chore(deps): Bump the cargo-minor-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #2540 · registrystack/registry-stack

dependabot · 2026-11-01T12:32:39Z

Bumps the cargo-minor-patch group with 5 updates in the / directory:

Package	From	To
aws-lc-rs	`1.18.2`	`1.19.0`
pest	`2.8.5`	`2.9.2`
rmcp	`3.7.0`	`3.8.0`
rustix	`1.1.5`	`1.1.6`
uuid	`1.28.0`	`1.29.0`

Updates aws-lc-rs from 1.18.2 to 1.19.0

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.19.0

What's Changed

Add AES OFB, CFB8, and CFB1 modes by @lokeswarivejju in aws/aws-lc-rs#1259

Adds OperatingMode::OFB, OperatingMode::CFB8, and OperatingMode::CFB1 for AES-128, AES-192, and AES-256 through both the one-shot and streaming cipher APIs.

Add an on-demand AWS-LC self-test API by @Elvrarin in aws/aws-lc-rs#1262

Adds aws_lc_rs::try_fips_self_test(), allowing applications to re-run all AWS-LC cryptographic algorithm self-tests without calling the sys crate through unsafe FFI. This does not re-run the module integrity test.

Add Keccak-256 digest support behind "unstable" feature flag by @fabrice102 in aws/aws-lc-rs#1266

Adds aws_lc_rs::unstable::digest::KECCAK256 and KECCAK256_OUTPUT_LEN behind the unstable feature for use with the existing digest::digest and digest::Context APIs.

Add configurable RSA-PSS salt lengths by @PaulDance in aws/aws-lc-rs#1267

Adds RsaPssSaltLength::{Digest, Max, Custom} and with_pss_salt_length builders on RsaSignatureEncoding and RsaParameters, covering signing and verification for both message and precomputed-digest APIs.

Implement Clone for signing key pairs by @JakeHuneau in aws/aws-lc-rs#1277

rsa::KeyPair, EcdsaKeyPair, Ed25519KeyPair, and PqdsaKeyPair can now be cloned directly rather than wrapped in an Arc.

Clones share the immutable, reference-counted EVP_PKEY; key material is not duplicated, and a clone remains usable after the original is dropped.

Upstream AWS-LC

aws-lc-sys v0.47.0 aligns with AWS-LC v5.12.0 (previously v5.11.0).

aws-lc-fips-sys v0.14.4 updates its bundled AWS-LC FIPS 4.2.0 snapshot with recent FIPS 4.x backports.

Build Improvements

Lower the minimum system-installed AWS-LC version to 4.2.0 by @justsmth in aws/aws-lc-rs#1268

The default aws-lc-sys system-library path now accepts AWS-LC 4.2.0 or newer, previously 5.7.0, allowing use of a FIPS 4.x system library.

Enabling the unstable feature requires AWS-LC 5.7.0 or newer because unstable APIs currently include Keccak-256. Bundled-source builds are unaffected.

Share cc compiler detection across builds by @johncarmack1984 in aws/aws-lc-rs#1273

Reuses compiler detection results across the main library build and compiler feature probes, reducing repeated compiler invocations during cold builds.

Issues Being Closed

Implement Clone for rsa::KeyPair -- aws/aws-lc-rs#1260

Expose AWS-LC FIPS on-demand self-test -- aws/aws-lc-rs#1261

Add a way to specify the RSA-PSS salt length -- aws/aws-lc-rs#1263

Other Merged PRs

build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in aws/aws-lc-rs#1264

build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in aws/aws-lc-rs#1265

fix: satisfy Clippy deprecated-since lint and lint legacy-des in CI by @justsmth in aws/aws-lc-rs#1269

ci: keep upstream Cargo.lock in rustls integration by @justsmth in aws/aws-lc-rs#1270

ci: use dynamic musl CRT for ARM FIPS tests by @justsmth in aws/aws-lc-rs#1271

Prepare aws-lc-fips-sys v0.14.4 by @justsmth in aws/aws-lc-rs#1275

Prepare aws-lc-sys v0.47.0 by @justsmth in aws/aws-lc-rs#1274

Prepare aws-lc-rs v1.19.0 by @justsmth in aws/aws-lc-rs#1278

New Contributors

@lokeswarivejju made their first contribution in aws/aws-lc-rs#1259

@johncarmack1984 made their first contribution in aws/aws-lc-rs#1273

@JakeHuneau made their first contribution in aws/aws-lc-rs#1277

... (truncated)

Commits

5d496f8 Prepare aws-lc-rs v1.19.0 (#1278)
d099134 Feat: Add the ability to specify an RSA-PSS salt length (#1267)
b639322 feat(signature): implement Clone for signing key pairs (#1277)
7548d5c Prepare aws-lc-sys v0.47.0 (#1274)
a5862bd Prepare aws-lc-fips-sys v0.14.4 (#1275)
9bba3fb perf(builder): share cc's compiler detection across builds (#1273)
6a66144 Add Keccak-256 digest algorithm (unstable) (#1266)
cf4f62b feat(fips): add on-demand AWS-LC self-test API (#1262)
825d0e3 feat: support AES OFB, CFB8 and CFB1 modes (#1259)
c225ce4 Lower minimum system AWS-LC to 4.2.0 and add an unstable floor (#1268)
Additional commits viewable in compare view

Updates pest from 2.8.5 to 2.9.2

Release notes

Sourced from pest's releases.

v2.9.2

What's Changed

update to unicode 18 by @tomtau in pest-parser/pest#1202

Stop Span::lines from yielding a line past the span by @MaxFreedomPollard in pest-parser/pest#1201

New Contributors

@MaxFreedomPollard made their first contribution in pest-parser/pest#1201

Full Changelog: pest-parser/pest@v2.9.1...v2.9.2

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.9", features = ["grammar-extras"] }
v2.9.1

What's Changed

Add PairsBuilder to construct Pairs without a parser by @ChrisJr404 in pest-parser/pest#1194

Make Display for Expr and OptimizedExpr re-parse to the same AST by @dylanpulver in pest-parser/pest#1197

New Contributors

@ChrisJr404 made their first contribution in pest-parser/pest#1194

@dylanpulver made their first contribution in pest-parser/pest#1197

Full Changelog: pest-parser/pest@v2.9.0...v2.9.1

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.9", features = ["grammar-extras"] }
v2.9.0

What's Changed

fix: restore stack state after a failed sequence by @Baltsat in pest-parser/pest#1184

fix: silence compiler and clippy warnings in tests and generator by @NiltonVolpato in pest-parser/pest#1186

fix(debugger): upgrade rustyline to 13 for loongarch64 support by @tangaac in pest-parser/pest#1187

fix(fuzz): set edition 2021 and add sql fuzz target by @estr3llas in pest-parser/pest#1189

Add support for a fully-functional const PrattParser with optional macro for increased ergonomics by @NiltonVolpato in pest-parser/pest#1185

Add fuzzing dictionaries and document them in FUZZING.md by @estr3llas in pest-parser/pest#1191

Reject unescaped control characters in the JSON grammar by @hdimer in pest-parser/pest#1190

New Contributors

... (truncated)

Commits

67e5acb bump version to 2.9.2 (#1206)
aa27c99 Stop Span::lines from yielding a line past the span (#1201)
8f5bc84 ci: add permissions to fuzzing workflow (#1204)
7926ec6 ci: add workflow permissions (#1203)
a055d81 update to unicode 18 (#1202)
66513d2 bump version to 2.9.1 (#1199)
5ea4e44 Make Display for Expr and OptimizedExpr re-parse to the same AST (#1197)
f28de05 Add PairsBuilder to construct Pairs without a parser (#1194)
7828af2 bump CI toolchain to 1.88 + clippy fixes (#1195)
d9b29b6 bump version to 2.9.0 (#1192)
Additional commits viewable in compare view

Updates rmcp from 3.7.0 to 3.8.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.8.0

Fixed

(transport) accept nested x-mcp-header annotations (#1359)

ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

rmcp-v3.8.0

Added

(transport) expose body-free HTTP status errors (#1386)

Fixed

(client) stop SSE reconnects on permanent GET errors (#1363)

Commits

cd88056 chore: release v3.8.0 (#1388)
8aec389 fix(client): stop SSE reconnects on permanent GET errors (#1363)
2a401c4 feat(transport): expose body-free HTTP status errors (#1386)
See full diff in compare view

Updates rustix from 1.1.5 to 1.1.6

Commits

4a563ad chore: Release rustix version 1.1.6
8e6aaa6 Merge commit from fork
4686873 fix: expose additional termios output mode flags (#1709)
c9ad9d3 fix(net): don't trust cmsg_len past the end of a truncated control buffer (...
98358af Avoid constructing a zero Pid in tcgetpgrp on non-Linux targets (#1710)
664aeae fix(net): use IPPROTO_IPV6 for IPV6_MULTICAST_HOPS (#1692)
bf78ee6 freebsd: Fix cfg gates for FreeBSD 12 (#1707)
b3d81bd Fix fallocate on Apple platforms. (#1708)
915ab6f fix(fs): Set proper inotify WatchFlags values on libc backend (#1714)
52d5db7 Use 32-bit UID/GID syscalls on arm, sparc, and x86 (#1716)
Additional commits viewable in compare view

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Add versioned constructors to NonNilUuid by @RanaPriyansh in uuid-rs/uuid#919

Prepare for 1.29.0 release by @KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits

4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
a3631fd prepare for 1.29.0 release
304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
d49f963 Reuse existing version tests for NonNilUuid constructors
2f02404 Add versioned constructors to NonNilUuid
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 5 updates Bumps the cargo-minor-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.2` | `1.19.0` | | [pest](https://github.com/pest-parser/pest) | `2.8.5` | `2.9.2` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.7.0` | `3.8.0` | | [rustix](https://github.com/bytecodealliance/rustix) | `1.1.5` | `1.1.6` | | [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.0` | Updates `aws-lc-rs` from 1.18.2 to 1.19.0 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.18.2...v1.19.0) Updates `pest` from 2.8.5 to 2.9.2 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.8.5...v2.9.2) Updates `rmcp` from 3.7.0 to 3.8.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.7.0...rmcp-v3.8.0) Updates `rustix` from 1.1.5 to 1.1.6 - [Release notes](https://github.com/bytecodealliance/rustix/releases) - [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md) - [Commits](bytecodealliance/rustix@v1.1.5...v1.1.6) Updates `uuid` from 1.28.0 to 1.29.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.28.0...v1.29.0) --- updated-dependencies: - dependency-name: aws-lc-rs dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: pest dependency-version: 2.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rmcp dependency-version: 3.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rustix dependency-version: 1.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

chatgpt-codex-connector · 2026-11-01T12:32:57Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-01T12:35:07.079277Z	`6a5a9b9`	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

dependabot Bot added dependencies Pull requests that update a dependency file rust Rust implementation work. labels Nov 1, 2026

dependabot Bot requested a review from jeremi as a code owner November 1, 2026 12:32

Navigation Menu

Repository navigation

chore(deps): Bump the cargo-minor-patch group across 1 directory with 5 updates - #2540

chore(deps): Bump the cargo-minor-patch group across 1 directory with 5 updates#2540
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-b650b53bea

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

chatgpt-codex-connector Bot commented Nov 1, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

aws-lc-rs v1.19.0

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v2.9.2

What's Changed

New Contributors

Warning: Semantic Versioning

v2.9.1

What's Changed

New Contributors

Warning: Semantic Versioning

v2.9.0

What's Changed

New Contributors

rmcp-macros-v3.8.0

Fixed

Other

rmcp-v3.8.0

Added

Fixed

v1.29.0

What's Changed

Uh oh!

chatgpt-codex-connector Bot commented Nov 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codex Review Summary

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chatgpt-codex-connector Bot commented Nov 1, 2026 •

edited

Loading