chore(deps): bump the cargo-weekly group across 1 directory with 5 updates by dependabot[bot] · Pull Request #514 · tempoxyz/wallet-rs

dependabot · 2026-06-26T18:36:08Z

Bumps the cargo-weekly group with 5 updates in the / directory:

Package	From	To
alloy	`2.0.5`	`2.1.0`
getrandom	`0.4.2`	`0.4.3`
rusqlite	`0.40.0`	`0.40.1`
time	`0.3.47`	`0.3.49`
zeroize	`1.8.2`	`1.9.0`

Updates alloy from 2.0.5 to 2.1.0

Release notes

Sourced from alloy's releases.

v2.1.0

What's Changed

chore: added target_gas_limit to payload attributes v4 by @Rimeeeeee in alloy-rs/alloy#3980

feat: Provider::watch_blocks_from and Provider::watch_canonical_blocks_from by @0xForerunner in alloy-rs/alloy#3722

Update CODEOWNERS by @zerosnacks in alloy-rs/alloy#4004

fix(transport-http): preserve JSON-RPC errors from non-2xx by @Mohiiit in alloy-rs/alloy#4006

feat(consensus): add generic indexed value helper by @mattsse in alloy-rs/alloy#4005

docs(rpc-types-engine): include ExecutionPayloadV4 in docs by @Elena343-ai in alloy-rs/alloy#4008

fix(signer-local): return missing mnemonic phrase error by @nivanovvv in alloy-rs/alloy#4009

docs(rpc-types-engine): document ExecutionPayloadV4 fields by @Elena343-ai in alloy-rs/alloy#4012

fix(rpc-types-engine): support positional testing build block requests by @mattsse in alloy-rs/alloy#4014

chore: replaced typed tx with consensus tx in build_typed_simulate_tx… by @Rimeeeeee in alloy-rs/alloy#4015

provider: avoid caching pending tx snapshots by hash by @gfischer7 in alloy-rs/alloy#4001

fix(rpc-client): include IPC path in metadata errors by @mattsse in alloy-rs/alloy#4016

docs(rpc-types-eth): clarify block header docs by @Elena343-ai in alloy-rs/alloy#3998

feat: add ssz encoding and decoding to Payload Envelopes by @Soubhik-10 in alloy-rs/alloy#4024

feat(engine): add SSZ for payload bodies by @Soubhik-10 in alloy-rs/alloy#4026

feat(provider): add anvil_dump_state_with_history to AnvilApi by @antonbaliasnikov in alloy-rs/alloy#4025

chore: fixed amsterdam docs and sequence in chain config by @Rimeeeeee in alloy-rs/alloy#4021

feat: Provider::watch_canonical_logs_from by @0xForerunner in alloy-rs/alloy#4022

ci: ignore proc-macro-error2 advisory by @mattsse in alloy-rs/alloy#4030

feat(rpc-beacon-type): extend ssz decoding to SignedBeaconBlock by @lean-apple in alloy-rs/alloy#4029

fix: skip exp claim serialization in JWT if none by @igorbaltiyskiy-espresso in alloy-rs/alloy#4032

chore: group weekly dependabot updates by @decofe in alloy-rs/alloy#4035

chore(deps): bump alloy-eip7928 to 0.4 by @mattsse in alloy-rs/alloy#4011

fix(txpool): checksum address map keys for tx pool by @Soubhik-10 in alloy-rs/alloy#4039

New Contributors

@0xForerunner made their first contribution in alloy-rs/alloy#3722

@Mohiiit made their first contribution in alloy-rs/alloy#4006

@gfischer7 made their first contribution in alloy-rs/alloy#4001

@antonbaliasnikov made their first contribution in alloy-rs/alloy#4025

@igorbaltiyskiy-espresso made their first contribution in alloy-rs/alloy#4032

Full Changelog: alloy-rs/alloy@v2.0.5...v2.1.0

Changelog

Sourced from alloy's changelog.

2.1.0 - 2026-06-16

Bug Fixes

[txpool] Checksum address map keys for tx pool (#4039)

Skip exp claim serialization in JWT if none (#4032)

[rpc-client] Include IPC path in metadata errors (#4016)

[rpc-types-engine] Support positional testing build block requests (#4014)

[signer-local] Return missing mnemonic phrase error (#4009)

[transport-http] Preserve JSON-RPC errors from non-2xx (#4006)

Dependencies

[deps] Bump alloy-eip7928 to 0.4 (#4011)

Documentation

[rpc-types-eth] Clarify block header docs (#3998)

[rpc-types-engine] Document ExecutionPayloadV4 fields (#4012)

[rpc-types-engine] Include ExecutionPayloadV4 in docs (#4008)

Features

[rpc-beacon-type] Extend ssz decoding to SignedBeaconBlock (#4029)

Provider::watch_canonical_logs_from (#4022)

[provider] Add anvil_dump_state_with_history to AnvilApi (#4025)

[engine] Add SSZ for payload bodies (#4026)

Add ssz encoding and decoding to Payload Envelopes (#4024)

[consensus] Add generic indexed value helper (#4005)

Provider::watch_blocks_from and Provider::watch_canonical_blocks_from (#3722)

Miscellaneous Tasks

Release 2.1.0

Group weekly dependabot updates (#4035)

Fixed amsterdam docs and sequence in chain config (#4021)

Replaced typed tx with consensus tx in build_typed_simulate_tx… (#4015)

Added target_gas_limit to payload attributes v4 (#3980)

Other

Ignore proc-macro-error2 advisory (#4030)

Avoid caching pending tx snapshots by hash (#4001)

Update CODEOWNERS (#4004)

Commits

68e909d chore: release 2.1.0
9c449d0 chore: release 2.1.0
c5f3058 fix(txpool): checksum address map keys for tx pool (#4039)
1a9c4d4 chore(deps): bump alloy-eip7928 to 0.4 (#4011)
6d665a6 chore: group weekly dependabot updates (#4035)
df681af fix: skip exp claim serialization in JWT if none (#4032)
6977a95 feat(rpc-beacon-type): extend ssz decoding to SignedBeaconBlock (#4029)
f700f88 ci: ignore proc-macro-error2 advisory (#4030)
16f7a80 feat: Provider::watch_canonical_logs_from (#4022)
f3df589 chore: fixed amsterdam docs and sequence in chain config (#4021)
Additional commits viewable in compare view

Updates getrandom from 0.4.2 to 0.4.3

Changelog

Sourced from getrandom's changelog.

0.4.3 - 2026-06-17

Added

wasm64-unknown-unknown target support for wasm_js backend #848

Changed

Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

#830: rust-random/getrandom#830 #848: rust-random/getrandom#848

Commits

5e7cd57 Release v0.4.3 (#853)
1ea268a Use manual bindings for WASIp2/3 (#830)
f7290b0 Update Cargo.lock (#852)
16ce801 Update Cargo.lock (#850)
e5adfca Add wasm64-unknown-unknown support for wasm_js backend (#848)
626df8d Update Cargo.lock (#846)
4a01cb2 Update Cargo.lock (#841)
f87bf39 Update Cargo.lock (#836)
eadb879 ci: re-enable build job for x86_64-pc-cygwin (#832)
d715d73 CI: Reduce the number of packages that are updated for wasip2 MSRV test (#825)
Additional commits viewable in compare view

Updates rusqlite from 0.40.0 to 0.40.1

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

Fix clippy warnings #1852

Bump bundled SQLite version to 3.53.2 #1853

Bump hashlink version #1855

Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

Commits

6d3c282 Merge pull request #1856 from gwenn/0.40.1
2ba28b7 Prepare next release
a021dc7 Merge pull request #1854 from gwenn/savepoint
534a149 Merge pull request #1855 from gwenn/hashlink
6d9764f Bump hashlink version
fa574eb Use sqlite3_keyword_check
15385cc Fix SQL injection when SAVEPOINT name is tainted
e5e48f2 Merge pull request #1853 from gwenn/3.53.2
ac22292 Bump bundled SQLite version to 3.53.2
c5f8828 Merge pull request #1852 from gwenn/clippy
Additional commits viewable in compare view

Updates time from 0.3.47 to 0.3.49

Release notes

Sourced from time's releases.

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.49 [2026-06-13]

Fixed

Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop compiling. A patch has been added that avoids triggering the bug.

0.3.48 [2026-06-12] [YANKED]

Security

The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded user input. Digits after the 9th have no semantic meaning.

Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple locations for soundness. The practical effect of this change is nothing, as Rust has always mapped C-like enums to 0..N in memory.

Compatibility

Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only format and parse valid UTF-8.

format_description::parse is deprecated. It is recommended to use format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

All types in the unit module have a generic parameter, though this is currently not used for much. Usage will be expanded in the future.

Comparisons between types in the unit module and the generic Unit type are permitted.

Support for rand 0.10

Version 3 format descriptions

Only UTF-8 is supported. As a side effect of this, [ignore] requires that the remaining input not begin mid-codepoint.

Representation is deliberately opaque to allow for arbitrary changes going forward.

format:false is supported on [optional] components. This is not possible in version 1 and version 2 format descriptions due to API compatibility.

The time::serde::format_description! macro uses a new, clearer syntax for version 3.

time::serde::format_description!(mod foo [Date] = "[year]-[month]-[day]");

Unlike version 1 and version 2 format descriptions, the type is not automatically brought into scope. You must import it yourself.

Nonsensical combinations of modifiers are rejected. For example, you cannot specify case-sensitivity when parsing a numerical month.

[year] defaults to range:standard

Components and modifiers are case sensitive (and always lowercase).

Changed

The convert module has been renamed to unit.

Fixed

... (truncated)

Commits

ff8683c v0.3.49 release
f189886 fix: resolve E0119 trait coherence error in rustc >= 1.95.0
5d8737c v0.3.48 release
1bfca87 Use widen instead of extend in sys code
c57284f fix: return error instead of panicking on truncated strftime padding modifier
a74f35f Use v3 format descriptions for serde defaults
96ff36c Allow eliding serde format description version
edc58b1 Permit duplicates in v1/v2 in permit_modifiers!
a838f69 Bump codecov action
f2f99f8 Fix unused warning
Additional commits viewable in compare view

Updates zeroize from 1.8.2 to 1.9.0

Commits

0b71573 zeroize v1.9.0 (#1494)
3e3f18c zeroize: always enable AVX-512 support (#1493)
1ea42bb zeroize_derive v1.5.0 (#1492)
8d785d1 zeroize: rustdoc improvements (#1491)
d844f36 zeroize: incorporate README.md into rustdoc (#1490)
c65c09d ctutils: use reason instead of comment in forbid attribute (#1489)
cbd0963 Release block-buffer v0.12.1 (#1488)
9aa541d block-buffer: fix exception safety (#1487)
5c7e4f9 cmov v0.5.4 (#1485)
87cadbc cmov: fix clippy (#1484)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the cargo-weekly group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [alloy](https://github.com/alloy-rs/alloy) | `2.0.5` | `2.1.0` | | [getrandom](https://github.com/rust-random/getrandom) | `0.4.2` | `0.4.3` | | [rusqlite](https://github.com/rusqlite/rusqlite) | `0.40.0` | `0.40.1` | | [time](https://github.com/time-rs/time) | `0.3.47` | `0.3.49` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` | Updates `alloy` from 2.0.5 to 2.1.0 - [Release notes](https://github.com/alloy-rs/alloy/releases) - [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md) - [Commits](alloy-rs/alloy@v2.0.5...v2.1.0) Updates `getrandom` from 0.4.2 to 0.4.3 - [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md) - [Commits](rust-random/getrandom@v0.4.2...v0.4.3) Updates `rusqlite` from 0.40.0 to 0.40.1 - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.40.0...v0.40.1) Updates `time` from 0.3.47 to 0.3.49 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.47...v0.3.49) Updates `zeroize` from 1.8.2 to 1.9.0 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0) --- updated-dependencies: - dependency-name: alloy dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-weekly - dependency-name: getrandom dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-weekly - dependency-name: rusqlite dependency-version: 0.40.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-weekly - dependency-name: time dependency-version: 0.3.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-weekly - dependency-name: zeroize dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-weekly ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-26T18:36:22Z

⚠️ Changelog not found.

A changelog entry is required before merging.

Add changelog

socket-security · 2026-06-26T18:36:34Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	getrandom@0.4.2 ⏵ 0.4.3
	alloy@2.0.5 ⏵ 2.1.0
	rusqlite@0.40.0 ⏵ 0.40.1
	time@0.3.47 ⏵ 0.3.51
	zeroize@1.8.2 ⏵ 1.9.0

View full report

dependabot · 2026-07-10T18:36:37Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 26, 2026

dependabot Bot closed this Jul 10, 2026

dependabot Bot deleted the dependabot/cargo/cargo-weekly-773f0800a9 branch July 10, 2026 18:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the cargo-weekly group across 1 directory with 5 updates#514

chore(deps): bump the cargo-weekly group across 1 directory with 5 updates#514
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-weekly-773f0800a9

dependabot Bot commented on behalf of github Jun 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 26, 2026

Uh oh!

socket-security Bot commented Jun 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.1.0

What's Changed

New Contributors

2.1.0 - 2026-06-16

Bug Fixes

Dependencies

Documentation

Features

Miscellaneous Tasks

Other

0.4.3 - 2026-06-17

Added

Changed

0.40.1

What's Changed

v0.3.49

v0.3.48

0.3.49 [2026-06-13]

Fixed

0.3.48 [2026-06-12] [YANKED]

Security

Compatibility

Added

Changed

Fixed

Uh oh!

github-actions Bot commented Jun 26, 2026

⚠️ Changelog not found.

Uh oh!

socket-security Bot commented Jun 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 26, 2026 •

edited

Loading