Skip to content

Bump the "apps" group with 1 updates across multiple ecosystems#202

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/apps-13ff575f8f
Open

Bump the "apps" group with 1 updates across multiple ecosystems#202
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/apps-13ff575f8f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026 •
edited
Loading

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the apps group with 3 updates: chrono, flate2 and zip.

Updates chrono from 0.4.42 to 0.4.43

Release notes

Sourced from chrono's releases.

0.4.43

What's Changed

Commits
  • 45caaa9 Update copyright year to 2026 in LICENSE.txt
  • 1c0b8f0 Bump version to 0.4.43
  • a03e43b Upgrade windows-bindgen to 0.66
  • 4fedaba Ignore bincode advisory
  • f4b7bbd Bump actions/checkout from 5 to 6
  • db12973 Added doctest for the NaiveDate years_since function (#1755)
  • 34b5f49 chore: minor improvement for docs
  • 8c82711 Bump actions/setup-node from 5 to 6
  • ea1f11b Drop deny lints, eager Debug impls are a mixed blessing
  • 35f9f2d Add feature gated defmt support.
  • Additional commits viewable in compare view

Updates flate2 from 1.1.5 to 1.1.8

Release notes

Sourced from flate2's releases.

1.1.8

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.7...1.1.8

1.1.7 - depend on zlib-rs directly and remove libz-rs-sys

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.5...1.1.6

1.1.6 - YANKED

It caused rust-lang/flate2-rs#515.

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.5...1.1.6

Commits
  • 8b66c27 Merge pull request #525 from Byron/test-zlib-API
  • 5e752c9 Address PR review
  • 3196dd0 refactor internal feature toggles to better represent the status quo
  • 106cbcc Bump patch level in preparation for release
  • af7a0b3 Add capabilties test for functions reserved to zlib-implementations.
  • 22c77ee Describe unreachable!("...") branch in Deflate::set_level() of zlib-rs
  • b9e2979 Remove C-binding specific restriction from CI for zlib-rs test.
  • 71eb5c5 Merge pull request #524 from Byron/complete-zlib-rs
  • fec67eb zlib-rs: support set_dictionary and set_level
  • ecfdc2d update zlib-rs to 0.5.5
  • Additional commits viewable in compare view

Updates zip from 7.0.0 to 7.2.0

Release notes

Sourced from zip's releases.

v7.2.0

🚀 Features

  • add read_zipfile_from_stream_with_compressed_size (#70)
  • Allow choosing bzip2 rust backend (#329)

🐛 Bug Fixes

  • Need to include zip64 extra field in central directory (fix #353) (#360)
  • Fails to extract file which might or might not be malformed (#376) (#426)
  • (aes) Allow AES encryption while streaming (#463)
  • Default "platform" field in zip files should be set to the local platform, rather than always "Unix" (#470) (#471)

🚜 Refactor

  • Define cfg_if! and cfg_if_expr! internal macros (#438)

⚡ Performance

  • Change an assert to debug_assert when encrypting/decrypting AES, and eliminate a fallible operation (#521)
  • eliminate a String clone per new file added to archive, and other related refactors (#522)

⚙️ Miscellaneous Tasks

  • Fix another merge error, this one affecting only builds with flate2 and not zopfli
  • Fix more merge issues
  • Fix merge
  • Fix write_dir build errors on specific feature configs
  • Fix clippy warning
  • Fix --all-features build error
  • Fix merge

v7.1.0

🚀 Features

  • display the underlying error in Display impl for ZipError::Display (#483)
  • Enable creation of ZipArchive without reparsing (#485)

🐛 Bug Fixes

  • Return InvalidPassword rather than panic when AES key is the wrong length (#457)
  • bench with auto zip64 comment (#505)
  • add condition for getrandom dependency (#504)
  • (zipcrypto) Support streaming ZipCrypto encryption, don't store entire file in memory (#462)

🚜 Refactor

  • Clean up imports and move types (#461)
  • Replace handwritten Ord and PartialOrd for DateTime (#484)

... (truncated)

Changelog

Sourced from zip's changelog.

7.2.0 - 2026-01-20

🚀 Features

  • add read_zipfile_from_stream_with_compressed_size (#70)
  • Allow choosing bzip2 rust backend (#329)

🐛 Bug Fixes

  • Need to include zip64 extra field in central directory (fix #353) (#360)
  • Fails to extract file which might or might not be malformed (#376) (#426)
  • (aes) Allow AES encryption while streaming (#463)
  • Default "platform" field in zip files should be set to the local platform, rather than always "Unix" (#470) (#471)

🚜 Refactor

  • Define cfg_if! and cfg_if_expr! internal macros (#438)

⚡ Performance

  • Change an assert to debug_assert when encrypting/decrypting AES, and eliminate a fallible operation (#521)
  • eliminate a String clone per new file added to archive, and other related refactors (#522)

7.1.0 - 2026-01-14

🚀 Features

  • display the underlying error in Display impl for ZipError (#483)
  • Enable creation of ZipArchive without reparsing (#485)

🐛 Bug Fixes

  • Return InvalidPassword rather than panic when AES key is the wrong length (#457)
  • bench with auto zip64 comment (#505)
  • add condition for getrandom dependency (#504)
  • (zipcrypto) Support streaming ZipCrypto encryption, don't store entire file in memory (#462)

🚜 Refactor

  • Clean up imports and move types (#461)
  • Replace handwritten Ord and PartialOrd for DateTime (#484)

⚙️ Miscellaneous Tasks

  • Lock lzma-rust2 to at least 0.15.5 (#491)
Commits
  • 46dc29c chore: release v7.2.0 (#526)
  • 8a586c6 test: Move a test that was in wrong folder and was using main() instead of `#...
  • cfbb476 docs(examples): Fix remaining log-injection alerts, and simplify writeln to e...
  • d905296 ci: Disable trigger on non-master push (#538)
  • a3a8696 chore(deps): Increase zstd minimum version to 0.13.3 (#539)
  • abd8bc8 ci: Add wasm tests and restore conditional wasm-bindgen dependency (#525)
  • c10c339 doc(examples): add delete/update examples (#56)
  • 9c1a9c7 docs(examples): Fix code scanning alert no. 228: Uncontrolled data used in pa...
  • a12eaaf ci: Combine rename invocations (#533)
  • e86d376 fix: Need to include zip64 extra field in central directory (fix #353) (#360)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(apps): bump the apps group with 3 updates
0be4ab0 
Bumps the apps group with 3 updates: [chrono](https://github.com/chronotope/chrono), [flate2](https://github.com/rust-lang/flate2-rs) and [zip](https://github.com/zip-rs/zip2).


Updates `chrono` from 0.4.42 to 0.4.43
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.42...v0.4.43)

Updates `flate2` from 1.1.5 to 1.1.8
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.5...1.1.8)

Updates `zip` from 7.0.0 to 7.2.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v7.0.0...v7.2.0)

---
updated-dependencies:
- dependency-name: chrono
  dependency-version: 0.4.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: apps
- dependency-name: flate2
  dependency-version: 1.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: apps
- dependency-name: zip
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: apps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Feb 1, 2026
@dependabot dependabot bot requested review from a team as code owners February 1, 2026 06:10
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Feb 1, 2026
@sid-maddy sid-maddy self-assigned this Feb 2, 2026
@sid-maddy sid-maddy closed this Feb 2, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Feb 2, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/apps-13ff575f8f branch February 2, 2026 06:57
@sid-maddy sid-maddy restored the dependabot/apps-13ff575f8f branch February 15, 2026 08:18
@sid-maddy sid-maddy reopened this Feb 15, 2026
@sid-maddy
Copy link
Copy Markdown
Contributor

sid-maddy commented Feb 15, 2026

build-push CI job failures are due to actions/toolkit#2294

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@sid-maddy sid-maddy

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sid-maddy