Skip to content

Bump the minor-and-patch group across 1 directory with 12 updates#1858

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-and-patch-186fdc783a
Open

Bump the minor-and-patch group across 1 directory with 12 updates#1858
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-and-patch-186fdc783a

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 3, 2026

Bumps the minor-and-patch group with 12 updates in the / directory:

Package From To
derive_arbitrary 1.3.2 1.4.2
serde 1.0.210 1.0.228
serde_json 1.0.128 1.0.149
ed25519-dalek 2.1.1 2.2.0
proptest 1.5.0 1.11.0
libfuzzer-sys 0.4.7 0.4.12
expect-test 1.5.0 1.5.1
syn 2.0.103 2.0.117
quote 1.0.37 1.0.45
proc-macro2 1.0.95 1.0.106
prettyplease 0.2.22 0.2.37
serde_with 3.12.0 3.19.0

Updates derive_arbitrary from 1.3.2 to 1.4.2

Changelog

Sourced from derive_arbitrary's changelog.

1.4.2

Released 2025-08-13.

Added

  • Added formal MSRV policy: "We reserve the right to increment the MSRV on minor releases, however we will strive to only do it deliberately and for good reasons." The current MSRV is 1.63.0.
  • Added an Arbitrary implementation for core::cmp::Reverse.

Changed

  • Landed a handful of changes to the code generated by #[derive(Arbitrary)] that speed up compilation.

Fixed

  • Better documented bias and behavior when running out of entropy, fixed some outdated and incorrect docs related to this.

1.4.1

Released 2024-11-05.


1.4.0

Released 2024-10-30.

Added

  • Added an Arbitrary implementation for PhantomPinned.
  • Added the Unstructured::choose_iter helper method.
  • Added #[arbitrary(skip)] for enum variants in the derive macro.
  • Added the Arbitrary::try_size_hint trait method.

Changed

  • Implement Arbitrary for PhantomData<A> even when A does not implement Arbitrary and when A is ?Sized.
  • Make usize's underlying encoding independent of machine word size so that corpora are more portable.

Fixed

  • Make derive(Arbitrary) work for local definitions of struct Option.

... (truncated)

Commits
  • dc22fde Merge pull request #230 from fitzgen/bump-to-1.4.2
  • 2032403 Bump to version 1.4.2
  • 688b494 Merge pull request #229 from nnethercote/with_recursive_count
  • 40fe82d Shrink derived code size with with_recursive_count.
  • 3fbc2d7 Merge pull request #228 from nnethercote/fieldless-enums-no-recursion
  • 88bb8e2 Avoid recursive count guard for fieldless enums.
  • 95cc16a Use size_hint for enum discriminants.
  • 698d491 Use TokenStream instead of impl quote::ToTokens.
  • 9029685 Merge pull request #227 from nnethercote/const-recursive_count
  • 27241c6 Mark RECURSIVE_COUNT_* as const.
  • Additional commits viewable in compare view

Updates serde from 1.0.210 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

  • Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

  • Documentation improvements (#2991)

v1.0.226

  • Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @​Mingun)

v1.0.225

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @​rcrisanti)

v1.0.224

  • Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

  • Fix serde_core documentation links (#2978)

v1.0.222

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @​aytey)

v1.0.221

  • Documentation improvements (#2973)
  • Deprecate serde_if_integer128! macro (#2975)

v1.0.220

v1.0.219

  • Prevent absolute_paths Clippy restriction being triggered inside macro-generated code (#2906, thanks @​davidzeng0)

v1.0.218

  • Documentation improvements

v1.0.217

  • Support serializing externally tagged unit variant inside flattened field (#2786, thanks @​Mingun)

v1.0.216

  • Mark all generated impls with #[automatically_derived] to exclude from code coverage (#2866, #2868, thanks @​tdittr)

v1.0.215

  • Produce warning when multiple fields or variants have the same deserialization name (#2855, #2856, #2857)

v1.0.214

  • Implement IntoDeserializer for all Deserializers in serde::de::value module (#2568, thanks @​Mingun)

v1.0.213

  • Fix support for macro-generated with attributes inside a newtype struct (#2847)

v1.0.212

... (truncated)

Commits
  • a866b33 Release 1.0.228
  • 5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
  • ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
  • 415d9fc Release 1.0.227
  • 7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
  • 9d3410e Merge pull request #2992 from dtolnay/inplaceseed
  • 2fb6748 Remove InPlaceSeed public re-export
  • f8137c7 Inline serde_core into serde in docsrs mode
  • b7dbf7e Merge pull request #2990 from dtolnay/integer128
  • 7c83691 No longer macro_use integer128 module
  • Additional commits viewable in compare view

Updates serde_json from 1.0.128 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

v1.0.145

  • Raise serde version requirement to >=1.0.220

v1.0.144

  • Switch serde dependency to serde_core (#1285)

v1.0.143

v1.0.142

v1.0.141

v1.0.140

  • Documentation improvements

v1.0.139

  • Documentation improvements

v1.0.138

  • Documentation improvements

v1.0.137

  • Turn on "float_roundtrip" and "unbounded_depth" features for serde_json in play.rust-lang.org (#1231)

v1.0.136

  • Optimize serde_json::value::Serializer::serialize_map by using Map::with_capacity (#1230, thanks @​goffrie)

v1.0.135

v1.0.134

  • Add RawValue associated constants for literal null, true, false (#1221, thanks @​bheylin)

... (truncated)

Commits

Updates ed25519-dalek from 2.1.1 to 2.2.0

Commits
  • 8016d6d Fix missing/wrong features in readmes
  • 4ea0ebb Stable branch: Update changelogs and bump version number (#781)
  • fdbc1d2 curve: Remove unnecessary CofactorGroup documentation (#683)
  • fc3c7f6 Remove confusing docs (#772)
  • 2379d4f curve: extract AffinePoint type (#769)
  • 71b60e6 curve: fix nightly build (#773)
  • e541acf curve: Hash to curve and field as defined in the standard (#377)
  • cf7b099 curve: rename FieldElement*::as_bytes => ::to_bytes (#767)
  • ad4a37d CI: bump clippy to Rust 1.87 (#768)
  • 5e0b429 Add typos action and correct typos (#766)
  • Additional commits viewable in compare view

Updates proptest from 1.5.0 to 1.11.0

Commits

Updates libfuzzer-sys from 0.4.7 to 0.4.12

Changelog

Sourced from libfuzzer-sys's changelog.

0.4.12

Released 2026-02-10.

Changed

  • Recommend SmallRng over StdRng in the examples for faster, more lightweight seeding and sampling
  • Updated rand dependency from 0.8.5 to 0.10
  • Updated flate2 dependency from 1.0.24 to 1.1
  • Rename gen variable to rng for better 2024 Edition compatibility

0.4.11

Released 2026-02-10.

Changed

  • Updated to libFuzzer commit a47b42eb9f9b (release/22.x).

0.4.10

Released 2025-07-03.

Changed

  • Updated to libFuzzer commit 6146a88f6049 (release/20.x).
  • Fuzz targets taking raw byte slice inputs can now return Corpus results.

0.4.9

Released 2025-01-28.

Added

  • The example_init demonstrates how to pass an initialization code block to the fuzz_target! macro.

Changed

  • The fuzz_target! macro now supports the generation of LLVMFuzzerInitialize to execute initialization code once before running the fuzzer. This change is not breaking and is completely backward compatible.

... (truncated)

Commits

Updates expect-test from 1.5.0 to 1.5.1

Changelog

Sourced from expect-test's changelog.

1.5.1

  • Documentation improvements
Commits

Updates syn from 2.0.103 to 2.0.117

Release notes

Sourced from syn's releases.

2.0.117

  • Fix parsing of self:: pattern in first function argument (#1970)

2.0.116

  • Optimize parse_fn_arg_or_variadic for less lookahead on erroneous receiver (#1968)

2.0.115

  • Enable GenericArgument::Constraint parsing in non-full mode (#1966)

2.0.114

  • Make std dependencies more easily discoverable in source code (#1956, thanks @​tamird)

2.0.113

  • Allow parsing TypeParam with colon not followed by any type param bounds (#1953, thanks @​wyfo)

2.0.112

2.0.111

  • Allow first argument of braced!, bracketed!, parenthesized! to be an otherwise unused variable (#1946)

2.0.110

  • Tweaks to improve build speed (#1939, thanks @​dishmaker)
  • Make syn::ext::IdentExt::unraw available without "parsing" feature (#1940)
  • Support parsing syn::Meta followed by => (#1944)

2.0.109

2.0.108

  • Parse unrecognized or invalid literals as Lit::Verbatim (#1925)

2.0.107

  • Improve panic message when constructing a LitInt, LitFloat, or Lit from invalid syntax (#1917)
  • Improve panic message on Punctuated index out of bounds (#1922)

2.0.106

  • Replace ~const syntax with [const] conditionally const syntax in trait bounds (#1896, rust-lang/rust#139858)
  • Support conditionally const impl Trait types (#1897)
  • Reject polarity modifier and lifetime binder used in the same trait bound (#1899, rust-lang/rust#127054)
  • Parse const trait bounds with bound lifetimes (#1902)
  • Parse bound lifetimes with lifetime bounds (#1903)
  • Allow type parameters and const parameters in trait bounds and generic closures (#1904, #1907, #1908, #1909)

2.0.105

2.0.104

  • Disallow attributes on range expression (#1872)
Commits
  • 7bcb37c Release 2.0.117
  • 9c6e7d3 Merge pull request #1970 from dtolnay/receiver
  • 019a848 Fix self:: pattern in first function argument
  • 23f54f3 Update test suite to nightly-2026-02-18
  • b99b9a6 Unpin CI miri toolchain
  • a62e54a Release 2.0.116
  • 5a8ed9f Merge pull request #1968 from dtolnay/receiver
  • 813afcc Optimize parse_fn_arg_or_variadic for less lookahead on erroneous receiver
  • c172150 Add regression test for issue 1718
  • 0071ab3 Ignore type_complexity clippy lint
  • Additional commits viewable in compare view

Updates quote from 1.0.37 to 1.0.45

Release notes

Sourced from quote's releases.

1.0.45

  • Add ToTokens impl for Arc<T> (#326)

1.0.44

  • Support raw lifetime syntax 'r#async (#323)

1.0.43

  • Disambiguate references to stringify! macro inside generated code (#316)

1.0.42

1.0.41

  • Improve compile error when repetition contains no interpolated value that is an iterator (#302)

1.0.40

1.0.39

  • Documentation improvements

1.0.38

  • Support interpolating arrays inside of arrays using a repetition (#286)
Commits
  • 842ffde Release 1.0.45
  • 93d691c Merge pull request #326 from dtolnay/arc
  • d27d589 ToTokens for Arc
  • 24d1082 Update ui test suite to nightly-2026-02-18
  • 26b1276 Unpin CI miri toolchain
  • c5e1c9e Pin CI miri to nightly-2026-02-11
  • 58e2155 Remove compiler version support from readme
  • 1fc6b50 Raise required compiler to Rust 1.71
  • 515480a Update ui test suite to nightly-2026-02-01
  • 2c5e770 Update ui test suite to nightly-2026-01-30
  • Additional commits viewable in compare view

Updates proc-macro2 from 1.0.95 to 1.0.106

Release notes

Sourced from proc-macro2's releases.

1.0.106

  • Optimize Span::byte_range (#530)

1.0.105

  • Make std dependencies more easily discoverable in source code (#528)

1.0.104

1.0.103

  • Add semver-exempt Literal methods str_value, cstr_value, byte_str_value (#525)

1.0.102

  • Fix interaction of Display impls for TokenStream and Ident with formatting specifiers for padding, alignment, width (#523, #524)

1.0.101

  • Optimize Span location accessors (#519)

1.0.100

  • Stabilize Span methods on Rust 1.88+: start, end, line, column, file, local_file (#517, #518)

1.0.99

  • Prevent Span's unstable API becoming unavailable from a future new compiler lint (#515)

1.0.98

1.0.97

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#505, #512, thanks @​davvid)

1.0.96

  • Simplify how rustdoc flags are decided during docs.rs builds (#511)
Commits
  • 58ab776 Release 1.0.106
  • 1e18a0b Merge pull request #530 from dtolnay/byterange
  • 7f5973b Make char count bidirectional
  • 08d1dd0 Cache span end positions
  • 8c4135f Release 1.0.105
  • 2825fb1 Make same crates available during probe as in crate root
  • cc5819c Merge pull request #528 from dtolnay/nostd
  • e78151e Disable std prelude
  • 2fbddd4 Delete html_root_url comment
  • aa54fc3 Patch rustc-literal-escaper std dependencies
  • Additional commits viewable in compare view

Updates prettyplease from 0.2.22 to 0.2.37

Release notes

Sourced from prettyplease's releases.

0.2.37

  • Replace ~const syntax with [const] conditionally const syntax (#123)

0.2.36

0.2.35

  • Parenthesize for attributes on range expression (#119)

0.2.34

  • Insert parentheses around binary operation with attribute (#117)

0.2.33

  • Improve macro token spacing after $crate (#116)

0.2.32

0.2.31

  • Format multiple array elements on the same line (#108)

0.2.30

  • Documentation improvements

0.2.29

  • Preserve semicolon on braced statement-position macros (#103)

0.2.28

0.2.27

  • Avoid trailing '.' on non-macro float literals (#89)

0.2.26

  • Synthesize parentheses for precedence (#88)

0.2.25

0.2.24

  • Improve support for use<> syntax (#83)

0.2.23

  • Support formatting &raw const place and &raw mut place expressions (#82)
Commits

Updates serde_with from 3.12.0 to 3.19.0

Release notes

Sourced from serde_with's releases.

serde_with v3.19.0

Added

  • Add support for hashbrown v0.17 (#940)

    This extends the existing support for hashbrown to the newly released version.

serde_with v3.18.0

Added

  • Support OneOrMany with more sequence and set types (#929)

Changed

  • Bump MSRV to 1.88 due to the darling dependency

serde_with v3.17.0

Added

  • Support OneOrMany with smallvec v1 (#920, #922)

Changed

  • Switch to yaml_serde for a maintained yaml dependency by @​kazan417 (#921)
  • Bump MSRV to 1.82, since that is required for yaml_serde dev-dependency.

serde_with v3.16.1

Fixed

  • Fix JsonSchemaAs of SetPreventDuplicates and SetLastValueWins. (#906, #907)

serde_with v3.16.0

Added

serde_with v3.15.1

Fixed

  • Fix building of the documentation by updating references to use serde_core.

serde_with v3.15.0

Added

  • Added error inspection to VecSkipError and MapSkipError by @​michelhe (#878) This allows interacting with the previously hidden error, for example for logging. Checkout the newly added example to both types.

  • Allow documenting the types generated by serde_conv!.

... (truncated)

Commits
  • b4cbda0 Bump version to 3.19.0. (#942)
  • 727de67 Bump version to 3.19.0.
  • 2d4f83d Add support for hashbrown 0.17.0 (#941)
  • 79262f4 Add support for hashbrown 0.17.0
  • 6e286a3 Bump the github-actions group with 2 updates (#937)
  • 1bdf8a2 Bump the github-actions group with 2 updates
  • 1e9f316 Bump rust-lang/crates-io-auth-action from 1.0.3 to 1.0.4 in the github-action...
  • f7aaca9 Bump rust-lang/crates-io-auth-action in the github-actions group
  • 652dc89 Autofix GitHub Actions issue found by zizmor (#934)
  • d884e01 Update pre-commit configuration (#933)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 3, 2026
Copilot AI review requested due to automatic review settings May 3, 2026 02:11
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 3, 2026
@dependabot dependabot Bot review requested due to automatic review settings May 3, 2026 02:11
@dependabot dependabot Bot added the rust Pull requests that update rust code label May 3, 2026
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 3, 2026

@dependabot dependabot Bot force-pushed the dependabot/cargo/minor-and-patch-186fdc783a branch from e3560ea to 9a8c3db Compare May 6, 2026 17:08
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot May 6, 2026 17:08
Bumps the minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [derive_arbitrary](https://github.com/rust-fuzz/arbitrary) | `1.3.2` | `1.4.2` |
| [serde](https://github.com/serde-rs/serde) | `1.0.210` | `1.0.228` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.128` | `1.0.149` |
| [ed25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) | `2.1.1` | `2.2.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.5.0` | `1.11.0` |
| [libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer) | `0.4.7` | `0.4.12` |
| [expect-test](https://github.com/rust-analyzer/expect-test) | `1.5.0` | `1.5.1` |
| [syn](https://github.com/dtolnay/syn) | `2.0.103` | `2.0.117` |
| [quote](https://github.com/dtolnay/quote) | `1.0.37` | `1.0.45` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.95` | `1.0.106` |
| [prettyplease](https://github.com/dtolnay/prettyplease) | `0.2.22` | `0.2.37` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.12.0` | `3.19.0` |



Updates `derive_arbitrary` from 1.3.2 to 1.4.2
- [Changelog](https://github.com/rust-fuzz/arbitrary/blob/main/CHANGELOG.md)
- [Commits](rust-fuzz/arbitrary@v1.3.2...v1.4.2)

Updates `serde` from 1.0.210 to 1.0.228
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.210...v1.0.228)

Updates `serde_json` from 1.0.128 to 1.0.149
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.128...v1.0.149)

Updates `ed25519-dalek` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases)
- [Commits](dalek-cryptography/curve25519-dalek@2.1.1...ed25519-2.2.0)

Updates `proptest` from 1.5.0 to 1.11.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.5.0...v1.11.0)

Updates `libfuzzer-sys` from 0.4.7 to 0.4.12
- [Changelog](https://github.com/rust-fuzz/libfuzzer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rust-fuzz/libfuzzer/commits)

Updates `expect-test` from 1.5.0 to 1.5.1
- [Changelog](https://github.com/rust-analyzer/expect-test/blob/master/CHANGELOG.md)
- [Commits](rust-analyzer/expect-test@v1.5.0...v1.5.1)

Updates `syn` from 2.0.103 to 2.0.117
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.103...2.0.117)

Updates `quote` from 1.0.37 to 1.0.45
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.37...1.0.45)

Updates `proc-macro2` from 1.0.95 to 1.0.106
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.95...1.0.106)

Updates `prettyplease` from 0.2.22 to 0.2.37
- [Release notes](https://github.com/dtolnay/prettyplease/releases)
- [Commits](dtolnay/prettyplease@0.2.22...0.2.37)

Updates `serde_with` from 3.12.0 to 3.19.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.12.0...v3.19.0)

---
updated-dependencies:
- dependency-name: derive_arbitrary
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ed25519-dalek
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: expect-test
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: libfuzzer-sys
  dependency-version: 0.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prettyplease
  dependency-version: 0.2.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: proc-macro2
  dependency-version: 1.0.106
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: proptest
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: quote
  dependency-version: 1.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: serde
  dependency-version: 1.0.228
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: serde_json
  dependency-version: 1.0.149
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: serde_with
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: syn
  dependency-version: 2.0.117
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/minor-and-patch-186fdc783a branch from 9a8c3db to d3036c6 Compare May 10, 2026 02:12
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot May 10, 2026 02:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants