chore(deps): update minor and patch dependencies by renovate[bot] · Pull Request #394 · tyvsmith/facelock

renovate · 2026-09-21T02:52:32Z

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	patch	`v8.0.1` → `v8.0.2`
actions/upload-artifact	action	patch	`v7.0.1` → `v7.0.2`
anthropics/claude-code-action	action	patch	`v1.0.223` → `v1.0.248`
clap	dependencies	patch	`4.6.6` → `4.6.7`
libc	dependencies	patch	`0.2.189` → `0.2.190`
rand (source)	dependencies	patch	`0.10.2` → `0.10.3`
serde_json	dev-dependencies	patch	`1.0.151` → `1.0.154`
serde_json	dependencies	patch	`1.0.151` → `1.0.154`
signal-hook	dependencies	patch	`0.4.4` → `0.4.5`
syn	dev-dependencies	patch	`3.0.5` → `3.0.8`
thiserror	workspace.dependencies	patch	`2.0.20` → `2.0.21`
tokio (source)	dependencies	patch	`1.53.1` → `1.53.2`
toml	workspace.dependencies	patch	`1.1.6+spec-1.1.0` → `1.1.8`
tss-esapi	workspace.dependencies	patch	`8.0.0-alpha.3` → `8.0.0-alpha.4`
zeroize	dependencies	patch	`1.9.0` → `1.9.1`

Release Notes

actions/download-artifact (actions/download-artifact)

`v8.0.2`

Compare Source

What's Changed

Update the readme by @danwkennedy in #473
Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Update @actions/artifact to 6.3.1 by @tunc-d in #492
Prepare download-artifact v8.0.2 by @tunc-d in #493

New Contributors

@tunc-d made their first contribution in #492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/upload-artifact (actions/upload-artifact)

`v7.0.2`

Compare Source

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in #821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

anthropics/claude-code-action (anthropics/claude-code-action)

What's Changed

ci: security hardening for GitHub Actions workflows that call Claude by @qing-ant in #1867

New Contributors

@qing-ant made their first contribution in #1867

Full Changelog: anthropics/claude-code-action@v1.0.237...v1.0.238

`v1.0.237`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.236...v1.0.237

`v1.0.236`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.235...v1.0.236

`v1.0.235`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.234...v1.0.235

`v1.0.234`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.233...v1.0.234

`v1.0.233`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.232...v1.0.233

`v1.0.232`

Compare Source

What's Changed

ci: pin the integration tests to claude-opus-5 by @mhegazy in #1853

New Contributors

@mhegazy made their first contribution in #1853

Full Changelog: anthropics/claude-code-action@v1.0.231...v1.0.232

`v1.0.231`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.230...v1.0.231

`v1.0.230`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.229...v1.0.230

`v1.0.229`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.228...v1.0.229

`v1.0.228`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.227...v1.0.228

`v1.0.227`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.226...v1.0.227

`v1.0.226`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.225...v1.0.226

`v1.0.225`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.224...v1.0.225

`v1.0.224`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.223...v1.0.224

clap-rs/clap (clap)

`v4.6.7`

Compare Source

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

rust-lang/libc (libc)

`v0.2.190`

Compare Source

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set
unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by
default:

32-bit Linux-GNU
32-bit Linux-uClibc
32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in
musl v1.2.
32-bit Windows-GNU
ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy
and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...

Note that there may still be some changes to features gated by this config option, hence "unstable"
in its name. In the near future we will rename it to just libc_time64. Until then, please test it
out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)
Linux, NetBSD: Give statvfs a Default impl (#5583)
Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)
Android, Glibc: Add pthread_gettid_np (#5359)
Android: Add RTLD_NEXT (#5323)
Android: Add reuseport BPF socket options (#5366)
Apple: Add TCP header flags, options and SACK limits (#5358)
Apple: Add NET_RT_DUMP2 (#5442)
Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)
BSD: Add BPF_WORDALIGN (#5320)
BSD: Add lchmod and lchflags where supported (#5400)
BSD: Add minherit and related constants (#4849)
Docs: Add more links to public headers and manual pages (#5407), (#5485)
Emscripten: Add epoll support (#5427)
FreeBSD: Add AT_RENAME_* and RENAME_* constants (#5560)
FreeBSD: Add renameat2 (#5563)
FreeBSD: Add rt_msghdr and rt_metrics (#5367)
Hurd: Add handling of LFS under libc_unstable_gnu_time_bits (#5242)
Linux-GNU: Add environ (#5339)
Linux-GNU: Add the new f_type field to statvfs and statvfs64 (#5434)
Linux-like: Add additional STATX_* constants (#5412)
Linux-musl, Emscripten: Add SIGEV_THREAD_ID (#5375)
Linux-musl: Add *_SUPER_MAGIC constants (#5453)
Linux-musl: Make statx always available (#5448)
Linux-s390x: Add max_align_t (#5389)
Linux: Add BCACHEFS_SUPER_MAGIC (#5516)
Linux: Add ETH_P_LLDP (#5438)
Linux: Add FUTEX_ROBUST_UNLOCK and FUTEX_ROBUST_LIST32 (#5525)
Linux: Add NLMSG_* helpers (#5321)
Linux: Update the definition of siginfo_t and add more getter functions (#5345)
Musl riscv64: Add SYS_futex_waitv (#5527)
Newlib: Add __errno (#5346)
OpenBSD: Add RTLD_NODELETE and RTLD_NOLOAD (#5377)
OpenBSD: Add getexecpath (#5465)
OpenBSD: Add bindings from sensors.h (#5510)
OpenBSD: Add missing HW_* sysctl constants (#5371)
QNX: Add definitions for io-sock (#5469)
Redox: Add FILENAME_MAX (#5530)
Redox: Add clock_settime and pause (#5363)
Redox: Add getrandom bindings (#5333)
Unix: Add RFC 3678 multicast group_req/group_source_req and MCAST_* where supported (#5236)
Unix: Add HOST_NAME_MAX (#5531)
Unix: Add _PATH_BSHELL and _PATH_DEFPATH where available (#5449)
WASI: Add SOCK_CLOEXEC (#5336)
WASI: Add locale category constants (#5378)
WASI: Add more pthread APIs (#5310)
uClibc: Support 64-bit time_t on 32-bit platforms via cfg (#5261)

Deprecated

AIX: deprecate _kernel_simple_lock (#5380)
Deprecate integer *_MIN/*_MAX in favor of e.g. c_int::MAX (#5404)
Fuchsia: Deprecate types that do not exist upstream (#5127)
Hurd: Deprecate fallocate64, which does not exist on the platform (#5242)
Hurd: Deprecate redundant glob64 types and routines (#5242)
L4Re: deprecate LFS bindings (#5173)
OpenBSD: Deprecate syscall, mincore, and KERN_NSELCOLL, all of which have been removed upstream (87992e9895c2)
Unix: Deprecate the POSIX-obsoleted tmpnam, tempnam (#5478)

Fixed

breaking AIX: Change the type of BPF_ALIGNMENT to size_t to match upstream and harmonize with other platforms. (#5373)
breaking Apple: change the type of BPF_ALIGNMENT to size_t to match upstream and harmonize with other platforms. (#5348)
Exclude non-required repository files from the published crate (#5312)
AIX: Correct the function signature in fileops_t.fo_select (#5380)
AIX: Fix the alignment of file (#5380)
Android: Add missing padding to ucontext_t (#5189)
Android: Fix the value of RISC-V O_ flags (#5554)
Fuchsia: Correct mcontext_t and ucontext_t and make them usable on more platforms (#5127)
Fuchsia: Fix available fields in glob_t and statvfs (#5127)
Fuchsia: Fix the definition of sigevent and correct the layout of other pthread.h types (#5127)
Haiku: Correct the definition of sem_t (#5351)
Linux-GNU: Fix the padding field in statvfs64 on 32-bit RISC-V (#5518)
Linux: Correct PowerPC64 speed symbols with elfv2 (#5342)
Linux: Fix syscall numbers on 32-bit RISC-V (#5455)
Musl riscv64: Fix the definition of ipc_perm (#5527)
Musl riscv64: Fix the name of the uc_flags field in ucontext_t (#5527)
NetBSD: Fix WIFSTOPPED (#5458)
Newlib: Update the time_t alias. This is a correction on Arm32 RTEMS (#5132)
NuttX: Correct O_ open flags (#5414)
RTEMS: Correct socket.h definitions (#5313)
RTEMS: Correct the size of clock and storage type aliases (#5450)
Redox: Correct signal.h types (#5436)

Changed

The unstable cfg libc_unstable_musl_v1_2_3 has been renamed to a more accurate
libc_unstable_musl_v1_2. The old version will continue to work for now, but will be removed in
1-2 releases. (#5376)
AIX: Make function pointers in signatures unsafe (#5380)
Cygwin: Change POSIX_SPAWN_* flags to c_short (#5572)
Hermit: Make iovec fields public (#5460)
Improve the panic message for out-of-range fds in FD_* functions (#5528)
Musl riscv64: Fix the name of __riscv_mc_q_ext_state.__reserved and make it private (#5533)
Various: Make obsolete stat fields non-pub (#5542)
uClibc: No longer link to libutil (#5165)

Removed

libc exposed quite a bit of API on all Apple platforms that is not actually available anywhere other than MacOS. This release removes a number of these cases.

breaking Apple: Disable mach.h API on Apple mobile OSs (e6bfb187513c)
breaking Apple: Remove a large number of items from iOS, tvOS, watchOS, and visionOS that are only available on MacOS. (#5158)
breaking Apple: Remove the unsupported exec* and fork calls from tvOS and watchOS (#5158)

Additionally, this release cleans up a lot of API that has been deprecated since at least libc 0.2.100, released 2021-08-20.

breaking Android, Linux: remove unsound af_alg_iv trait implementations. The have been deprecated for a long time because they allowed out-of-bounds reads via safe functions. (444db4456f38)
breaking Remove most items that have been deprecated since before 0.2.100 (#5401)

Other removed items:

Dragonfly: Remove INHERIT_ZERO that does not exist upstream (#5587)
Musl riscv64: Remove GNU-gated REG_* definitions (#5527)
Musl riscv64: Remove non-esxistant REG_NARGS (#5527)

A huge thank you to our GSoC student Adam Martinez (@dybucc) who did a
huge amount of the time64 work, as well as many of the platform fixes!

rust-random/rand (rand)

`v0.10.3`

Compare Source

Fixes

Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

serde-rs/json (serde_json)

`v1.0.154`

Compare Source

Support preserve_order in no_std builds (#1333, thanks @razmser)

`v1.0.153`

Compare Source

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

`v1.0.152`

Compare Source

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)
Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

vorner/signal-hook (signal-hook)

`v0.4.5`

Compare Source

pipe::register_raw now really sets close-on-exec (FD_CLOEXEC) on the file descriptor, for
both pipes and sockets (#206).
Removed the 32-bit Android sigemptyset/sigaddset fallback, which panicked in
emulate_default_handler (#207). Android below API 21 is no longer supported.

dtolnay/syn (syn)

`v3.0.8`

Compare Source

Fix parsing of <- and -> tokens in expressions (#2086, #2087)

`v3.0.7`

Compare Source

Fix parsing absolute path expr in labeled break (#2085, thanks @A4-Tacks)

`v3.0.6`

Compare Source

Fix parsing interpolated lifetime at statement start (#2082)

dtolnay/thiserror (thiserror)

`v2.0.21`

Compare Source

Fix parsing of generic unit variants in display expressions (#459)

tokio-rs/tokio (tokio)

`v1.53.2`: Tokio v1.53.2

Compare Source

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)
io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
process: unregister Windows wait before closing child handle (#8564)
rt: drop blocking pool mutex before shutting down rejected task (#8562)
sync: fix mpsc index wraparound in block reclamation (#8546)
sync: forget mpsc Permit before sending value (#8560)
sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
sync: wake broadcast Sender::closed outside mutex (#8558)
task: drop replaced waker outside lock in JoinSet (#8554)
time: drop timer lock before dropping waker in clear_entry (#8552)
time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

fs: clamp io_uring read length to u32::MAX (#8572)
rt: ignore current_thread task dumps from other runtimes (#8544)
rt: preserve io_uring context if a completion waker panics (#8566)
sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
taskdump: restore deferred leaf wakes during capture (#8445)
time: drop stored waker when cancelling alt timer entry (#8550)

toml-rs/toml (toml)

`v1.1.8`

Compare Source

`v1.1.7`

Compare Source

RustCrypto/utils (zeroize)

`v1.9.1`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 9am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2026-09-21T02:52:37Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: fac0921a-d61b-4d04-8d3d-4544d1fbd141

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch 5 times, most recently from 9fb16d0 to 0d295a4 Compare September 29, 2026 22:32

renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch 12 times, most recently from 08c4b63 to 902b8ae Compare October 8, 2026 02:42

renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch 7 times, most recently from 921245b to b6635c7 Compare October 11, 2026 02:11

chore(deps): update minor and patch dependencies

72515c3

renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch from b6635c7 to 72515c3 Compare October 11, 2026 20:50

Navigation Menu

Repository navigation

chore(deps): update minor and patch dependencies - #394

chore(deps): update minor and patch dependencies#394
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/minor-and-patch-dependencies

renovate Bot commented Sep 21, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 21, 2026 •

edited

Loading

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Features

Support

Added

Deprecated

Fixed

Changed

Removed

Fixes

Changes

v1.53.2: Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

Fixed (unstable)

Configuration

Uh oh!

coderabbitai Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 21, 2026 •

edited

Loading

`v1.53.2`: Tokio v1.53.2

coderabbitai Bot commented Sep 21, 2026 •

edited

Loading