chore(deps): bump the all-deps group across 1 directory with 12 updates #2049
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the all-deps group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [digest](https://github.com/RustCrypto/traits) | `0.11.0-rc.2` | `0.11.0-rc.3` | | [elliptic-curve](https://github.com/RustCrypto/traits) | `0.14.0-rc.14` | `0.14.0-rc.15` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.1` | `1.8.2` | | [backtrace](https://github.com/rust-lang/backtrace-rs) | `0.3.75` | `0.3.76` | | [hashbrown](https://github.com/rust-lang/hashbrown) | `0.15.5` | `0.16.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.175` | `0.2.176` | | [memchr](https://github.com/BurntSushi/memchr) | `2.7.5` | `2.7.6` | | [regex-automata](https://github.com/rust-lang/regex) | `0.4.10` | `0.4.11` | Updates `digest` from 0.11.0-rc.2 to 0.11.0-rc.3 - [Commits](RustCrypto/traits@digest-v0.11.0-rc.2...digest-v0.11.0-rc.3) Updates `elliptic-curve` from 0.14.0-rc.14 to 0.14.0-rc.15 - [Commits](RustCrypto/traits@elliptic-curve-v0.14.0-rc.14...elliptic-curve-v0.14.0-rc.15) Updates `zeroize` from 1.8.1 to 1.8.2 - [Commits](RustCrypto/utils@zeroize-v1.8.1...zeroize-v1.8.2) Updates `hybrid-array` from 0.4.2 to 0.4.5 - [Changelog](https://github.com/RustCrypto/hybrid-array/blob/master/CHANGELOG.md) - [Commits](RustCrypto/hybrid-array@v0.4.2...v0.4.5) Updates `backtrace` from 0.3.75 to 0.3.76 - [Release notes](https://github.com/rust-lang/backtrace-rs/releases) - [Changelog](https://github.com/rust-lang/backtrace-rs/blob/master/CHANGELOG.md) - [Commits](rust-lang/backtrace-rs@0.3.75...backtrace-v0.3.76) Updates `crypto-bigint` from 0.7.0-rc.6 to 0.7.0-rc.8 - [Changelog](https://github.com/RustCrypto/crypto-bigint/blob/master/CHANGELOG.md) - [Commits](RustCrypto/crypto-bigint@v0.7.0-rc.6...v0.7.0-rc.8) Updates `gimli` from 0.31.1 to 0.32.3 - [Changelog](https://github.com/gimli-rs/gimli/blob/master/CHANGELOG.md) - [Commits](gimli-rs/gimli@0.31.1...0.32.3) Updates `hashbrown` from 0.15.5 to 0.16.0 - [Release notes](https://github.com/rust-lang/hashbrown/releases) - [Changelog](https://github.com/rust-lang/hashbrown/blob/master/CHANGELOG.md) - [Commits](rust-lang/hashbrown@v0.15.5...v0.16.0) Updates `libc` from 0.2.175 to 0.2.176 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.176/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.175...0.2.176) Updates `memchr` from 2.7.5 to 2.7.6 - [Commits](BurntSushi/memchr@2.7.5...2.7.6) Updates `object` from 0.36.7 to 0.37.3 - [Changelog](https://github.com/gimli-rs/object/blob/master/CHANGELOG.md) - [Commits](gimli-rs/object@0.36.7...0.37.3) Updates `regex-automata` from 0.4.10 to 0.4.11 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-lang/regex/commits) --- updated-dependencies: - dependency-name: digest dependency-version: 0.11.0-rc.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: elliptic-curve dependency-version: 0.14.0-rc.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: zeroize dependency-version: 1.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: hybrid-array dependency-version: 0.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: backtrace dependency-version: 0.3.76 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: crypto-bigint dependency-version: 0.7.0-rc.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: gimli dependency-version: 0.32.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: hashbrown dependency-version: 0.16.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: libc dependency-version: 0.2.176 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: memchr dependency-version: 2.7.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: object dependency-version: 0.37.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: regex-automata dependency-version: 0.4.11 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all-deps ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
I'm not sure I understand where the build error comes from. I have trouble reproducing it in an isolated fashion. Edit: this occurs when |
|
@baloo it's the Previously this code compiled due to deref coercion, which turns The solution is to replace the implicit slice coercion with an explicit one. See: RustCrypto/traits#2025 |
tarcieri
pushed a commit
to RustCrypto/RSA
that referenced
this pull request
Sep 30, 2025
When a downstream crate enables the `subtle` feature in `hybrid-array`,
the crate would fail to compile:
```
src/algorithms/pss.rs:375:31
|
375 | if (salt_valid & h0.ct_eq(h)).into() {
| ----- ^ expected `&Array<u8, ...>`, found `&mut [u8]`
| |
| arguments to this method are incorrect
|
= note: expected reference `&Array<u8, <D as OutputSizeUser>::OutputSize>`
found mutable reference `&mut [u8]`
```
This is because the `hybrid_array::Array` was automatically deref'ed to
a slice. Now `Array` implements `subtle::ConstantTimeEq` that automatic
deref no longer happens.
This commit fixes that by converting one of the arguments of the
conversion that brings back the auto-deref.
Thanks to @tarcieri for the help debugging:
RustCrypto/formats#2049 (comment)
|
@dependabot recreate |
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all-deps group with 8 updates in the / directory:
0.11.0-rc.20.11.0-rc.30.14.0-rc.140.14.0-rc.151.8.11.8.20.3.750.3.760.15.50.16.00.2.1750.2.1762.7.52.7.60.4.100.4.11Updates
digestfrom 0.11.0-rc.2 to 0.11.0-rc.3Commits
ab7b15edigest v0.11.0-rc.3 (#2026)789d2beelliptic-curve: bump crypto-bigint to v0.7.0-rc.8 (#2025)63520aeCargo.lock: bump deps (#2024)38149faelliptic-curve: addpoint::LookupTableandBasepointTable(#2023)77f580dbuild(deps): bump the all-deps group with 6 updates (#2021)a47a556chore(deps): bump blobby to 0.4.0-pre.1, remove patch.crates-io (#2020)aae99a0aead: splitnew_test!intonew_pass_test!andnew_fail_test!(#2019)219861daead: fixup blob files (#2018)Updates
elliptic-curvefrom 0.14.0-rc.14 to 0.14.0-rc.15Commits
7414db4elliptic-curve v0.14.0-rc.15 (#2027)ab7b15edigest v0.11.0-rc.3 (#2026)789d2beelliptic-curve: bump crypto-bigint to v0.7.0-rc.8 (#2025)63520aeCargo.lock: bump deps (#2024)38149faelliptic-curve: addpoint::LookupTableandBasepointTable(#2023)77f580dbuild(deps): bump the all-deps group with 6 updates (#2021)a47a556chore(deps): bump blobby to 0.4.0-pre.1, remove patch.crates-io (#2020)aae99a0aead: splitnew_test!intonew_pass_test!andnew_fail_test!(#2019)219861daead: fixup blob files (#2018)64bcc11digest v0.11.0-rc.2 (#2017)Updates
zeroizefrom 1.8.1 to 1.8.2Commits
c100874zeroize v1.8.2 (#1229)3940ccbSwitch fromdoc_auto_cfgtodoc_cfg(#1228)c68a520Fix Nightly warnings (#1080)b15cc6ccargo: pointrepositorymetadata to clonable URLs (#1079)3db6690zeroize: fixhomepage/repositoryin Cargo.toml (#1076)Updates
hybrid-arrayfrom 0.4.2 to 0.4.5Changelog
Sourced from hybrid-array's changelog.
Commits
8791daav0.4.5 (#155)a7f1721Switch fromdoc_auto_cfgtodoc_cfg(#154)b4b3cd1Implarbitrary::ArbitraryforArray(#153)0b65719CI: usecargo hackto test--feature-powerset(#152)ef365c3v0.4.4 (#150)5c3287eEnable thesubtle/const-genericsfeature (#149)0bd1071v0.4.3 (#148)6346ecbAddas_ptr(_mut); makeas_slice(_mut)intoconst fn(#147)1099e90DRY outas_flattenedimpls (#146)49cc4d1Moveas_flattened(_mut)defs out ofitermodule (#145)Updates
backtracefrom 0.3.75 to 0.3.76Release notes
Sourced from backtrace's releases.
Changelog
Sourced from backtrace's changelog.
Commits
775f6a1modify CHANGELOG.md to not be a git log dumpbb0cdc3chore: release v0.3.76a8b55f0Merge of rust-lang/backtrace-rs#725: Fix missing alignment check for ELF note...0b83800Expandtake_nhdrdoc-commenta405950Merge pull request #737 from workingjubilee/address-dbghelp-soundness-risks06dca9aExpand doc-comment ondo_resolve05ad047Remove padding bytes risk in dbghelp with MaybeUninitdccdb4dUpgradecpp_demanglerust-lang/backtrace-rs#73250fe434rust-lang/backtrace-rs#73479d3514Switch fromwindows-targetstowindows-linkrust-lang/backtrace-rs#727Updates
crypto-bigintfrom 0.7.0-rc.6 to 0.7.0-rc.8Commits
46298d8v0.7.0-rc.8 (#967)b3e068aUpdate Karatsuba multiplication (#962)14b7571Bumphybrid-arrayto v0.4.4; enablesubtlefeature (#964)1391805v0.7.0-rc.7 (#961)4121bf0Faster inversion modulo 2^k (#932)8df19e1Bump proptest from 1.7.0 to 1.8.0 (#958)eaa5206Optimized Binary Extended GCD (#945)0cf0d1dbenches: fixnightlybuild failure (#960)7fd787dRe-apply "Faster wrapping multiplication" (#954)4f1afeaBump hybrid-array from 0.4.1 to 0.4.3 (#959)Updates
gimlifrom 0.31.1 to 0.32.3Changelog
Sourced from gimli's changelog.
... (truncated)
Commits
8bc8e62Release 0.32.3 (#799)6ba31bdAdd an example of usingwrite::Dwarf::from(#790)106bc2fAccept -2 for tombstone values (#791)f95b50dAdd more x86-64 registers (#794)bf7fa48Add comments to examples regarding unsafe mmap usage (#793)0c2a60cRelease 0.32.2 (#789)bf70320Release 0.32.1 (#788)36b067fwrite/line: support any form for file source code (#786)1b20e8bKeep the string form ofDW_LNCT_LLVM_sourceon conversion (#784)7335f00read/abbrev: handle missing null terminator (#781)Updates
hashbrownfrom 0.15.5 to 0.16.0Release notes
Sourced from hashbrown's releases.
Changelog
Sourced from hashbrown's changelog.
Commits
8d4def0Merge pull request #643 from cuviper/newtype-hashere0f404cusefeature(hasher_prefixfree_extras)95ffed3ChangeDefaultHashBuilderto an opaque newtypebf35a11Merge pull request #641 from hoxxep/foldhash-0.2e2a634bMerge pull request #642 from heiher/loong-simd-types88794e7loongarch64: Use unified data types for SIMD intrinsicsb22dd85perf: Bump foldhash to 0.2.0fe72a08Merge pull request #639 from gaujay/unbloat-get_inner-perf71f8f37Merge pull request #637 from gaujay/add-benchmarksf1c039cUn-bloat get_inner functions to restore lookup performanceUpdates
libcfrom 0.2.175 to 0.2.176Release notes
Sourced from libc's releases.
... (truncated)
Changelog
Sourced from libc's changelog.
... (truncated)
Commits
15e1389chore: Release libc 0.2.1766ca5571Warn on missing debug implementationse653c54cleanup: Remove theconst_fn!macroe447441cleanup: Simplify the syntax off!and similar macros776a614cleanup: Usetarget_vendor = "apple"d32f60ddoc: Remove an unneeded link to the old ctest repo8c8584bResolve a ctest FIXME regarding use ofsize_ofin array lengths09c8436Remove thelibc_ctestfeaturefd3ffe4Removelibc_const_extern_fn9b77a49Add a note about whyPaddingrequiresT: CopyUpdates
memchrfrom 2.7.5 to 2.7.6Commits
9ba486e2.7.6ec25b80aarch64: fix NEON optimization on big-endianUpdates
objectfrom 0.36.7 to 0.37.3Changelog
Sourced from object's changelog.
... (truncated)
Commits
916c47bRelease 0.37.3 (#804)c411fe4write/coff: use IMAGE_WEAK_EXTERN_SEARCH_ALIAS for weak externs (#803)3e9d3a4readobj/elf: handle relocation sections with link 0 (#800)d7b5774Add helper methods for mutating section and symbol flags (#801)31a232felf: Add constants for GNU SFrame (#799)8500ba6Release 0.37.217b94acFix clippy warnings436bc87Update Cargo.lockceba523Update wasmparser dependency93f67c6write/coff: add PPC support (#795)Updates
regex-automatafrom 0.4.10 to 0.4.11Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions