Skip to content

Bump the all group across 1 directory with 10 updates - #68

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/all-c5996593ac
Closed

Bump the all group across 1 directory with 10 updates#68
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/all-c5996593ac

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 9 updates in the / directory:

Package From To
hex-literal 0.3.4 1.1.0
num-bigint 0.4.6 0.5.1
prost 0.13.3 0.14.4
prost-types 0.13.3 0.14.4
substreams-solana 0.14.1 0.15.0
anchor-lang 0.30.1 1.1.2
sologger_log_context 0.1.2 0.2.4
getrandom 0.2.15 0.2.17
anyhow 1.0.89 1.0.104

Updates hex-literal from 0.3.4 to 1.1.0

Commits

Updates num-bigint from 0.4.6 to 0.5.1

Changelog

Sourced from num-bigint's changelog.

Release 0.5.1 (2026-07-04)

Contributors: @​cuviper

Release 0.5.0 (2026-07-02)

  • Upgrade to rand v0.10 and/or v0.9, and split rand_core.
    • The former rand feature is now split into multiple features, rand_0_9, rand_core_0_9, rand_0_10, and rand_core_0_10, depending on the version and feature set you need.
    • The RandBigInt extension trait is now split into BigRng09 and BigRng010 for each version.
    • The gen_* methods are deprecated in favor of new random_* methods.
    • This is also a value-breaking release, as rand defines it.

Contributors: @​bionicles, @​cuviper, @​divergentdave

Release 0.4.8 (2026-07-04)

Contributors: @​cuviper

Release 0.4.7 (2026-07-02)

Contributors: @​cp289, @​cuviper, @​hkalbasi, @​mikem8891, @​pRizz, @​tyilo, @​xtqqczze

Commits
  • 33c59ba Merge pull request #348 from cuviper/bz-alg2-step3b
  • 38b68f6 Release 0.5.1
  • f4a43f5 Fix the missing part of the Burnikel-Ziegler algorithm
  • ebfd89a Add failing tests for a bug in B-Z division
  • 0ab95df Merge pull request #338 from cuviper/rand-0.10
  • 33d6998 Release 0.5.0
  • 84d05b7 Clean up manifests of ci crates
  • f8daf56 Allow clippy::duplicate_mod where intended
  • 022310a Rearrange the rand features to support both 0.9 and 0.10
  • 537a036 ci: use the fallback resolver for deps
  • Additional commits viewable in compare view

Updates prost from 0.13.3 to 0.14.4

Changelog

Sourced from prost's changelog.

Prost version 0.14.4

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

🚀 Features

  • (prost-derive) Make is_valid a constant function (#1401)
  • Increase MSRV to 1.85 (#1428)

🐛 Bug Fixes

  • Use Display instead of Debug for generated enumeration attributes (#1419)
  • (prost-derive) Return error for invalid enumeration default identifiers (#1426)
  • (build) Grab binary path from cargo (#1429)
  • (build) Fix C++ build on GCC 15 (#1395)

📚 Documentation

  • Add example for decode_length_delimiter (#1311)
  • Update protobuf-src example to avoid unsafe set_var

🧪 Testing

  • Test derive Eq behavior (#1422)
  • (groups) Actually construct NestedGroup (#1363)

💼 Dependencies

  • (deps) Update criterion requirement from 0.7 to 0.8 (#1374)
  • (deps) Remove getrandom@0.4.1 from build-dependencies (#1400)
  • (deps) Update rand requirement from 0.9 to 0.10 (#1397)
  • (deps) Bump actions/upload-artifact from 6 to 7 (#1409)
  • (deps) Update cargo clippy to 1.89 (#1433)
  • (deps) Update cargo clippy to 1.91 (#1435)
  • (deps) Update and improve nix devshell (#1393)

🎨 Styling

  • Prevent needless borrow (#1404)
  • Use std::hint::black_box() (#1403)
  • Use variables directly in format!() (#1432)
  • Remove explicit .into_iter() (#1434)
  • Run clippy on benches (#1405)

Prost version 0.14.3

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

⚠️ Heads-up

... (truncated)

Commits

Updates prost-types from 0.13.3 to 0.14.4

Changelog

Sourced from prost-types's changelog.

Prost version 0.14.4

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

🚀 Features

  • (prost-derive) Make is_valid a constant function (#1401)
  • Increase MSRV to 1.85 (#1428)

🐛 Bug Fixes

  • Use Display instead of Debug for generated enumeration attributes (#1419)
  • (prost-derive) Return error for invalid enumeration default identifiers (#1426)
  • (build) Grab binary path from cargo (#1429)
  • (build) Fix C++ build on GCC 15 (#1395)

📚 Documentation

  • Add example for decode_length_delimiter (#1311)
  • Update protobuf-src example to avoid unsafe set_var

🧪 Testing

  • Test derive Eq behavior (#1422)
  • (groups) Actually construct NestedGroup (#1363)

💼 Dependencies

  • (deps) Update criterion requirement from 0.7 to 0.8 (#1374)
  • (deps) Remove getrandom@0.4.1 from build-dependencies (#1400)
  • (deps) Update rand requirement from 0.9 to 0.10 (#1397)
  • (deps) Bump actions/upload-artifact from 6 to 7 (#1409)
  • (deps) Update cargo clippy to 1.89 (#1433)
  • (deps) Update cargo clippy to 1.91 (#1435)
  • (deps) Update and improve nix devshell (#1393)

🎨 Styling

  • Prevent needless borrow (#1404)
  • Use std::hint::black_box() (#1403)
  • Use variables directly in format!() (#1432)
  • Remove explicit .into_iter() (#1434)
  • Run clippy on benches (#1405)

Prost version 0.14.3

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

⚠️ Heads-up

... (truncated)

Commits

Updates substreams-solana from 0.14.1 to 0.15.0

Release notes

Sourced from substreams-solana's releases.

v0.15.0

  • Bumped substreams dependency to 0.7 (see Upgrade notes). This migrates foundational store Protobuf definitions to v2.

  • Bumped the pinned Rust toolchain from 1.83 to 1.96 (rust-toolchain.toml).

  • Raised the declared minimum supported Rust version (MSRV) from 1.60 to 1.85, the real floor now that substreams 0.7 (toolchain 1.82+) and modern transitive dependencies rely on the edition2024 feature (stabilized in 1.85).

v0.14.3

  • Add "cost_units" to TransactionStatusMeta message.

v0.14.2

  • Add is_successful helper on pb::ConfirmedTransaction of this package.

  • Add Account message to sf.solana.type.v1 protobuf definitions for foundational store support

Changelog

Sourced from substreams-solana's changelog.

0.15.0

  • Bumped substreams dependency to 0.7 (see Upgrade notes). This migrates foundational store Protobuf definitions to v2.

  • Bumped the pinned Rust toolchain from 1.83 to 1.96 (rust-toolchain.toml).

  • Raised the declared minimum supported Rust version (MSRV) from 1.60 to 1.85, the real floor now that substreams 0.7 (toolchain 1.82+) and modern transitive dependencies rely on the edition2024 feature (stabilized in 1.85).

0.14.3

  • Add "cost_units" to TransactionStatusMeta message.

0.14.2

  • Add is_successful helper on pb::ConfirmedTransaction of this package.

  • Add Account message to sf.solana.type.v1 protobuf definitions for foundational store support

Commits
  • 7d11620 Merge pull request #8 from streamingfast/feature/move-to-substreams-0-7
  • 6b85170 Bump substreams to 0.7, release 0.15.0
  • 6294717 chore: add secret-scanning review workflow
  • 3f74698 chore: add dependency-review workflow
  • 2f45971 chore: add dependabot config
  • ac1eef9 Preparing release of 0.14.3
  • 5b830db add cost_units, prep 0.14.3
  • e84defc Preparing release of 0.14.2
  • e6f7b64 Added is_successful helper on ConfirmedTransaction
  • c019e97 Added pre-release script for publishing
  • Additional commits viewable in compare view

Updates anchor-lang from 0.30.1 to 1.1.2

Release notes

Sourced from anchor-lang's releases.

v1.1.2

The v1.1.2 release is here.

Check out the release notes from Anchor website or GitHub.

For a list of notable changes with their associated PRs, see the CHANGELOG.

v1.1.1

The v1.1.1 release is here.

Check out the release notes from Anchor website or GitHub.

For a list of notable changes with their associated PRs, see the CHANGELOG.

v1.1.0

The v1.1.0 release is here.

Check out the release notes from Anchor website or GitHub.

For a list of notable changes with their associated PRs, see the CHANGELOG.

v1.0.3

The v1.0.3 release is here.

Check out the release notes from Anchor website or GitHub.

For a list of notable changes with their associated PRs, see the CHANGELOG.

v1.0.2

The v1.0.2 release is here.

Check out the release notes from Anchor website or GitHub.

For a list of notable changes with their associated PRs, see the CHANGELOG.

v1.0.1

The 1.0.1 patch release is here. This release fixes an issue with handling user-provided Borsh attributes in serialization.

For a list of notable changes with their associated PRs, see the CHANGELOG.

v1.0.0

The first stable major release is here. This version ships several new features and improvements.

Check out the release notes from Anchor website or GitHub.

For a list of notable changes with their associated PRs, see the CHANGELOG.

v0.32.1

The 0.32.1 patch release is here. This patch is aimed to fix the anchor deploy race condition found in 0.32.0.

... (truncated)

Changelog

Sourced from anchor-lang's changelog.

[1.1.2] - 2026-06-26

Features

Fixes

  • deps: Tighten dependencies between anchor-* crates to reduce breakage (#4726).

Breaking

[1.1.1] - 2026-06-25

Features

  • ts: Re-implement verifiedBuild using the OtterSec registry (verify.osec.io), replacing the defunct apr.dev API (#4522).
  • ts: Add decodeIdlAccountRaw (#4375).
  • cli: Add --stdout flag to the expand command (#4400).
  • client: Add versioned tx support (#4207).
  • cli: Add edition and rust-version to template (#4048)
  • lang: Add program_id verification to CPI return values (#4411).
  • cli: Resolve the target directory via cargo metadata so custom target locations (e.g. CARGO_TARGET_DIR, workspace-level overrides) work across build, test, deploy and IDL paths (#3817).
  • cli: Allow configuring IDL JSON location in workspace config (#4483).
  • lang: Derive Clone, Debug, Copy, and Default on generated client / CPI account structs and instruction args where the field types allow it (#4085).
  • cli: Support multiple named scripts in Anchor.toml and run them via anchor test --script <name> / anchor run <name> (#3999).
  • cli/idl: Add fetch-historical support to recover historical IDLs with the Anchor CLI (#3992).
  • cli: anchor init refuses to create a new Anchor workspace inside an existing Cargo workspace to avoid broken nested layouts (#4576).
  • cli: Add r as an alias to the run command (#4643).

Fixes

  • cli: Warn instead of aborting anchor build when a program keypair and declare_id! do not match (#4705).
  • lang: Snapshot CPI return data before Return::get() validates the source program (#4624).
  • lang/syn: Remove remaining fallible IDL generation paths from clippy-denied code (#4631).
  • lang: Validate max_len arguments more strictly during space derivation (#4707).
  • ts: Remove cross-fetch dependency (#4671).
  • lang: Set anchor-lang Minimum Supported Rust Version to 1.89 (#4638).
  • lang: Migrate anchor-syn from syn 1.x to syn 2.0, allowing use of modern Rust syntax (#4523).
  • idl: Bump version to 0.1.3 (#4453).
  • lang: Avoid fatal errors in IDL building when modern Rust syntax is in use (#4520).
  • lang: Return InvalidProgramId when Migration::exit cannot persist migrated state because To::owner() does not match program_id (#4706).
  • client: Avoid panic in parse_logs_response when a program-emitted log line ends with invoke [1] (#4461).
  • cli: Correctly honor --skip-seed-phrase-validation in keygen recover (#4417).
  • ts: Fix sha256.hash() returning corrupted output by using hex encoding (#4404).
  • lang: Support module constants in max_len attribute (#3879).
  • cli: Bump cargo_toml to allow parsing resolver = "3" (#4515).
  • ts: Validate instruction args in BorshInstructionCoder.encode to reject typo'd or missing fields instead of silently ignoring them (#4560).
  • ts: Align TS camelCase conversion with Rust heck for digit-letter identifiers so generated client names match Rust identifiers (#4571).
  • cli: Warn if event-cpi instruction is unreachable with custom discriminators (#4614).
  • ts: Update engines.node to >= 20.18 (#4647).

... (truncated)

Commits

Updates sologger_log_context from 0.1.2 to 0.2.4

Commits

Updates getrandom from 0.2.15 to 0.2.17

Changelog

Sourced from getrandom's changelog.

0.2.17 - 2026-01-12

Fixed

  • Use doc_cfg instead of doc_auto_cfg (partial backport of #732) #768
  • BCryptGenRandom signature #778

#732: rust-random/getrandom#732 #768: rust-random/getrandom#768 #778: rust-random/getrandom#778

0.2.16 - 2025-04-22

Added

  • Cygwin support (backport of #626) #654

#654: rust-random/getrandom#654

Commits

Updates anyhow from 1.0.89 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

1.0.102

1.0.101

1.0.100

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)

1.0.99

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)

1.0.98

1.0.97

  • Documentation improvements

1.0.96

  • Documentation improvements

1.0.95

1.0.94

  • Documentation improvements

1.0.93

  • Update dev-dependencies to thiserror v2

1.0.92

  • Support Rust 1.82's &raw const and &raw mut syntax inside ensure! (#390)

1.0.91

  • Ensure OUT_DIR is left with deterministic contents after build script execution (#388)

1.0.90

  • Documentation improvements
Commits
  • 1dbe186 Release 1.0.104
  • f6479f8 Update to syn 3
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • 5c657b3 Release 1.0.102
  • Additional commits viewable in compare view

Updates regex from 1.11.0 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

  • #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

1.12.4 (2026-06-09)

This release includes a performance optimization for compilation of regexes

... (truncated)

Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/all-c5996593ac branch from 0fb6bab to 016c6f3 Compare July 16, 2026 10:45
@dependabot
Bump the all group across 1 directory with 10 updates
e38cf5f 
Bumps the all group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hex-literal](https://github.com/RustCrypto/utils) | `0.3.4` | `1.1.0` |
| [num-bigint](https://github.com/rust-num/num-bigint) | `0.4.6` | `0.5.1` |
| [prost](https://github.com/tokio-rs/prost) | `0.13.3` | `0.14.4` |
| [prost-types](https://github.com/tokio-rs/prost) | `0.13.3` | `0.14.4` |
| [substreams-solana](https://github.com/streamingfast/substreams-solana) | `0.14.1` | `0.15.0` |
| [anchor-lang](https://github.com/otter-sec/anchor) | `0.30.1` | `1.1.2` |
| [sologger_log_context](https://github.com/brytelands/sologger) | `0.1.2` | `0.2.4` |
| [getrandom](https://github.com/rust-random/getrandom) | `0.2.15` | `0.2.17` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.89` | `1.0.104` |



Updates `hex-literal` from 0.3.4 to 1.1.0
- [Commits](RustCrypto/utils@hex-literal-v0.3.4...hex-literal-v1.1.0)

Updates `num-bigint` from 0.4.6 to 0.5.1
- [Changelog](https://github.com/rust-num/num-bigint/blob/main/RELEASES.md)
- [Commits](rust-num/num-bigint@num-bigint-0.4.6...num-bigint-0.5.1)

Updates `prost` from 0.13.3 to 0.14.4
- [Release notes](https://github.com/tokio-rs/prost/releases)
- [Changelog](https://github.com/tokio-rs/prost/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/prost@v0.13.3...v0.14.4)

Updates `prost-types` from 0.13.3 to 0.14.4
- [Release notes](https://github.com/tokio-rs/prost/releases)
- [Changelog](https://github.com/tokio-rs/prost/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/prost@v0.13.3...v0.14.4)

Updates `substreams-solana` from 0.14.1 to 0.15.0
- [Release notes](https://github.com/streamingfast/substreams-solana/releases)
- [Changelog](https://github.com/streamingfast/substreams-solana/blob/master/CHANGELOG.md)
- [Commits](streamingfast/substreams-solana@v0.14.1...v0.15.0)

Updates `anchor-lang` from 0.30.1 to 1.1.2
- [Release notes](https://github.com/otter-sec/anchor/releases)
- [Changelog](https://github.com/otter-sec/anchor/blob/master/CHANGELOG.md)
- [Commits](otter-sec/anchor@v0.30.1...v1.1.2)

Updates `sologger_log_context` from 0.1.2 to 0.2.4
- [Commits](https://github.com/brytelands/sologger/commits)

Updates `getrandom` from 0.2.15 to 0.2.17
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.2.15...v0.2.17)

Updates `anyhow` from 1.0.89 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.89...1.0.104)

Updates `regex` from 1.11.0 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.0...1.13.1)

---
updated-dependencies:
- dependency-name: anchor-lang
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: anyhow
  dependency-version: 1.0.103
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: getrandom
  dependency-version: 0.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: hex-literal
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: num-bigint
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: prost
  dependency-version: 0.14.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: prost-types
  dependency-version: 0.14.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: regex
  dependency-version: 1.12.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sologger_log_context
  dependency-version: 0.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: substreams-solana
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/all-c5996593ac branch from 016c6f3 to e38cf5f Compare July 23, 2026 10:45
@dependabot @github

dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 30, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/all-c5996593ac branch July 30, 2026 10:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants