Skip to content

chore(deps): bump the rust-dependencies group across 1 directory with 7 updates#5368

Merged
nekevss merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-62a4a9eb60
May 16, 2026
Merged

chore(deps): bump the rust-dependencies group across 1 directory with 7 updates#5368
nekevss merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-62a4a9eb60

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 16, 2026

Bumps the rust-dependencies group with 7 updates in the / directory:

Package From To
hashbrown 0.17.0 0.17.1
mimalloc-safe 0.1.58 0.1.61
lz4_flex 0.13.0 0.13.1
intrusive-collections 0.10.0 0.10.1
tokio 1.52.1 1.52.3
husky-rs 0.3.2 0.3.3
zerofrom 0.1.7 0.1.8

Updates hashbrown from 0.17.0 to 0.17.1

Release notes

Sourced from hashbrown's releases.

v0.17.1

Added

  • Added HashMap::rustc_try_insert (#722)
Changelog

Sourced from hashbrown's changelog.

0.17.1 - 2026-04-20

Added

  • Added HashMap::rustc_try_insert (#722)
Commits
  • c62a63a chore: release v0.17.1
  • 420e83b Merge pull request #722 from cuviper/rustc_try_insert
  • 51cecbd Move the RustcOccupiedError note as requested in review
  • 16d0f37 Add HashMap::rustc_try_insert
  • 18a04c5 Merge pull request #721 from clarfonthey/branch-rename
  • ee8a0ee Rename master to main in release-plz workflow
  • 147df65 Merge pull request #720 from xtqqczze/authors
  • 64a0acb Remove package.authors field from Cargo metadata
  • 867db72 Merge pull request #716 from atouchet/rdm
  • 57b760b Update Readme
  • Additional commits viewable in compare view

Updates mimalloc-safe from 0.1.58 to 0.1.61

Release notes

Sourced from mimalloc-safe's releases.

mimalloc-safe-v0.1.61

Chore

  • Updated the following local packages: libmimalloc-sys2

mimalloc-safe-v0.1.60

Chore

  • Updated the following local packages: libmimalloc-sys2

mimalloc-safe-v0.1.59

Chore

  • Updated the following local packages: libmimalloc-sys2
Changelog

Sourced from mimalloc-safe's changelog.

[0.1.61] - 2026-05-16

Chore

  • Updated the following local packages: libmimalloc-sys2

[0.1.60] - 2026-05-14

Chore

  • Updated the following local packages: libmimalloc-sys2

[0.1.59] - 2026-05-09

Chore

  • Updated the following local packages: libmimalloc-sys2
Commits
  • ec2fc80 chore: release (#66)
  • c90825c fix(sys): route Windows MSVC build to v3 source when v3 feature is on (#68)
  • d2d5331 fix(sys): disable mimalloc v3 FIXED_SLOT TLS on Apple targets (#67)
  • 7af31f2 chore: release (#63)
  • 442e465 fix(sys): compile mimalloc as C++ on windows-msvc targets (#65)
  • be77037 chore: release (#61)
  • 4c30665 chore(deps): update mimalloc submodules to latest versions (#62)
  • See full diff in compare view

Updates lz4_flex from 0.13.0 to 0.13.1

Changelog

Sourced from lz4_flex's changelog.

0.13.1 (2026-05-09)

Fixes

  • Fix compression with short dictionaries (less than 4 bytes), avoiding a panic/out-of-bounds read #222
Compression with dictionaries shorter than the minimum match length of 4 now falls
back to compression without a dictionary instead of panicking or reading past
the dictionary. 

This is a security fix for unsafe compression with untrusted dictionaries.
Users on 0.13.0 should upgrade to 0.13.1.

  • Fix panic in From<io::Error> implementation for frame::Error #221 (thanks @​phoerious)
Commits

Updates intrusive-collections from 0.10.0 to 0.10.1

Commits

Updates tokio from 1.52.1 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

  • sync: fix underflow in mpsc channel len() (#8062)
  • sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
  • sync: require that an RwLock has max_readers != 0 (#8076)
  • sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Commits

Updates husky-rs from 0.3.2 to 0.3.3

Release notes

Sourced from husky-rs's releases.

v0.3.3

🐛 Bug Fixes

  • cargo:rerun-if-changed watched wrong directory: The build script monitored husky-rs's own .husky/ instead of the user's project .husky/. If cargo build/cargo test ran before .husky/ existed, subsequent runs were cached and never re-ran — core.hooksPath was never set, hooks never triggered. (#15)
  • Submodule and worktree support: .git files were not correctly parsed (missing gitdir: prefix stripping). Hooks were silently never installed in submodules and git worktrees.
  • GitConfigFailed now tolerated: Build no longer fails if git is unavailable on PATH (e.g. NixOS without nix-shell). Users can fall back to husky init manually.

✨ Improvements

  • Windows compatibility: Hook trigger tests now convert backslashes to forward slashes for Git Bash compatibility.
  • Comprehensive test coverage: Added 17 new tests covering lazy hook creation, idempotent repeated execution, mixed cargo test/cargo build, hook triggering (pre-commit, commit-msg, post-commit, failure abort), CLI full workflow, and git failure graceful degradation.
Changelog

Sourced from husky-rs's changelog.

[0.3.3] - 2026-05-14

🐛 Bug Fixes

  • cargo:rerun-if-changed watched wrong directory: The build script monitored husky-rs's own .husky/ instead of the user's project .husky/. If cargo build/cargo test ran before .husky/ existed, subsequent runs were cached and never re-ran — core.hooksPath was never set, hooks never triggered. (#15)
  • Submodule and worktree support: .git files were not correctly parsed (missing gitdir: prefix stripping). Hooks were silently never installed in submodules and git worktrees.
  • GitConfigFailed now tolerated: Build no longer fails if git is unavailable on PATH (e.g. NixOS without nix-shell). Users can fall back to husky init manually.

✨ Improvements

  • Windows compatibility: Hook trigger tests now convert backslashes to forward slashes for Git Bash compatibility.
  • Comprehensive test coverage: Added 17 new tests covering lazy hook creation, idempotent repeated execution, mixed cargo test/cargo build, hook triggering (pre-commit, commit-msg, post-commit, failure abort), CLI full workflow, and git failure graceful degradation.
Commits
  • 6bd25b0 chore: bump version to 0.3.3
  • 669e680 docs: inline verify.sh into examples.md, remove standalone file
  • dddc0f4 docs: update changelog and fix stale .git/hooks ref
  • 5d1dd9b chore(deps): update softprops/action-gh-release action to v3
  • a195bc8 fix: convert backslashes for hook trigger tests on Windows (#15)
  • 6fb4d5a docs: move verify.sh to docs/ as example, fix broken hook path reference (#15)
  • c3d0c79 chore: add end-to-end hook verification script (#15)
  • 9a5c005 fix: resolve hook installation not triggering after .husky/ creation (#15)
  • 28006d5 chore(deps): update codecov/codecov-action action to v6
  • See full diff in compare view

Updates zerofrom from 0.1.7 to 0.1.8

Changelog

Sourced from zerofrom's changelog.

Changelog

icu 2.2.x

Several crates have had patch releases in the 2.2 stream:

  • Components
    • (2.2.1) icu_calendar
      • Fix extended year calculations in Gregorian-like and Coptic-like calendars (unicode-org#7849)

icu4x 2.2

  • Components
    • General
      • Use HTTPS links in docs (unicode-org#7212)
      • Update MSRV to 1.86 (unicode-org#7576)
      • Updated to CLDR 48.2 (unicode-org#7792)
      • Replace experimental features with unstable features (unicode-org#7566)
      • Add categories and keywords to Cargo.toml for all components (unicode-org#7737)
    • icu_calendar
      • Add Date::try_new, which replaces Date::try_new_from_codes, and takes typed year/month values. (unicode-org#7773, unicode-org#7764)
      • New methods: Date::try_new (and primarily-internal Calendar::new_date)
      • New types: InputYear, DateNewError
      • Handle possible Overflow values on individual calendars (unicode-org#7795)
      • New Date::try_from_fields API for fully general date construction from various choices of year and month values (unicode-org#7798)
      • New methods: Date::try_from_fields()
      • New types: DateFields, DateFromFieldsOptions, Overflow, MissingFieldsStrategy, DateFromFieldsError
      • New associated method: Calendar::from_fields()
      • New Date arithmetic APIs for adding and subtracting dates (unicode-org#7798, unicode-org#7355, unicode-org#7257)
      • New methods: Date::try_add_with_options, Date::try_added_with_options, Date::try_until_with_options
      • New types: DateDuration, DateAddOptions, DateDifferenceOptions, DateDurationUnit, DateDurationParseError, DateAddError, MismatchedCalendarError
      • New associated items: Calendar::add, Calendar::until, Calendar::DateCompatibilityError
      • Introduce a new Month type, preferred over using month codes (unicode-org#7147, unicode-org#7756)
        • New type: Month
        • New method: MonthInfo::to_input()
      • Introduce year/date ranges to all APIs, documented on the APIs themselves. Date now has a fundamental range (ISO years between ±999,999), and most constructors enforce a stricter range of ±9999 years for input years. (unicode-org#7676, unicode-org#7062, unicode-org#7629, unicode-org#7753, unicode-org#7219, unicode-org#7227)
      • Add constructors with Month for lunisolar calendars (unicode-org#7485)
      • New methods: Date::try_new_korean_traditional(), Date::try_new_chinese_traditional(), Date::try_new_hebrew_v2()
      • Expose LeapStatus on MonthInfo (unicode-org#7667)
      • New method: MonthInfo::leap_status()
      • New enum: LeapStatus
      • (Unstable) Integrate with chrono, jiff, and time (unicode-org#7617, unicode-org#7711)
      • New impls: From<chrono::NaiveDate>, From<jiff::civil::Date>, From<time::Date> for Date<Gregorian>
      • Replace Date::day_of_week by Date::weekday (unicode-org#7288)
        • New method: Date::weekday()
      • Deprecate Date::new_from_iso/Date::to_iso (unicode-org#7287)
      • Deprecate Date::extended_year() (use Date::year().extended_year()) (unicode-org#7289)
      • Remove YearInfo: PartialEq bound (unicode-org#7743)
      • Start producing Meiji era only after Meiji 6 (unicode-org#7503)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 7 updates

Bumps the rust-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hashbrown](https://github.com/rust-lang/hashbrown) | `0.17.0` | `0.17.1` |
| [mimalloc-safe](https://github.com/napi-rs/mimalloc-safe) | `0.1.58` | `0.1.61` |
| [lz4_flex](https://github.com/pseitz/lz4_flex) | `0.13.0` | `0.13.1` |
| [intrusive-collections](https://github.com/Amanieu/intrusive-rs) | `0.10.0` | `0.10.1` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.1` | `1.52.3` |
| [husky-rs](https://github.com/pplmx/husky-rs) | `0.3.2` | `0.3.3` |
| [zerofrom](https://github.com/unicode-org/icu4x) | `0.1.7` | `0.1.8` |



Updates `hashbrown` from 0.17.0 to 0.17.1
- [Release notes](https://github.com/rust-lang/hashbrown/releases)
- [Changelog](https://github.com/rust-lang/hashbrown/blob/main/CHANGELOG.md)
- [Commits](rust-lang/hashbrown@v0.17.0...v0.17.1)

Updates `mimalloc-safe` from 0.1.58 to 0.1.61
- [Release notes](https://github.com/napi-rs/mimalloc-safe/releases)
- [Changelog](https://github.com/napi-rs/mimalloc-safe/blob/main/CHANGELOG.md)
- [Commits](napi-rs/mimalloc-safe@mimalloc-safe-v0.1.58...mimalloc-safe-v0.1.61)

Updates `lz4_flex` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/pseitz/lz4_flex/releases)
- [Changelog](https://github.com/PSeitz/lz4_flex/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pseitz/lz4_flex/commits)

Updates `intrusive-collections` from 0.10.0 to 0.10.1
- [Commits](https://github.com/Amanieu/intrusive-rs/commits)

Updates `tokio` from 1.52.1 to 1.52.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.1...tokio-1.52.3)

Updates `husky-rs` from 0.3.2 to 0.3.3
- [Release notes](https://github.com/pplmx/husky-rs/releases)
- [Changelog](https://github.com/pplmx/husky-rs/blob/main/CHANGELOG.md)
- [Commits](pplmx/husky-rs@v0.3.2...v0.3.3)

Updates `zerofrom` from 0.1.7 to 0.1.8
- [Release notes](https://github.com/unicode-org/icu4x/releases)
- [Changelog](https://github.com/unicode-org/icu4x/blob/main/CHANGELOG.md)
- [Commits](https://github.com/unicode-org/icu4x/commits)

---
updated-dependencies:
- dependency-name: hashbrown
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: mimalloc-safe
  dependency-version: 0.1.61
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: lz4_flex
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: intrusive-collections
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tokio
  dependency-version: 1.52.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: husky-rs
  dependency-version: 0.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: zerofrom
  dependency-version: 0.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the C-Dependencies Pull requests that update a dependency file label May 16, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 16, 2026 08:07
@dependabot dependabot Bot added the C-Dependencies Pull requests that update a dependency file label May 16, 2026
@github-actions github-actions Bot added the Waiting On Review Waiting on reviews from the maintainers label May 16, 2026
@github-actions github-actions Bot added this to the v1.0.0 milestone May 16, 2026
@github-actions
Copy link
Copy Markdown

Test262 conformance changes

Test result main count PR count difference
Total 53,125 53,125 0
Passed 51,051 51,051 0
Ignored 1,482 1,482 0
Failed 592 592 0
Panics 0 0 0
Conformance 96.10% 96.10% 0.00%

Tested main commit: 3ce87f0fa03c5c037fb667f7f21a4996abbbc714
Tested PR commit: 0aec3d4398897668420c115939655bb8605d64a7
Compare commits: 3ce87f0...0aec3d4

@nekevss nekevss added this pull request to the merge queue May 16, 2026
Merged via the queue into main with commit d2caa75 May 16, 2026
21 checks passed
@nekevss nekevss deleted the dependabot/cargo/rust-dependencies-62a4a9eb60 branch May 16, 2026 16:34
@github-actions github-actions Bot removed the Waiting On Review Waiting on reviews from the maintainers label May 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

C-Dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant