Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 28, 2025

Bumps the all-deps group with 12 updates in the / directory:

Package From To
digest 0.11.0-rc.4 0.11.0-rc.5
cipher 0.5.0-rc.2 0.5.0-rc.3
signature 3.0.0-rc.5 3.0.0-rc.6
scrypt 0.12.0-rc.6 0.12.0-rc.7
aead 0.6.0-rc.3 0.6.0-rc.5
inout 0.2.1 0.2.2
itoa 1.0.15 1.0.17
rmp 0.8.14 0.8.15
rustix 1.1.2 1.1.3
ryu 1.0.20 1.0.22
toml_parser 1.0.4 1.0.6+spec-1.1.0
universal-hash 0.6.0-rc.3 0.6.0-rc.4

Updates digest from 0.11.0-rc.4 to 0.11.0-rc.5

Commits

Updates cipher from 0.5.0-rc.2 to 0.5.0-rc.3

Commits

Updates signature from 3.0.0-rc.5 to 3.0.0-rc.6

Commits

Updates scrypt from 0.12.0-rc.6 to 0.12.0-rc.7

Commits

Updates aead from 0.6.0-rc.3 to 0.6.0-rc.5

Commits

Updates crypto-common from 0.2.0-rc.5 to 0.2.0-rc.8

Commits

Updates inout from 0.2.1 to 0.2.2

Commits

Updates itoa from 1.0.15 to 1.0.17

Release notes

Sourced from itoa's releases.

1.0.16

  • Synchronize algorithm improvements from libcore (#65)
Commits
  • 21d6109 Release 1.0.17
  • 55c15a1 Use performance chart from itoa-benchmark
  • cf33343 Update ryu links to zmij
  • 2dff249 Set repr(C) on DECIMAL_PAIRS
  • 4c18677 Release 1.0.16
  • 2e6134d Exclude benchmark dependencies from being compiled by miri
  • 2c7311b Merge pull request #65 from dtolnay/up
  • bb76a9c Update libcore implementation links
  • 83539d1 Ignore cast_lossless pedantic clippy lint
  • 4394758 Update benchmark chart
  • Additional commits viewable in compare view

Updates rmp from 0.8.14 to 0.8.15

Commits

Updates rustix from 1.1.2 to 1.1.3

Commits

Updates ryu from 1.0.20 to 1.0.22

Release notes

Sourced from ryu's releases.

1.0.22

  • Documentation improvements

1.0.21

  • Documentation improvements
Commits
  • 234334c Release 1.0.22
  • 51b8e83 Exclude dtoa-benchmark.png from published crate
  • df6352e Use performance chart from dtoa-benchmark
  • b3037a6 Add static assertion on static table size
  • 0ab19d1 Delete f32 from fuzz target
  • dbc9322 Remove clippy suppression that is no longer triggered
  • afdaf39 Add miri architecture matrix
  • 6461eaa Support platform without 64-bit atomic
  • 9b909ce Resolve cast_lossless pedantic clippy lint in test
  • 9b09b79 Switch to fixed size counters
  • Additional commits viewable in compare view

Updates toml_parser from 1.0.4 to 1.0.6+spec-1.1.0

Commits
  • e32c7a2 chore: Release
  • df1c328 docs: Update changelog
  • b826cf4 feat(edit)!: Allow set_position(None) (#1080)
  • 8043f20 feat(edit)!: Allow set_position(None)
  • a02c0db feat: Support TOML 1.1 (#1079)
  • 5cfb838 feat(edit): Support TOML 1.1
  • 1eb4d60 feat(toml): Support TOML 1.1
  • 695d788 feat(edit)!: Multi-line inline tables with trailing commas
  • cc4f7ac feat(toml): Multi-line inline tables with trailing commas
  • 539f8c1 feat(datetime): Make seconds optional
  • Additional commits viewable in compare view

Updates universal-hash from 0.6.0-rc.3 to 0.6.0-rc.4

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Dec 28, 2025
@dependabot dependabot bot force-pushed the dependabot/cargo/all-deps-28a7595f49 branch from c98eb5a to 2ed14e2 Compare December 28, 2025 01:28
@tarcieri
Copy link
Member

Hmm weird, what's going on with that cms build failure?

https://github.com/RustCrypto/formats/actions/runs/20546979677/job/59018836020?pr=2140

     Compiling cms v0.3.0-pre.0 (/home/runner/work/formats/formats/cms)
  error[E0599]: no function or associated item named `generate_key_iv_with_rng` found for struct `Encryptor<C>` in the current scope
      --> cms/src/builder.rs:1175:48
       |
  1175 |               None => $block_mode::$typ::<$alg>::generate_key_iv_with_rng($rng),
       |                                                  ^^^^^^^^^^^^^^^^^^^^^^^^ function or associated item not found in `Encryptor<Aes128>`
  ...
  1216 |           ContentEncryptionAlgorithm::Aes128Cbc => encrypt_block_mode!(
       |  __________________________________________________-
  1217 | |             data,
  1218 | |             cbc::Encryptor<Aes128>,
  1219 | |             key,
  1220 | |             rng,
  1221 | |             encryption_algorithm_identifier.oid()
  1222 | |         ),
       | |_________- in this macro invocation
       |
       = note: this error originates in the macro `encrypt_block_mode` (in Nightly builds, run with -Z macro-backtrace for more info)
  

cc @baloo @carl-wallace

@tarcieri
Copy link
Member

Aah wait, that's probably the Generate trait changes I made 😅

We removed all of the old random generation APIs (though perhaps we should retain and deprecate them?)

Here's the new API: https://docs.rs/crypto-common/0.2.0-rc.8/crypto_common/trait.Generate.html

Bumps the all-deps group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [digest](https://github.com/RustCrypto/traits) | `0.11.0-rc.4` | `0.11.0-rc.5` |
| [cipher](https://github.com/RustCrypto/traits) | `0.5.0-rc.2` | `0.5.0-rc.3` |
| [signature](https://github.com/RustCrypto/traits) | `3.0.0-rc.5` | `3.0.0-rc.6` |
| [scrypt](https://github.com/RustCrypto/password-hashes) | `0.12.0-rc.6` | `0.12.0-rc.7` |
| [aead](https://github.com/RustCrypto/traits) | `0.6.0-rc.3` | `0.6.0-rc.5` |
| [inout](https://github.com/RustCrypto/utils) | `0.2.1` | `0.2.2` |
| [itoa](https://github.com/dtolnay/itoa) | `1.0.15` | `1.0.17` |
| [rmp](https://github.com/3Hren/msgpack-rust) | `0.8.14` | `0.8.15` |
| [rustix](https://github.com/bytecodealliance/rustix) | `1.1.2` | `1.1.3` |
| [ryu](https://github.com/dtolnay/ryu) | `1.0.20` | `1.0.22` |
| [toml_parser](https://github.com/toml-rs/toml) | `1.0.4` | `1.0.6+spec-1.1.0` |
| [universal-hash](https://github.com/RustCrypto/traits) | `0.6.0-rc.3` | `0.6.0-rc.4` |



Updates `digest` from 0.11.0-rc.4 to 0.11.0-rc.5
- [Commits](RustCrypto/traits@digest-v0.11.0-rc.4...digest-v0.11.0-rc.5)

Updates `cipher` from 0.5.0-rc.2 to 0.5.0-rc.3
- [Commits](RustCrypto/traits@cipher-v0.5.0-rc.2...cipher-v0.5.0-rc.3)

Updates `signature` from 3.0.0-rc.5 to 3.0.0-rc.6
- [Commits](RustCrypto/traits@signature-v3.0.0-rc.5...signature-v3.0.0-rc.6)

Updates `scrypt` from 0.12.0-rc.6 to 0.12.0-rc.7
- [Commits](RustCrypto/password-hashes@scrypt-v0.12.0-rc.6...scrypt/v0.12.0-rc.7)

Updates `aead` from 0.6.0-rc.3 to 0.6.0-rc.5
- [Commits](RustCrypto/traits@aead-v0.6.0-rc.3...aead-v0.6.0-rc.5)

Updates `crypto-common` from 0.2.0-rc.5 to 0.2.0-rc.8
- [Commits](RustCrypto/traits@crypto-common-v0.2.0-rc.5...crypto-common-v0.2.0-rc.8)

Updates `inout` from 0.2.1 to 0.2.2
- [Commits](RustCrypto/utils@inout-v0.2.1...inout-v0.2.2)

Updates `itoa` from 1.0.15 to 1.0.17
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](dtolnay/itoa@1.0.15...1.0.17)

Updates `rmp` from 0.8.14 to 0.8.15
- [Release notes](https://github.com/3Hren/msgpack-rust/releases)
- [Commits](https://github.com/3Hren/msgpack-rust/commits)

Updates `rustix` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.1.2...v1.1.3)

Updates `ryu` from 1.0.20 to 1.0.22
- [Release notes](https://github.com/dtolnay/ryu/releases)
- [Commits](dtolnay/ryu@1.0.20...1.0.22)

Updates `toml_parser` from 1.0.4 to 1.0.6+spec-1.1.0
- [Commits](toml-rs/toml@toml_parser-v1.0.4...toml_parser-v1.0.6)

Updates `universal-hash` from 0.6.0-rc.3 to 0.6.0-rc.4
- [Commits](RustCrypto/traits@universal-hash-v0.6.0-rc.3...universal-hash-v0.6.0-rc.4)

---
updated-dependencies:
- dependency-name: digest
  dependency-version: 0.11.0-rc.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: cipher
  dependency-version: 0.5.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: signature
  dependency-version: 3.0.0-rc.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: scrypt
  dependency-version: 0.12.0-rc.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: aead
  dependency-version: 0.6.0-rc.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: crypto-common
  dependency-version: 0.2.0-rc.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: inout
  dependency-version: 0.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: itoa
  dependency-version: 1.0.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: rmp
  dependency-version: 0.8.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: rustix
  dependency-version: 1.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: ryu
  dependency-version: 1.0.22
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: toml_parser
  dependency-version: 1.0.6+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: universal-hash
  dependency-version: 0.6.0-rc.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/all-deps-28a7595f49 branch from 2ed14e2 to 3c82805 Compare December 28, 2025 01:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants