmorley as a code owner October 24, 2026 09:30
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Dependabot PRs that update Rust dependencies skip changelog Skip the check-changelog check labels Oct 24, 2026
@edmorley
edmorley enabled auto-merge (squash) October 24, 2026 09:31
@edmorley
edmorley merged commit 3d5ab92 into main Oct 24, 2026
13 of 14 checks passed
@edmorley
edmorley deleted the dependabot/cargo/rust-dependencies-dcab84d9ad branch October 24, 2026 09:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Dependabot PRs that update Rust dependencies skip changelog Skip the check-changelog check

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant