Skip to content

chore(deps): bump the all-deps group across 1 directory with 13 updates - #2140

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/all-deps-28a7595f49
Closed

chore(deps): bump the all-deps group across 1 directory with 13 updates#2140
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/all-deps-28a7595f49

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubDec 28, 2025•
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-deps group with 12 updates in the / directory:

PackageFromTo
digest0.11.0-rc.40.11.0-rc.5
cipher0.5.0-rc.20.5.0-rc.3
signature3.0.0-rc.53.0.0-rc.6
scrypt0.12.0-rc.60.12.0-rc.7
aead0.6.0-rc.30.6.0-rc.5
inout0.2.10.2.2
itoa1.0.151.0.17
rmp0.8.140.8.15
rustix1.1.21.1.3
ryu1.0.201.0.22
toml_parser1.0.41.0.6+spec-1.1.0
universal-hash0.6.0-rc.30.6.0-rc.4

Updates digest from 0.11.0-rc.4 to 0.11.0-rc.5

Commits

Updates cipher from 0.5.0-rc.2 to 0.5.0-rc.3

Commits

Updates signature from 3.0.0-rc.5 to 3.0.0-rc.6

Commits

Updates scrypt from 0.12.0-rc.6 to 0.12.0-rc.7

Commits

Updates aead from 0.6.0-rc.3 to 0.6.0-rc.5

Commits

Updates crypto-common from 0.2.0-rc.5 to 0.2.0-rc.8

Commits

Updates inout from 0.2.1 to 0.2.2

Commits

Updates itoa from 1.0.15 to 1.0.17

Release notes

Sourced from itoa's releases.

1.0.16

  • Synchronize algorithm improvements from libcore (#65)
Commits
  • 21d6109 Release 1.0.17
  • 55c15a1 Use performance chart from itoa-benchmark
  • cf33343 Update ryu links to zmij
  • 2dff249 Set repr(C) on DECIMAL_PAIRS
  • 4c18677 Release 1.0.16
  • 2e6134d Exclude benchmark dependencies from being compiled by miri
  • 2c7311b Merge pull request #65 from dtolnay/up
  • bb76a9c Update libcore implementation links
  • 83539d1 Ignore cast_lossless pedantic clippy lint
  • 4394758 Update benchmark chart
  • Additional commits viewable in compare view

Updates rmp from 0.8.14 to 0.8.15

Commits

Updates rustix from 1.1.2 to 1.1.3

Commits

Updates ryu from 1.0.20 to 1.0.22

Release notes

Sourced from ryu's releases.

1.0.22

  • Documentation improvements

1.0.21

  • Documentation improvements
Commits
  • 234334c Release 1.0.22
  • 51b8e83 Exclude dtoa-benchmark.png from published crate
  • df6352e Use performance chart from dtoa-benchmark
  • b3037a6 Add static assertion on static table size
  • 0ab19d1 Delete f32 from fuzz target
  • dbc9322 Remove clippy suppression that is no longer triggered
  • afdaf39 Add miri architecture matrix
  • 6461eaa Support platform without 64-bit atomic
  • 9b909ce Resolve cast_lossless pedantic clippy lint in test
  • 9b09b79 Switch to fixed size counters
  • Additional commits viewable in compare view

Updates toml_parser from 1.0.4 to 1.0.6+spec-1.1.0

Commits
  • e32c7a2 chore: Release
  • df1c328 docs: Update changelog
  • b826cf4 feat(edit)!: Allow set_position(None) (#1080)
  • 8043f20 feat(edit)!: Allow set_position(None)
  • a02c0db feat: Support TOML 1.1 (#1079)
  • 5cfb838 feat(edit): Support TOML 1.1
  • 1eb4d60 feat(toml): Support TOML 1.1
  • 695d788 feat(edit)!: Multi-line inline tables with trailing commas
  • cc4f7ac feat(toml): Multi-line inline tables with trailing commas
  • 539f8c1 feat(datetime): Make seconds optional
  • Additional commits viewable in compare view

Updates universal-hash from 0.6.0-rc.3 to 0.6.0-rc.4

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabotdependabotBot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Dec 28, 2025
@dependabot
dependabotBotforce-pushed the dependabot/cargo/all-deps-28a7595f49 branch from c98eb5a to 2ed14e2CompareDecember 28, 2025 01:28
@tarcieri

tarcieri commented Dec 28, 2025

Copy link
Copy Markdown
Member

Hmm weird, what's going on with that cms build failure?

https://github.com/RustCrypto/formats/actions/runs/20546979677/job/59018836020?pr=2140

 Compiling cms v0.3.0-pre.0 (/home/runner/work/formats/formats/cms) error[E0599]: no function or associated item named `generate_key_iv_with_rng` found for struct `Encryptor<C>` in the current scope --> cms/src/builder.rs:1175:48 | 1175 | None => $block_mode::$typ::<$alg>::generate_key_iv_with_rng($rng), | ^^^^^^^^^^^^^^^^^^^^^^^^ function or associated item not found in `Encryptor<Aes128>` ... 1216 | ContentEncryptionAlgorithm::Aes128Cbc => encrypt_block_mode!( | __________________________________________________- 1217 | | data, 1218 | | cbc::Encryptor<Aes128>, 1219 | | key, 1220 | | rng, 1221 | | encryption_algorithm_identifier.oid() 1222 | | ), | |_________- in this macro invocation | = note: this error originates in the macro `encrypt_block_mode` (in Nightly builds, run with -Z macro-backtrace for more info)

cc @baloo@carl-wallace

@tarcieri

tarcieri commented Dec 28, 2025

Copy link
Copy Markdown
Member

Aah wait, that's probably the Generate trait changes I made 😅

We removed all of the old random generation APIs (though perhaps we should retain and deprecate them?)

Here's the new API: https://docs.rs/crypto-common/0.2.0-rc.8/crypto_common/trait.Generate.html

@dependabot
chore(deps): bump the all-deps group across 1 directory with 13 updates
3c82805
Bumps the all-deps group with 12 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [digest](https://github.com/RustCrypto/traits) | `0.11.0-rc.4` | `0.11.0-rc.5` |
| [cipher](https://github.com/RustCrypto/traits) | `0.5.0-rc.2` | `0.5.0-rc.3` |
| [signature](https://github.com/RustCrypto/traits) | `3.0.0-rc.5` | `3.0.0-rc.6` |
| [scrypt](https://github.com/RustCrypto/password-hashes) | `0.12.0-rc.6` | `0.12.0-rc.7` |
| [aead](https://github.com/RustCrypto/traits) | `0.6.0-rc.3` | `0.6.0-rc.5` |
| [inout](https://github.com/RustCrypto/utils) | `0.2.1` | `0.2.2` |
| [itoa](https://github.com/dtolnay/itoa) | `1.0.15` | `1.0.17` |
| [rmp](https://github.com/3Hren/msgpack-rust) | `0.8.14` | `0.8.15` |
| [rustix](https://github.com/bytecodealliance/rustix) | `1.1.2` | `1.1.3` |
| [ryu](https://github.com/dtolnay/ryu) | `1.0.20` | `1.0.22` |
| [toml_parser](https://github.com/toml-rs/toml) | `1.0.4` | `1.0.6+spec-1.1.0` |
| [universal-hash](https://github.com/RustCrypto/traits) | `0.6.0-rc.3` | `0.6.0-rc.4` |
Updates `digest` from 0.11.0-rc.4 to 0.11.0-rc.5
- [Commits](RustCrypto/traits@digest-v0.11.0-rc.4...digest-v0.11.0-rc.5)
Updates `cipher` from 0.5.0-rc.2 to 0.5.0-rc.3
- [Commits](RustCrypto/traits@cipher-v0.5.0-rc.2...cipher-v0.5.0-rc.3)
Updates `signature` from 3.0.0-rc.5 to 3.0.0-rc.6
- [Commits](RustCrypto/traits@signature-v3.0.0-rc.5...signature-v3.0.0-rc.6)
Updates `scrypt` from 0.12.0-rc.6 to 0.12.0-rc.7
- [Commits](RustCrypto/password-hashes@scrypt-v0.12.0-rc.6...scrypt/v0.12.0-rc.7)
Updates `aead` from 0.6.0-rc.3 to 0.6.0-rc.5
- [Commits](RustCrypto/traits@aead-v0.6.0-rc.3...aead-v0.6.0-rc.5)
Updates `crypto-common` from 0.2.0-rc.5 to 0.2.0-rc.8
- [Commits](RustCrypto/traits@crypto-common-v0.2.0-rc.5...crypto-common-v0.2.0-rc.8)
Updates `inout` from 0.2.1 to 0.2.2
- [Commits](RustCrypto/utils@inout-v0.2.1...inout-v0.2.2)
Updates `itoa` from 1.0.15 to 1.0.17
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](dtolnay/itoa@1.0.15...1.0.17)
Updates `rmp` from 0.8.14 to 0.8.15
- [Release notes](https://github.com/3Hren/msgpack-rust/releases)
- [Commits](https://github.com/3Hren/msgpack-rust/commits)
Updates `rustix` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.1.2...v1.1.3)
Updates `ryu` from 1.0.20 to 1.0.22
- [Release notes](https://github.com/dtolnay/ryu/releases)
- [Commits](dtolnay/ryu@1.0.20...1.0.22)
Updates `toml_parser` from 1.0.4 to 1.0.6+spec-1.1.0
- [Commits](toml-rs/toml@toml_parser-v1.0.4...toml_parser-v1.0.6)
Updates `universal-hash` from 0.6.0-rc.3 to 0.6.0-rc.4
- [Commits](RustCrypto/traits@universal-hash-v0.6.0-rc.3...universal-hash-v0.6.0-rc.4)
---
updated-dependencies:
- dependency-name: digest
dependency-version: 0.11.0-rc.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: cipher
dependency-version: 0.5.0-rc.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: signature
dependency-version: 3.0.0-rc.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: scrypt
dependency-version: 0.12.0-rc.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: aead
dependency-version: 0.6.0-rc.5
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: crypto-common
dependency-version: 0.2.0-rc.8
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: inout
dependency-version: 0.2.2
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: itoa
dependency-version: 1.0.17
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: rmp
dependency-version: 0.8.15
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: rustix
dependency-version: 1.1.3
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: ryu
dependency-version: 1.0.22
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: toml_parser
dependency-version: 1.0.6+spec-1.1.0
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
- dependency-name: universal-hash
dependency-version: 0.6.0-rc.4
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/cargo/all-deps-28a7595f49 branch from 2ed14e2 to 3c82805CompareDecember 28, 2025 01:48
@dependabot@github

dependabotBot commented on behalf of githubDec 29, 2025

Copy link
Copy Markdown
ContributorAuthor

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabotdependabotBot closed this Dec 29, 2025
@dependabot
dependabotBot deleted the dependabot/cargo/all-deps-28a7595f49 branch December 29, 2025 18:07
tarcieri added a commit to RustCrypto/traits that referenced this pull request Jan 3, 2026
@tarcieri
crypto-common: add deprecated generate* to KeyIvInit
e168294
I was myself confused by the breakages removing these methods caused the
other week:
RustCrypto/formats#2140 (comment)
If it's confusing me as the person who made the changes, no doubt it
will confuse others, as it's something of a counterintuitive migration
(though ultimately for the best).
This adds back the methods trying to mostly preserve the type signatures
from `crypto-common` v0.1, and deprecates them, along with providing
documentation for what to do instead.
@tarcieritarcieri mentioned this pull request Jan 3, 2026
Merged
tarcieri added a commit to RustCrypto/traits that referenced this pull request Jan 3, 2026
@tarcieri
crypto-common: add deprecated generate* to KeyIvInit
55e59ce
I was myself confused by the breakages removing these methods caused the
other week:
RustCrypto/formats#2140 (comment)
If it's confusing me as the person who made the changes, no doubt it
will confuse others, as it's something of a counterintuitive migration
(though ultimately for the best).
This adds back the methods trying to mostly preserve the type signatures
from `crypto-common` v0.1, and deprecates them, along with providing
documentation for what to do instead.
tarcieri added a commit to RustCrypto/traits that referenced this pull request Jan 4, 2026
@tarcieri
crypto-common: add deprecatedgenerate*toKey(Iv)Init(#2162)
4303b14
I was myself confused by the breakages removing these methods caused the
other week:
RustCrypto/formats#2140 (comment)
If it's confusing me as the person who made the changes, no doubt it
will confuse others, as it's something of a counterintuitive migration
(though ultimately for the best).
This adds back the methods trying to mostly preserve the type signatures
from `crypto-common` v0.1, and deprecates them, along with providing
documentation for what to do instead.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filerustPull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tarcieri