chore(deps): bump the cargo-minor-and-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #6 · LogicOcean/pgokf

dependabot · 2026-09-11T22:50:34Z

Bumps the cargo-minor-and-patch group with 5 updates in the / directory:

Package	From	To
arrow	`59.2.0`	`59.3.0`
parquet	`59.2.0`	`59.3.0`
reqwest	`0.13.4`	`0.13.5`
rustls	`0.23.43`	`0.23.44`
aws-lc-rs	`1.18.0`	`1.18.1`

Updates arrow from 59.2.0 to 59.3.0

Release notes

Sourced from arrow's releases.

arrow 59.3.0

Changelog

59.3.0 - (2026-08-25)

Full Changelog

Security fixes

[59_maintenance] Backport cargo audit fix by updating h2 dependency by @alamb in #10834

Bug fixes

[59_maintenance] Backport fix for concat_run_arrays with all-empty run arrays by @alamb in #10828

[59_maintenance] Backport fix for DELTA_BYTE_ARRAY dedup with values larger than the page size limit by @alamb in #10826

[59_maintenance] Backport fix for cached Mask reads crossing unloaded sparse pages by @alamb in #10766

Changelog

Sourced from arrow's changelog.

59.3.0 - (2026-08-25)

Full Changelog

Security fixes

[59_maintenance] Backport cargo audit fix by updating h2 dependency by @alamb in #10834

Bug fixes

[59_maintenance] Backport fix for concat_run_arrays with all-empty run arrays by @alamb in #10828

[59_maintenance] Backport fix for DELTA_BYTE_ARRAY dedup with values larger than the page size limit by @alamb in #10826

[59_maintenance] Backport fix for cached Mask reads crossing unloaded sparse pages by @alamb in #10766

Commits

f90e061 [59_maintenance] Backport parquet-testing revision update for ALP tests (#10871)
8061c9c [59_maintenance] chore: Update versions to 59.3.0 and add CHANGELOG (#10827)
23673b8 [59_maintenance] Backport cargo audit fix by updating h2 dependency (#10834)
e4e1237 [59_maintenance] Backport fix for concat_run_arrays with all-empty run arrays...
556186a [59_maintenance] Backport fix for DELTA_BYTE_ARRAY dedup with values larger t...
a878590 [59_maintenance] Backport fix for cached Mask reads crossing unloaded sparse ...
See full diff in compare view

Updates parquet from 59.2.0 to 59.3.0

Release notes

Sourced from parquet's releases.

arrow 59.3.0

Changelog

59.3.0 - (2026-08-25)

Full Changelog

Security fixes

[59_maintenance] Backport cargo audit fix by updating h2 dependency by @alamb in #10834

Bug fixes

[59_maintenance] Backport fix for concat_run_arrays with all-empty run arrays by @alamb in #10828

[59_maintenance] Backport fix for DELTA_BYTE_ARRAY dedup with values larger than the page size limit by @alamb in #10826

[59_maintenance] Backport fix for cached Mask reads crossing unloaded sparse pages by @alamb in #10766

Changelog

Sourced from parquet's changelog.

59.3.0 - (2026-08-25)

Full Changelog

Security fixes

[59_maintenance] Backport cargo audit fix by updating h2 dependency by @alamb in #10834

Bug fixes

[59_maintenance] Backport fix for concat_run_arrays with all-empty run arrays by @alamb in #10828

[59_maintenance] Backport fix for DELTA_BYTE_ARRAY dedup with values larger than the page size limit by @alamb in #10826

[59_maintenance] Backport fix for cached Mask reads crossing unloaded sparse pages by @alamb in #10766

Commits

f90e061 [59_maintenance] Backport parquet-testing revision update for ALP tests (#10871)
8061c9c [59_maintenance] chore: Update versions to 59.3.0 and add CHANGELOG (#10827)
23673b8 [59_maintenance] Backport cargo audit fix by updating h2 dependency (#10834)
e4e1237 [59_maintenance] Backport fix for concat_run_arrays with all-empty run arrays...
556186a [59_maintenance] Backport fix for DELTA_BYTE_ARRAY dedup with values larger t...
a878590 [59_maintenance] Backport fix for cached Mask reads crossing unloaded sparse ...
See full diff in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates rustls from 0.23.43 to 0.23.44

Commits

64ad386 Bump version to 0.23.44
1efbf66 bogo: remove PostQuantum setup
e78162f aws-lc-rs: add support for ML-DSA signatures
d880772 bogo: extract Options::provider() helper
87201d6 bogo: force all callers to get provider from Options
93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
eb57688 tls12: require known signature algorithm
e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
06a546d bogo: take latest
Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.0 to 1.18.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.1

What's Changed

Add ECDSA P-256 SHA-1 ASN.1 signature verification by @assafvayner in aws/aws-lc-rs#1214

Adds ECDSA_P256_SHA1_ASN1 for verifying ASN.1 DER-encoded ECDSA P-256 signatures over SHA-1, so applications can verify legacy signatures such as CloudFront signed URLs using ECDSA P-256 with the default SHA-1 hash.

SHA-1 remains available for legacy verification only. This release does not add a corresponding signing algorithm.

Tighten AEAD, cipher IV, HKDF, ECDH, and RSA API contracts by @justsmth in aws/aws-lc-rs#1215

In-place AEAD sealing now verifies that Extend produced exactly enough space for the plaintext and authentication tag before passing the buffer to AWS-LC. Non-conforming custom buffers now return Err(Unspecified).

Streaming cipher constructors now reject missing or mismatched IV contexts, matching the validation already performed by the one-shot APIs.

Salt::from(Okm) now uses the output algorithm selected by the Okm, rather than the algorithm from the source PRK.

ECDH shared-secret storage is now zeroized on fallible derive paths.

RSA verify_digest_sig now requires the supplied digest to match the digest configured by RsaParameters, for both parsed and unparsed public keys.

Valid inputs are unaffected. Calls using inconsistent algorithms, IV contexts, or custom AEAD buffers now fail closed with Err(Unspecified).

Upstream AWS-LC

aws-lc-sys v0.45.0 aligns with AWS-LC v5.7.0 (previously v5.5.0). See also the release notes for v5.6.0.

v5.7.0 corrects EVP_DecryptUpdate for padded block ciphers so it modifies only the output range reported through out_len. aws-lc-rs now includes canary-based regression coverage around the documented minimum output-buffer sizes.

aws-lc-fips-sys v0.14.2 moves to AWS-LC FIPS v4.2.0.

Includes the equivalent EVP_DecryptUpdate correction for FIPS builds.

Restores FIPS builds with Clang 20 and newer.

Removes the FIPS compiler wrapper's dependency on /usr/bin/env, fixing builds in Nix and similar sandboxed environments.

Build Improvements

Export cargo:root metadata when linking against a system-installed AWS-LC by @weihanglo in aws/aws-lc-rs#1208

The system-library path now exposes the installation prefix through DEP_AWS_LC_*_ROOT, consistently with the CC and CMake builders, so downstream build scripts can rely on the metadata regardless of how AWS-LC was built.

Fix -Wa,--debug-prefix-map handling with Clang and LTO by @justsmth in aws/aws-lc-rs#1212

Fixes Clang builds when CFLAGS contains -flto or -flto=thin. The assembler-specific flag is now used only with GCC; Clang's integrated assembler uses -ffile-prefix-map directly.

Filter raw target-triple CFLAGS spellings when compiling jitterentropy by @justsmth in aws/aws-lc-rs#1207

Prevents inherited optimization flags from overriding jitterentropy's required -O0, including when environment variables are set by a parent process using raw or legacy-normalized target triples.

Issues Being Closed

aws-lc-fips-sys v0.14.0 fails to build with Clang newer than 19 -- aws/aws-lc-rs#1202

FIPS compiler wrapper fails in Nix build environments -- aws/aws-lc-rs#1204

Raw target-triple CFLAGS should be filtered for jitterentropy -- aws/aws-lc-rs#1205

aws-lc-sys fails to build with Clang when CFLAGS includes -flto -- aws/aws-lc-rs#1211

Other Merged PRs

Prepare aws-lc-fips-sys v0.14.1 by @justsmth in aws/aws-lc-rs#1203

fix(publish): verify packaged crate with cargo build instead of cargo test by @justsmth in aws/aws-lc-rs#1201

fix: address clippy::assert_is_empty lints in ECB cipher modes by @justsmth in aws/aws-lc-rs#1210

ci: replace removed llvm-devel-lite package in FreeBSD jobs by @justsmth in aws/aws-lc-rs#1213

Prepare aws-lc-sys v0.45.0 by @justsmth in aws/aws-lc-rs#1220

Prepare aws-lc-fips-sys v0.14.2 by @justsmth in aws/aws-lc-rs#1221

Prepare v1.18.1 by @justsmth in aws/aws-lc-rs#1224

... (truncated)

Commits

22e629d Prepare v1.18.1 (#1224)
c4fde5c Prepare aws-lc-fips-sys v0.14.2 (#1221)
7943223 Prepare aws-lc-sys v0.45.0 (#1220)
8ea2229 fix: tighten AEAD, cipher IV, and digest API contracts (#1215)
bcca4d1 Add ECDSA P-256 SHA-1 ASN.1 verification algorithm (#1214)
32338a5 fix(builder): filter the raw-triple CFLAGS spelling for jitterentropy (#1207)
af422bd Fix -Wa,--debug-prefix-map probe (#1212)
749b26f ci: replace removed llvm-devel-lite package in FreeBSD jobs (#1213)
36c7a68 fix(publish): verify packaged crate with cargo build, not cargo test (#1201)
c71ab00 fix: address clippy::assert_is_empty lints in ECB cipher modes (#1210)
Additional commits viewable in compare view

dependabot · 2026-09-11T22:50:34Z

Labels

The following labels could not be found: dependencies, triage. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…with 5 updates Bumps the cargo-minor-and-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [arrow](https://github.com/apache/arrow-rs) | `59.2.0` | `59.3.0` | | [parquet](https://github.com/apache/arrow-rs) | `59.2.0` | `59.3.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [rustls](https://github.com/rustls/rustls) | `0.23.43` | `0.23.44` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.0` | `1.18.1` | Updates `arrow` from 59.2.0 to 59.3.0 - [Release notes](https://github.com/apache/arrow-rs/releases) - [Changelog](https://github.com/apache/arrow-rs/blob/59.3.0/CHANGELOG.md) - [Commits](apache/arrow-rs@59.2.0...59.3.0) Updates `parquet` from 59.2.0 to 59.3.0 - [Release notes](https://github.com/apache/arrow-rs/releases) - [Changelog](https://github.com/apache/arrow-rs/blob/59.3.0/CHANGELOG.md) - [Commits](apache/arrow-rs@59.2.0...59.3.0) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `rustls` from 0.23.43 to 0.23.44 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.43...v/0.23.44) Updates `aws-lc-rs` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.18.0...v1.18.1) --- updated-dependencies: - dependency-name: arrow dependency-version: 59.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: aws-lc-rs dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: parquet dependency-version: 59.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: rustls dependency-version: 0.23.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot force-pushed the dependabot/cargo/cargo-minor-and-patch-2c8ededf12 branch 2 times, most recently from beae6f2 to c908d1c Compare September 14, 2026 01:36

dependabot Bot force-pushed the dependabot/cargo/cargo-minor-and-patch-2c8ededf12 branch from c908d1c to 668d366 Compare September 15, 2026 19:40

Navigation Menu

chore(deps): bump the cargo-minor-and-patch group across 1 directory with 5 updates - #6

chore(deps): bump the cargo-minor-and-patch group across 1 directory with 5 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-2c8ededf12

dependabot Bot commented on behalf of github Sep 11, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

arrow 59.3.0

Changelog

59.3.0 - (2026-08-25)

Security fixes

Bug fixes

59.3.0 - (2026-08-25)

Security fixes

Bug fixes

arrow 59.3.0

Changelog

59.3.0 - (2026-08-25)

Security fixes

Bug fixes

59.3.0 - (2026-08-25)

Security fixes

Bug fixes

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

aws-lc-rs v1.18.1

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

Uh oh!

dependabot Bot commented on behalf of github Sep 11, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 11, 2026 •

edited

Loading