Skip to content

chore(deps): bump the all-other-cargo-deps group across 1 directory with 3 updates#4340

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/native/main/all-other-cargo-deps-dc5f96c9bd
Open

chore(deps): bump the all-other-cargo-deps group across 1 directory with 3 updates#4340
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/native/main/all-other-cargo-deps-dc5f96c9bd

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 15, 2026

Bumps the all-other-cargo-deps group with 3 updates in the /native directory: tokio, lz4_flex and cc.

Updates tokio from 1.52.2 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

  • sync: fix underflow in mpsc channel len() (#8062)
  • sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
  • sync: require that an RwLock has max_readers != 0 (#8076)
  • sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Commits

Updates lz4_flex from 0.13.0 to 0.13.1

Changelog

Sourced from lz4_flex's changelog.

0.13.1 (2026-05-09)

Fixes

  • Fix compression with short dictionaries (less than 4 bytes), avoiding a panic/out-of-bounds read #222
Compression with dictionaries shorter than the minimum match length of 4 now falls
back to compression without a dictionary instead of panicking or reading past
the dictionary. 

This is a security fix for unsafe compression with untrusted dictionaries.
Users on 0.13.0 should upgrade to 0.13.1.

  • Fix panic in From<io::Error> implementation for frame::Error #221 (thanks @​phoerious)
Commits

Updates cc from 1.2.61 to 1.2.62

Release notes

Sourced from cc's releases.

cc-v1.2.62

Other

  • Regenerate target info (#1721)
  • Allow exceptions on wasm platforms (#1714)
  • Add relibc env (#1710)
  • recognize sh4 architecture in parse_arch() (#1712)
Changelog

Sourced from cc's changelog.

1.2.62 - 2026-05-08

Other

  • Regenerate target info (#1721)
  • Allow exceptions on wasm platforms (#1714)
  • Add relibc env (#1710)
  • recognize sh4 architecture in parse_arch() (#1712)
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 15, 2026
…ith 3 updates

Bumps the all-other-cargo-deps group with 3 updates in the /native directory: [tokio](https://github.com/tokio-rs/tokio), [lz4_flex](https://github.com/pseitz/lz4_flex) and [cc](https://github.com/rust-lang/cc-rs).


Updates `tokio` from 1.52.2 to 1.52.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.2...tokio-1.52.3)

Updates `lz4_flex` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/pseitz/lz4_flex/releases)
- [Changelog](https://github.com/PSeitz/lz4_flex/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pseitz/lz4_flex/commits)

Updates `cc` from 1.2.61 to 1.2.62
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.61...cc-v1.2.62)

---
updated-dependencies:
- dependency-name: cc
  dependency-version: 1.2.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-other-cargo-deps
- dependency-name: lz4_flex
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-other-cargo-deps
- dependency-name: tokio
  dependency-version: 1.52.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-other-cargo-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the all-other-cargo-deps group in /native with 3 updates chore(deps): bump the all-other-cargo-deps group across 1 directory with 3 updates May 16, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/native/main/all-other-cargo-deps-dc5f96c9bd branch from 23b6a2d to 8dc86e0 Compare May 16, 2026 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants