Skip to content

Update all dependencies (Cargo.lock)#516

Merged
primeos-work merged 1 commit intoscience-computing:masterfrom
primeos-work:cargo-update
Feb 13, 2026
Merged

Update all dependencies (Cargo.lock)#516
primeos-work merged 1 commit intoscience-computing:masterfrom
primeos-work:cargo-update

Conversation

@primeos-work
Copy link
Member

@primeos-work primeos-work commented Feb 13, 2026

This is simply the result of running cargo update without touching Cargo.toml (required since we currently only use dependabot to update direct dependencies and not indirect/transitive dependencies and useful to avoid a lot of dependabot PRs for minor/patch updates that can be bundled, like in this commit).

This is a security update to "fix" GHSA-434x-w66g-qw3r 0.

Details
$ cargo update
    Updating crates.io index
     Locking 46 packages to latest Rust 1.88.0 compatible versions
    Updating anyhow v1.0.100 -> v1.0.101
    Updating bytes v1.11.0 -> v1.11.1
    Updating cc v1.2.55 -> v1.2.56
    Updating clap v4.5.56 -> v4.5.58
    Updating clap_builder v4.5.56 -> v4.5.58
    Updating clap_complete v4.5.65 -> v4.5.66
    Updating clap_lex v0.7.7 -> v1.0.0
    Updating deranged v0.5.5 -> v0.5.6
    Updating flate2 v1.1.8 -> v1.1.9
      Adding getrandom v0.4.1
      Adding id-arena v2.3.0
      Adding leb128fmt v0.1.0
    Updating libc v0.2.180 -> v0.2.182
    Updating memchr v2.7.6 -> v2.8.0
    Updating native-tls v0.2.14 -> v0.2.15
    Updating ntapi v0.4.2 -> v0.4.3
    Updating pest v2.8.5 -> v2.8.6
    Updating pest_derive v2.8.5 -> v2.8.6
    Updating pest_generator v2.8.5 -> v2.8.6
    Updating pest_meta v2.8.5 -> v2.8.6
      Adding prettyplease v0.2.37
    Updating redox_syscall v0.7.0 -> v0.7.1
    Updating regex v1.12.2 -> v1.12.3
    Updating regex-automata v0.4.13 -> v0.4.14
    Updating regex-syntax v0.8.8 -> v0.8.9
    Updating reqwest v0.13.1 -> v0.13.2
    Updating ryu v1.0.22 -> v1.0.23
    Updating syn v2.0.114 -> v2.0.115
    Updating tempfile v3.24.0 -> v3.25.0
    Updating toml v0.9.11+spec-1.1.0 -> v0.9.12+spec-1.1.0 (available: v1.0.1+spec-1.1.0)
    Updating toml_parser v1.0.6+spec-1.1.0 -> v1.0.8+spec-1.1.0
    Updating unicode-ident v1.0.22 -> v1.0.23
      Adding unicode-xid v0.2.6
      Adding wasip3 v0.4.0+wasi-0.3.0-rc-2026-01-06
      Adding wasm-encoder v0.244.0
      Adding wasm-metadata v0.244.0
    Updating wasm-streams v0.4.2 -> v0.5.0
      Adding wasmparser v0.244.0
      Adding wit-bindgen-core v0.51.0
      Adding wit-bindgen-rust v0.51.0
      Adding wit-bindgen-rust-macro v0.51.0
      Adding wit-component v0.244.0
      Adding wit-parser v0.244.0
    Updating zerocopy v0.8.37 -> v0.8.39
    Updating zerocopy-derive v0.8.37 -> v0.8.39
    Updating zmij v1.0.19 -> v1.0.21
note: pass `--verbose` to see 4 unchanged dependencies behind latest

This is simply the result of running `cargo update` without touching
Cargo.toml (required since we currently only use dependabot to update
direct dependencies and not indirect/transitive dependencies and useful
to avoid a lot of dependabot PRs for minor/patch updates that can be
bundled, like in this commit).

This is a security update to "fix" GHSA-434x-w66g-qw3r [0][1].

[0]: https://rustsec.org/advisories/RUSTSEC-2026-0007.html
[1]: https://github.com/science-computing/butido/security/dependabot/24

Signed-off-by: Michael Weiss <michael.weiss@eviden.com>
@primeos-work primeos-work added the security PRs with security fixes (or related issues) label Feb 13, 2026
@primeos-work primeos-work added this pull request to the merge queue Feb 13, 2026
Merged via the queue into science-computing:master with commit c2cf0c4 Feb 13, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security PRs with security fixes (or related issues)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant