Skip to content

Bump the major group across 1 directory with 12 updates#1860

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/major-c3681150d1
Open

Bump the major group across 1 directory with 12 updates#1860
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/major-c3681150d1

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 3, 2026 •
edited
Loading

Bumps the major group with 12 updates in the / directory:

Package From To
rand 0.8.5 0.9.4
ctor 0.5.0 1.0.4
sha2 0.10.9 0.11.0
ark-bn254 0.5.0 0.6.0
ark-bls12-381 0.5.0 0.6.0
ark-ff 0.5.0 0.6.0
crate-git-revision 0.0.6 0.0.7
itertools 0.13.0 0.14.0
darling 0.20.10 0.23.0
macro-string 0.1.4 0.2.0
thiserror 1.0.63 2.0.18
wasmparser 0.116.1 0.221.3

Updates rand from 0.8.5 to 0.9.4

Changelog

Sourced from rand's changelog.

[0.9.4] — 2026-04-13

Fixes

#1766: rust-random/rand#1766

[0.9.3] — 2026-04-11

This release back-ports a fix from v0.10. See also #1763.

Changes

  • Deprecate feature log (#1764)
  • Replace usages of doc_auto_cfg (#1764)

#1763: rust-random/rand#1763

[0.9.2] — 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)

... (truncated)

Commits

Updates ctor from 0.5.0 to 1.0.4

Release notes

Sourced from ctor's releases.

ctor-1.0.4

What's Changed

Full Changelog: mmastrac/linktime@ctor-1.0.3...ctor-1.0.4

ctor-1.0.3

What's Changed

Other changes

Full Changelog: mmastrac/linktime@ctor-1.0.2...ctor-1.0.3

ctor-1.0.2

What's Changed

  • Improvements to static items for #[ctor]
  • const dynamic ctors - use a const block to initialize a set of ctors

Full Changelog: mmastrac/linktime@ctor-1.0.1...ctor-1.0.2

ctor-1.0.1

What's Changed

Full Changelog: mmastrac/linktime@ctor-1.0.0...ctor-1.0.1

ctor-1.0.0

What's Changed

... (truncated)

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates ark-bn254 from 0.5.0 to 0.6.0

Changelog

Sourced from ark-bn254's changelog.

CHANGELOG

Pending

  • (ark-starkcurve) Add 252 bit Stark curve.
  • #971 (ark-ff) Make serial_batch_inversion_and_mul public.
  • Consolidated logic into bitreverse_permutation_in_place and made it public.
  • Remove redundant type constraints from Pairing::G1Prepared.
  • (ark-serialize) Add serde-compatible wrapper types CompressedChecked<T>, CompressedUnchecked<T>, UncompressedChecked<T>, UncompressedUnchecked<T>.
  • #989 (ark-poly) Replace bound F: FftField with F: Field on GeneralEvaluationDomain.
  • (ark-poly) Add fast polynomial division
  • (ark-ec) Improve GLV scalar multiplication performance by skipping leading zeroes.
  • (ark-poly) Make SparsePolynomial.coeffs field public
  • #1039 (ark-ff-asm) Remove unused dead spill buffer path.
  • #1044, #1084, #1088 Add implementation for small field with native integer types

Breaking changes

  • (ark-poly) the Div implementation is now restricted to polynomials defined over FftField. Non-FftField polys can instead use the naive_div method.

Features

  • (ark-serialize) Implementation of CanonicalSerialize and CanonicalDeserialize for signed integer types
  • #1084 (ark-ff) Add from_u128 const constructor for SmallFp fields
  • #1086 (ark-ff-macros) Auto-detect small prime subgroup (bases 3, 5, 7) in define_field! for both SmallFp and Fp fields

Improvements

  • #1091(ark-ff-macros) Replace Fermat-based (a^{p-2}) modular inversion for SmallFp fields with a constant-time binary extended GCD (based on Pornin 2020).
  • #1091(ark-ff-macros) Consolidate SmallFp multiplication dispatch into a single match with Mersenne fast-paths (M7, M13, M31) and generic Montgomery backends for u8/u16/u32/u64 fields.

Bugfixes

  • #1082 (ark-ff) Fix SmallFp::from_random_bytes / from_be_bytes_mod_order silently producing incorrect field elements by treating plaintext bytes as Montgomery-encoded.
Commits
  • a5460be Release 0.6.0
  • 4cec9f0 Inverse via GCD for SmallFp, generalize mersenne mul path (#1091)
  • 7b1b733 build(deps): update hashbrown requirement from 0.16 to 0.17 (#1095)
  • 2733e8f In define_field macro set plausibly useful FFT params for user (#1086)
  • 08aa6de Support only u64 sized primes for SmallFp (#1088)
  • 285dac2 Const initialization helper for SmallFp (#1084)
  • a2d4d66 Fix SmallFp from_random_bytes inconsistency with Fp (#1082)
  • c402d0c Ark-ff Small Field Support (#1044)
  • 8de9a9d Remove dead spill buffer path in generate_impl (#1039)
  • 6fd2656 build(deps): update criterion requirement from 0.7.0 to 0.8.2 (#1077)
  • Additional commits viewable in compare view

Updates ark-bls12-381 from 0.5.0 to 0.6.0

Changelog

Sourced from ark-bls12-381's changelog.

CHANGELOG

Pending

  • (ark-starkcurve) Add 252 bit Stark curve.
  • #971 (ark-ff) Make serial_batch_inversion_and_mul public.
  • Consolidated logic into bitreverse_permutation_in_place and made it public.
  • Remove redundant type constraints from Pairing::G1Prepared.
  • (ark-serialize) Add serde-compatible wrapper types CompressedChecked<T>, CompressedUnchecked<T>, UncompressedChecked<T>, UncompressedUnchecked<T>.
  • #989 (ark-poly) Replace bound F: FftField with F: Field on GeneralEvaluationDomain.
  • (ark-poly) Add fast polynomial division
  • (ark-ec) Improve GLV scalar multiplication performance by skipping leading zeroes.
  • (ark-poly) Make SparsePolynomial.coeffs field public
  • #1039 (ark-ff-asm) Remove unused dead spill buffer path.
  • #1044, #1084, #1088 Add implementation for small field with native integer types

Breaking changes

  • (ark-poly) the Div implementation is now restricted to polynomials defined over FftField. Non-FftField polys can instead use the naive_div method.

Features

  • (ark-serialize) Implementation of CanonicalSerialize and CanonicalDeserialize for signed integer types
  • #1084 (ark-ff) Add from_u128 const constructor for SmallFp fields
  • #1086 (ark-ff-macros) Auto-detect small prime subgroup (bases 3, 5, 7) in define_field! for both SmallFp and Fp fields

Improvements

  • #1091(ark-ff-macros) Replace Fermat-based (a^{p-2}) modular inversion for SmallFp fields with a constant-time binary extended GCD (based on Pornin 2020).
  • #1091(ark-ff-macros) Consolidate SmallFp multiplication dispatch into a single match with Mersenne fast-paths (M7, M13, M31) and generic Montgomery backends for u8/u16/u32/u64 fields.

Bugfixes

  • #1082 (ark-ff) Fix SmallFp::from_random_bytes / from_be_bytes_mod_order silently producing incorrect field elements by treating plaintext bytes as Montgomery-encoded.
Commits
  • a5460be Release 0.6.0
  • 4cec9f0 Inverse via GCD for SmallFp, generalize mersenne mul path (#1091)
  • 7b1b733 build(deps): update hashbrown requirement from 0.16 to 0.17 (#1095)
  • 2733e8f In define_field macro set plausibly useful FFT params for user (#1086)
  • 08aa6de Support only u64 sized primes for SmallFp (#1088)
  • 285dac2 Const initialization helper for SmallFp (#1084)
  • a2d4d66 Fix SmallFp from_random_bytes inconsistency with Fp (#1082)
  • c402d0c Ark-ff Small Field Support (#1044)
  • 8de9a9d Remove dead spill buffer path in generate_impl (#1039)
  • 6fd2656 build(deps): update criterion requirement from 0.7.0 to 0.8.2 (#1077)
  • Additional commits viewable in compare view

Updates ark-ff from 0.5.0 to 0.6.0

Changelog

Sourced from ark-ff's changelog.

CHANGELOG

Pending

  • (ark-starkcurve) Add 252 bit Stark curve.
  • #971 (ark-ff) Make serial_batch_inversion_and_mul public.
  • Consolidated logic into bitreverse_permutation_in_place and made it public.
  • Remove redundant type constraints from Pairing::G1Prepared.
  • (ark-serialize) Add serde-compatible wrapper types CompressedChecked<T>, CompressedUnchecked<T>, UncompressedChecked<T>, UncompressedUnchecked<T>.
  • #989 (ark-poly) Replace bound F: FftField with F: Field on GeneralEvaluationDomain.
  • (ark-poly) Add fast polynomial division
  • (ark-ec) Improve GLV scalar multiplication performance by skipping leading zeroes.
  • (ark-poly) Make SparsePolynomial.coeffs field public
  • #1039 (ark-ff-asm) Remove unused dead spill buffer path.
  • #1044, #1084, #1088 Add implementation for small field with native integer types

Breaking changes

  • (ark-poly) the Div implementation is now restricted to polynomials defined over FftField. Non-FftField polys can instead use the naive_div method.

Features

  • (ark-serialize) Implementation of CanonicalSerialize and CanonicalDeserialize for signed integer types
  • #1084 (ark-ff) Add from_u128 const constructor for SmallFp fields
  • #1086 (ark-ff-macros) Auto-detect small prime subgroup (bases 3, 5, 7) in define_field! for both SmallFp and Fp fields

Improvements

  • #1091(ark-ff-macros) Replace Fermat-based (a^{p-2}) modular inversion for SmallFp fields with a constant-time binary extended GCD (based on Pornin 2020).
  • #1091(ark-ff-macros) Consolidate SmallFp multiplication dispatch into a single match with Mersenne fast-paths (M7, M13, M31) and generic Montgomery backends for u8/u16/u32/u64 fields.

Bugfixes

  • #1082 (ark-ff) Fix SmallFp::from_random_bytes / from_be_bytes_mod_order silently producing incorrect field elements by treating plaintext bytes as Montgomery-encoded.
Commits
  • a5460be Release 0.6.0
  • 4cec9f0 Inverse via GCD for SmallFp, generalize mersenne mul path (#1091)
  • 7b1b733 build(deps): update hashbrown requirement from 0.16 to 0.17 (#1095)
  • 2733e8f In define_field macro set plausibly useful FFT params for user (#1086)
  • 08aa6de Support only u64 sized primes for SmallFp (#1088)
  • 285dac2 Const initialization helper for SmallFp (#1084)
  • a2d4d66 Fix SmallFp from_random_bytes inconsistency with Fp (#1082)
  • c402d0c Ark-ff Small Field Support (#1044)
  • 8de9a9d Remove dead spill buffer path in generate_impl (#1039)
  • 6fd2656 build(deps): update criterion requirement from 0.7.0 to 0.8.2 (#1077)
  • Additional commits viewable in compare view

Updates crate-git-revision from 0.0.6 to 0.0.7

Release notes

Sourced from crate-git-revision's releases.

0.0.7

What's Changed

Full Changelog: stellar/crate-git-revision@v0.0.6...v0.0.7

Commits

Updates itertools from 0.13.0 to 0.14.0

Changelog

Sourced from itertools's changelog.

0.14.0

Breaking

  • Increased MSRV to 1.63.0 (#960)
  • Removed generic parameter from cons_tuples (#988)

Added

  • Added array_combinations (#991)
  • Added k_smallest_relaxed and variants (#925)
  • Added next_array and collect_array (#560)
  • Implemented DoubleEndedIterator for FilterOk (#948)
  • Implemented DoubleEndedIterator for FilterMapOk (#950)

Changed

  • Allow Q: ?Sized in Itertools::contains (#971)
  • Improved hygiene of chain! (#943)
  • Improved into_group_map_by documentation (#1000)
  • Improved tree_reduce documentation (#955)
  • Improved discoverability of merge_join_by (#966)
  • Improved discoverability of take_while_inclusive (#972)
  • Improved documentation of find_or_last and find_or_first (#984)
  • Prevented exponentially large type sizes in tuple_combinations (#945)
  • Added track_caller attr for asser_equal (#976)

Notable Internal Changes

  • Fixed clippy lints (#956, #987, #1008)
  • Addressed warnings within doctests (#964)
  • CI: Run most tests with miri (#961)
  • CI: Speed up "cargo-semver-checks" action (#938)
  • Changed an instance of default_features in Cargo.toml to default-features (#985)
Commits
  • a015a68 Add next_array and collect_array
  • a1213e1 Prepare v0.14.0 release
  • ff0c942 fix clippy lints
  • f80883b Fix into_group_map_by documentation errors
  • b793238 Add track_caller for asser_equal
  • 5d4056b default_features is deprecated - switch it to default-features
  • a447b68 doc for added trait
  • d0479b0 "nitpicks"
  • 35c78ce IndexMut -> BorrowMut<slice>
  • deb53ba refactored to share code
  • Additional commits viewable in compare view

Updates darling from 0.20.10 to 0.23.0

Release notes

Sourced from darling's releases.

v0.23.0

  • Bump MSRV to 1.88.0; there have been no code changes that caused this, but due to dependency issues CI no longer works on 1.56.0 #357
  • Revert dependency version pins which caused problems #385

v0.22.0

YANKED Pinned dependencies made this version cause conflicts with other crates.

  • BREAKING: Remove fnv dependency, as runtime performance gain does not justify additional dependency. This was exposed to users of darling::usage, so it may be breaking for them #373
  • Add #[darling(default = || expr(val))] support, allowing a closure where a path was previously required #380
  • Preserve span information for paths given to darling::util::Callable as literal strings
  • Fix some documentation typos

v0.21.3

  • Fix: Forward Override::<T>::from_expr to T::from_expr #371

v0.21.2

  • Add #[darling(from_expr = ...)] when deriving FromMeta to support overriding the key-value form #369
  • Keep parsing the body and type params even if there are errors from parsing attributes. #7
  • Support #[darling(with = ...)] on the generics field when deriving FromDeriveInput.
  • Return an error, rather than panicking, when doing shape validation on a union. #365

v0.21.1

  • Track all alternate field names, and show them in error message if there aren't too many. #325
  • Track all alternate values for enum variants, and show them in error messages if there aren't too many. #362

v0.21.0

  • Potentially breaking: Emit error when an attribute path is present in both attributes and forward_attrs. #336
  • Support parsing attributes which contain keywords #238
  • Add SpannedValue::into_inner #342
  • Add #[darling(derive_syn_parse)] to also impl syn::parse::Parse when deriving FromMeta #285
  • Make impl FromMeta for syn::TypePath support both quote-wrapped and bare values #351
  • Add util::PreservedStrExpr #346
  • Impl UsesTypeParams and UsesLifetimes for WithOriginal #215
  • Update error message emitted by <() as FromMeta>::from_list to allow use of () as a #[darling(flatten)] target #353

v0.20.11

  • Support #[darling(with = ...)] on the data field when deriving FromDeriveInput. This allows the use of simpler receiver types, such as a Vec of enum variants.
  • Bump version of proc-macro2 to 1.0.86.
  • Accept closures for #[darling(with = ...)] on fields in FromDeriveInput, FromMeta, FromField, etc. #309
  • Add darling::util::Callable to accept a path or closure as a meta-item expression
  • Add #[darling(from_word = ...)] and #[darling(from_none = ...)] to control shorthand and fallback behaviors for structs and enums deriving FromMeta #320
  • Add FromMeta impl for syn::ExprRange #329
Changelog

Sourced from darling's changelog.

v0.23.0 (December 3, 2025)

  • Bump MSRV to 1.88.0; there have been no code changes that caused this, but due to dependency issues CI no longer works on 1.56.0 #357

v0.22.0 (December 2, 2025)

  • BREAKING: Remove fnv dependency, as runtime performance gain does not justify additional dependency. This was exposed to users of darling::usage, so it may be breaking for them #373
  • Add #[darling(default = || expr(val))] support, allowing a closure where a path was previously required #380
  • Preserve span information for paths given to darling::util::Callable as literal strings
  • Fix some documentation typos

v0.21.3 (August 22, 2025)

  • Fix: Forward Override::<T>::from_expr to T::from_expr #371

v0.21.2 (August 14, 2025)

  • Add #[darling(from_expr = ...)] when deriving FromMeta to support overriding the key-value form #369
  • Keep parsing the body and type params even if there are errors from parsing attributes. #7
  • Support #[darling(with = ...)] on the generics field when deriving FromDeriveInput.
  • Return an error, rather than panicking, when doing shape validation on a union. #365

v0.21.1 (August 4, 2025)

  • Track all alternate field names, and show them in error message if there aren't too many. #325
  • Track all alternate values for enum variants, and show them in error messages if there aren't too many. #362

v0.21.0 (July 10, 2025)

  • Potentially breaking: Emit error when an attribute path is present in both attributes and forward_attrs. #336
  • Support parsing attributes which contain keywords #238
  • Add SpannedValue::into_inner #342
  • Add #[darling(derive_syn_parse)] to also impl syn::parse::Parse when deriving FromMeta #285
  • Make impl FromMeta for syn::TypePath support both quote-wrapped and bare values #351
  • Add util::PreservedStrExpr #346
  • Impl UsesTypeParams and UsesLifetimes for WithOriginal #215
  • Update error message emitted by <() as FromMeta>::from_list to allow use of () as a #[darling(flatten)] target #353

v0.20.11 (March 28, 2025)

  • Support #[darling(with = ...)] on the data field when deriving FromDeriveInput. This allows the use of simpler receiver types, such as a Vec of enum variants.
  • Bump version of proc-macro2 to 1.0.86.
  • Accept closures for #[darling(with = ...)] on fields in FromDeriveInput, FromMeta, FromField, etc. #309
  • Add darling::util::Callable to accept a path or closure as a meta-item expression
  • Add #[darling(from_word = ...)] and #[darling(from_none = ...)] to control shorthand and fallback behaviors for structs and enums deriving FromMeta #320
  • Add FromMeta impl for syn::ExprRange #329
Commits
  • cfef4e5 Update compiletests to rustc 1.88.0
  • 334ee48 Bump version to 0.23.0
  • 858b869 Bump MSRV to 1.88.0
  • dd9cb44 Bump CI tests to 1.88.0
  • 4e57762 Revert "Lock quote version"
  • 775a523 Revert "Lock min version of proc-macro2"
  • 3947278 Bump version to 0.22.0
  • cd33f9b chore: fix some minor issues in the comments
  • 2ca795b docs: fix minor typo in top-level doc comment ('its' → 'it’s')
  • 878b5ba Lock min version of proc-macro2
  • Additional commits viewable in compare view

Updates macro-string from 0.1.4 to 0.2.0

Release notes

Sourced from macro-string's releases.

0.2.0

  • Support cloning MacroString (#26)
  • Split parsing and eval (#27)
  • Provide method to produce correctly spanned error (#28)
Commits
  • 82ed150 Release 0.2.0
  • 80750cf Merge pull request #28 from dtolnay/error
  • 9c09b26 Provide method to produce correctly spanned error
  • 894316f Merge pull request #27 from dtolnay/eval
  • 377fd57 Split parsing and eval
  • f2eea0f Merge pull request #26 from dtolnay/clone
  • ed20bf9 Support cloning MacroString
  • ff33555 Raise required compiler to Rust 1.71
  • 0426310 Update actions/upload-artifact@v5 -> v6
  • 3c0b22a Update actions/upload-artifact@v4 -> v5
  • Additional commits viewable in compare view

Updates thiserror from 1.0.63 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

2.0.17

  • Use differently named __private module per patch release (#434)

2.0.16

  • Add to "no-std" crates.io category (#429)

2.0.15

  • Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

  • Documentation improvements

2.0.12

  • Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)

2.0.11

2.0.10

  • Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

  • Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

  • Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

  • Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @​zertosh)

2.0.6

  • Suppress deprecation warning on generated From impls (#396)

2.0.5

  • Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

  • Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @​matt-phylum)

2.0.3

  • Support the same Path field being repeated in both Debug and Display representation in error message (#383)
  • Improve error message when a format trait used in error message is not implemented by some field (#384)

2.0.2

... (truncated)

Commits
  • dc0f6a2 Release 2.0.18
  • 0275292 Touch up PR 443
  • 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
  • 995939c Reproduce issue 442
  • 21653d1 Made clippy lifetime allows conditional
  • 45e5388 Update actions/upload-artifact@v5 -> v6
  • 386aac1 Update actions/upload-artifact@v4 -> v5
  • ec50561 Update actions/checkout@v5 -> v6
  • 247eab5 Update name of empty_enum clippy lint
  • 91b181f Raise required compiler to Rust 1.68
  • Additional commits viewable in compare view

Updates wasmparser from 0.116.1 to 0.221.3

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 3, 2026
Copilot AI review requested due to automatic review settings May 3, 2026 02:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 3, 2026
@dependabot dependabot Bot review requested due to automatic review settings May 3, 2026 02:14
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 3, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedwasmparser@​0.221.37210093100100
Updatedthiserror@​1.0.63 ⏵ 2.0.188010093100100
Addedark-bn254@​0.6.010010093100100
Addedcrate-git-revision@​0.0.79910093100100
Addedctor@​1.0.410010093100100
Addeditertools@​0.14.010010093100100
Addedmacro-string@​0.2.09910093100100
Addedrand@​0.9.410010093100100
Addedsha2@​0.11.010010093100100
Updateddarling@​0.20.10 ⏵ 0.23.010010093100100
Addedark-ff@​0.6.0100100100100100
Addedark-bls12-381@​0.6.0100100100100100

View full report

@dependabot dependabot Bot force-pushed the dependabot/cargo/major-c3681150d1 branch from b9c1225 to 820564c Compare May 6, 2026 17:07
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot May 6, 2026 17:07
@dependabot
Bump the major group across 1 directory with 12 updates
2ef4590 
Bumps the major group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.4` |
| [ctor](https://github.com/mmastrac/linktime) | `0.5.0` | `1.0.4` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [ark-bn254](https://github.com/arkworks-rs/algebra) | `0.5.0` | `0.6.0` |
| [ark-bls12-381](https://github.com/arkworks-rs/algebra) | `0.5.0` | `0.6.0` |
| [ark-ff](https://github.com/arkworks-rs/algebra) | `0.5.0` | `0.6.0` |
| [crate-git-revision](https://github.com/stellar/crate-git-revision) | `0.0.6` | `0.0.7` |
| [itertools](https://github.com/rust-itertools/itertools) | `0.13.0` | `0.14.0` |
| [darling](https://github.com/TedDriggs/darling) | `0.20.10` | `0.23.0` |
| [macro-string](https://github.com/dtolnay/macro-string) | `0.1.4` | `0.2.0` |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.63` | `2.0.18` |
| [wasmparser](https://github.com/bytecodealliance/wasm-tools) | `0.116.1` | `0.221.3` |



Updates `rand` from 0.8.5 to 0.9.4
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.4/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.9.4)

Updates `ctor` from 0.5.0 to 1.0.4
- [Release notes](https://github.com/mmastrac/linktime/releases)
- [Changelog](https://github.com/mmastrac/linktime/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mmastrac/linktime/commits/ctor-1.0.4)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `ark-bn254` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/arkworks-rs/algebra/releases)
- [Changelog](https://github.com/arkworks-rs/algebra/blob/master/CHANGELOG.md)
- [Commits](arkworks-rs/algebra@v0.5.0...v0.6.0)

Updates `ark-bls12-381` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/arkworks-rs/algebra/releases)
- [Changelog](https://github.com/arkworks-rs/algebra/blob/master/CHANGELOG.md)
- [Commits](arkworks-rs/algebra@v0.5.0...v0.6.0)

Updates `ark-ff` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/arkworks-rs/algebra/releases)
- [Changelog](https://github.com/arkworks-rs/algebra/blob/master/CHANGELOG.md)
- [Commits](arkworks-rs/algebra@v0.5.0...v0.6.0)

Updates `crate-git-revision` from 0.0.6 to 0.0.7
- [Release notes](https://github.com/stellar/crate-git-revision/releases)
- [Commits](stellar/crate-git-revision@v0.0.6...v0.0.7)

Updates `itertools` from 0.13.0 to 0.14.0
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](rust-itertools/itertools@v0.13.0...v0.14.0)

Updates `darling` from 0.20.10 to 0.23.0
- [Release notes](https://github.com/TedDriggs/darling/releases)
- [Changelog](https://github.com/TedDriggs/darling/blob/master/CHANGELOG.md)
- [Commits](TedDriggs/darling@v0.20.10...v0.23.0)

Updates `macro-string` from 0.1.4 to 0.2.0
- [Release notes](https://github.com/dtolnay/macro-string/releases)
- [Commits](dtolnay/macro-string@0.1.4...0.2.0)

Updates `thiserror` from 1.0.63 to 2.0.18
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.63...2.0.18)

Updates `wasmparser` from 0.116.1 to 0.221.3
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

---
updated-dependencies:
- dependency-name: ark-bls12-381
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: ark-bn254
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: ark-ff
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: crate-git-revision
  dependency-version: 0.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major
- dependency-name: ctor
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: darling
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: itertools
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: macro-string
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: rand
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: wasmparser
  dependency-version: 0.221.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/major-c3681150d1 branch from 820564c to 2ef4590 Compare May 10, 2026 02:11
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot May 10, 2026 02:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants