Bump the dependencies group with 8 updates by dependabot[bot] · Pull Request #334 · mitmproxy/mitmproxy_rs

dependabot · 2026-10-21T23:56:53Z

Bumps the dependencies group with 8 updates:

Package	From	To
log	`0.4.33`	`0.4.34`
smoltcp	`0.13.1`	`0.14.0`
hickory-resolver	`0.26.1`	`0.26.2`
hickory-server	`0.26.1`	`0.26.2`
flate2	`1.1.9`	`1.1.10`
tree-sitter	`0.26.12`	`0.26.13`
tree-sitter-highlight	`0.26.12`	`0.26.13`
which	`8.0.5`	`8.0.6`

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

doc: Add context-logger utility to README by @alekseysidorov in rust-lang/log#735

Add alloc support for boxed loggers by @malezjaa in rust-lang/log#737

New Contributors

@alekseysidorov made their first contribution in rust-lang/log#735

@malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

doc: Add context-logger utility to README by @alekseysidorov in rust-lang/log#735

Add alloc support for boxed loggers by @malezjaa in rust-lang/log#737

New Contributors

@alekseysidorov made their first contribution in rust-lang/log#735

@malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

8034743 Merge pull request #738 from rust-lang/cargo/0.4.34
7d1e24e prepare for 0.4.34 release
3b939b6 Merge pull request #737 from malezjaa/master
b88266c Add alloc support for boxed loggers
037d7a5 doc: Add context-logger utility to README
See full diff in compare view

Updates smoltcp from 0.13.1 to 0.14.0

Release notes

Sourced from smoltcp's releases.

v0.14.0

Changes in this release:

wire: Expose the checksum module publicly, so downstream crates can compute RFC 1071 Internet checksums over discontiguous buffers. (#1172)

tcp: don't rate-limit ACKs for out-of-window data segments. (#1162)

tcp: more rfc-compliant out-of-window rx handling. (#1164)

tcp: better handling of MSS (#1161)

tcp: congestion control api redesign to better support loss-based algorithms (#1154)

tcp: make reno RFC compliant (#1156)

tcp: make CUBIC RFC compliant (#1157)

tcp: fast retransmit improvements (#1155)

Implement core::error::Error for errors (#1175)

ip: Optimize the internet checksum calculation (#1176)

Upgrade defmt to version 1

tcp: add single-pass zero-allocation TcpOptionSummary parser (#1194)

phy: add TCP segmentation offload support (#1148)

Changelog

Sourced from smoltcp's changelog.

[0.14.0] - 2026-08-07

wire: Expose the checksum module publicly, so downstream crates can compute RFC 1071 Internet checksums over discontiguous buffers. (#1172)

tcp: don't rate-limit ACKs for out-of-window data segments. (#1162)

tcp: more rfc-compliant out-of-window rx handling. (#1164)

tcp: better handling of MSS (#1161)

tcp: congestion control api redesign to better support loss-based algorithms (#1154)

tcp: make reno RFC compliant (#1156)

tcp: make CUBIC RFC compliant (#1157)

tcp: fast retransmit improvements (#1155)

Implement core::error::Error for errors (#1175)

ip: Optimize the internet checksum calculation (#1176)

Upgrade defmt to version 1

tcp: add single-pass zero-allocation TcpOptionSummary parser (#1194)

phy: add TCP segmentation offload support (#1148)

Commits

cbfe05f Merge pull request #1196 from smoltcp-rs/release-v0.14.0
3f001dd Release 0.14.0.
7baefa5 Merge pull request #1148 from cagatay-y/segmentation-offload
5393f88 Merge pull request #1194 from Aditya-9-6/perf/tcp-option-fastpath
2fd4550 style(fmt): format options_bytes array in tcp.rs
db4cc69 fix(wire/tcp): add #[non_exhaustive] attribute to TcpOptionSummary
78db815 perf(wire/tcp): add single-pass zero-allocation TcpOptionSummary parser
888565d Merge pull request #1192 from hermit-os/defmt-v1
155731f Upgrade defmt to version 1
ed9acab Merge pull request #1171 from cirvladimir/build-warning-fixes
Additional commits viewable in compare view

Updates hickory-resolver from 0.26.1 to 0.26.2

Release notes

Sourced from hickory-resolver's releases.

v0.26.2

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in parsers. Other issues were related to UDP spoofing defenses, caching issues, and general DNS protocol correctness issues.

This is our first post-vulnpocalypse release, and most of these vulnerabilities were discovered through LLM-based workflows. The sheer volume of reports has been a challenge for our volunteer maintainers.

Resolved advisories:

GHSA-2vgh-3wfw-qj7c: RRSIG Signer's Name not checked against the RRset's zone

GHSA-57pw-897j-v4j6: Improper check of signature validity of NSEC and NSEC3 records

GHSA-wjgj-fvg9-65w9: DNSSEC validation ignores bogus records with a DNS class other than IN

GHSA-588m-chg6-8jqj: Inverted NSEC3 comparison allows forgery of proofs of nonexistence

GHSA-qw83-5pm2-ggp5: DNSSEC nonexistence forgery via incorrect handling of wraparound NSEC records

GHSA-3jvh-8vj5-65rq: NSEC3 apex NODATA accepted as secure with no QNAME-matching NSEC3

GHSA-3r6v-f3jh-vvqm: ancestor-delegation NSEC accepted as proof of nonexistence below the zone cut

GHSA-624w-vvww-xvpw: ancestor-delegation NSEC3 accepted as proof of nonexistence at and below the zone cut

GHSA-7php-9j59-g3ch: DNSSEC validation is missing RFC 6840 §4.4 checks

GHSA-vrv5-968r-5ggm: DNSSEC validation accepts bogus positive response with wildcard expansion

GHSA-p2jv-r3m3-7wf4: Nonexistence proof forgery due to insufficient checks on NSEC3 record names

GHSA-86vr-jm6c-7cpg: NSEC validator accepts NXDOMAIN for an empty non-terminal (ENT) that the covering NSEC proves exists

GHSA-8hq4-5836-w6q4: Server does not check validation status of SOA record in negative responses

GHSA-5j98-2g5x-46v6: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

GHSA-929p-gjf6-5hqj: DNSSEC validation accepts responses with the wrong RRset as a positive answer

GHSA-j2rc-wxwh-62g9: TrustAnchors does not check name of DNSKEY

GHSA-rx82-4p2j-j5cv: Name::hash discards label boundaries; ValidationCacheKey(u64) reuses the digest in Eq implementation, leaking an Insecure DNSSEC verdict across distinct owner names

GHSA-2hxp-x833-73f7: Hickory DNS recursor: ghost domain attack via child-side NS RRset queries

GHSA-x962-5xwx-fr8x: Unchecked subtraction in TSIG RDATA decoding panics when overflow checks are enabled

GHSA-wgfr-mphw-j5g4: Panic in zone file parser for SVCB and HTTPS

GHSA-hx8c-fjhc-hmf5: Panic in zone file parser for SVCB and HTTPS

GHSA-4rph-pmrw-mwpw: Zone file parser panics when parsing long lines

GHSA-3w89-7rx5-hpwx: Responses with QDCOUNT=0 bypass check for matching question section

GHSA-vcjp-57rr-mpfw: Out-of-bailiwick filtering is not applied to negative responses

GHSA-6w6g-hm98-mhgm: Unbounded TC-retry loop in NameServerPool::try_send (resource-exhaustion DoS)

GHSA-cx5j-p54p-q756: Cyclic sibling domain name server referrals without glue records cause exponential upstream query amplification in the recursor

GHSA-6h5c-jjg5-wj59: Glueless-NS referral fan-out without per-query work budget

GHSA-v44v-c8m4-gc43: Denial of service of client UDP connections via spoofed malformed responses

GHSA-67wc-6jq8-ghrc: Remote memory-amplification DoS via attacker-controlled RR counts in DNS message parsing

GHSA-2f4m-fq7w-mrgx: Remote memory exhaustion in Hickory DNS through incomplete DNS-over-QUIC request bodies

GHSA-g8wg-4mwh-fjfv: DoQ server has no timeout when reading request

GHSA-5r56-v84h-c3w5: DoH request body is buffered without a size limit

GHSA-6f2x-v7q7-m7m5: Resolver follows irrelevant CNAME records

GHSA-xv7c-h5g9-x25x: transient DS-fetch error inappropriately cached as BOGUS

GHSA-9px7-7m25-f6q2: Recursive resolver: Empty connection pool is cached after failed IP lookup

GHSA-29q9-p769-j8gq: Bogus answers cached for the attacker-supplied record TTL

GHSA-4jwp-xjwm-333g: Missing IPv4-Mapped IPv6 address canonicalization

Special thanks go out to @qifan-sailboat and Palo Alto Networks for their research and for reporting the bulk of these vulnerabilities. Thanks to @ATinyShoe, @kirk-baird, @thesmartshadow, @BeaCox, @jpds, @N0zoM1z0, and @JasonPap for reporting vulnerabilities as well.

If your organization is interested in coordinated disclosure of future security vulnerabilities, please contact @djc for commercial support.

What's Changed

... (truncated)

Commits

48323ef Bump version to 0.26.2
ccd6952 Only follow one CNAME record from each response
c04ad2b Better distinguish NODATA response and wildcards
64b4291 Add test for bogus wildcard expansion
478998b proto: constrain peer-controlled allocation sizes
8392769 resolver: avoid caching empty nameserver pools
e2d21d8 Replace use of SOA name with NSEC3 record parents
84fa8ab Check for correct zone name in covering NSEC3s too
09803ba Look for correct zone name in matching NSEC3s
26f45d3 Rename Nsec3RecordPair to Nsec3RecordInfo
Additional commits viewable in compare view

Updates hickory-server from 0.26.1 to 0.26.2

Release notes

Sourced from hickory-server's releases.

v0.26.2

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in parsers. Other issues were related to UDP spoofing defenses, caching issues, and general DNS protocol correctness issues.

This is our first post-vulnpocalypse release, and most of these vulnerabilities were discovered through LLM-based workflows. The sheer volume of reports has been a challenge for our volunteer maintainers.

Resolved advisories:

GHSA-2vgh-3wfw-qj7c: RRSIG Signer's Name not checked against the RRset's zone

GHSA-57pw-897j-v4j6: Improper check of signature validity of NSEC and NSEC3 records

GHSA-wjgj-fvg9-65w9: DNSSEC validation ignores bogus records with a DNS class other than IN

GHSA-588m-chg6-8jqj: Inverted NSEC3 comparison allows forgery of proofs of nonexistence

GHSA-qw83-5pm2-ggp5: DNSSEC nonexistence forgery via incorrect handling of wraparound NSEC records

GHSA-3jvh-8vj5-65rq: NSEC3 apex NODATA accepted as secure with no QNAME-matching NSEC3

GHSA-3r6v-f3jh-vvqm: ancestor-delegation NSEC accepted as proof of nonexistence below the zone cut

GHSA-624w-vvww-xvpw: ancestor-delegation NSEC3 accepted as proof of nonexistence at and below the zone cut

GHSA-7php-9j59-g3ch: DNSSEC validation is missing RFC 6840 §4.4 checks

GHSA-vrv5-968r-5ggm: DNSSEC validation accepts bogus positive response with wildcard expansion

GHSA-p2jv-r3m3-7wf4: Nonexistence proof forgery due to insufficient checks on NSEC3 record names

GHSA-86vr-jm6c-7cpg: NSEC validator accepts NXDOMAIN for an empty non-terminal (ENT) that the covering NSEC proves exists

GHSA-8hq4-5836-w6q4: Server does not check validation status of SOA record in negative responses

GHSA-5j98-2g5x-46v6: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

GHSA-929p-gjf6-5hqj: DNSSEC validation accepts responses with the wrong RRset as a positive answer

GHSA-j2rc-wxwh-62g9: TrustAnchors does not check name of DNSKEY

GHSA-rx82-4p2j-j5cv: Name::hash discards label boundaries; ValidationCacheKey(u64) reuses the digest in Eq implementation, leaking an Insecure DNSSEC verdict across distinct owner names

GHSA-2hxp-x833-73f7: Hickory DNS recursor: ghost domain attack via child-side NS RRset queries

GHSA-x962-5xwx-fr8x: Unchecked subtraction in TSIG RDATA decoding panics when overflow checks are enabled

GHSA-wgfr-mphw-j5g4: Panic in zone file parser for SVCB and HTTPS

GHSA-hx8c-fjhc-hmf5: Panic in zone file parser for SVCB and HTTPS

GHSA-4rph-pmrw-mwpw: Zone file parser panics when parsing long lines

GHSA-3w89-7rx5-hpwx: Responses with QDCOUNT=0 bypass check for matching question section

GHSA-vcjp-57rr-mpfw: Out-of-bailiwick filtering is not applied to negative responses

GHSA-6w6g-hm98-mhgm: Unbounded TC-retry loop in NameServerPool::try_send (resource-exhaustion DoS)

GHSA-cx5j-p54p-q756: Cyclic sibling domain name server referrals without glue records cause exponential upstream query amplification in the recursor

GHSA-6h5c-jjg5-wj59: Glueless-NS referral fan-out without per-query work budget

GHSA-v44v-c8m4-gc43: Denial of service of client UDP connections via spoofed malformed responses

GHSA-67wc-6jq8-ghrc: Remote memory-amplification DoS via attacker-controlled RR counts in DNS message parsing

GHSA-2f4m-fq7w-mrgx: Remote memory exhaustion in Hickory DNS through incomplete DNS-over-QUIC request bodies

GHSA-g8wg-4mwh-fjfv: DoQ server has no timeout when reading request

GHSA-5r56-v84h-c3w5: DoH request body is buffered without a size limit

GHSA-6f2x-v7q7-m7m5: Resolver follows irrelevant CNAME records

GHSA-xv7c-h5g9-x25x: transient DS-fetch error inappropriately cached as BOGUS

GHSA-9px7-7m25-f6q2: Recursive resolver: Empty connection pool is cached after failed IP lookup

GHSA-29q9-p769-j8gq: Bogus answers cached for the attacker-supplied record TTL

GHSA-4jwp-xjwm-333g: Missing IPv4-Mapped IPv6 address canonicalization

Special thanks go out to @qifan-sailboat and Palo Alto Networks for their research and for reporting the bulk of these vulnerabilities. Thanks to @ATinyShoe, @kirk-baird, @thesmartshadow, @BeaCox, @jpds, @N0zoM1z0, and @JasonPap for reporting vulnerabilities as well.

If your organization is interested in coordinated disclosure of future security vulnerabilities, please contact @djc for commercial support.

What's Changed

... (truncated)

Commits

48323ef Bump version to 0.26.2
ccd6952 Only follow one CNAME record from each response
c04ad2b Better distinguish NODATA response and wildcards
64b4291 Add test for bogus wildcard expansion
478998b proto: constrain peer-controlled allocation sizes
8392769 resolver: avoid caching empty nameserver pools
e2d21d8 Replace use of SOA name with NSEC3 record parents
84fa8ab Check for correct zone name in covering NSEC3s too
09803ba Look for correct zone name in matching NSEC3s
26f45d3 Rename Nsec3RecordPair to Nsec3RecordInfo
Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Updates tree-sitter from 0.26.12 to 0.26.13

Release notes

Sourced from tree-sitter's releases.

v0.26.13

What's Changed

fix(query): correctly identify MISSING nodes in queries by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5835

fix(query): correctly set a state's skipped_quantifier flag when a by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5842

fix(generate): fold case-insensitive patterns at the AST leaves by @WillLillis in tree-sitter/tree-sitter#5854

fix(parser): avoid wide error nodes on unparseable input by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5855

fix(ci): run all workspace tests by @WillLillis in tree-sitter/tree-sitter#5867

build(deps): bump wasmtime-c-api to v36.0.14 by @clason in tree-sitter/tree-sitter#5870

fix(rust): remove must_use attribute from Tree::changed_ranges by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5877

release v0.26.13 by @clason in tree-sitter/tree-sitter#5873

Full Changelog: tree-sitter/tree-sitter@v0.26.12...v0.26.13

Commits

d97971e release v0.26.13
d2436dc fix(rust): remove must_use attribute from Tree::changed_ranges
e323709 build(deps): bump wasmtime-c-api to v36.0.14
c7a65b6 fix(ci): run all workspace tests
9d1f316 fix(parser): nest error children during recovery
f837fc9 fix(lib): accumulate error costs through hidden error nodes
15adfa9 fix(generate): fold case-insensitive patterns at the AST leaves
063f8f8 fix(query): correctly set a state's skipped_quantifier flag when a
6320165 fix(query): correctly identify MISSING nodes in queries
See full diff in compare view

Updates tree-sitter-highlight from 0.26.12 to 0.26.13

Release notes

Sourced from tree-sitter-highlight's releases.

v0.26.13

What's Changed

fix(query): correctly identify MISSING nodes in queries by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5835

fix(query): correctly set a state's skipped_quantifier flag when a by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5842

fix(generate): fold case-insensitive patterns at the AST leaves by @WillLillis in tree-sitter/tree-sitter#5854

fix(parser): avoid wide error nodes on unparseable input by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5855

fix(ci): run all workspace tests by @WillLillis in tree-sitter/tree-sitter#5867

build(deps): bump wasmtime-c-api to v36.0.14 by @clason in tree-sitter/tree-sitter#5870

fix(rust): remove must_use attribute from Tree::changed_ranges by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5877

release v0.26.13 by @clason in tree-sitter/tree-sitter#5873

Full Changelog: tree-sitter/tree-sitter@v0.26.12...v0.26.13

Commits

d97971e release v0.26.13
d2436dc fix(rust): remove must_use attribute from Tree::changed_ranges
e323709 build(deps): bump wasmtime-c-api to v36.0.14
c7a65b6 fix(ci): run all workspace tests
9d1f316 fix(parser): nest error children during recovery
f837fc9 fix(lib): accumulate error costs through hidden error nodes
15adfa9 fix(generate): fold case-insensitive patterns at the AST leaves
063f8f8 fix(query): correctly set a state's skipped_quantifier flag when a
6320165 fix(query): correctly identify MISSING nodes in queries
See full diff in compare view

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

fix: resolve relative PATH entries against the provided cwd by @RSS1102 in harryfei/which-rs#128

New Contributors

@RSS1102 made their first contribution in harryfei/which-rs#128

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @RSS1102 for your contribution to which!

Commits

17fde4a prepare patch release
48e49d5 Resolve relative PATH entries against cwd (#128)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 8 updates: | Package | From | To | | --- | --- | --- | | [log](https://github.com/rust-lang/log) | `0.4.33` | `0.4.34` | | [smoltcp](https://github.com/smoltcp-rs/smoltcp) | `0.13.1` | `0.14.0` | | [hickory-resolver](https://github.com/hickory-dns/hickory-dns) | `0.26.1` | `0.26.2` | | [hickory-server](https://github.com/hickory-dns/hickory-dns) | `0.26.1` | `0.26.2` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.26.12` | `0.26.13` | | [tree-sitter-highlight](https://github.com/tree-sitter/tree-sitter) | `0.26.12` | `0.26.13` | | [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` | Updates `log` from 0.4.33 to 0.4.34 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.33...0.4.34) Updates `smoltcp` from 0.13.1 to 0.14.0 - [Release notes](https://github.com/smoltcp-rs/smoltcp/releases) - [Changelog](https://github.com/smoltcp-rs/smoltcp/blob/main/CHANGELOG.md) - [Commits](smoltcp-rs/smoltcp@v0.13.1...v0.14.0) Updates `hickory-resolver` from 0.26.1 to 0.26.2 - [Release notes](https://github.com/hickory-dns/hickory-dns/releases) - [Changelog](https://github.com/hickory-dns/hickory-dns/blob/main/CHANGELOG.md) - [Commits](hickory-dns/hickory-dns@v0.26.1...v0.26.2) Updates `hickory-server` from 0.26.1 to 0.26.2 - [Release notes](https://github.com/hickory-dns/hickory-dns/releases) - [Changelog](https://github.com/hickory-dns/hickory-dns/blob/main/CHANGELOG.md) - [Commits](hickory-dns/hickory-dns@v0.26.1...v0.26.2) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `tree-sitter` from 0.26.12 to 0.26.13 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](tree-sitter/tree-sitter@v0.26.12...v0.26.13) Updates `tree-sitter-highlight` from 0.26.12 to 0.26.13 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](tree-sitter/tree-sitter@v0.26.12...v0.26.13) Updates `which` from 8.0.5 to 8.0.6 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@8.0.5...8.0.6) --- updated-dependencies: - dependency-name: log dependency-version: 0.4.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: smoltcp dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: hickory-resolver dependency-version: 0.26.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: hickory-server dependency-version: 0.26.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tree-sitter dependency-version: 0.26.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tree-sitter-highlight dependency-version: 0.26.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: which dependency-version: 8.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 21, 2026

Navigation Menu

Repository navigation

Bump the dependencies group with 8 updates - #334

Bump the dependencies group with 8 updates#334
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/dependencies-9daeeb2182

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026

0.4.34

What's Changed

New Contributors

[0.4.34] - 2026-08-22

What's Changed

New Contributors

v0.14.0

[0.14.0] - 2026-08-07

v0.26.2

What's Changed

v0.26.2

What's Changed

1.1.10

What's Changed

New Contributors

v0.26.13

What's Changed

v0.26.13

What's Changed

8.0.6

What's Changed

New Contributors

8.0.6

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants