Skip to content

chore(deps): bump the cargo-dependencies group across 1 directory with 8 updates - #3874

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-64e2ce627b
Open

chore(deps): bump the cargo-dependencies group across 1 directory with 8 updates#3874
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-64e2ce627b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the cargo-dependencies group with 8 updates in the / directory:

Package From To
log 0.4.34 0.4.35
quick-xml 0.41.0 0.42.0
zip 3.0.0 9.1.0
ratex-types 0.1.14 0.1.15
ratex-font 0.1.14 0.1.15
rfd 0.17.2 0.18.0
skrifa 0.44.0 0.48.0
libc 0.2.190 0.2.191

Updates log from 0.4.34 to 0.4.35

Release notes

Sourced from log's releases.

v0.4.35

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

  • rework CI/CD to align with Rust project standards
Changelog

Sourced from log's changelog.

0.4.35 - 2026-10-30

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

  • rework CI/CD to align with Rust project standards
Commits
  • a46450b Update CHANGELOG.md
  • a715f17 chore: release v0.4.35
  • b4e2b12 Merge pull request #747 from rust-lang/chore/release-plz-mgnt
  • 6b490b6 run fmt
  • 2c7fd52 simplify some crate release tasks for easier automation
  • 5bc5545 Merge pull request #745 from marcoienibot/release-plz-disable-semver-check
  • 4234b8c Disable release-plz semver check
  • 95918ff Merge pull request #744 from Kobzol/trusted-publishing
  • e7ed747 Fix Zizmor lints
  • e87a3c6 Setup trusted publishing
  • Additional commits viewable in compare view

Updates quick-xml from 0.41.0 to 0.42.0

Release notes

Sourced from quick-xml's releases.

v0.42.0 - String Ergonomics

What's Changed

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

  • #963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.
  • #963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.
  • #963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.
  • #963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].
  • #963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.
  • #963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.
  • #963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.
  • #963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.
  • #963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).
  • #980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has

... (truncated)

Changelog

Sourced from quick-xml's changelog.

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

  • #963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.
  • #963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.
  • #963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.
  • #963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].
  • #963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.
  • #963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.
  • #963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.
  • #963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.
  • #963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).
  • #980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has changed slightly. The default maximum has also been reduced from 256 to 128.
  • #1000: DeError::UnexpectedStart renamed to DeError::MixedContent. That error is emitted when you try to deserialize boolean, number or string field from something like <field>text <tag/> another text</field>.

... (truncated)

Commits
  • 36a2c52 Release 0.42.0
  • a4b9fca cargo fmt
  • 22c99f5 Update Rust Edition to 2024
  • 83351fb Add rename = $value to a table in serde example comments
  • f4db767 Clarify documentation about lifetimes of the events and attributes
  • 9f4c66a Fix formatting for correct assertions in read_nodes_serde
  • 6950ef7 Add GHA job to execute examples
  • dbf9e3f Show XML Decl tracking in examples
  • aab9452 Add writing a Decl event to the writer example
  • 1573e05 Avoid trim_text(true) in the in-depth examples
  • Additional commits viewable in compare view

Updates zip from 3.0.0 to 9.1.0

Release notes

Sourced from zip's releases.

v9.1.0

🚀 Features

  • (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
  • Add borrowing inner method to reader wrappers (#1050)
  • add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
  • add file_names_raw iterator (#1082)

🐛 Bug Fixes

  • raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
  • (write) prevent seek panic on streaming writer with comment (#1151)
  • Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#1134)
  • apply unix permissions at creation (#1104)
  • raw_copy_file should work with any extra fields (#1120)
  • (read) avoid full-file forward scans and redundant allocations in central directory (#1142)
  • don't enable typed-path's default std feature (#1112)
  • ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#1107)
  • resolve decoded CP437 member names (#1080) (#1085)
  • Debug assertion doesn't account for length of archive comment (#1097)

🚜 Refactor

  • Lazy instantiation for all decompressors (#1046) (#1047)

⚡ Performance

  • (write) reuse the DEFLATE compressor across entries (#1119)

⚙️ Miscellaneous Tasks

  • Fix reference to nonexistent variable on #[cfg(not(any(unix, windows)))] (#1138)
  • target lzma-rust2 v0.23 (#1096)

Bench

  • add Criterion benchmarks (#754)
  • add deflate_many_small_files bench for #633 (#964)

v9.0.5

🐛 Bug Fixes

  • use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

  • Enable release-plz on backport branches in future (#1079)

v9.0.4

... (truncated)

Changelog

Sourced from zip's changelog.

9.1.0 - 2026-10-24

🚀 Features

  • (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
  • Add borrowing inner method to reader wrappers (#1050)
  • add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
  • add file_names_raw iterator (#1082)

🐛 Bug Fixes

  • raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
  • (write) prevent seek panic on streaming writer with comment (#1151)
  • Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#1134)
  • apply unix permissions at creation (#1104)
  • raw_copy_file should work with any extra fields (#1120)
  • (read) avoid full-file forward scans and redundant allocations in central directory (#1142)
  • don't enable typed-path's default std feature (#1112)
  • ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#1107)
  • resolve decoded CP437 member names (#1080) (#1085)
  • Debug assertion doesn't account for length of archive comment (#1097)

🚜 Refactor

  • Lazy instantiation for all decompressors (#1046) (#1047)

⚡ Performance

  • (write) reuse the DEFLATE compressor across entries (#1119)

⚙️ Miscellaneous Tasks

  • Fix reference to nonexistent variable on #[cfg(not(any(unix, windows)))] (#1138)
  • target lzma-rust2 v0.23 (#1096)

Benchmarks

  • add Criterion benchmarks (#754)
  • add deflate_many_small_files bench for #633 (#964)

9.0.5 - 2026-10-17

🐛 Bug Fixes

  • use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

  • Enable release-plz on backport branches in future (#1079)

... (truncated)

Commits
  • 3ac375b chore: release v9.1.0 (#1121)
  • 49b1362 ci: Allow build_and_test to run concurrently with WASM (#1157)
  • 7233436 fix: raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
  • 8c2b231 ci: [StepSecurity] Apply security best practices (#1129)
  • ef13e22 test: add test for the previous MR (#1125)
  • 9275e5b test: Eliminate unnecessary requirement for little endianness (#1108)
  • 9151ce9 fix(write): prevent seek panic on streaming writer with comment (#1151)
  • 056a4eb ci: Fix: run build_and_test and check_fuzz even if dependency_review was skip...
  • 28f80dd feat(read): enforce header consistency on extract_with_options and expose dup...
  • 99ab668 bench: add Criterion benchmarks (#754)
  • Additional commits viewable in compare view

Updates ratex-types from 0.1.14 to 0.1.15

Release notes

Sourced from ratex-types's releases.

v0.1.15

[0.1.15] - 2026-10-16

What's Changed

Compatibility

  • LayoutOptions keeps the v0.1.14 fields and layout(nodes, options) keeps its signature. Existing full struct literals and exhaustive patterns remain valid. Host-provided glyph metrics use the additive layout_with_fallback_metrics API; no caller migration is required. The C ABI and DisplayList JSON remain unchanged.

Added

  • \slashed and \centernot commands.
  • Mac Catalyst support in the Apple XCFramework and Swift package.
  • layout_with_fallback_metrics(nodes, options, metrics) for host-provided fallback glyph metrics and more accurate text spacing. See the API rustdoc for an example and layout validation for resource limits.
  • Configurable PNG/SVG padding in the CLI.
  • Borrowed lexer tokens via Lexer::next_span() and TokenSpan.

Fixed

  • PNG rendering reports malformed large-font errors instead of succeeding with missing glyphs.
  • PNG glyphs shifting by one pixel after cache reuse at different positions.
  • mhchem spacing regression caused by escaped ## source locations.
  • Color inheritance for rules, boxes, and related symbols.
  • Website rendering before fonts finish loading.
  • Website font-loading failures now time out and allow retrying without reloading the page.
  • Delimiter cache keys no longer serialize the host's fallback glyph metrics map on every lookup.
  • iOS linking failures involving unwind symbols.

Security

  • Bound macro expansion, mhchem intermediates, and layout work, including \edef/\xdef, \pmb, and Array/CD padding.
  • Reject overflowing \char values and oversized PNG allocations.
  • Bound dashed-line rendering and clip work to the viewport.
  • Enforce Android 16 KB ELF alignment and verify release packages.

See resource limits for scope and limitations.

Performance

  • Cache glyph masks and emoji rasters; share font buffers and load fallback fonts on demand.
  • Reuse built-in macros and delimiter measurements; reduce allocations in PNG encoding and SVG serialization.

... (truncated)

Changelog

Sourced from ratex-types's changelog.

[0.1.15] - 2026-10-16

Compatibility

  • LayoutOptions keeps the v0.1.14 fields and layout(nodes, options) keeps its signature. Existing full struct literals and exhaustive patterns remain valid. Host-provided glyph metrics use the additive layout_with_fallback_metrics API; no caller migration is required. The C ABI and DisplayList JSON remain unchanged.

Added

  • \slashed and \centernot commands.
  • Mac Catalyst support in the Apple XCFramework and Swift package.
  • layout_with_fallback_metrics(nodes, options, metrics) for host-provided fallback glyph metrics and more accurate text spacing. See the API rustdoc for an example and layout validation for resource limits.
  • Configurable PNG/SVG padding in the CLI.
  • Borrowed lexer tokens via Lexer::next_span() and TokenSpan.

Fixed

  • PNG rendering reports malformed large-font errors instead of succeeding with missing glyphs.
  • PNG glyphs shifting by one pixel after cache reuse at different positions.
  • mhchem spacing regression caused by escaped ## source locations.
  • Color inheritance for rules, boxes, and related symbols.
  • Website rendering before fonts finish loading.
  • Website font-loading failures now time out and allow retrying without reloading the page.
  • Delimiter cache keys no longer serialize the host's fallback glyph metrics map on every lookup.
  • iOS linking failures involving unwind symbols.

Security

  • Bound macro expansion, mhchem intermediates, and layout work, including \edef/\xdef, \pmb, and Array/CD padding.
  • Reject overflowing \char values and oversized PNG allocations.
  • Bound dashed-line rendering and clip work to the viewport.
  • Enforce Android 16 KB ELF alignment and verify release packages.

See resource limits for scope and limitations.

Performance

  • Cache glyph masks and emoji rasters; share font buffers and load fallback fonts on demand.
  • Reuse built-in macros and delimiter measurements; reduce allocations in PNG encoding and SVG serialization.

Latest comparison with v0.1.14 (lower is better):

... (truncated)

Commits
  • 5f7dc48 chore: update Package.swift for release v0.1.15
  • 7d9f9a3 chore: update version to 0.1.15
  • 48c4ee9 chore: update version to 0.1.15
  • 4500552 Merge pull request #171 from erweixin/fix-sec
  • 97965dd refactor(font-loader): extract load_missing_fonts function and improve cache ...
  • 1e1a2d5 chore(changelog): update CHANGELOG for PNG rendering error handling and perfo...
  • 5e026b1 chore(changelog): update CHANGELOG for fallback glyph metrics feature and com...
  • 6b9f83e chore(changelog): update CHANGELOG for new website font-loading features and ...
  • faebc10 chore(changelog): update CHANGELOG for compatibility, new features, fixes, an...
  • 8bdef4f test(macro_expander): add tests for escaped hash handling and source location...
  • Additional commits viewable in compare view

Updates ratex-font from 0.1.14 to 0.1.15

Release notes

Sourced from ratex-font's releases.

v0.1.15

[0.1.15] - 2026-10-16

What's Changed

Compatibility

  • LayoutOptions keeps the v0.1.14 fields and layout(nodes, options) keeps its signature. Existing full struct literals and exhaustive patterns remain valid. Host-provided glyph metrics use the additive layout_with_fallback_metrics API; no caller migration is required. The C ABI and DisplayList JSON remain unchanged.

Added

  • \slashed and \centernot commands.
  • Mac Catalyst support in the Apple XCFramework and Swift package.
  • layout_with_fallback_metrics(nodes, options, metrics) for host-provided fallback glyph metrics and more accurate text spacing. See the API rustdoc for an example and layout validation for resource limits.
  • Configurable PNG/SVG padding in the CLI.
  • Borrowed lexer tokens via Lexer::next_span() and TokenSpan.

Fixed

  • PNG rendering reports malformed large-font errors instead of succeeding with missing glyphs.
  • PNG glyphs shifting by one pixel after cache reuse at different positions.
  • mhchem spacing regression caused by escaped ## source locations.
  • Color inheritance for rules, boxes, and related symbols.
  • Website rendering before fonts finish loading.
  • Website font-loading failures now time out and allow retrying without reloading the page.
  • Delimiter cache keys no longer serialize the host's fallback glyph metrics map on every lookup.
  • iOS linking failures involving unwind symbols.

Security

  • Bound macro expansion, mhchem intermediates, and layout work, including \edef/\xdef, \pmb, and Array/CD padding.
  • Reject overflowing \char values and oversized PNG allocations.
  • Bound dashed-line rendering and clip work to the viewport.
  • Enforce Android 16 KB ELF alignment and verify release packages.

See resource limits for scope and limitations.

Performance

  • Cache glyph masks and emoji rasters; share font buffers and load fallback fonts on demand.
  • Reuse built-in macros and delimiter measurements; reduce allocations in PNG encoding and SVG serialization.

... (truncated)

Changelog

Sourced from ratex-font's changelog.

[0.1.15] - 2026-10-16

Compatibility

  • LayoutOptions keeps the v0.1.14 fields and layout(nodes, options) keeps its signature. Existing full struct literals and exhaustive patterns remain valid. Host-provided glyph metrics use the additive layout_with_fallback_metrics API; no caller migration is required. The C ABI and DisplayList JSON remain unchanged.

Added

  • \slashed and \centernot commands.
  • Mac Catalyst support in the Apple XCFramework and Swift package.
  • layout_with_fallback_metrics(nodes, options, metrics) for host-provided fallback glyph metrics and more accurate text spacing. See the API rustdoc for an example and layout validation for resource limits.
  • Configurable PNG/SVG padding in the CLI.
  • Borrowed lexer tokens via Lexer::next_span() and TokenSpan.

Fixed

  • PNG rendering reports malformed large-font errors instead of succeeding with missing glyphs.
  • PNG glyphs shifting by one pixel after cache reuse at different positions.
  • mhchem spacing regression caused by escaped ## source locations.
  • Color inheritance for rules, boxes, and related symbols.
  • Website rendering before fonts finish loading.
  • Website font-loading failures now time out and allow retrying without reloading the page.
  • Delimiter cache keys no longer serialize the host's fallback glyph metrics map on every lookup.
  • iOS linking failures involving unwind symbols.

Security

  • Bound macro expansion, mhchem intermediates, and layout work, including \edef/\xdef, \pmb, and Array/CD padding.
  • Reject overflowing \char values and oversized PNG allocations.
  • Bound dashed-line rendering and clip work to the viewport.
  • Enforce Android 16 KB ELF alignment and verify release packages.

See resource limits for scope and limitations.

Performance

  • Cache glyph masks and emoji rasters; share font buffers and load fallback fonts on demand.
  • Reuse built-in macros and delimiter measurements; reduce allocations in PNG encoding and SVG serialization.

Latest comparison with v0.1.14 (lower is better):

... (truncated)

Commits
  • 5f7dc48 chore: update Package.swift for release v0.1.15
  • 7d9f9a3 chore: update version to 0.1.15
  • 48c4ee9 chore: update version to 0.1.15
  • 4500552 Merge pull request #171 from erweixin/fix-sec
  • 97965dd refactor(font-loader): extract load_missing_fonts function and improve cache ...
  • 1e1a2d5 chore(changelog): update CHANGELOG for PNG rendering error handling and perfo...
  • 5e026b1 chore(changelog): update CHANGELOG for fallback glyph metrics feature and com...
  • 6b9f83e chore(changelog): update CHANGELOG for new website font-loading features and ...
  • faebc10 chore(changelog): update CHANGELOG for compatibility, new features, fixes, an...
  • 8bdef4f test(macro_expander): add tests for escaped hash handling and source location...
  • Additional commits viewable in compare view

Updates rfd from 0.17.2 to 0.18.0

Release notes

Sourced from rfd's releases.

0.18.0

What's Changed

New Contributors

Full Changelog: PolyMeilex/rfd@0.17.2...0.18.0

Changelog

Sourced from rfd's changelog.

0.18.0

  • Fix some GTK3 memory leaks
  • Add GTK4 backend behind the gtk4 feature
  • MSRV is now 1.92
  • Fix macOS file dialogs ignoring set_directory when set_file_name is also used.
  • Add FileDialog::set_show_hidden_files and AsyncFileDialog::set_show_hidden_files to control hidden file visibility. Supported on macOS, Windows, and Linux (GTK3).
  • Honor FileDialog::set_directory and AsyncFileDialog::set_directory when using the zenity fallback backend on Linux.
  • Fix liblary typo in docs
  • Change wasm title to sanitize text contents via title_el.set_text_content() rather than title_el.set_inner_html().
  • Set wasm dialog styles via set_text_content() rather than set_inner_html(), so rfd no longer uses innerHTML.
  • Fix GTK3 message dialogs using the description as a printf format string, which garbled text containing % and could crash. The description is now shown as given, so %% is no longer shown as %.
  • Support files without an extension in GTK3 and zenity filters, as the XDG portal backend does since #215. A match-all filter ("*") or an empty one ("") now uses the glob "*", not "*.*" or "*.", so a filter such as "All files" matches a name with no dot, like README.
  • Zenity now returns correct paths when a name contains |. Also file names that start or end with a space are kept intact.
Commits
  • 2d35d7d Merge pull request #364 from PolyMeilex/version-bump-0.18
  • c88f6e0 chore: Version bump 0.18.0
  • 66e966f Merge pull request #359 from PolyMeilex/solaris
  • 11f3656 chore: Alias the unixlike cfg
  • 7da8075 chore: Add solaris and illumos as unix-like systems
  • 73b3afe Merge pull request #357 from atouchet/dp
  • a01acfe Use latest version for Deps.rs badge
  • 98d6cf2 Merge pull request #351 from PolyMeilex/gtk3-fix-some-ubs
  • 4b7630a gtk3: Fix g_lists memory leaks
  • 594e5ba Merge pull request #350 from PolyMeilex/manual-gtk-tests
  • Additional commits viewable in compare view

Updates skrifa from 0.44.0 to 0.48.0

Commits
  • 0e93993 Release everything (#2193)
  • 800f03c Support static VARC variation axes (#2142)
  • 5f411f6 [font-types] Print fixed-point values as shortest decimal (#2191)
  • 0e56a7a [read-fonts] accept a null shared tuples offset when count is 0 (#2185)
  • d2de08f Preserve 32-bit VARC delta precision during accumulation (#2192)
  • 66563a3 [read-fonts] tidy up for release (#2190)
  • 6e0a9d3 Use IftTable struct instead of tuple (#2189)
  • 3f04de5 Merge pull request #2188 from behdad/varc-off-2026-binary-format
  • cdf9ab8 [read-fonts] new font API: charmap support (#2183)
  • 23b011a Merge pull request #2186 from metsw24-max/post-checkpoint-slot
  • Additional commits viewable in compare view

Updates libc from 0.2.190 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)
Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)
Commits
  • ccc2ff4 libc: Release 0.2.191
  • bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
  • ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
  • b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
  • 9c7f568 apple: add ifaliasreq and in6_aliasreq
  • 018c7e9 wasi: Add pthread_condattr_{get,set}clock
  • 2c77185 openbsd: add sensordev structure
  • e10813c hurd: Add missing POSIX_SPAWN_* flags
  • 2ea4bc1 Fix FreeBSD/aarch64
  • 6d666fd dragonfly: Parse version from headers rather than CLI
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 12, 2026
@dependabot
chore(deps): bump the cargo-dependencies group across 1 directory wit…
e81e621 
…h 8 updates

Bumps the cargo-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [log](https://github.com/rust-lang/log) | `0.4.34` | `0.4.35` |
| [quick-xml](https://github.com/tafia/quick-xml) | `0.41.0` | `0.42.0` |
| [zip](https://github.com/zip-rs/zip2) | `3.0.0` | `9.1.0` |
| [ratex-types](https://github.com/erweixin/RaTeX) | `0.1.14` | `0.1.15` |
| [ratex-font](https://github.com/erweixin/RaTeX) | `0.1.14` | `0.1.15` |
| [rfd](https://github.com/PolyMeilex/rfd) | `0.17.2` | `0.18.0` |
| [skrifa](https://github.com/googlefonts/fontations) | `0.44.0` | `0.48.0` |
| [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` |



Updates `log` from 0.4.34 to 0.4.35
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/main/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.34...v0.4.35)

Updates `quick-xml` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/tafia/quick-xml/releases)
- [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md)
- [Commits](tafia/quick-xml@v0.41.0...v0.42.0)

Updates `zip` from 3.0.0 to 9.1.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v3.0.0...v9.1.0)

Updates `ratex-types` from 0.1.14 to 0.1.15
- [Release notes](https://github.com/erweixin/RaTeX/releases)
- [Changelog](https://github.com/erweixin/RaTeX/blob/main/CHANGELOG.md)
- [Commits](erweixin/RaTeX@v0.1.14...v0.1.15)

Updates `ratex-font` from 0.1.14 to 0.1.15
- [Release notes](https://github.com/erweixin/RaTeX/releases)
- [Changelog](https://github.com/erweixin/RaTeX/blob/main/CHANGELOG.md)
- [Commits](erweixin/RaTeX@v0.1.14...v0.1.15)

Updates `rfd` from 0.17.2 to 0.18.0
- [Release notes](https://github.com/PolyMeilex/rfd/releases)
- [Changelog](https://github.com/PolyMeilex/rfd/blob/master/CHANGELOG.md)
- [Commits](PolyMeilex/rfd@0.17.2...0.18.0)

Updates `skrifa` from 0.44.0 to 0.48.0
- [Release notes](https://github.com/googlefonts/fontations/releases)
- [Changelog](https://github.com/googlefonts/fontations/blob/main/docs/RELEASE.md)
- [Commits](googlefonts/fontations@skrifa-v0.44.0...skrifa-v0.48.0)

Updates `libc` from 0.2.190 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.190...0.2.191)

---
updated-dependencies:
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: log
  dependency-version: 0.4.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: quick-xml
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: ratex-font
  dependency-version: 0.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: ratex-types
  dependency-version: 0.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: rfd
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: skrifa
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: zip
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-dependencies-64e2ce627b branch from 05fef1b to e81e621 Compare November 13, 2026 11:09

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants