Skip to content

build(deps): bump the cargo-minor-and-patch group with 4 updates - #60

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-045cc68d3b
Open

build(deps): bump the cargo-minor-and-patch group with 4 updates#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-045cc68d3b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown

Bumps the cargo-minor-and-patch group with 4 updates: blake3, serde_json, dioxus and futures.

Updates blake3 from 1.8.5 to 1.8.7

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

  • Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

1.8.6

version 1.8.6

Changes since 1.8.5:

  • update_mmap and update_mmap_rayon (and by extension b3sum) now use seek rather than metadata to get the length of a file/mapping, and they tolerate mmap failures. That means b3sum will now memory map e.g. Linux block devices, which support mapping despite reporting length 0 in metadata. Hashing NUL files on Windows also works now, where previously it was an error unless you used --no-mmap or <. This change was originally proposed by @​nabijaczleweli.
Commits
  • f3149ec version 1.8.7
  • b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
  • 483a220 fix warnings related to not using MAX constants
  • ba02549 Codex: remove arrayref
  • 77b257e version 1.8.6
  • 83b1746 use seek instead of metadata to establish mmap length (#570)
  • 9eac279 use vswhere to find Visual Studio in CI
  • fc3d0e9 Fix path to Visual Studio toolchain in CI
  • 8aa5145 a few more colons
  • 6bb9773 use cargo:: build script syntax
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates dioxus from 0.7.3 to 0.7.10

Release notes

Sourced from dioxus's releases.

v0.7.10

What's Changed

Full Changelog: DioxusLabs/dioxus@v0.7.9...v0.7.10

v0.7.9

This release fixes an issue where dx --version would use an outdated git SHA, and dioxus-cli installed from cargo install would not have a version at all, preventing self-update from functioning properly.

Full Changelog: DioxusLabs/dioxus@v0.7.8...v0.7.9

v0.7.8

This release fixes a few small bugs discovered while working on v0.8. We decided the backport these to bring out fixes faster.

What's Changed

Full Changelog: DioxusLabs/dioxus@v0.7.7...v0.7.8

v0.7.7

This release fixes a regression with JS bundling where DX would always bundle JS snippets as ESM, even though they might be CJS, UMD, or a generic JS snippet. We now properly detect the js module type and then run esbuild with the appropriate flags.

What's Changed

Full Changelog: DioxusLabs/dioxus@v0.7.6...v0.7.7

v0.7.6

Dioxus v0.7.6

This release solves a large number of bugs and adds a few new features! We intend for it to be the final release of 0.7 - our git repo will now ship breaking changes in prep for 0.8.

  • Shell-completions for dx using dx completions
  • Much faster dev server starts for dx serve --hotpatch
  • Dioxus web apps that panic while handling events will no longer brick the webpage
  • 20+ new code examples
  • cursor editor debug support
  • Windows app icon bundling in dx serve and dx bundle

What's Changed

... (truncated)

Commits

Updates futures from 0.3.33 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo-minor-and-patch group with 4 updates
294238c 
Bumps the cargo-minor-and-patch group with 4 updates: [blake3](https://github.com/BLAKE3-team/BLAKE3), [serde_json](https://github.com/serde-rs/json), [dioxus](https://github.com/DioxusLabs/dioxus) and [futures](https://github.com/rust-lang/futures-rs).


Updates `blake3` from 1.8.5 to 1.8.7
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases)
- [Commits](BLAKE3-team/BLAKE3@1.8.5...1.8.7)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `dioxus` from 0.7.3 to 0.7.10
- [Release notes](https://github.com/DioxusLabs/dioxus/releases)
- [Commits](DioxusLabs/dioxus@v0.7.3...v0.7.10)

Updates `futures` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

---
updated-dependencies:
- dependency-name: blake3
  dependency-version: 1.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: dioxus
  dependency-version: 0.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: futures
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added contract-rekey-risk Bump may change compiled contract/delegate WASM, which moves the contract address dependencies Pull requests that update a dependency file labels Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

contract-rekey-risk Bump may change compiled contract/delegate WASM, which moves the contract address dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants