Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 26, 2025

Bumps the rust-dependencies group with 7 updates in the /quickwit directory:

Package From To
bytestring 1.4.0 1.5.0
hostname 0.3.1 0.4.1
humantime 2.2.0 2.3.0
proptest 1.7.0 1.8.0
pulsar 6.3.1 6.4.1
rand 0.8.5 0.9.2
tempfile 3.22.0 3.23.0

Updates bytestring from 1.4.0 to 1.5.0

Release notes

Sourced from bytestring's releases.

bytestring: v1.5.0

  • Migrate serde dependency to serde_core.
  • Minimum supported Rust version (MSRV) is now 1.75.
Commits
  • d22774f chore(bytestring): prepare release 1.5.0
  • da9db22 Switch serde dependency to serde_core (#728)
  • a9d98ca build(deps): bump bitflags from 2.9.3 to 2.9.4 (#725)
  • 23d19cf build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 (#726)
  • b3406dc build(deps): bump taiki-e/install-action from 2.59.1 to 2.60.0 (#727)
  • 0e1604e build(deps): bump taiki-e/install-action from 2.58.21 to 2.58.30 (#723)
  • 63f8e96 build(deps): bump actions-rust-lang/setup-rust-toolchain (#724)
  • d1d45f1 ci: pin time crate in msrv
  • 5267bc2 chore(rt): include correct tokio features
  • 3c0702c chore(actix-rt): prepare release 2.11.0
  • Additional commits viewable in compare view

Updates hostname from 0.3.1 to 0.4.1

Changelog

Sourced from hostname's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[0.4.0] - 2024-04-01

Added

  • CI setup now covers almost all supported Tier 1 and Tier 2 platform targets

Changed

  • Minimum Supported Rust version set to 1.67.0
  • Rust edition set to "2021"

Fixed

  • Handle edge cases for POSIX systems (#14)
  • docs.rs documentation build
Commits

Updates humantime from 2.2.0 to 2.3.0

Release notes

Sourced from humantime's releases.

2.3.0

What's Changed

Commits
  • 7994b71 ci: disable for non-main pushes
  • 1b59068 Bump version to 2.3.0
  • cacdb93 ci: add audit job
  • 5cc8dc5 ci: add job to check semver compatibility
  • 0d5fe2d Bump version to 2.2.1
  • fc0e7ea duration: move current value out of Parser
  • 1febd52 duration: track current value as Duration
  • 0adba12 duration: track current nanoseconds as u32
  • 786218f Extract unit parsing
  • 9ff48bf Re-order duration parser methods in top-down order
  • Additional commits viewable in compare view

Updates proptest from 1.7.0 to 1.8.0

Commits
  • 2885bc2 new releases for proptest, proptest-macro, and state-machine
  • a85563f Merge pull request #584 from wojciech-graj/main
  • 5331517 Merge pull request #596 from alexanderkjall/fix-arithmetic-overflow
  • 157f3c0 Merge pull request #595 from ebegumisa/main
  • 02fa1fc changelog: add #595
  • 27fd76f fix for 32 bit processors
  • d1716ca Add ReferenceStateMachine arg to SystemUnderTest::teardown
  • ea4ddeb Merge pull request #594 from proptest-rs/attr-macro-preserve-arg-names
  • f80c1e6 fix shorthand struct initialization lint
  • b7590fa add new test for complex patterns
  • Additional commits viewable in compare view

Updates pulsar from 6.3.1 to 6.4.1

Commits
  • 5923a04 Release 6.4.1
  • 77fa24b fix: producer is not closed at server side when batching is enabled (#363)
  • b4a67b8 chore: bump version to 6.4.1 (#364)
  • afdf6d0 fix: restore the Send trait for Producer (#359)
  • 51b93ed feat: support blocking send_non_blocking() and other RPCs (#355)
  • f8c31e9 feat: refactor producer batching with timeout supported (#354)
  • 3b89071 ci: harden and optimize rust.yml (#353)
  • fc27cbc fix(consumer): add recv_within helper and timeouts to prevent infinite hangs ...
  • ed1e87c test(producer): add unit tests for producer.rs (#350)
  • 520643d refactor(producer): remove unnecessary lock contention (#351)
  • Additional commits viewable in compare view

Updates rand from 0.8.5 to 0.9.2

Changelog

Sourced from rand's changelog.

[0.9.2 — 2025-07-20]

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)
  • Remove implicit feature rand_chacha; use std_rng instead. (#1473)
  • Rename feature serde1 to serde (#1477)
  • Rename feature getrandom to os_rng (#1537)
  • Add feature thread_rng (#1547)

API changes: rand_core traits

  • Add fn RngCore::read_adapter implementing std::io::Read (#1267)
  • Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
  • Add traits TryRngCore, TryCryptoRng (#1424, #1499)
  • Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
  • Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
  • Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

  • Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)

... (truncated)

Commits

Updates tempfile from 3.22.0 to 3.23.0

Changelog

Sourced from tempfile's changelog.

3.23.0

  • Remove need for the "nightly" feature to compile with "wasip2".
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 7 updates in the /quickwit directory:

| Package | From | To |
| --- | --- | --- |
| [bytestring](https://github.com/actix/actix-net) | `1.4.0` | `1.5.0` |
| [hostname](https://github.com/svartalf/hostname) | `0.3.1` | `0.4.1` |
| [humantime](https://github.com/chronotope/humantime) | `2.2.0` | `2.3.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.7.0` | `1.8.0` |
| [pulsar](https://github.com/streamnative/pulsar-rs) | `6.3.1` | `6.4.1` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.2` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.22.0` | `3.23.0` |



Updates `bytestring` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/actix/actix-net/releases)
- [Commits](actix/actix-net@bytestring-v1.4.0...bytestring-v1.5.0)

Updates `hostname` from 0.3.1 to 0.4.1
- [Release notes](https://github.com/svartalf/hostname/releases)
- [Changelog](https://github.com/djc/hostname/blob/main/CHANGELOG.md)
- [Commits](https://github.com/svartalf/hostname/commits)

Updates `humantime` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/chronotope/humantime/releases)
- [Commits](chronotope/humantime@v2.2.0...v2.3.0)

Updates `proptest` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.7.0...v1.8.0)

Updates `pulsar` from 6.3.1 to 6.4.1
- [Release notes](https://github.com/streamnative/pulsar-rs/releases)
- [Commits](streamnative/pulsar-rs@v6.3.1...v6.4.1)

Updates `rand` from 0.8.5 to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...rand_core-0.9.2)

Updates `tempfile` from 3.22.0 to 3.23.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.22.0...v3.23.0)

---
updated-dependencies:
- dependency-name: bytestring
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: hostname
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: humantime
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: proptest
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: pulsar
  dependency-version: 6.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tempfile
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants