WARNING: THIS SITE IS A MIRROR OF GITHUB.COM / IT CANNOT LOGIN OR REGISTER ACCOUNTS / THE CONTENTS ARE PROVIDED AS-IS / THIS SITE ASSUMES NO RESPONSIBILITY FOR ANY DISPLAYED CONTENT OR LINKS / IF YOU FOUND SOMETHING MAY NOT GOOD FOR EVERYONE, CONTACT ADMIN AT ilovescratch@foxmail.com
Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 3, 2025

Bumps the all-updates group with 11 updates in the /core directory:

Package From To
anyhow 1.0.98 1.0.99
tokio 1.47.0 1.47.1
tonic 0.14.0 0.14.2
tonic-prost 0.14.0 0.14.2
tonic-reflection 0.14.0 0.14.2
tonic-build 0.14.0 0.14.2
tracing-subscriber 0.3.19 0.3.20
tonic-prost-build 0.14.0 0.14.2
aya-ebpf 44ec978 a0b63b8
which 7.0.3 8.0.0
libc 0.2.174 0.2.175

Updates anyhow from 1.0.98 to 1.0.99

Release notes

Sourced from anyhow's releases.

1.0.99

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)
Commits
  • f2b963a Release 1.0.99
  • 2c64c15 Merge pull request #420 from dtolnay/enotempty
  • 8cf66f7 Allow build-script cleanup failure with NFSv3 output directory to be non-fatal
  • f5e145c Revert "Pin nightly toolchain used for miri job"
  • 1d7ef1d Update ui test suite to nightly-2025-06-30
  • 6929572 Update ui test suite to nightly-2025-06-18
  • 37224e3 Ignore mismatched_lifetime_syntaxes lint
  • 11f0e81 Pin nightly toolchain used for miri job
  • d04c999 Raise required compiler for backtrace feature to rust 1.82
  • 219d163 Update test suite to nightly-2025-05-01
  • See full diff in compare view

Updates tokio from 1.47.0 to 1.47.1

Release notes

Sourced from tokio's releases.

Tokio v1.47.1

1.47.1 (August 1st, 2025)

Fixed

  • process: fix panic from spurious pidfd wakeup (#7494)
  • sync: fix broken link of Python asyncio.Event in SetOnce docs (#7485)

#7485: tokio-rs/tokio#7485 #7494: tokio-rs/tokio#7494

Commits

Updates tonic from 0.14.0 to 0.14.2

Release notes

Sourced from tonic's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.0...v0.14.1

Commits

Updates tonic-prost from 0.14.0 to 0.14.2

Release notes

Sourced from tonic-prost's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.0...v0.14.1

Commits

Updates tonic-reflection from 0.14.0 to 0.14.2

Release notes

Sourced from tonic-reflection's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.0...v0.14.1

Commits

Updates tonic-build from 0.14.0 to 0.14.2

Release notes

Sourced from tonic-build's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.0...v0.14.1

Commits

Updates tracing-subscriber from 0.3.19 to 0.3.20

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.20

Security Fix: ANSI Escape Sequence Injection (CVE-TBD)

Impact

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

  • Manipulate terminal title bars
  • Clear screens or modify terminal display
  • Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

Solution

Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.

Affected Versions

All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability.

Recommendations

Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application:

  • Logs user-provided input (form data, HTTP headers, query parameters, etc.)
  • Runs in environments where terminal output is displayed to users

Migration

This is a patch release with no breaking API changes. Simply update your Cargo.toml:

[dependencies]
tracing-subscriber = "0.3.20"

Acknowledgments

We would like to thank zefr0x who responsibly reported the issue at [email protected].

If you believe you have found a security vulnerability in any tokio-rs project, please email us at [email protected].

Commits

Updates tonic-prost-build from 0.14.0 to 0.14.2

Release notes

Sourced from tonic-prost-build's releases.

v0.14.2

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.0...v0.14.1

Commits

Updates aya-ebpf from 44ec978 to a0b63b8

Commits
  • a0b63b8 build(deps): bump the cargo-crates group with 2 updates (#1333)
  • 23cbab5 aya-obj, aya-ebpf-bindings: regenerate
  • 9261554 build(deps): bump the cargo-crates group with 2 updates
  • 4fe920f xtask: add the target method to Architecture
  • 2869cb8 build(deps): update cargo_metadata requirement in the cargo-crates group
  • a01b1d8 .github: build bpf-linker with llvm-21
  • 9a367c1 build(deps): bump actions/checkout in the github-actions group
  • a3aa387 remove superfluous commas
  • 0d11937 doc: generate docs in macro
  • 9996f7a Allow +debN kernels
  • Additional commits viewable in compare view

Updates aya-log-ebpf from 44ec978 to a0b63b8

Commits
  • a0b63b8 build(deps): bump the cargo-crates group with 2 updates (#1333)
  • 23cbab5 aya-obj, aya-ebpf-bindings: regenerate
  • 9261554 build(deps): bump the cargo-crates group with 2 updates
  • 4fe920f xtask: add the target method to Architecture
  • 2869cb8 build(deps): update cargo_metadata requirement in the cargo-crates group
  • a01b1d8 .github: build bpf-linker with llvm-21
  • 9a367c1 build(deps): bump actions/checkout in the github-actions group
  • a3aa387 remove superfluous commas
  • 0d11937 doc: generate docs in macro
  • 9996f7a Allow +debN kernels
  • Additional commits viewable in compare view

Updates which from 7.0.3 to 8.0.0

Release notes

Sourced from which's releases.

8.0.0

What's Changed

  • Add new Sys trait to allow abstracting over the underlying filesystem. Particularly useful for wasm32-unknown-unknown targets. Thanks @​dsherret for this contribution to which!
  • Add more debug level tracing for otherwise silent I/O errors.
  • Call the NonFatalHandler in more places to catch previously ignored I/O errors.
  • Remove use of the either dependency.

New Contributors

Changelog

Sourced from which's changelog.

8.0.0

  • Add new Sys trait to allow abstracting over the underlying filesystem. Particularly useful for wasm32-unknown-unknown targets. Thanks @​dsherret for this contribution to which!
  • Add more debug level tracing for otherwise silent I/O errors.
  • Call the NonFatalHandler in more places to catch previously ignored I/O errors.
  • Remove use of the either dependency.
Commits
  • adac2cd bump version, update changelog
  • 84e152e reduce sys::Sys requirements, add some tracing for otherwise silent errors (#...
  • a0a6daf feat: add Sys trait for swapping out system (#109)
  • eef1998 Add actively maintained badge
  • See full diff in compare view

Updates libc from 0.2.174 to 0.2.175

Release notes

Sourced from libc's releases.

0.2.175

Added

  • AIX: Add getpeereid (#4524)
  • AIX: Add struct ld_info and friends (#4578)
  • AIX: Retore struct winsize (#4577)
  • Android: Add UDP socket option constants (#4619)
  • Android: Add CLONE_CLEAR_SIGHAND and CLONE_INTO_CGROUP (#4502)
  • Android: Add more prctl constants (#4531)
  • FreeBSD Add further TCP stack-related constants (#4196)
  • FreeBSD x86-64: Add mcontext_t.mc_tlsbase (#4503)
  • FreeBSD15: Add kinfo_proc.ki_uerrmsg (#4552)
  • FreeBSD: Add in_conninfo (#4482)
  • FreeBSD: Add xinpgen and related types (#4482)
  • FreeBSD: Add xktls_session (#4482)
  • Haiku: Add functionality from libbsd (#4221)
  • Linux: Add SECBIT_* (#4480)
  • NetBSD, OpenBSD: Export ioctl request generator macros (#4460)
  • NetBSD: Add ptsname_r (#4608)
  • RISCV32: Add time-related syscalls (#4612)
  • Solarish: Add strftime* (#4453)
  • linux: Add EXEC_RESTRICT_* and EXEC_DENY_* (#4545)

Changed

  • AIX: Add const to signatures to be consistent with other platforms (#4563)

Fixed

  • AIX: Fix the type of struct statvfs.f_fsid (#4576)
  • AIX: Fix the type of constants for the ioctl request argument (#4582)
  • AIX: Fix the types of stat{,64}.st_*tim (#4597)
  • AIX: Use unique errno values (#4507)
  • Build: Fix an incorrect target_os -> target_arch check (#4550)
  • FreeBSD: Fix the type of xktls_session_onedir.ifnet (#4552)
  • Mips64 musl: Fix the type of nlink_t (#4509)
  • Mips64 musl: Use a special MIPS definition of stack_t (#4528)
  • Mips64: Fix SI_TIMER, SI_MESGQ and SI_ASYNCIO definitions (#4529)
  • Musl Mips64: Swap the order of si_errno and si_code in siginfo_t (#4530)
  • Musl Mips64: Use a special MIPS definition of statfs (#4527)
  • Musl: Fix the definition of fanotify_event_metadata (#4510)
  • NetBSD: Correct enum fae_action to be #[repr(C)] (#60a8cfd5)
  • PSP: Correct char -> c_char (eaab4fc3)
  • PowerPC musl: Fix termios definitions (#4518)
  • PowerPC musl: Fix the definition of EDEADLK (#4517)
  • PowerPC musl: Fix the definition of NCCS (#4513)
  • PowerPC musl: Fix the definitions of MAP_LOCKED and MAP_NORESERVE (#4516)
  • PowerPC64 musl: Fix the definition of shmid_ds (#4519)

Deprecated

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.175 - 2025-08-10

Added

  • AIX: Add getpeereid (#4524)
  • AIX: Add struct ld_info and friends (#4578)
  • AIX: Retore struct winsize (#4577)
  • Android: Add UDP socket option constants (#4619)
  • Android: Add CLONE_CLEAR_SIGHAND and CLONE_INTO_CGROUP (#4502)
  • Android: Add more prctl constants (#4531)
  • FreeBSD Add further TCP stack-related constants (#4196)
  • FreeBSD x86-64: Add mcontext_t.mc_tlsbase (#4503)
  • FreeBSD15: Add kinfo_proc.ki_uerrmsg (#4552)
  • FreeBSD: Add in_conninfo (#4482)
  • FreeBSD: Add xinpgen and related types (#4482)
  • FreeBSD: Add xktls_session (#4482)
  • Haiku: Add functionality from libbsd (#4221)
  • Linux: Add SECBIT_* (#4480)
  • NetBSD, OpenBSD: Export ioctl request generator macros (#4460)
  • NetBSD: Add ptsname_r (#4608)
  • RISCV32: Add time-related syscalls (#4612)
  • Solarish: Add strftime* (#4453)
  • linux: Add EXEC_RESTRICT_* and EXEC_DENY_* (#4545)

Changed

  • AIX: Add const to signatures to be consistent with other platforms (#4563)

Fixed

  • AIX: Fix the type of struct statvfs.f_fsid (#4576)
  • AIX: Fix the type of constants for the ioctl request argument (#4582)
  • AIX: Fix the types of stat{,64}.st_*tim (#4597)
  • AIX: Use unique errno values (#4507)
  • Build: Fix an incorrect target_os -> target_arch check (#4550)
  • FreeBSD: Fix the type of xktls_session_onedir.ifnet (#4552)
  • Mips64 musl: Fix the type of nlink_t (#4509)
  • Mips64 musl: Use a special MIPS definition of stack_t (#4528)
  • Mips64: Fix SI_TIMER, SI_MESGQ and SI_ASYNCIO definitions (#4529)
  • Musl Mips64: Swap the order of si_errno and si_code in siginfo_t (#4530)
  • Musl Mips64: Use a special MIPS definition of statfs (#4527)
  • Musl: Fix the definition of fanotify_event_metadata (#4510)
  • NetBSD: Correct enum fae_action to be #[repr(C)] (#60a8cfd5)
  • PSP: Correct char -> c_char (eaab4fc3)
  • PowerPC musl: Fix termios definitions (#4518)
  • PowerPC musl: Fix the definition of EDEADLK (#4517)
  • PowerPC musl: Fix the definition of NCCS (#4513)
  • PowerPC musl: Fix the definitions of MAP_LOCKED and MAP_NORESERVE (#4516)
  • PowerPC64 musl: Fix the definition of shmid_ds (#4519)

... (truncated)

Commits
  • 84e26e6 Update the lockfile
  • 4d04aee chore: release libc 0.2.175
  • 94a7f32 cleanup: Format a file that was missed
  • 1725273 Rename the ctest file from main to ctest
  • e9b021b freebsd adding further TCP stack related constants.
  • 9606a29 freebsd15: Add ki_uerrmsg to struct kinfo_proc
  • 2816bc2 libc-test: include sys/ktls.h on freebsd
  • adfe283 libc-test: Account for xktls_session_onedir::gen (freebsd)
  • 4cc1bf4 freebsd: Document avoidance of reserved name gen
  • 7cdcaa6 freebsd: Fix type of struct xktls_session_onedir, field ifnet
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-updates group with 11 updates in the /core directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.98` | `1.0.99` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.47.0` | `1.47.1` |
| [tonic](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` |
| [tonic-prost](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` |
| [tonic-reflection](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` |
| [tonic-build](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.19` | `0.3.20` |
| [tonic-prost-build](https://github.com/hyperium/tonic) | `0.14.0` | `0.14.2` |
| [aya-ebpf](https://github.com/aya-rs/aya) | ``44ec978`` | ``a0b63b8`` |
| [which](https://github.com/harryfei/which-rs) | `7.0.3` | `8.0.0` |
| [libc](https://github.com/rust-lang/libc) | `0.2.174` | `0.2.175` |



Updates `anyhow` from 1.0.98 to 1.0.99
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.98...1.0.99)

Updates `tokio` from 1.47.0 to 1.47.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.47.0...tokio-1.47.1)

Updates `tonic` from 0.14.0 to 0.14.2
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.14.0...v0.14.2)

Updates `tonic-prost` from 0.14.0 to 0.14.2
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.14.0...v0.14.2)

Updates `tonic-reflection` from 0.14.0 to 0.14.2
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.14.0...v0.14.2)

Updates `tonic-build` from 0.14.0 to 0.14.2
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.14.0...v0.14.2)

Updates `tracing-subscriber` from 0.3.19 to 0.3.20
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.19...tracing-subscriber-0.3.20)

Updates `tonic-prost-build` from 0.14.0 to 0.14.2
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.14.0...v0.14.2)

Updates `aya-ebpf` from `44ec978` to `a0b63b8`
- [Release notes](https://github.com/aya-rs/aya/releases)
- [Commits](aya-rs/aya@44ec978...a0b63b8)

Updates `aya-log-ebpf` from `44ec978` to `a0b63b8`
- [Release notes](https://github.com/aya-rs/aya/releases)
- [Commits](aya-rs/aya@44ec978...a0b63b8)

Updates `which` from 7.0.3 to 8.0.0
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@7.0.3...8.0.0)

Updates `libc` from 0.2.174 to 0.2.175
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.175/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.174...0.2.175)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.99
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: tokio
  dependency-version: 1.47.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: tonic
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: tonic-prost
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: tonic-reflection
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: tonic-build
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: tracing-subscriber
  dependency-version: 0.3.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: tonic-prost-build
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: aya-ebpf
  dependency-version: a0b63b8811450f6add2adb40faee627453fe95c9
  dependency-type: direct:production
  dependency-group: all-updates
- dependency-name: aya-log-ebpf
  dependency-version: a0b63b8811450f6add2adb40faee627453fe95c9
  dependency-type: direct:production
  dependency-group: all-updates
- dependency-name: which
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-updates
- dependency-name: libc
  dependency-version: 0.2.175
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 3, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 3, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 4, 2025

Dependabot attempted to update this pull request, but because the branch dependabot/cargo/core/all-updates-de49129273 is protected it was unable to do so.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

1 similar comment
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 6, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants