5180 commits

Author	SHA1	Message	Date
dependabot[bot]	03ab419793	build(deps): bump bytemuck_derive from 1.9.3 to 1.10.0 (#38205) ... Bumps [bytemuck_derive](https://github.com/Lokathor/bytemuck) from 1.9.3 to 1.10.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Lokathor/bytemuck/blob/main/changelog.md">bytemuck_derive's changelog</a>.</em></p> <blockquote> <h1><code>bytemuck</code> changelog</h1> <h2>1.23.1</h2> <ul> <li>Added a windows-only <code>ZeroableInOption</code> impl for &quot;stdcall&quot; functions.</li> </ul> <h2>1.23</h2> <ul> <li><code>impl_core_error</code> crate feature adds <code>core::error::Error</code> impl.</li> <li>More <code>ZeroableInOption</code> impls.</li> </ul> <h2>1.22</h2> <ul> <li>Add the <code>pod_saturating</code> feature, which adds <code>Pod</code> impls for <code>Saturating&lt;T&gt;</code> when <code>T</code> is already <code>Pod</code>.</li> <li>A bump in the minimum <code>bytemuck_derive</code> dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient <code>cargo.lock</code> file sitting around.</li> <li>Adds <code>Send</code> and <code>Sync</code> impls to <code>BoxBytes</code>.</li> </ul> <h2>1.21</h2> <ul> <li>Implement <code>Pod</code> and <code>Zeroable</code> for <code>core::arch::{x86, x86_64}::__m512</code>, <code>__m512d</code> and <code>__m512i</code> without nightly. Requires Rust 1.72, and is gated through the <code>avx512_simd</code> cargo feature.</li> <li>Allow the use of <code>must_cast_mut</code> and <code>must_cast_slice_mut</code> in const contexts. Requires Rust 1.83, and is gated through the <code>must_cast_extra</code> cargo feature.</li> <li>internal: introduced the <code>maybe_const_fn</code> macro that allows defining some function to be const depending upon some <code>cfg</code> predicate.</li> </ul> <h2>1.20</h2> <ul> <li>New functions to allocate zeroed <code>Arc</code> and <code>Rc</code>. Requires Rust 1.82</li> <li><code>TransparentWrapper</code> impls for <code>core::cmp::Reverse</code> and <code>core::num::Saturating</code>.</li> <li>internal: Simplified the library's <code>fill_zeroes</code> calls to <code>write_bytes</code></li> </ul> <h2>1.19</h2> <ul> <li>Adds the <code>#[track_caller]</code> attribute to functions which may panic.</li> </ul> <h2>1.18</h2> <ul> <li>Adds the <code>latest_stable_rust</code> cargo feature, which is a blanket feature that turns all other features on that are both sound and compatible with Stable rust.</li> </ul> <h2>1.17.1</h2> <ul> <li>Adds <code>#[repr(C)]</code> to the <code>union Transmute&lt;A, B&gt;</code> type that's used internally for most of the transmutations.</li> </ul> <h2>1.17.0</h2> <ul> <li>Makes the <code>must_cast</code> versions of the by-value and by-ref casts be <code>const</code>.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/Lokathor/bytemuck/commits/bytemuck_derive-v1.10.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-21 20:31:12 +00:00
dependabot[bot]	0f55aa292e	build(deps): bump serde_json from 1.0.140 to 1.0.141 (#38204) ... Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.140 to 1.0.141. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/serde-rs/json/releases">serde_json's releases</a>.</em></p> <blockquote> <h2>v1.0.141</h2> <ul> <li>Optimize string escaping during serialization (<a href="https://redirect.github.com/serde-rs/json/issues/1273">#1273</a>, thanks <a href="https://github.com/conradludgate"><code>@​conradludgate</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="6843c3660e"><code>6843c36</code></a> Release 1.0.141</li> <li><a href="6e2c21063a"><code>6e2c210</code></a> Touch up PR 1273</li> <li><a href="623d9b47cf"><code>623d9b4</code></a> Merge pull request <a href="https://redirect.github.com/serde-rs/json/issues/1273">#1273</a> from conradludgate/optimise-string-escaping</li> <li><a href="de70b7db1f"><code>de70b7d</code></a> use unreachable_unchecked for escape table. use a second match to roundtrip E...</li> <li><a href="f2d940dd54"><code>f2d940d</code></a> replace start index with bytes slice reference</li> <li><a href="cd55b5a0ff"><code>cd55b5a</code></a> Ignore mismatched_lifetime_syntaxes lint</li> <li><a href="c1826ebccc"><code>c1826eb</code></a> Pin nightly toolchain used for miri job</li> <li><a href="8a56cfa6d0"><code>8a56cfa</code></a> Merge pull request <a href="https://redirect.github.com/serde-rs/json/issues/1248">#1248</a> from jimmycathy/master</li> <li><a href="af3d80de56"><code>af3d80d</code></a> chore: fix typo</li> <li>See full diff in <a href="https://github.com/serde-rs/json/compare/v1.0.140...v1.0.141">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-21 20:25:16 +00:00
dependabot[bot]	2d34a2b13c	build(deps): bump async-process from 2.3.1 to 2.4.0 (#38203) ... [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-21 20:24:19 +00:00
dependabot[bot]	50603e5074	build(deps): bump libredox from 0.1.4 to 0.1.6 (#38201) ... Bumps libredox from 0.1.4 to 0.1.6. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-21 20:06:42 +00:00
Josh Matthews	b8a6600e9a	compositing: Remove unused dependency. (#38179) ... There are no uses of `net` within the `compositing` crate. Signed-off-by: Josh Matthews <josh@joshmatthews.net>	2025-07-20 16:05:31 +00:00
Alex Touchet	7ab0d91109	Update rustc-hash and rustix (#38173) ... Update rustc-hash and rustix. Testing: No tests for dependency updates. Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>	2025-07-18 22:43:20 +00:00
dependabot[bot]	a52f9fd9a9	build(deps): bump webpki-roots from 1.0.1 to 1.0.2 (#38172) ... Bumps [webpki-roots](https://github.com/rustls/webpki-roots) from 1.0.1 to 1.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rustls/webpki-roots/releases">webpki-roots's releases</a>.</em></p> <blockquote> <h2>1.0.2</h2> <ul> <li>Add &quot;TrustAsia TLS ECC Root CA&quot; and &quot;TrustAsia TLS RSA Root CA&quot; <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1972384">https://bugzilla.mozilla.org/show_bug.cgi?id=1972384</a></li> <li>Add &quot;SwissSign RSA TLS Root CA 2022 - 1&quot; <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1845047">https://bugzilla.mozilla.org/show_bug.cgi?id=1845047</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Update dependencies by <a href="https://github.com/djc"><code>@​djc</code></a> in <a href="https://redirect.github.com/rustls/webpki-roots/pull/102">rustls/webpki-roots#102</a></li> <li>1.0.2: track July 2025 CCADB changes by <a href="https://github.com/ctz"><code>@​ctz</code></a> in <a href="https://redirect.github.com/rustls/webpki-roots/pull/103">rustls/webpki-roots#103</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/rustls/webpki-roots/compare/v/1.0.1...v/1.0.2">https://github.com/rustls/webpki-roots/compare/v/1.0.1...v/1.0.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="87222f0639"><code>87222f0</code></a> 1.0.2: track July 2025 CCADB changes</li> <li><a href="974587e439"><code>974587e</code></a> Check MSRV in CI</li> <li><a href="3bd9fa51c5"><code>3bd9fa5</code></a> Version Cargo.lock</li> <li><a href="769e56b014"><code>769e56b</code></a> Replace rustls-pemfile with PemObject API</li> <li><a href="a6398002a2"><code>a639800</code></a> Scope certificate generation input</li> <li><a href="3e19303eb0"><code>3e19303</code></a> Upgrade to rcgen 0.14</li> <li><a href="f3ea6fec79"><code>f3ea6fe</code></a> Move all dependencies into workspace</li> <li><a href="944d375fb3"><code>944d375</code></a> Upgrade to webpki 0.103</li> <li>See full diff in <a href="https://github.com/rustls/webpki-roots/compare/v/1.0.1...v/1.0.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-18 18:21:56 +00:00
dependabot[bot]	501bd98121	build(deps): bump clipboard-win from 5.4.0 to 5.4.1 (#38171) ... Bumps [clipboard-win](https://github.com/DoumanAsh/clipboard-win) from 5.4.0 to 5.4.1. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DoumanAsh/clipboard-win/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-18 18:01:55 +00:00
dependabot[bot]	8d9d2ee2c2	build(deps): bump sysinfo from 0.36.0 to 0.36.1 (#38170) ... Bumps [sysinfo](https://github.com/GuillaumeGomez/sysinfo) from 0.36.0 to 0.36.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/GuillaumeGomez/sysinfo/blob/master/CHANGELOG.md">sysinfo's changelog</a>.</em></p> <blockquote> <h1>0.36.1</h1> <ul> <li>Linux: Improve processor CPU usage computation.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="fc31b411ee"><code>fc31b41</code></a> Merge pull request <a href="https://redirect.github.com/GuillaumeGomez/sysinfo/issues/1559">#1559</a> from GuillaumeGomez/update</li> <li><a href="20d3d295f9"><code>20d3d29</code></a> Update crate version to <code>0.36.1</code></li> <li><a href="400387ee1c"><code>400387e</code></a> Update CHANGELOG for <code>0.36.1</code> version</li> <li><a href="d46ed5d18c"><code>d46ed5d</code></a> Merge pull request <a href="https://redirect.github.com/GuillaumeGomez/sysinfo/issues/1558">#1558</a> from GuillaumeGomez/improve-processor-cpu-usage-comp...</li> <li><a href="44e64c54fb"><code>44e64c5</code></a> Improve processors CPU usage computation on linux</li> <li>See full diff in <a href="https://github.com/GuillaumeGomez/sysinfo/compare/v0.36.0...v0.36.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-18 17:57:06 +00:00
dependabot[bot]	58fee976d9	build(deps): bump cc from 1.2.29 to 1.2.30 (#38169) ... Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.29 to 1.2.30. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/releases">cc's releases</a>.</em></p> <blockquote> <h2>cc-v1.2.30</h2> <h3>Other</h3> <ul> <li>define _REENTRANT by default (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1496">#1496</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md">cc's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.2.29...cc-v1.2.30">1.2.30</a> - 2025-07-18</h2> <h3>Other</h3> <ul> <li>define _REENTRANT by default (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1496">#1496</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="9df3cccb53"><code>9df3ccc</code></a> chore: release v1.2.30 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1498">#1498</a>)</li> <li><a href="59854df166"><code>59854df</code></a> Solarish-ish: define _REENTRANT by default (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1496">#1496</a>)</li> <li><a href="c3190115ac"><code>c319011</code></a> Update rusqlite requirement from 0.36.0 to 0.37.0 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1494">#1494</a>)</li> <li>See full diff in <a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.2.29...cc-v1.2.30">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-18 17:56:21 +00:00
Alex Touchet	adb804772b	Update tempfile (#38153) ... Update tempfile. Testing: No tests for dependency update. Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>	2025-07-17 21:38:39 +00:00
dependabot[bot]	dcae2dd9fd	build(deps): bump ab_glyph from 0.2.30 to 0.2.31 (#38148) ... Bumps [ab_glyph](https://github.com/alexheretic/ab-glyph) from 0.2.30 to 0.2.31. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alexheretic/ab-glyph/releases">ab_glyph's releases</a>.</em></p> <blockquote> <h2>ab-glyph-0.2.31</h2> <ul> <li>Add &quot;gvar-alloc&quot; feature enabled by default (activates <em>ttf-parser</em> &quot;gvar-alloc&quot; feature). Provides full gvar table support.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="f963bcaf08"><code>f963bca</code></a> Release ab_glyph 0.2.31</li> <li><a href="a216ede621"><code>a216ede</code></a> Add &quot;gvar-alloc&quot; feature enabled by default (<a href="https://redirect.github.com/alexheretic/ab-glyph/issues/118">#118</a>)</li> <li>See full diff in <a href="https://github.com/alexheretic/ab-glyph/compare/ab-glyph-0.2.30...ab-glyph-0.2.31">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-17 18:01:02 +00:00
dependabot[bot]	d5907a8d66	build(deps): bump zbus from 5.8.0 to 5.9.0 (#38144) ... Bumps [zbus](https://github.com/dbus2/zbus) from 5.8.0 to 5.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dbus2/zbus/releases">zbus's releases</a>.</em></p> <blockquote> <h2>🔖 zbus 5.9.0</h2> <ul> <li>🧵 Remove deadlocks in Connection name request tasks, resulting in leaks under certain circumstances.</li> <li>🐛 When registering names, allow name replacement by default.</li> <li>✨ Allow setting request name flags in <code>connection::Builder</code>.</li> <li>✨ Proper Default impl for <code>RequestNameFlags</code>. This change is theoretically an API break for users who assumed the default value to be empty.</li> <li>🧑💻 Add <code>fdo::StartServiceReply</code> type. In 6.0 this will be the return type of <code>fdo::DBusProxy::start_service_by_name</code>. For now, just provide a <code>TryFrom&lt;u32&gt;</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="30487b8fdb"><code>30487b8</code></a> Merge pull request <a href="https://redirect.github.com/dbus2/zbus/issues/1434">#1434</a> from zeenix/zb-release</li> <li><a href="4b7928d2f8"><code>4b7928d</code></a> 🔖 zb,zm: Release 5.9.0</li> <li><a href="d570c947ea"><code>d570c94</code></a> 📝 CONTRIBUTING: Link to gimoji's web interface</li> <li><a href="0bf6e14b54"><code>0bf6e14</code></a> Merge pull request <a href="https://redirect.github.com/dbus2/zbus/issues/1431">#1431</a> from zeenix/name-request-defaults</li> <li><a href="ba2a40752d"><code>ba2a407</code></a> 🧵 zb: Remove deadlocks in Connection name request tasks</li> <li><a href="3d35496021"><code>3d35496</code></a> 🐛 zb: Allow name replacement by default</li> <li><a href="0ad37f317a"><code>0ad37f3</code></a> 📝 zb: Remove a bunch of unnecessary links</li> <li><a href="493a9943d6"><code>493a994</code></a> Merge pull request <a href="https://redirect.github.com/dbus2/zbus/issues/1429">#1429</a> from valpackett/val/knrmmkqzrvyp</li> <li><a href="f2fb16fd18"><code>f2fb16f</code></a> 🧑‍💻 zb: add fdo::dbus::StartServiceReply type</li> <li><a href="f93584de1f"><code>f93584d</code></a> ⬆️ micro: Update winnow to v0.7.12 (<a href="https://redirect.github.com/dbus2/zbus/issues/1428">#1428</a>)</li> <li>Additional commits viewable in <a href="https://github.com/dbus2/zbus/compare/zbus-5.8.0...zbus-5.9.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-17 17:30:45 +00:00
sagudev	86ea2641f8	servoshell: Update egui to 0.32 (#38119) ... We also need to bump egui-file-dialog and accesskit_winit. Changes are done based on migration paths provided by egui. Testing: No tests for servoshell Fixes: #38117 Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com>	2025-07-16 19:42:16 +00:00
Alex Touchet	8f9d484693	Update non-breaking dependencies (#38108) ... Update non-breaking dependencies. Testing: No tests for dependency updates. Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>	2025-07-16 07:51:37 +00:00
Alex Touchet	cbdf72b4eb	Update wasm-bindgen and associated dependencies (#38103) ... Update wasm-bindgen and associated dependencies. Testing: No tests for dependency updates. Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>	2025-07-16 02:11:36 +00:00
batu_hoang	8e2d2bde6f	Webdriver GoBack and GoForward commands wait for navigation complete (#37950) ... After sending `GoBack` or `GoForward` command, webdriver wait for the navigation complete. It can be achieved by waiting for `WebViewDelegate::notify_history_changed` Testing: `tests/wpt/meta/webdriver/tests/classic/back/back.py` `tests/wpt/meta/webdriver/tests/classic/forward/forward.py` --------- Signed-off-by: batu_hoang <longvatrong111@gmail.com> Signed-off-by: Josh Matthews <josh@joshmatthews.net> Signed-off-by: batu_hoang <hoang.binh.trong@huawei.com> Co-authored-by: Josh Matthews <josh@joshmatthews.net>	2025-07-15 10:41:50 +00:00
Alex Touchet	1cd249dfe9	Update jobserver (#38074) ... Update jobserver. Testing: No tests for dependency update. Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>	2025-07-15 02:18:41 +00:00
Alex Touchet	f5b0165e54	Update core-foundation (#38073) ... Update core-foundation. Testing: No tests for dependency update. Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>	2025-07-15 00:15:01 +00:00
dependabot[bot]	6ea7638c21	build(deps): bump memmap2 from 0.9.5 to 0.9.7 (#38071) ... [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-14 20:28:40 +00:00
dependabot[bot]	18699bedf5	build(deps): bump rgb from 0.8.51 to 0.8.52 (#38068) ... [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-14 20:11:52 +00:00
dependabot[bot]	949236c559	build(deps): bump hermit-abi from 0.5.0 to 0.5.2 (#38065) ... [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-14 20:10:13 +00:00
dependabot[bot]	449556d421	build(deps): bump async-compression from 0.4.25 to 0.4.27 (#38067) ... [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-14 20:07:57 +00:00
dependabot[bot]	8a19bc9145	build(deps): bump crc32fast from 1.4.2 to 1.5.0 (#38064) ... [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-14 19:03:52 +00:00
Alex Touchet	cd1fdbbeeb	Update h2 and hyper (#38039) ... Update h2 and hyper. Testing: No tests for dependency updates. Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>	2025-07-13 19:58:25 +00:00
Alex Touchet	833484ca11	Update ahash and ppv-lite86 (#38037) ... Update ahash and ppv-lite86. Testing: No tests for dependency updates. Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>	2025-07-13 18:27:28 +00:00
Alex Touchet	cd91517a27	Update polling and de-dupe hermit-abi (#38013) ... Update polling and de-dupe hermit-abi. Testing: No tests for dependency update. --------- Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com> Signed-off-by: Mukilan Thiyagarajan <mukilan@igalia.com> Co-authored-by: Mukilan Thiyagarajan <mukilan@igalia.com>	2025-07-13 08:31:50 +00:00
sagudev	9b5b26386c	canvas: Use wrapped kurbo::BezPath for path everywhere (#37967) ... This PR removes existing path(segment) abstractions in favor of `kurbo::BezPath`, well actually wrapped `kurbo::BezPath`, to ensure building of valid paths. This allows us better Path2D building in script and doing all validation and segmentation there and also allows us remove blocking is_point_in_path on Path2D as we can now do this in script. Current path is still done on canvas thread side as it will be harder to move to script (will be done as a follow up), but it now uses this new path abstraction. Using kurbo also allows us to ditch our manual svgpath parser with the one provided by kurbo. Same code is stolen from: https://github.com/servo/servo/pull/36821. Testing: Existing WPT tests Fixes: #37904 wpt run: https://github.com/sagudev/servo/actions/runs/16172191716 --------- Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com>	2025-07-12 10:37:47 +00:00
dependabot[bot]	d40e9f82a2	build(deps): bump winnow from 0.7.11 to 0.7.12 (#38011) ... Bumps [winnow](https://github.com/winnow-rs/winnow) from 0.7.11 to 0.7.12. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/winnow-rs/winnow/blob/main/CHANGELOG.md">winnow's changelog</a>.</em></p> <blockquote> <h2>[0.7.12] - 2025-07-11</h2> <h3>Features</h3> <ul> <li>Add <code>impl Accumulate for VecDeque</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="a0360f6fc0"><code>a0360f6</code></a> chore: Release</li> <li><a href="15bc372c8d"><code>15bc372</code></a> docs: Update changelog</li> <li><a href="6c193ed0ae"><code>6c193ed</code></a> Merge pull request <a href="https://redirect.github.com/winnow-rs/winnow/issues/802">#802</a> from molarmanful/vecdeque-accumulate</li> <li><a href="5db615de45"><code>5db615d</code></a> feat(stream): Implement Accumulate for VecDeque</li> <li><a href="f226010843"><code>f226010</code></a> Merge pull request <a href="https://redirect.github.com/winnow-rs/winnow/issues/800">#800</a> from Kijewski/pr-chars</li> <li><a href="73ce9fabff"><code>73ce9fa</code></a> Implement <code>\&lt;&amp;str as Stream&gt;::next_token()</code> without panics</li> <li><a href="18f20ee310"><code>18f20ee</code></a> Merge pull request <a href="https://redirect.github.com/winnow-rs/winnow/issues/796">#796</a> from epage/docs</li> <li><a href="fa51dd4d8d"><code>fa51dd4</code></a> docs(ref): Clarify distinction between parse and parse_next</li> <li>See full diff in <a href="https://github.com/winnow-rs/winnow/compare/v0.7.11...v0.7.12">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-11 18:06:41 +00:00
dependabot[bot]	f75d49e538	build(deps): bump h2 from 0.3.26 to 0.3.27 (#38009) ... Bumps [h2](https://github.com/hyperium/h2) from 0.3.26 to 0.3.27. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hyperium/h2/blob/v0.3.27/CHANGELOG.md">h2's changelog</a>.</em></p> <blockquote> <h1>0.3.27 (July 11, 2025)</h1> <ul> <li>Fix notifying wakers when detecting local stream errors.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="f6237accb3"><code>f6237ac</code></a> v0.3.27</li> <li><a href="f61332ed48"><code>f61332e</code></a> refactor: change local reset counter to use type system more</li> <li><a href="3f1a8e34cd"><code>3f1a8e3</code></a> style: fix anonymous lifetime syntax</li> <li><a href="778aa7eba9"><code>778aa7e</code></a> fix: notify_recv after send_reset() in reset_on_recv_stream_err() to ensure l...</li> <li><a href="be10b774f0"><code>be10b77</code></a> ci: pin more deps for MSRV job (<a href="https://redirect.github.com/hyperium/h2/issues/817">#817</a>)</li> <li><a href="c0d9febc18"><code>c0d9feb</code></a> ci: pin deps for MSRV</li> <li><a href="5ccd9cfb10"><code>5ccd9cf</code></a> lints: fix unexpected cfgs warnings</li> <li><a href="e6e3e9c87f"><code>e6e3e9c</code></a> fix: return a WriteZero error if frames cannot be written (<a href="https://redirect.github.com/hyperium/h2/issues/783">#783</a>)</li> <li>See full diff in <a href="https://github.com/hyperium/h2/compare/v0.3.26...v0.3.27">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-11 17:52:48 +00:00
dependabot[bot]	36847fcf66	build(deps): bump aws-lc-rs from 1.13.1 to 1.13.2 (#38008) ... Bumps [aws-lc-rs](https://github.com/aws/aws-lc-rs) from 1.13.1 to 1.13.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aws/aws-lc-rs/releases">aws-lc-rs's releases</a>.</em></p> <blockquote> <h2>aws-lc-rs v1.13.2</h2> <h2>What's Changed</h2> <ul> <li>aws-lc-sys v0.30.0 is aligned w/ <a href="https://github.com/aws/aws-lc/releases">AWS-LC v1.55.0</a> by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/838">aws/aws-lc-rs#838</a></li> <li>expose algorithm used to create ecdsa keypair by <a href="https://github.com/soundofspace"><code>@​soundofspace</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/834">aws/aws-lc-rs#834</a></li> <li>Change 'try_sign' to pub in ED25519 module by <a href="https://github.com/theswiftfox"><code>@​theswiftfox</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/832">aws/aws-lc-rs#832</a></li> </ul> <h3>Build improvements</h3> <ul> <li>Fix target-specific env variable usage by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/810">aws/aws-lc-rs#810</a></li> <li>Improved support for msys2 and &quot;prebuilt-nasm&quot; by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/830">aws/aws-lc-rs#830</a></li> </ul> <h3>Issues Being Resolved</h3> <ul> <li>Failed to Build aws-lc-sys 0.29.0 on Windows with target x86_64-pc-windows-gnu -- <a href="https://redirect.github.com/aws/aws-lc-rs/issues/835">aws/aws-lc-rs#835</a></li> <li>Failed to Build aws-lc-sys 0.29.0 on Windows -- <a href="https://redirect.github.com/aws/aws-lc-rs/issues/833">aws/aws-lc-rs#833</a></li> <li>MSYS2 - &quot;No rule to make target&quot; for libaws_lc_0_29_0_crypto.a -- <a href="https://redirect.github.com/aws/aws-lc-rs/issues/814">aws/aws-lc-rs#814</a></li> </ul> <h2>Other Merged PRs</h2> <ul> <li>Disallow external bindgen when AWS_LC_SYS_EXTERNAL_BINDGEN=0 by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/808">aws/aws-lc-rs#808</a></li> <li>Test w/ CMake 4.0 release by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/756">aws/aws-lc-rs#756</a></li> <li>Fix CI for i686-pc-windows-gnu by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/809">aws/aws-lc-rs#809</a></li> <li>Fix spelling errors by <a href="https://github.com/atouchet"><code>@​atouchet</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/817">aws/aws-lc-rs#817</a></li> <li>Ensure ConstPointers don't outlive parent by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/693">aws/aws-lc-rs#693</a></li> <li>Fix CI for riscv64gc-unknown-linux-gnu by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/816">aws/aws-lc-rs#816</a></li> <li>Prepare aws-lc-fips-sys v0.13.7 by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/823">aws/aws-lc-rs#823</a></li> <li>Fix CI by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/825">aws/aws-lc-rs#825</a></li> <li>Prepare aws-lc-sys v0.30.0 by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/829">aws/aws-lc-rs#829</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/atouchet"><code>@​atouchet</code></a> made their first contribution in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/817">aws/aws-lc-rs#817</a></li> <li><a href="https://github.com/theswiftfox"><code>@​theswiftfox</code></a> made their first contribution in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/832">aws/aws-lc-rs#832</a></li> <li><a href="https://github.com/soundofspace"><code>@​soundofspace</code></a> made their first contribution in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/834">aws/aws-lc-rs#834</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aws/aws-lc-rs/compare/v1.13.1...v1.13.2">https://github.com/aws/aws-lc-rs/compare/v1.13.1...v1.13.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="e2e9e8222a"><code>e2e9e82</code></a> Align aws-lc-sys v0.30.0 w/ AWS-LC v1.55.0 (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/838">#838</a>)</li> <li><a href="880d3818fd"><code>880d381</code></a> Test msys2 w/ prebuilt-nasm (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/830">#830</a>)</li> <li><a href="a2ed335732"><code>a2ed335</code></a> expose algorithm used to create ecdsa keypair (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/834">#834</a>)</li> <li><a href="db7d6cddc5"><code>db7d6cd</code></a> Change 'try_sign' to pub in ED25519 module (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/832">#832</a>)</li> <li><a href="f0a6350abb"><code>f0a6350</code></a> Prepare aws-lc-sys v0.30.0 (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/829">#829</a>)</li> <li><a href="378163b244"><code>378163b</code></a> Fix CI (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/825">#825</a>)</li> <li><a href="f031c04e65"><code>f031c04</code></a> Prepare aws-lc-fips-sys v0.13.7 (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/823">#823</a>)</li> <li><a href="8b8122b2df"><code>8b8122b</code></a> Fix CI for riscv64gc-unknown-linux-gnu (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/816">#816</a>)</li> <li><a href="6cd8ac8d2a"><code>6cd8ac8</code></a> Ensure ConstPointers don't outlive parent (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/693">#693</a>)</li> <li><a href="25a6040660"><code>25a6040</code></a> Fix spelling errors (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/817">#817</a>)</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-lc-rs/compare/v1.13.1...v1.13.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-11 17:39:47 +00:00
Kingsley Yung	464d71ecfc	Implement cookie expiry date parsing algorithm (#37715) ... The cookie-rs library parses the cookie expiry date based on the format from RFC 2616 (for HTTP/1.1), which is stricter than the format from RFC 6265 (for HTTP cookie). This patch implements the cookie expiry date algorithm from RFC 6265. When Cookie::parse fails in parsing the expiry date, we try to parse the expiry again with this algorithm, to provide extra compatibility with legacy systems. Testing: Pass a WPT test that was expected to fail before, and add a unit test. Fixes: #36452 --------- Signed-off-by: Kingsley Yung <kingsley@kkoyung.dev>	2025-07-11 05:18:11 +00:00
dependabot[bot]	a02877e6b4	build(deps): bump clap from 4.5.40 to 4.5.41 (#37988) ... Bumps [clap](https://github.com/clap-rs/clap) from 4.5.40 to 4.5.41. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/clap-rs/clap/blob/master/CHANGELOG.md">clap's changelog</a>.</em></p> <blockquote> <h2>[4.5.41] - 2025-07-09</h2> <h3>Features</h3> <ul> <li>Add <code>Styles::context</code> and <code>Styles::context_value</code> to customize the styling of <code>[default: value]</code> like notes in the <code>--help</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="92fcd83b76"><code>92fcd83</code></a> chore: Release</li> <li><a href="aca91b99c1"><code>aca91b9</code></a> docs: Update changelog</li> <li><a href="8434510cee"><code>8434510</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/5869">#5869</a> from tw4452852/patch-1</li> <li><a href="33b1fc304e"><code>33b1fc3</code></a> fix(complete): Fix env leakage in elvish dynamic completion</li> <li><a href="e5f1f4884c"><code>e5f1f48</code></a> chore: Release</li> <li><a href="9466a552fb"><code>9466a55</code></a> docs: Update changelog</li> <li><a href="d74b793512"><code>d74b793</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/5865">#5865</a> from gifnksm/nushell-completion-value-types</li> <li><a href="ecbc775d3b"><code>ecbc775</code></a> fix(nu): Set argument type based on <code>ValueHint</code></li> <li><a href="6784054536"><code>6784054</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/5857">#5857</a> from epage/empty</li> <li><a href="cca5f32b3a"><code>cca5f32</code></a> test(complete): Show empty option-value behavior</li> <li>Additional commits viewable in <a href="https://github.com/clap-rs/clap/compare/clap_complete-v4.5.40...clap_complete-v4.5.41">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-10 19:01:17 +00:00
dependabot[bot]	32d889f770	build(deps): bump xml-rs from 0.8.26 to 0.8.27 (#37990) ... Bumps [xml-rs](https://github.com/kornelski/xml-rs) from 0.8.26 to 0.8.27. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/kornelski/xml-rs/blob/main/Changelog.md">xml-rs's changelog</a>.</em></p> <blockquote> <h2>Version 0.8.27</h2> <ul> <li>Added detection of invalid <code>&lt;?</code> in attributes</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="cb01aadb3e"><code>cb01aad</code></a> Bump</li> <li><a href="be66722ed9"><code>be66722</code></a> Remove accidental whitespace</li> <li><a href="e481000896"><code>e481000</code></a> Also flag &quot;&lt;?&quot; as error inside attribute values</li> <li>See full diff in <a href="https://github.com/kornelski/xml-rs/compare/0.8.26...0.8.27">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-10 17:37:59 +00:00
dependabot[bot]	b13d6cfc51	build(deps): bump rustls from 0.23.28 to 0.23.29 (#37989) ... Bumps [rustls](https://github.com/rustls/rustls) from 0.23.28 to 0.23.29. <details> <summary>Commits</summary> <ul> <li><a href="4e0b5fed17"><code>4e0b5fe</code></a> Bump version to 0.23.29</li> <li><a href="b8540790dc"><code>b854079</code></a> Propagate context for webpki signature algorithm errors</li> <li><a href="c84675e34b"><code>c84675e</code></a> key_schedule: minimise lifetime of resumption secret</li> <li><a href="788b0df122"><code>788b0df</code></a> key_schedule: erase master secret in traffic state</li> <li><a href="d2c64f0416"><code>d2c64f0</code></a> key_schedule: separate ops not using current secret</li> <li><a href="e5998cd100"><code>e5998cd</code></a> key_schedule: add state for derivations before finish</li> <li><a href="9620bec130"><code>9620bec</code></a> tls13::key_schedule: move <code>KeySchedule</code> struct down</li> <li><a href="373ad888e2"><code>373ad88</code></a> tls13::key_schedule: move <code>SecretKind</code> down</li> <li><a href="efa2066469"><code>efa2066</code></a> Improve compactness of Debug impl for extensions</li> <li><a href="a5433a154b"><code>a5433a1</code></a> Correct calculation of ServerHello ECH confirmation</li> <li>Additional commits viewable in <a href="https://github.com/rustls/rustls/compare/v/0.23.28...v/0.23.29">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-10 17:14:10 +00:00
dependabot[bot]	f390cc590c	build(deps): bump rustls-webpki from 0.103.3 to 0.103.4 (#37987) ... [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-10 17:06:54 +00:00
JoeDow	16aca5516d	layout: remove the finished animations to avoid to mark their dom nodes dirty (#37954) ... Remove the finished animations to avoid marking their dom nodes dirty. The mainly change happens at [stylo PR 216](https://github.com/servo/stylo/pull/216). In Servo's current animation implementation, the finished animations are retained and continue to mark their corresponding DOM nodes as dirty. This can lead to a significant number of unnecessary and expensive reflow operations. For example, during page scrolling, the dirtied state from finished animations forces the whole reflow process on every update_the_rendering cycle, severely impacting scroll performance. The [code comments in stylo repo](https://github.com/servo/stylo/blob/main/style/matching.rs#L752-L755) stated that retaining finished animations was necessary to correctly compute the final frame state for [animation-fill-mode](https://developer.mozilla.org/en-US/docs/Web/CSS/animation-fill-mode). However, test results—including those from WPT test cases and manual verification—indicate that this functionality is already guaranteed without this overhead. Signed-off-by: Martin Robinson <mrobinson@igalia.com>	2025-07-09 18:19:09 +00:00
Steven Novaryo	378c4648e4	script: Use an implemented pseudo-element to fortype=color ::color-swatch (#37427) ... Implement internal pseudo element, which would be resolved as a "Implemented Pseudo Element" within style computation. This is an concrete element that would has a primary style after the style computation, but could match and style resolved like an pseudo element. Therefore, it would have a different behavior compared to how does `pseudo`s that `ServoLayoutNode` had. Where they would not have a concrete element behind it. Note that, due to the nature of these pseudo elements residing inside a UA widget, these pseudo elements would therefore not be accessible in JavaScript by default. This kind of element is required in order to implement the [form control pseudo element](https://drafts.csswg.org/css-forms-1/#pseudo-elements) like `::placeholder`, `::color-swatch`, `::field-text`, etc. See [this docs](https://hackmd.io/@ChaKweTiau/BJ3zRdLQlg) for more details of the implementation. Then, the implemented pseudo element is utilized to implement style matching for input `type=text`. Servo's side of: https://github.com/servo/stylo/pull/212 Testing: No WPT regression. --------- Signed-off-by: stevennovaryo <steven.novaryo@gmail.com>	2025-07-09 15:36:58 +00:00
Jonathan Schwender	cae73341b2	Update mozjs to 128.13 (#37933) ... Bump to the latest Spidermonkey 128 ESR version. Companion PR to https://github.com/servo/mozjs/pull/590 Testing: Covered by existing tests Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>	2025-07-09 11:42:54 +00:00
Euclid Ye	3526b7e86e	servoshell: Use DeviceIndependentPixel for WebDriver Rect related requests (#37893) ... [Spec](https://w3c.github.io/webdriver/#set-window-rect) expects CSS pixel for input and output. Previously, we use Device Pixel for them instead. Testing: Tested manually with different screen DPR and compared with other browsers. Fixes: Task 4 of https://github.com/servo/servo/issues/37804 --------- Signed-off-by: Euclid Ye <yezhizhenjiakang@gmail.com>	2025-07-09 03:56:27 +00:00
Martin Robinson	51367c22a6	layout: Store most anonymous pseudo-elements in box slots (#37941) ... Previously, anonymous boxes, such for anonymous table parts were not associated with their non-pseudo ancestor DOM nodes. This presents a problem when it comes time to clear layout data during incremental layouts. This change reworks the way that pseudo-elements in general are stored in their non-pseudo ancestor DOM nodes, allowing for any number to be placed there. This trades a bit of performance for space, as just adding a vector to the node would add something like 24 bytes of storage to every node. This change should have a neutral runtime memory usage. Testing: This shouldn't change observable behavior and is thus covered by existing WPT tests. It will allow tests to pass in a subsequent PR. Signed-off-by: Martin Robinson <mrobinson@igalia.com> Co-authored-by: Oriol Brufau <obrufau@igalia.com>	2025-07-08 15:22:09 +00:00
dependabot[bot]	c4abfa8815	build(deps): bump content-security-policy from dc1fd32 to e8d4883 (#37924) ... Bumps [content-security-policy](https://github.com/servo/rust-content-security-policy) from `dc1fd32` to `e8d4883`. <details> <summary>Commits</summary> <ul> <li><a href="e8d4883f9a"><code>e8d4883</code></a> Fix display of policies</li> <li>See full diff in <a href="dc1fd32b2b...e8d4883f9a">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 23:36:53 +00:00
dependabot[bot]	4ba5ea5a96	build(deps): bump cc from 1.2.28 to 1.2.29 (#37931) ... Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.28 to 1.2.29. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/releases">cc's releases</a>.</em></p> <blockquote> <h2>cc-v1.2.29</h2> <h3>Other</h3> <ul> <li>Fix target parsing for powerpc (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1490">#1490</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md">cc's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.2.28...cc-v1.2.29">1.2.29</a> - 2025-07-05</h2> <h3>Other</h3> <ul> <li>Fix target parsing for powerpc (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1490">#1490</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="d40950a4a8"><code>d40950a</code></a> chore: release v1.2.29 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1493">#1493</a>)</li> <li><a href="72fd96518a"><code>72fd965</code></a> Fix target parsing for powerpc (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1490">#1490</a>)</li> <li>See full diff in <a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.2.28...cc-v1.2.29">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 23:29:03 +00:00
dependabot[bot]	4ca9014f0f	build(deps): bump cfg-expr from 0.20.0 to 0.20.1 (#37930) ... Bumps [cfg-expr](https://github.com/EmbarkStudios/cfg-expr) from 0.20.0 to 0.20.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/EmbarkStudios/cfg-expr/releases">cfg-expr's releases</a>.</em></p> <blockquote> <h2>0.20.1</h2> <h3>Changed</h3> <ul> <li><a href="https://redirect.github.com/EmbarkStudios/cfg-expr/pull/80">PR#80</a> updated the builtin target list to 1.88.0.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/EmbarkStudios/cfg-expr/blob/main/CHANGELOG.md">cfg-expr's changelog</a>.</em></p> <blockquote> <h2>[0.20.1] - 2025-07-07</h2> <h3>Changed</h3> <ul> <li><a href="https://redirect.github.com/EmbarkStudios/cfg-expr/pull/80">PR#80</a> updated the builtin target list to 1.88.0.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="cdfe878c24"><code>cdfe878</code></a> Release 0.20.1</li> <li><a href="16204ea979"><code>16204ea</code></a> Update CHANGELOG</li> <li><a href="c881a1937e"><code>c881a19</code></a> Update to 1.88.0 (<a href="https://redirect.github.com/EmbarkStudios/cfg-expr/issues/80">#80</a>)</li> <li>See full diff in <a href="https://github.com/EmbarkStudios/cfg-expr/compare/0.20.0...0.20.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 20:21:28 +00:00
dependabot[bot]	a4583d4a6b	build(deps): bump async-channel from 2.4.0 to 2.5.0 (#37929) ... Bumps [async-channel](https://github.com/smol-rs/async-channel) from 2.4.0 to 2.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/smol-rs/async-channel/releases">async-channel's releases</a>.</em></p> <blockquote> <h2>v2.5.0</h2> <ul> <li>Add <code>Sender::closed()</code> (<a href="https://redirect.github.com/smol-rs/async-channel/issues/102">#102</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/smol-rs/async-channel/blob/master/CHANGELOG.md">async-channel's changelog</a>.</em></p> <blockquote> <h1>Version 2.5.0</h1> <ul> <li>Add <code>Sender::closed()</code> (<a href="https://redirect.github.com/smol-rs/async-channel/issues/102">#102</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="35a63c456a"><code>35a63c4</code></a> Release 2.5.0</li> <li><a href="b665e043ca"><code>b665e04</code></a> Add Sender::closed future (<a href="https://redirect.github.com/smol-rs/async-channel/issues/102">#102</a>)</li> <li>See full diff in <a href="https://github.com/smol-rs/async-channel/compare/v2.4.0...v2.5.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 20:06:28 +00:00
dependabot[bot]	ae2d572f5c	build(deps): bump blocking from 1.6.1 to 1.6.2 (#37928) ... Bumps [blocking](https://github.com/smol-rs/blocking) from 1.6.1 to 1.6.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/smol-rs/blocking/releases">blocking's releases</a>.</em></p> <blockquote> <h2>v1.6.2</h2> <ul> <li>Fix build failure with minimal-versions. (<a href="https://redirect.github.com/smol-rs/blocking/issues/71">#71</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/smol-rs/blocking/blob/master/CHANGELOG.md">blocking's changelog</a>.</em></p> <blockquote> <h1>Version 1.6.2</h1> <ul> <li>Fix build failure with minimal-versions. (<a href="https://redirect.github.com/smol-rs/blocking/issues/71">#71</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="6c4eddec18"><code>6c4edde</code></a> Release 1.6.2</li> <li><a href="8f621a9dcc"><code>8f621a9</code></a> Fix build failure with minimal-versions</li> <li><a href="588b575e47"><code>588b575</code></a> Add minimal-versions check to CI</li> <li><a href="fa3854cb70"><code>fa3854c</code></a> Fix clippy::uninlined_format_args warning</li> <li><a href="0af62f84bc"><code>0af62f8</code></a> ci: Use reusable workflows for fmt and security_audit</li> <li><a href="34d9472076"><code>34d9472</code></a> ci: Use &quot;v2.0.0&quot; branch for security check</li> <li>See full diff in <a href="https://github.com/smol-rs/blocking/compare/v1.6.1...v1.6.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 20:01:50 +00:00
dependabot[bot]	8e4dd852f3	build(deps): bump hyper-util from 0.1.14 to 0.1.15 (#37927) ... Bumps [hyper-util](https://github.com/hyperium/hyper-util) from 0.1.14 to 0.1.15. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hyperium/hyper-util/releases">hyper-util's releases</a>.</em></p> <blockquote> <h2>v0.1.15</h2> <h2>tl;dr</h2> <ul> <li>Add header casing options to <code>auto::Builder</code>.</li> <li>Fix <code>proxy::Socksv5</code> to check for enough bytes before parsing ipv6 responses.</li> <li>Fix including <code>client-proxy</code> in the <code>full</code> feature set.</li> </ul> <h2>What's Changed</h2> <ul> <li>ci: pin tracing-core in msrv job by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper-util/pull/203">hyperium/hyper-util#203</a></li> <li>Cleanup deadcode in <code>client</code> by <a href="https://github.com/howardjohn"><code>@​howardjohn</code></a> in <a href="https://redirect.github.com/hyperium/hyper-util/pull/202">hyperium/hyper-util#202</a></li> <li>refactor(socks): deduplicate and reuse shared logic by <a href="https://github.com/0x676e67"><code>@​0x676e67</code></a> in <a href="https://redirect.github.com/hyperium/hyper-util/pull/205">hyperium/hyper-util#205</a></li> <li>refactor: include client-proxy in full feature by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper-util/pull/206">hyperium/hyper-util#206</a></li> <li>refactor(client): remove old body delay_eof code by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper-util/pull/208">hyperium/hyper-util#208</a></li> <li>feat(builder): support header case methods by <a href="https://github.com/AndreyErmilov"><code>@​AndreyErmilov</code></a> in <a href="https://redirect.github.com/hyperium/hyper-util/pull/207">hyperium/hyper-util#207</a></li> <li>fix(socks): check for right length before parsing ProxyRes by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper-util/pull/210">hyperium/hyper-util#210</a></li> <li>Prepare v0.1.15 by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/hyper-util/pull/211">hyperium/hyper-util#211</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/AndreyErmilov"><code>@​AndreyErmilov</code></a> made their first contribution in <a href="https://redirect.github.com/hyperium/hyper-util/pull/207">hyperium/hyper-util#207</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/hyperium/hyper-util/compare/v0.1.14...v0.1.15">https://github.com/hyperium/hyper-util/compare/v0.1.14...v0.1.15</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md">hyper-util's changelog</a>.</em></p> <blockquote> <h1>0.1.15 (2025-07-07)</h1> <ul> <li>Add header casing options to <code>auto::Builder</code>.</li> <li>Fix <code>proxy::Socksv5</code> to check for enough bytes before parsing ipv6 responses.</li> <li>Fix including <code>client-proxy</code> in the <code>full</code> feature set.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="9669ff14d1"><code>9669ff1</code></a> v0.1.15</li> <li><a href="bfa1cf1b18"><code>bfa1cf1</code></a> fix(socks): check for right length before parsing ProxyRes (<a href="https://redirect.github.com/hyperium/hyper-util/issues/210">#210</a>)</li> <li><a href="0ea2613fb3"><code>0ea2613</code></a> feat(server): support header case methods on <code>auto::Builder</code> (<a href="https://redirect.github.com/hyperium/hyper-util/issues/207">#207</a>)</li> <li><a href="d8919313fe"><code>d891931</code></a> refactor(client): remove old body delay_eof code (<a href="https://redirect.github.com/hyperium/hyper-util/issues/208">#208</a>)</li> <li><a href="1f11a12fa8"><code>1f11a12</code></a> refactor: include client-proxy in full feature (<a href="https://redirect.github.com/hyperium/hyper-util/issues/206">#206</a>)</li> <li><a href="57c26fad25"><code>57c26fa</code></a> refactor(client): deduplicate and reuse shared socks logic (<a href="https://redirect.github.com/hyperium/hyper-util/issues/205">#205</a>)</li> <li><a href="42bb42fdd1"><code>42bb42f</code></a> refactor: cleanup deadcode in <code>client</code> (<a href="https://redirect.github.com/hyperium/hyper-util/issues/202">#202</a>)</li> <li><a href="d9107d04aa"><code>d9107d0</code></a> ci: pin tracing-core in msrv job (<a href="https://redirect.github.com/hyperium/hyper-util/issues/203">#203</a>)</li> <li>See full diff in <a href="https://github.com/hyperium/hyper-util/compare/v0.1.14...v0.1.15">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 20:00:48 +00:00
dependabot[bot]	0e27061bd9	build(deps): bump tokio from 1.46.0 to 1.46.1 (#37926) ... Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.46.0 to 1.46.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tokio/releases">tokio's releases</a>.</em></p> <blockquote> <h2>Tokio v1.46.1</h2> <h1>1.46.1 (July 4th, 2025)</h1> <p>This release fixes incorrect spawn locations in runtime task hooks for tasks spawned using <code>tokio::spawn</code> rather than <code>Runtime::spawn</code>. This issue only effected the spawn location in <code>TaskMeta::spawned_at</code>, and did not effect task locations in Tracing events.</p> <h2>Unstable</h2> <ul> <li>runtime: add <code>TaskMeta::spawn_location</code> tracking where a task was spawned (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7440">#7440</a>)</li> </ul> <p><a href="https://redirect.github.com/tokio-rs/tokio/issues/7440">#7440</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7440">tokio-rs/tokio#7440</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="ab3ff69cf2"><code>ab3ff69</code></a> chore: prepare to release v1.46.1 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7444">#7444</a>)</li> <li><a href="a0d5b8ab30"><code>a0d5b8a</code></a> runtime(unstable): fix task hook spawn locations for <code>tokio::spawn</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7440">#7440</a>)</li> <li><a href="a1ee3ef218"><code>a1ee3ef</code></a> chore: fix some minor typos in the comments (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7442">#7442</a>)</li> <li><a href="171cd148a3"><code>171cd14</code></a> changelog: fix typo in <code>pipe::OpenOptions</code> for 1.46.0 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7439">#7439</a>)</li> <li>See full diff in <a href="https://github.com/tokio-rs/tokio/compare/tokio-1.46.0...tokio-1.46.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 19:58:16 +00:00
dependabot[bot]	21084f2b1b	build(deps): bump rgb from 0.8.50 to 0.8.51 (#37923) ... Bumps [rgb](https://github.com/kornelski/rust-rgb) from 0.8.50 to 0.8.51. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/kornelski/rust-rgb/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 19:31:55 +00:00
dependabot[bot]	72b1331949	build(deps): bump cc from 1.2.27 to 1.2.28 (#37884) ... Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.27 to 1.2.28. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/releases">cc's releases</a>.</em></p> <blockquote> <h2>cc-v1.2.28</h2> <h3>Other</h3> <ul> <li>Recognize <code>mlibc</code> environment (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1488">#1488</a>)</li> <li>Fix clippy warnings about not using variables in <code>format!</code> strings (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1489">#1489</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md">cc's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.2.27...cc-v1.2.28">1.2.28</a> - 2025-07-04</h2> <h3>Other</h3> <ul> <li>Recognize <code>mlibc</code> environment (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1488">#1488</a>)</li> <li>Fix clippy warnings about not using variables in <code>format!</code> strings (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1489">#1489</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="8f0143a5fb"><code>8f0143a</code></a> chore: release v1.2.28 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1491">#1491</a>)</li> <li><a href="6f0dd80fa3"><code>6f0dd80</code></a> Recognize <code>mlibc</code> environment (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1488">#1488</a>)</li> <li><a href="d3c85ef947"><code>d3c85ef</code></a> Fix clippy warnings about not using variables in <code>format!</code> strings (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1489">#1489</a>)</li> <li>See full diff in <a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.2.27...cc-v1.2.28">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-04 17:23:53 +00:00