Skip to content

chore(deps): bump the all group across 2 directories with 3 updates - #2360

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/DynamoDbEncryption/runtimes/rust/all-3deedce9c5
Closed

chore(deps): bump the all group across 2 directories with 3 updates#2360
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/DynamoDbEncryption/runtimes/rust/all-3deedce9c5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on time, pem and aws-lc-sys to permit the latest version.
Updates time to 0.3.54

Release notes

Sourced from time's releases.

v0.3.54

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.54 [2026-07-20]

Added

  • PrimitiveDateTime has been renamed to PlainDateTime.
  • Duration has been renamed to SignedDuration.
  • Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

  • The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

  • More gains when parsing RFC 2822.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

  • Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result in a loss of precision and even invalid values.
  • The date! macro could previously create an invalid value that would then panic at compile time. The macro now emits a proper error instead.
  • When parsing an invalid format description, an edge case would inadvertently panic. This now returns an error as intended.

Added

  • Support default values when parsing

0.3.51 [2026-06-22]

Fixed

  • time compiles with macros enabled. This version is otherwise identical to v0.3.50.

... (truncated)

Commits
  • d1c55a4 v0.3.54 release
  • 2fb04c4 Add ability to iterate over Weekdays
  • 00779fa Add ability to iterate over Months
  • b99c5c2 Add ability to iterate over Dates
  • 41eea5b Lint on missing panic documentation
  • 5a0bdd8 Replace optimizing loop with linear pass
  • 687d4a9 Address clippy lints
  • 6bf0055 Add LLM policy
  • 81f9fe0 Rename Duration to SignedDuration
  • 058efae Rename internals for PlainDateTime
  • Additional commits viewable in compare view

Updates pem to 4.0.0

Changelog

Sourced from pem's changelog.

3.0.6

  • switch from serde to serde_core

3.0.5

  • updated base version in the docs

3.0.4

  • updated base64 to 0.22.0

3.0.3

  • allow general whitespace separators instead of just newlines

3.0.2

  • allow EncodeConfig to be built in a const context

3.0.1

  • reduce allocations in pem::encode

3.0.0

  • trim proptest features to prevent an MSRV break for testing
  • make EncodeConfig struct extendable and add a line_wrap config option

2.0.1

  • Fix serde support on no_std
  • Drop MSRV to 1.60

2.0

  • Add no_std support
  • Bump MSRV to 1.67
  • Refactor API to prevent direct modification and access of elements and to allow access to the optional rfc1421-described headers.

1.1.1

  • Allow PEM files to be parsed with the optional rfc1421-described headers (although you cannot retrieve the headers)

1.1.0

  • Add optional serde support

1.0.2

  • Remove dependency on Regex in favor of a hand-rolled parser

1.0.1

  • hide the ASCII_ARMOR symbol to work around a linking issue with 32-bit windows builds

1.0

... (truncated)

Commits

Updates aws-lc-sys to 0.43.0

Commits
  • d722b90 Prepare aws-lc-rs v1.17.2 (#1178)
  • 33cbbac Add public API to check AWS-LC and FIPS versions (#1167)
  • f031b06 Clarify PqdsaKeyPair serialized formats (#1174)
  • deeff57 build(deps): bump actions/setup-go from 6 to 7 (#1177)
  • aac7333 Prepare aws-lc-sys v0.43.0 (#1176)
  • 6e92439 fix: restore cc default flags in memcmp probe; only fail build on confirmed b...
  • 997202f ci: only run push-triggered workflows on main (#1163)
  • e017679 fix: memcmp probe PIE mismatch and TARGET_* env leakage into host builds (#1171)
  • 5336e79 ci: fix cross windows-gnu pre-build wine dpkg conflict (#1172)
  • 741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
  • Additional commits viewable in compare view

Updates time to 0.3.54

Release notes

Sourced from time's releases.

v0.3.54

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.54 [2026-07-20]

Added

  • PrimitiveDateTime has been renamed to PlainDateTime.
  • Duration has been renamed to SignedDuration.
  • Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

  • The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

  • More gains when parsing RFC 2822.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

  • Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result in a loss of precision and even invalid values.
  • The date! macro could previously create an invalid value that would then panic at compile time. The macro now emits a proper error instead.
  • When parsing an invalid format description, an edge case would inadvertently panic. This now returns an error as intended.

Added

  • Support default values when parsing

0.3.51 [2026-06-22]

Fixed

  • time compiles with macros enabled. This version is otherwise identical to v0.3.50.

... (truncated)

Commits
  • d1c55a4 v0.3.54 release
  • 2fb04c4 Add ability to iterate over Weekdays
  • 00779fa Add ability to iterate over Months
  • b99c5c2 Add ability to iterate over Dates
  • 41eea5b Lint on missing panic documentation
  • 5a0bdd8 Replace optimizing loop with linear pass
  • 687d4a9 Address clippy lints
  • 6bf0055 Add LLM policy
  • 81f9fe0 Rename Duration to SignedDuration
  • 058efae Rename internals for PlainDateTime
  • Additional commits viewable in compare view

Updates pem to 4.0.0

Changelog

Sourced from pem's changelog.

3.0.6

  • switch from serde to serde_core

3.0.5

  • updated base version in the docs

3.0.4

  • updated base64 to 0.22.0

3.0.3

  • allow general whitespace separators instead of just newlines

3.0.2

  • allow EncodeConfig to be built in a const context

3.0.1

  • reduce allocations in pem::encode

3.0.0

  • trim proptest features to prevent an MSRV break for testing
  • make EncodeConfig struct extendable and add a line_wrap config option

2.0.1

  • Fix serde support on no_std
  • Drop MSRV to 1.60

2.0

  • Add no_std support
  • Bump MSRV to 1.67
  • Refactor API to prevent direct modification and access of elements and to allow access to the optional rfc1421-described headers.

1.1.1

  • Allow PEM files to be parsed with the optional rfc1421-described headers (although you cannot retrieve the headers)

1.1.0

  • Add optional serde support

1.0.2

  • Remove dependency on Regex in favor of a hand-rolled parser

1.0.1

  • hide the ASCII_ARMOR symbol to work around a linking issue with 32-bit windows builds

1.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [time](https://github.com/time-rs/time), [pem](https://github.com/jcreekmore/pem-rs) and [aws-lc-sys](https://github.com/aws/aws-lc-rs) to permit the latest version.

Updates `time` to 0.3.54
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.0...v0.3.54)

Updates `pem` to 4.0.0
- [Changelog](https://github.com/jcreekmore/pem-rs/blob/master/CHANGELOG.md)
- [Commits](jcreekmore/pem-rs@v3.0.6...v4.0.0)

Updates `aws-lc-sys` to 0.43.0
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@aws-lc-sys/v0.37.0...aws-lc-sys/v0.43.0)

Updates `time` to 0.3.54
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.0...v0.3.54)

Updates `pem` to 4.0.0
- [Changelog](https://github.com/jcreekmore/pem-rs/blob/master/CHANGELOG.md)
- [Commits](jcreekmore/pem-rs@v3.0.6...v4.0.0)

---
updated-dependencies:
- dependency-name: time
  dependency-version: 0.3.54
  dependency-type: direct:production
  dependency-group: all
- dependency-name: pem
  dependency-version: 4.0.0
  dependency-type: direct:production
  dependency-group: all
- dependency-name: aws-lc-sys
  dependency-version: 0.43.0
  dependency-type: direct:production
  dependency-group: all
- dependency-name: time
  dependency-version: 0.3.54
  dependency-type: direct:production
  dependency-group: all
- dependency-name: pem
  dependency-version: 4.0.0
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 1, 2026 03:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 15, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/DynamoDbEncryption/runtimes/rust/all-3deedce9c5 branch August 15, 2026 03:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants