Bump the all-dependencies group across 1 directory with 34 updates by dependabot[bot] · Pull Request #189 · nginx/nginx-acme

dependabot · 2026-08-01T02:10:54Z

Bumps the all-dependencies group with 28 updates in the / directory:

Package	From	To
bytes	`1.11.1`	`1.12.1`
http	`1.4.0`	`1.4.2`
http-body	`1.0.1`	`1.1.0`
http-body-util	`0.1.3`	`0.1.4`
hyper	`1.9.0`	`1.11.0`
iri-string	`0.7.12`	`0.7.14`
libc	`0.2.186`	`0.2.189`
openssl	`0.10.78`	`0.10.81`
serde	`1.0.228`	`1.0.229`
serde_json	`1.0.149`	`1.0.151`
siphasher	`1.0.2`	`1.0.3`
thiserror	`2.0.18`	`2.0.19`
zeroize	`1.8.2`	`1.9.0`
bitflags	`2.11.1`	`2.13.1`
cc	`1.2.61`	`1.4.0`
either	`1.15.0`	`1.17.0`
futures-core	`0.3.32`	`0.3.33`
glob	`0.3.3`	`0.3.4`
log	`0.4.29`	`0.4.33`
memchr	`2.8.0`	`2.8.3`
proc-macro2	`1.0.106`	`1.0.107`
quote	`1.0.45`	`1.0.47`
regex	`1.12.3`	`1.13.1`
rustc-hash	`2.1.2`	`2.1.3`
smallvec	`1.15.1`	`1.15.2`
syn	`2.0.117`	`2.0.119`
tokio	`1.52.1`	`1.53.1`
zmij	`1.0.21`	`1.0.23`

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

76c0fbb Release bytes v1.12.1 (#838)
924c82b Handle unwinding from Box::new (#837)
91402ce Release bytes v1.12.0 (#831)
2256e6d chore: add safety comments on unsafe blocks (#827)
245adff Pass vtable data by value (#826)
00cc5ff Implement BytesMut::extend_from_within (#818)
5b79d31 Merge tag 'v1.11.1'
804ee6d Make try_unsplit method public (#746)
fd426ca Exclude development scripts from published package (#810)
b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
Additional commits viewable in compare view

Updates http from 1.4.0 to 1.4.2

Release notes

Sourced from http's releases.

v1.4.2

What's Changed

feat(method): impl PartialOrd + Ord by @mmirate in hyperium/http#840

fix(uri): allow STAR paths with scheme/auth by @seanmonstar in hyperium/http#843

fix: reject DEL character by @Isvane in hyperium/http#842

New Contributors

@mmirate made their first contribution in hyperium/http#840

@Isvane made their first contribution in hyperium/http#842

Full Changelog: hyperium/http@v1.4.1...v1.4.2

v1.4.1

tl;dr

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

chore(header): fix clippy::assign_op_pattern by @rxc-amzn in hyperium/http#806

ci: pin itoa in msrv job by @seanmonstar in hyperium/http#813

Remove unnecessary explicit lifetimes by @jplatte in hyperium/http#815

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/http#819

tests: update to rand 0.10 by @tottoto in hyperium/http#818

refactor: Remove usage of float instruction by @AurelienFT in hyperium/http#823

refactor(uri): consolidate PathAndQuery::from_shared and from_static by @seanmonstar in hyperium/http#825

fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @seanmonstar in hyperium/http#826

Rephrase comment by @daalfox in hyperium/http#827

Fix typo in request builder docs by @vleksis in hyperium/http#831

fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @SAY-5 in hyperium/http#833

fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @seanmonstar in hyperium/http#837

fix(header): use a set_len guard in IntoIter drop by @seanmonstar in hyperium/http#838

New Contributors

@rxc-amzn made their first contribution in hyperium/http#806

@AurelienFT made their first contribution in hyperium/http#823

@daalfox made their first contribution in hyperium/http#827

@vleksis made their first contribution in hyperium/http#831

@SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.

Fix Uri to properly reject DEL characters.

1.4.1 (May 25, 2026)

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

82db5b8 v1.4.2
a9cdbf8 fix(uri): reject DEL character (#842)
df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
ec3f8ce feat(method): impl PartialOrd + Ord (#840)
a24c968 v1.4.1
bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
68e0abb docs: fix typo in request builder docs (#831)
29dd307 docs(extensions): rephrase internal comment (#827)
Additional commits viewable in compare view

Updates http-body from 1.0.1 to 1.1.0

Commits

3396328 http-body v1.1.0
2fb78de chore: bump license year (#170)
b16554b chore(ci): bump checkout to v7
c0c53ca chore(ci): use msrv aware update for msrv job
5ed15d2 tests: fix clippy::double_parens
c8cb37f Derive Copy trait to SizeHint struct (#164)
915d6d5 feat(util): add InspectErr, InspectFrame combinators (#161)
0fc0a94 docs: fix broken intradoc links (#162)
5a849d4 chore: add FUNDING.yml
1a91851 feat: impl Add for SizeHint's (#156)
Additional commits viewable in compare view

Updates http-body-util from 0.1.3 to 0.1.4

Release notes

Sourced from http-body-util's releases.

http-body-util-v0.1.4

What's Changed

Add Fused body combinator that always returns None once completed.

Add BodyExt::into_stream() to convert a body into a Stream.

Add Full::into_inner() to get the full Buf.

Add InspectFrame and InspectErr combinators.

Commits

7685047 http-body-util v0.1.4
3396328 http-body v1.1.0
2fb78de chore: bump license year (#170)
b16554b chore(ci): bump checkout to v7
c0c53ca chore(ci): use msrv aware update for msrv job
5ed15d2 tests: fix clippy::double_parens
c8cb37f Derive Copy trait to SizeHint struct (#164)
915d6d5 feat(util): add InspectErr, InspectFrame combinators (#161)
0fc0a94 docs: fix broken intradoc links (#162)
5a849d4 chore: add FUNDING.yml
Additional commits viewable in compare view

Updates hyper from 1.9.0 to 1.11.0

Release notes

Sourced from hyper's releases.

v1.11.0

Features

rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

Bug Fixes

http1:

discard content-length header when received before transfer-encoding (#4124) (540fff91, closes #4123)

use append for repeat trailer values in encoder (#4118) (de1483d7)

allow up to max_headers trailers (#4108) (f584091a)

use append for repeat trailers (#4107) (876effe1)

flush buffered data before shutdown (#4018) (72046cc7, closes #4022)

more strictly enforce max_buf_size when parsing (#4093) (90ede307, closes #4081)

http2: avoid buffering Upgraded writes without send capacity (#4102) (aecf5abf)

All PRs

removing cast_lossless lint by @josetorrs in hyperium/hyper#4087

Fix the borrow_as_ptr lint by @xd009642 in hyperium/hyper#4082

removing empty_structs_with_brackets lint by @josetorrs in hyperium/hyper#4088

style(proto): removing explicit_iter_loop lint by @josetorrs in hyperium/hyper#4089

Fix the ptr_as_ptr lint by @nakaryo716 in hyperium/hyper#4091

style(lib): remove manual_assert_eq lint by @josetorrs in hyperium/hyper#4090

style(http2): allow an instance of large_enum_variant, deny otherwise by @seanmonstar in hyperium/hyper#4092

Removing 'undocumented_unsafe_blocks' lint allowance by @Lori-Shu in hyperium/hyper#4083

style(http2): use an enum instead of bool in strip_connection_headers() by @seanmonstar in hyperium/hyper#4094

fix(http1): more strictly enforce max_buf_size when parsing by @seanmonstar in hyperium/hyper#4093

h1 servers can shutdown connections with pending buffered data on filled sockets by @deven96 in hyperium/hyper#4018

refactor(http1): remove ref_option lint by @nakaryo716 in hyperium/hyper#4101

style(lib): remove unnecessary_semicolon lint by @josetorrs in hyperium/hyper#4103

style(lib): remove uninlined_format_args lint by @josetorrs in hyperium/hyper#4104

style(lib): remove semicolon_if_nothing_returned lint by @MonkieeBoi in hyperium/hyper#4106

style(lib): remove single_match_else lint by @yunz-dev in hyperium/hyper#4105

style(lib): remove default_trait_access lint by @nakaryo716 in hyperium/hyper#4111

fix(http1): use append for repeat trailers by @seanmonstar in hyperium/hyper#4107

fix(http1): allow up to max_headers trailers by @seanmonstar in hyperium/hyper#4108

fix(http2): avoid buffering Upgraded writes without send capacity by @seanmonstar in hyperium/hyper#4102

style(headers): small refactor to remove question_mark lint by @josetorrs in hyperium/hyper#4116

fix(h1): append duplicate trailer values when encoding (match #4107) by @greymoth-jp in hyperium/hyper#4118

style(proto): fix decimal_literal_representation lint by @josetorrs in hyperium/hyper#4117

docs(governance): define Advisor role by @seanmonstar in hyperium/hyper#4098

docs(maintainers): move some collaborators to emeriti by @seanmonstar in hyperium/hyper#4125

feat: add initialized_unfilled to ReadBufCursor by @abh1nav10 in hyperium/hyper#4115

fix(http1): discard content-length header when received before transfer-encoding by @seanmonstar in hyperium/hyper#4124

New Contributors

@josetorrs made their first contribution in hyperium/hyper#4087

@nakaryo716 made their first contribution in hyperium/hyper#4091

@deven96 made their first contribution in hyperium/hyper#4018

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.11.0 (2026-07-20)

Bug Fixes

http1:

discard content-length header when received before transfer-encoding (#4124) (540fff91, closes #4123)

use append for repeat trailer values in encoder (#4118) (de1483d7)

allow up to max_headers trailers (#4108) (f584091a)

use append for repeat trailers (#4107) (876effe1)

flush buffered data before shutdown (#4018) (72046cc7, closes #4022)

more strictly enforce max_buf_size when parsing (#4093) (90ede307, closes #4081)

http2: avoid buffering Upgraded writes without send capacity (#4102) (aecf5abf)

Features

rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

v1.10.1 (2026-05-29)

Bug Fixes

http1: fix busy loop when peer half-closes and open body (#4086) (c6cb906f, closes #4085)

v1.10.0 (2026-05-27)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Commits

67ace64 v1.11.0
540fff9 fix(http1): discard content-length header when received before transfer-encod...
ccc1e85 feat(rt): add ReadBufCursor::initialized_unfilled() method (#4115)
0ea8bc2 docs(maintainers): move some collaborators to emeriti (#4125)
2fc06fc docs(governance): define Advisor role (#4098)
e0d14d1 style(proto): explicitly allow decimal_literal_representation lint (#4117)
de1483d fix(http1): use append for repeat trailer values in encoder (#4118)
08c3416 style(headers): small refactor to remove question_mark lint (#4116)
aecf5ab fix(http2): avoid buffering Upgraded writes without send capacity (#4102)
f584091 fix(http1): allow up to max_headers trailers (#4108)
Additional commits viewable in compare view

Updates iri-string from 0.7.12 to 0.7.14

Changelog

Sourced from iri-string's changelog.

[0.7.14]

Reject an empty fragment correctly for absolute IRIs.

Fixed

Reject an empty fragment correctly for absolute IRIs.

An empty fragment was incorrectly accepted for absolute IRI types such as types::RiAbsoluteStr. Now the parser is fixed to reject them.

[0.7.13]

Make template::context::simple_context::SimpleContext::insert() ignore the entry if the given key is invalid as a variable name.

Implement conversion from a reference of owned IRI string types into build::Builder.

doc: Move the guidance of IDNA conversion to a public module.

Added

Implement conversion from a reference of owned IRI string types into build::Builder.

List of added implementations:

From<&'a RiRelativeString<S>> for build::Builder<'a>

From<&'a RiString<S>> for build::Builder<'a>

From<&'a RiAbsoluteString<S>> for build::Builder<'a>

From<&'a RiReferenceString<S>> for build::Builder<'a>

Changed (non-breaking)

Make template::context::simple_context::SimpleContext::insert() ignore the entry if the given key is invalid as a variable name.

Previously, such entries were added to the internal table but they can never be queried because get() requires key: VarName<'_> parameter.

doc: Move the guidance of IDNA conversion to a public module.

The section was added to the private module in v0.7.11, so it wasn't visible in the normally generated documents (including docs.rs).

Commits

b3a2d7a chore: bump version to v0.7.14
721d9a7 Bump version to v0.7.14
0fcc803 doc: fix a broken cross reference in CHANGELOG
626a4cf fix: reject an empty fragment for absolute IRI types
07d982e doc: fix harmless typo
b822a9f chore: bump version to v0.7.13
b7281dc chore: bump version to v0.7.13
99505bd Bump version to v0.7.13
8a253ac doc: fix copy-pasting failures of syntax-specific parts
8fc6a84 feat(builder): implement From\<&{owned URI/IRI types}> for Builder
Additional commits viewable in compare view

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:
The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
uClibc now supports a similar configuration option:
RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

uClibc now supports a similar configuration option:

... (truncated)

Commits

ef0906e libc: Release 0.2.189
5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
3e51062 psp: Fix overflowing_literals warnings
e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
63221b3 macros: Require safe in safe_f! invocations
707ab52 macros: Require unsafe in f! invocations
8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
8427909 windows: Add back link names for time-related symbols
b4863fa nuttx: fix wchar_t definition under arm
41c683d nuttx: mirror type definitions
Additional commits viewable in compare view

Updates openssl from 0.10.78 to 0.10.81

Release notes

Sourced from openssl's releases.

openssl-v0.10.81

What's Changed

Bump aws-ls-sys to 0.41 by @joshgodsiff in rust-openssl/rust-openssl#2640

Add brainpoolP224r1 and brainpoolP224t1 NID constants by @sfarestam-iproov in rust-openssl/rust-openssl#2642

x509: add minimal support for CRL building by @DavidFontaineOcd in rust-openssl/rust-openssl#2538

add mldsa.h to the boringssl bindgen by @reaperhulk in rust-openssl/rust-openssl#2650

Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @alex in rust-openssl/rust-openssl#2652

Fix verify_mode() panic on unmodeled verify mode bits by @alex in rust-openssl/rust-openssl#2651

Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in rust-openssl/rust-openssl#2653

Release openssl 0.10.81 and openssl-sys 0.9.117 by @reaperhulk in rust-openssl/rust-openssl#2655

New Contributors

@joshgodsiff made their first contribution in rust-openssl/rust-openssl#2640

@sfarestam-iproov made their first contribution in rust-openssl/rust-openssl#2642

@DavidFontaineOcd made their first contribution in rust-openssl/rust-openssl#2538

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81

openssl-v0.10.80

What's Changed

Prefer Homebrew openssl@4 and stop looking for openssl@1.1 by @alex in rust-openssl/rust-openssl#2633

Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @alex in rust-openssl/rust-openssl#2638

Release openssl 0.10.80 and openssl-sys 0.9.116 by @alex in rust-openssl/rust-openssl#2639

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

openssl-v0.10.79

What's Changed

Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in rust-openssl/rust-openssl#2610

Try to fix OpenSSL 1.1.0l download by @botovq in rust-openssl/rust-openssl#2614

Require &mut BigNumContextRef for EcPointRef mul/invert by @alex in rust-openssl/rust-openssl#2615

Fix UB in EcGroupRef::generator on groups without a generator by @alex in rust-openssl/rust-openssl#2617

Replace use libc::*; with targeted imports in openssl-sys by @alex in rust-openssl/rust-openssl#2618

Add PKeyRef::is_a and KeyType for name-based key identification by @reaperhulk in rust-openssl/rust-openssl#2619

Add PKey::{public,private}_key_from_raw_bytes_ex by @reaperhulk in rust-openssl/rust-openssl#2620

Bump MSRV to 1.80 by @reaperhulk in rust-openssl/rust-openssl#2622

Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @reaperhulk in rust-openssl/rust-openssl#2623

Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @reaperhulk in rust-openssl/rust-openssl#2621

parallelize more builds in CI for cold caches by @reaperhulk in rust-openssl/rust-openssl#2625

Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @reaperhulk in rust-openssl/rust-openssl#2626

Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @alex in rust-openssl/rust-openssl#2624

Bind OSSL_PARAM_modified and use it for seed_into by @reaperhulk in rust-openssl/rust-openssl#2628

Add PkeyCtxRef::set_context_string for ML-DSA by @reaperhulk in rust-openssl/rust-openssl#2629

Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @alex in rust-openssl/rust-openssl#2631

Fix output buffer overflow for AES key-wrap-with-padding ciphers by @alex in rust-openssl/rust-openssl#2630

Release openssl 0.10.79 and openssl-sys 0.9.115 by @reaperhulk in rust-openssl/rust-openssl#2632

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

Commits

db9c9e2 Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)
3a7fb56 Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)
d059c43 Fix verify_mode() panic on unmodeled verify mode bits (#2651)
8b1519e Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)
d5713d6 add mldsa.h to the boringssl bindgen (#2650)
9fac317 Merge pull request #2538 from ocdlroux/feat/crl-full
4dae20b x509: adding minimal support for X509CrlBuilder
47f7777 Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)
659da17 Bump aws-ls-sys to 0.41 (#2640)
35be7ae Release openssl 0.10.80 and openssl-sys 0.9.116 (#2639)
Additional commits viewable in compare view

Updates openssl-sys from 0.9.114 to 0.9.117

Release notes

Sourced from openssl-sys's releases.

openssl-sys-v0.9.117

What's Changed

Bump aws-ls-sys to 0.41 by @joshgodsiff in rust-openssl/rust-openssl#2640

Add brainpoolP224r1 and brainpoolP224t1 NID constants by @sfarestam-iproov in rust-openssl/rust-openssl#2642

x509: add minimal support for CRL building by @DavidFontaineOcd in rust-openssl/rust-openssl#2538

add mldsa.h to the boringssl bindgen by @reaperhulk in rust-openssl/rust-openssl#2650

Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @alex in rust-openssl/rust-openssl#2652

Fix verify_mode() panic on unmodeled verify mode bits by @alex in

Bumps the all-dependencies group with 28 updates in the / directory: | Package | From | To | | --- | --- | --- | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` | | [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.2` | | [http-body](https://github.com/hyperium/http-body) | `1.0.1` | `1.1.0` | | [http-body-util](https://github.com/hyperium/http-body) | `0.1.3` | `0.1.4` | | [hyper](https://github.com/hyperium/hyper) | `1.9.0` | `1.11.0` | | [iri-string](https://github.com/lo48576/iri-string) | `0.7.12` | `0.7.14` | | [libc](https://github.com/rust-lang/libc) | `0.2.186` | `0.2.189` | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.78` | `0.10.81` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [siphasher](https://github.com/jedisct1/rust-siphash) | `1.0.2` | `1.0.3` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` | | [bitflags](https://github.com/bitflags/bitflags) | `2.11.1` | `2.13.1` | | [cc](https://github.com/rust-lang/cc-rs) | `1.2.61` | `1.4.0` | | [either](https://github.com/rayon-rs/either) | `1.15.0` | `1.17.0` | | [futures-core](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` | | [glob](https://github.com/rust-lang/glob) | `0.3.3` | `0.3.4` | | [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.33` | | [memchr](https://github.com/BurntSushi/memchr) | `2.8.0` | `2.8.3` | | [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.106` | `1.0.107` | | [quote](https://github.com/dtolnay/quote) | `1.0.45` | `1.0.47` | | [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.13.1` | | [rustc-hash](https://github.com/rust-lang/rustc-hash) | `2.1.2` | `2.1.3` | | [smallvec](https://github.com/servo/rust-smallvec) | `1.15.1` | `1.15.2` | | [syn](https://github.com/dtolnay/syn) | `2.0.117` | `2.0.119` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.1` | `1.53.1` | | [zmij](https://github.com/dtolnay/zmij) | `1.0.21` | `1.0.23` | Updates `bytes` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.1) Updates `http` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.0...v1.4.2) Updates `http-body` from 1.0.1 to 1.1.0 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@v1.0.1...v1.1.0) Updates `http-body-util` from 0.1.3 to 0.1.4 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@http-body-util-v0.1.3...http-body-util-v0.1.4) Updates `hyper` from 1.9.0 to 1.11.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.9.0...v1.11.0) Updates `iri-string` from 0.7.12 to 0.7.14 - [Changelog](https://github.com/lo48576/iri-string/blob/develop/CHANGELOG.md) - [Commits](lo48576/iri-string@v0.7.12...v0.7.14) Updates `libc` from 0.2.186 to 0.2.189 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.186...0.2.189) Updates `openssl` from 0.10.78 to 0.10.81 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.81) Updates `openssl-sys` from 0.9.114 to 0.9.117 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-sys-v0.9.114...openssl-sys-v0.9.117) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `siphasher` from 1.0.2 to 1.0.3 - [Commits](jedisct1/rust-siphash@1.0.2...1.0.3) Updates `thiserror` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.19) Updates `zeroize` from 1.8.2 to 1.9.0 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0) Updates `bitflags` from 2.11.1 to 2.13.1 - [Release notes](https://github.com/bitflags/bitflags/releases) - [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md) - [Commits](bitflags/bitflags@2.11.1...2.13.1) Updates `cc` from 1.2.61 to 1.4.0 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@cc-v1.2.61...cc-v1.4.0) Updates `either` from 1.15.0 to 1.17.0 - [Commits](rayon-rs/either@1.15.0...1.17.0) Updates `futures-core` from 0.3.32 to 0.3.33 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.33) Updates `glob` from 0.3.3 to 0.3.4 - [Release notes](https://github.com/rust-lang/glob/releases) - [Changelog](https://github.com/rust-lang/glob/blob/master/CHANGELOG.md) - [Commits](rust-lang/glob@v0.3.3...v0.3.4) Updates `log` from 0.4.29 to 0.4.33 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.29...0.4.33) Updates `memchr` from 2.8.0 to 2.8.3 - [Commits](BurntSushi/memchr@2.8.0...2.8.3) Updates `proc-macro2` from 1.0.106 to 1.0.107 - [Release notes](https://github.com/dtolnay/proc-macro2/releases) - [Commits](dtolnay/proc-macro2@1.0.106...1.0.107) Updates `quote` from 1.0.45 to 1.0.47 - [Release notes](https://github.com/dtolnay/quote/releases) - [Commits](dtolnay/quote@1.0.45...1.0.47) Updates `regex` from 1.12.3 to 1.13.1 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.3...1.13.1) Updates `regex-automata` from 0.4.14 to 0.4.16 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@regex-automata-0.4.14...regex-automata-0.4.16) Updates `regex-syntax` from 0.8.10 to 0.8.11 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@regex-syntax-0.8.10...regex-syntax-0.8.11) Updates `rustc-hash` from 2.1.2 to 2.1.3 - [Changelog](https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md) - [Commits](rust-lang/rustc-hash@v2.1.2...v2.1.3) Updates `serde_core` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_derive` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `smallvec` from 1.15.1 to 1.15.2 - [Release notes](https://github.com/servo/rust-smallvec/releases) - [Commits](servo/rust-smallvec@v1.15.1...v1.15.2) Updates `syn` from 2.0.117 to 2.0.119 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.117...2.0.119) Updates `thiserror-impl` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.19) Updates `tokio` from 1.52.1 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.1...tokio-1.53.1) Updates `zmij` from 1.0.21 to 1.0.23 - [Release notes](https://github.com/dtolnay/zmij/releases) - [Commits](dtolnay/zmij@1.0.21...1.0.23) --- updated-dependencies: - dependency-name: bytes dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: http dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: http-body dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: http-body-util dependency-version: 0.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: hyper dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: iri-string dependency-version: 0.7.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: libc dependency-version: 0.2.189 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: openssl dependency-version: 0.10.81 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: openssl-sys dependency-version: 0.9.117 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: siphasher dependency-version: 1.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: thiserror dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: zeroize dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: bitflags dependency-version: 2.13.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: cc dependency-version: 1.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: either dependency-version: 1.17.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: futures-core dependency-version: 0.3.33 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: glob dependency-version: 0.3.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: log dependency-version: 0.4.33 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: memchr dependency-version: 2.8.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: proc-macro2 dependency-version: 1.0.107 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: quote dependency-version: 1.0.47 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: regex dependency-version: 1.13.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: regex-automata dependency-version: 0.4.16 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: regex-syntax dependency-version: 0.8.11 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: rustc-hash dependency-version: 2.1.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: serde_core dependency-version: 1.0.229 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: serde_derive dependency-version: 1.0.229 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: smallvec dependency-version: 1.15.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: syn dependency-version: 2.0.119 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: thiserror-impl dependency-version: 2.0.19 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: tokio dependency-version: 1.53.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: zmij dependency-version: 1.0.23 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 1, 2026

github-project-automation Bot added this to NGINX OSS Unified Workspace Aug 1, 2026

github-project-automation Bot moved this to New in NGINX OSS Unified Workspace Aug 1, 2026

Navigation Menu

Uh oh!

Bump the all-dependencies group across 1 directory with 34 updates - #189

Bump the all-dependencies group across 1 directory with 34 updates#189
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-dependencies-d3868b3a05

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

1.12.1 (July 8th, 2026)

Fixed

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

v1.4.2

What's Changed

New Contributors

v1.4.1

tl;dr

What's Changed

New Contributors

1.4.2 (June 8, 2026)

1.4.1 (May 25, 2026)

http-body-util-v0.1.4

What's Changed

v1.11.0

Features

Bug Fixes

All PRs

New Contributors

v1.11.0 (2026-07-20)

Bug Fixes

Features

v1.10.1 (2026-05-29)

Bug Fixes

v1.10.0 (2026-05-27)

Bug Fixes

Features

[0.7.14]

Fixed

[0.7.13]

Added

Changed (non-breaking)

0.2.189

Added

Deprecated

Fixed

0.2.188

Changed

0.2.187

0.2.189 - 2026-07-21

Added

Deprecated

Fixed

0.2.188 - 2026-07-21

Changed

0.2.187 - 2026-07-20

openssl-v0.10.81

What's Changed

New Contributors

openssl-v0.10.80

What's Changed

openssl-v0.10.79

What's Changed

openssl-sys-v0.9.117

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants