chore(deps): update rust dependencies by red-hat-konflux[bot] · Pull Request #243 · securesign/tough

red-hat-konflux · 2026-06-25T22:32:00Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
anyhow	dependencies	patch	`1.0.97` → `1.0.102`	`1.0.103`
assert_cmd	dev-dependencies	minor	`2.0.16` → `2.2.2`
async-trait	dependencies	patch	`0.1.87` → `0.1.89`
aws-config	dependencies	minor	`1.5.6` → `1.8.18`
aws-sdk-kms	dependencies	minor	`1.43.0` → `1.111.0`
aws-sdk-ssm	dependencies	minor	`1.47.0` → `1.113.0`
aws-smithy-experimental	dependencies	minor	`0.1` → `0.2`
aws-smithy-http	dev-dependencies	minor	`0.60` → `0.63`
aws-smithy-runtime	dev-dependencies	minor	`1.7.8` → `1.11.3`
aws-smithy-types	dev-dependencies	minor	`1.2.13` → `1.5.0`
axum	dependencies	minor	`0.6` → `0.8`
bytes	dependencies	minor	`1.10.0` → `1.12.0`
bytes	dev-dependencies	minor	`1.10.0` → `1.12.0`
chrono	dependencies	patch	`0.4.40` → `0.4.45`
clap	dependencies	minor	`4.5.31` → `4.6.1`
dyn-clone	dependencies	patch	`1.0.19` → `1.0.20`
filetime	dependencies	patch	`0.2.26` → `0.2.29`
futures	dev-dependencies	patch	`0.3.31` → `0.3.32`
futures	dependencies	patch	`0.3.31` → `0.3.32`
futures-core	dev-dependencies	patch	`0.3.31` → `0.3.32`
futures-core	dependencies	patch	`0.3.31` → `0.3.32`
futures-util	dependencies	patch	`0.3.31` → `0.3.32`
globset (source)	dependencies	patch	`0.4.16` → `0.4.18`
http	dev-dependencies	minor	`1.2.0` → `1.4.2`
httptest	dev-dependencies	patch	`0.16.3` → `0.16.4`
indexmap	dependencies	minor	`2.7.1` → `2.14.0`
itertools	dependencies	minor	`0.13.0` → `0.15.0`
log	dependencies	patch	`0.4.26` → `0.4.33`
openssl	dependencies	patch	`0.10.71` → `0.10.81`
pem (source)	dependencies	patch	`3.0.5` → `3.0.6`
percent-encoding	dependencies	patch	`2.3.1` → `2.3.2`
pki-types	dependencies	minor	`1.12.0` → `1.14.1`
prost-types	dependencies	minor	`0.13.5` → `0.14.0`
rand (source)	dependencies	minor	`0.8` → `0.10`
rayon	dependencies	minor	`1.10.0` → `1.12.0`
regex	dependencies	minor	`1.11.1` → `1.12.4`
reqwest	dependencies	minor	`0.12` → `0.13`
rstest	dependencies	minor	`0.22.0` → `0.26.0`
rustls	dependencies	patch	`0.23.23` → `0.23.41`
rustls-webpki	dependencies	minor	`0.102.1` → `0.103.0`
serde (source)	dependencies	patch	`1.0.219` → `1.0.228`
serde (source)	dev-dependencies	patch	`1.0.219` → `1.0.228`
serde_derive (source)	dev-dependencies	patch	`1.0.219` → `1.0.228`
serde_json	dependencies	patch	`1.0.140` → `1.0.150`
serde_json	dev-dependencies	patch	`1.0.140` → `1.0.150`
serial_test	dependencies	minor	`3.2.0` → `3.5.0`
sigstore_protobuf_specs	dependencies	minor	`0.4` → `0.5`
snafu	dependencies	minor	`0.8` → `0.9`
tempfile (source)	dependencies	minor	`3.17.1` → `3.27.0`
tokio	dependencies	minor	`1.43.0` → `1.52.3`
tokio	dev-dependencies	minor	`1.43.0` → `1.52.3`
tokio-retry	dependencies	patch	`0.3.0` → `0.3.2`
tokio-test	dev-dependencies	patch	`0.4.4` → `0.4.5`
tokio-util	dependencies	patch	`0.7.13` → `0.7.18`
tower	dependencies	minor	`0.4` → `0.5`
tower-http	dependencies	minor	`0.4` → `0.7`
tracing	dependencies	patch	`0.1.41` → `0.1.44`
typed-path	dependencies	minor	`0.9` → `0.12`
unicode-normalization	dependencies	patch	`0.1.24` → `0.1.25`
untrusted	dependencies	minor	`0.7.1` → `0.9.0`
url	dependencies	patch	`2.5.4` → `2.5.8`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

assert-rs/assert_cmd (assert_cmd)

`v2.2.2`

Compare Source

Fixes

Ensure #[track_caller] works for better panic messages

`v2.2.1`

Compare Source

Internal

Dependency update

`v2.2.0`

Compare Source

Compatibility

Change cargo_bin bad paths to panics

`v2.1.3`

Compare Source

Fixes

Un-deprecate cargo_bin

`v2.1.2`

Compare Source

Fixes

Add #[must_use] to help catch missing assertions

`v2.1.1`

Compare Source

`v2.1.0`

Compare Source

Compatibility

Deprecated crate_name!() in favor of pkg_name!()
Deprecated Command::cargo_bin, CommandCargoExt::cargo_bin, cargo_bin in favor of cargo_bin!, cargo_bin_cmd!

Features

Provide cargo_bin_cmd!()
Use pkg_name!() as a default parameter to cargo_bin!()

`v2.0.17`

Compare Source

Features

Add cargo::cargo_bin! which will work with Cargo's build-dir

chronotope/chrono (chrono)

`v0.4.45`: 0.4.45

Compare Source

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in #1787
tz_data: fix tzdata locations on Android by @caruschalalamove in #1789

`v0.4.44`: 0.4.44

Compare Source

What's Changed

docs: match MSRV with Cargo.toml contents by @coryan in #1772
Add track_caller to non-deprecated functions by @svix-jplatte in #1774

`v0.4.43`: 0.4.43

Compare Source

What's Changed

Install extra components for lint workflow by @djc in #1741
Upgrade windows-bindgen to 0.64 by @djc in #1742
Improve windows-bindgen setup by @djc in #1744
Drop stabilized feature doc_auto_cfg by @djc in #1745
Faster RFC 3339 parsing by @djc in #1748
Update windows-bindgen requirement from 0.64 to 0.65 by @dependabot[bot] in #1751
add NaiveDate::abs_diff by @Kinrany in #1752
Add feature gated defmt support. by @pebender in #1747
Drop deny lints, eager Debug impls are a mixed blessing by @djc in #1753
chore: minor improvement for docs by @spuradage in #1756
Added doctest for the NaiveDate years_since function by @LucasBou in #1755
Prepare 0.4.43 by @djc in #1765
Update copyright year to 2026 in LICENSE.txt by @taozui472 in #1767

`v0.4.42`: 0.4.42

Compare Source

What's Changed

Add fuzzer for DateTime::parse_from_str by @tyler92 in #1700
Fix wrong amount of micro/milliseconds by @nmlt in #1703
Add warning about MappedLocalTime and wasm by @lutzky in #1702
Fix incorrect parsing of fixed-length second fractions by @chris-leach in #1705
Fix cfgs for wasm32-linux support by @arjunr2 in #1707
Fix OpenHarmony's tzdata parsing by @ldm0 in #1679
Convert NaiveDate to/from days since unix epoch by @findepi in #1715
Add ?Sized bound to related methods of DelayedFormat::write_to by @Huliiiiii in #1721
Add from_timestamp_secs method to DateTime by @jasonaowen in #1719
Migrate to core::error::Error by @benbrittain in #1704
Upgrade to windows-bindgen 0.63 by @djc in #1730
strftime: simplify error handling by @djc in #1731

`v0.4.41`

Compare Source

What's Changed

Add subsec_micros and subsec_millis methods to TimeDelta by @ggoetz in #1668
Deprecate NaiveDateTime::UNIX_EPOCH by @robertbastian in #1670
Implement as_seconds_f32 and as_seconds_f64 for TimeDelta by @ggoetz in #1671
chore: fix some comments by @jimmycathy in #1677
Add num_days_in_month method to Datelike trait by @aslilac in #1673
add WeekdaySet, a collection of Weekday that is Copy by @Kinrany in #1676
WeekdaySet tweaks by @djc in #1680
Upgrade to windows-bindgen 0.61 by @djc in #1682
Implemented a consistent Eq trait for NaiveWeek by @Splashling1789 in #1687
TimeZone::from_posix_tz: Treat empty TZ variable as UTC by @drinkcat in #1691
Add support for lossy format strings by @Qelxiros in #1693

alexcrichton/filetime (filetime)

BurntSushi/ripgrep (globset)

`v0.4.18`

Compare Source

`v0.4.17`

Compare Source

ggriffiniii/httptest (httptest)

`v0.16.4`

Compare Source

jcreekmore/pem-rs (pem)

`v3.0.6`

Compare Source

switch from serde to serde_core

rust-random/rand (rand)

`v0.10.1`

Compare Source

This release includes a fix for a soundness bug; see #1763.

Changes

Document panic behavior of make_rng and add #[track_caller] (#1761)
Deprecate feature log (#1763)

`v0.10.0`

Compare Source

Changes

The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
Use Edition 2024 and MSRV 1.85 (#1653)
Let Fill be implemented for element types, not sliceable types (#1652)
Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
Remove Clone support for StdRng, ReseedingRng (#1677)
Use postcard instead of bincode to test the serde feature (#1693)
Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

Removed ReseedingRng (#1722)
Removed unused feature "nightly" (#1732)
Removed feature small_rng (#1732)

`v0.9.4`

Compare Source

Fixes

Fix doc build (#1766)

Full Changelog: rust-random/rand@0.9.3...0.9.4

`v0.9.3`

Compare Source

This release back-ports a fix from v0.10. See also [#1763].

Changes

Deprecate feature log (#1764)
Replace usages of doc_auto_cfg (#1764)

Full Changelog: rust-random/rand@0.9.2...0.9.3

`v0.9.2`

Compare Source

Deprecated

Deprecate rand::rngs::mock module and StepRng generator ([#1634])

Additions

Enable WeightedIndex<usize> (de)serialization ([#1646])

`v0.9.1`

Compare Source

Security and unsafe

Revise "not a crypto library" policy again (#1565)
Remove zerocopy dependency from rand (#1579)

Fixes

Fix feature simd_support for recent nightly rust (#1586)

Changes

Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change ([#1382]) to the previous release.

Additions

Add rand::distr::Alphabetic distribution. (#1587)
Re-export rand_core (#1604)

`v0.9.0`

Compare Source

Security and unsafe

Policy: "rand is not a crypto library" (#1514)
Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
Update to rand_core v0.9.0 (#1558)

Features

Support std feature without getrandom or rand_chacha (#1354)
Enable feature small_rng by default (#1455)
Remove implicit feature rand_chacha; use std_rng instead. (#1473)
Rename feature serde1 to serde (#1477)
Rename feature getrandom to os_rng (#1537)
Add feature thread_rng (#1547)

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read (#1267)
Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
Add traits TryRngCore, TryCryptoRng (#1424, #1499)
Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)
Remove fn rand::random() from the prelude (#1506)
Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)
Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)
Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)
Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)
Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)
Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)
Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

Rename module rand::distributions to rand::distr (#1470)
Rename distribution Standard to StandardUniform (#1526)
Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)
Rename trait distr::DistString -> distr::SampleString (#1548)
Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

API changes: Distributions

Relax Sized bound on Distribution<T> for &D (#1278)
Remove impl of Distribution<Option<T>> for StandardUniform (#1526)
Let distribution StandardUniform support all NonZero* types (#1332)
Fns {Uniform, UniformSampler}::{new, new_inclusive} return a Result (instead of potentially panicking) (#1229)
Distribution Uniform implements TryFrom instead of From for ranges (#1229)
Add UniformUsize (#1487)
Remove support for generating isize and usize values with StandardUniform, Uniform (except via UniformUsize) and Fill and usage as a WeightedAliasIndex weight (#1487)
Add impl DistString for distributions Slice<char> and Uniform<char> (#1315)
Add fn Slice::num_choices (#1402)
Add fn p() for distribution Bernoulli to access probability (#1481)

API changes: Weighted distributions

Add pub module rand::distr::weighted, moving WeightedIndex there (#1548)
Add trait weighted::Weight, allowing WeightedIndex to trap overflow (#1353)
Add fns weight, weights, total_weight to distribution WeightedIndex (#1420)
Rename enum WeightedError to weighted::Error, revising variants (#1382) and mark as #[non_exhaustive] (#1480)

API changes: SIMD

Switch to std::simd, expand SIMD & docs (#1239)

Reproducibility-breaking changes

Make ReseedingRng::reseed discard remaining data from the last block generated (#1379)
Change fn SmallRng::seed_from_u64 implementation (#1203)
Allow UniformFloat::new samples and UniformFloat::sample_single to yield high (#1462)
Fix portability of distribution Slice (#1469)
Make Uniform for usize portable via UniformUsize (#1487)
Fix IndexdRandom::choose_multiple_weighted for very small seeds and optimize for large input length / low memory (#1530)

Reproducibility-breaking optimisations

Optimize fn sample_floyd, affecting output of rand::seq::index::sample and rand::seq::SliceRandom::choose_multiple (#1277)
New, faster algorithms for IteratorRandom::choose and choose_stable (#1268)
New, faster algorithms for SliceRandom::shuffle and partial_shuffle (#1272)
Optimize distribution Uniform: use Canon's method (single sampling) / Lemire's method (distribution sampling) for faster sampling (breaks value stability; #1287)
Optimize fn sample_single_inclusive for floats (+~20% perf) (#1289)

Other optimisations

Improve SmallRng initialization performance (#1482)
Optimise SIMD widening multiply (#1247)

Other

Add Cargo.lock.msrv file (#1275)
Reformat with rustfmt and enforce (#1448)
Apply Clippy suggestions and enforce (#1448, #1474)
Move all benchmarks to new benches crate (#1329, #1439) and migrate to Criterion (#1490)

Documentation

Improve ThreadRng related docs (#1257)
Docs: enable experimental --generate-link-to-definition feature (#1327)
Better doc of crate features, use doc_auto_cfg (#1411, #1450)

`v0.8.6`

Compare Source

What's Changed

This release back-ports a fix from v0.10. See also #1763.

Changes

Deprecate feature log (#1772)

Drop the experimental simd_support feature.

New Contributors

@nwalfield made their first contribution in #1772

Full Changelog: rust-random/rand@0.8.5...0.8.6

rust-lang/regex (regex)

`v1.12.4`

Compare Source

===================
This release includes a performance optimization for compilation of regexes
with very large character classes.

Improvements:

#1308:
Avoid re-canonicalizing the entire interval set when pushing new class ranges.

`v1.12.3`

Compare Source

===================
This release excludes some unnecessary things from the archive published to
crates.io. Specifically, fuzzing data and various shell scripts are now
excluded. If you run into problems, please file an issue.

Improvements:

#1319:
Switch from a Cargo exclude list to an include list, and exclude some
unnecessary stuff.

`v1.12.2`

Compare Source

===================
This release fixes a cargo doc breakage on nightly when --cfg docsrs is
enabled. This caused documentation to fail to build on docs.rs.

Bug fixes:

BUG #1305:
Switches the doc_auto_cfg feature to doc_cfg on nightly for docs.rs builds.

`v1.12.1`

Compare Source

===================
This release makes a bug fix in the new regex::Captures::get_match API
introduced in 1.12.0. There was an oversight with the lifetime parameter
for the Match returned. This is technically a breaking change, but given
that it was caught almost immediately and I've yanked the 1.12.0 release,
I think this is fine.

`v1.12.0`

Compare Source

===================
This release contains a smattering of bug fixes, a fix for excessive memory
consumption in some cases and a new regex::Captures::get_match API.

Improvements:

FEATURE #1146:
Add Capture::get_match for returning the overall match without unwrap().

Bug fixes:

BUG #1083:
Fixes a panic in the lazy DFA (can only occur for especially large regexes).
BUG #1116:
Fixes a memory usage regression for large regexes (introduced in regex 1.9).
BUG #1195:
Fix universal start states in sparse DFA.
BUG #1295:
Fixes a panic when deserializing a corrupted dense DFA.
BUG 8f5d9479:
Make regex_automata::meta::Regex::find consistently return None when
WhichCaptures::None is used.

`v1.11.3`

Compare Source

===================
This is a small patch release with an improvement in memory usage in some
cases.

Improvements:

BUG #1297:
Improve memory usage by trimming excess memory capacity in some spots.

`v1.11.2`

Compare Source

===================
This is a new patch release of regex with some minor fixes. A larger number
of typo or lint fix patches were merged. Also, we now finally recommend using
std::sync::LazyLock.

Improvements:

BUG #1217:
Switch recommendation from once_cell to std::sync::LazyLock.
BUG #1225:
Add DFA::set_prefilter to regex-automata.

Bug fixes:

BUG #1165:
Remove std dependency from perf-literal-multisubstring crate feature.
BUG #1165:
Clarify the meaning of (?R)$ in the documentation.
BUG #1281:
Remove fuzz/ and record/ directories from published crate on crates.io.

serde-rs/serde (serde)

`v1.0.228`

Compare Source

Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

`v1.0.227`

Compare Source

Documentation improvements (#2991)

`v1.0.226`

Compare Source

Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @Mingun)

`v1.0.225`

Compare Source

Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @rcrisanti)

`v1.0.224`

Compare Source

Remove private types being suggested in rustc diagnostics (#2979)

`v1.0.223`

Compare Source

Fix serde_core documentation links (#2978)

`v1.0.222`

Compare Source

Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @aytey)

`v1.0.221`

Compare Source

Documentation improvements (#2973)
Deprecate serde_if_integer128! macro (#2975)

`v1.0.220`

Compare Source

Add a way for data formats to depend on serde traits without waiting for serde_derive compilation: https://docs.rs/serde_core (#2608, thanks @osiewicz)

Stebalien/tempfile (tempfile)

`v3.27.0`

Compare Source

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @meng-xu-cs for reporting this issue.

`v3.26.0`

Support NamedTempFile::persist on RedoxOS (#393) (thanks to @Andy-Python-Programmer).

`v3.25.0`

Allow getrandom 0.4.x while retaining support for getrandom 0.3.x.

`v3.24.0`

Compare Source

Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.
Exclude CI scripts from the published crate.

`v3.23.0`

Compare Source

Remove need for the "nightly" feature to compile with "wasip2".

`v3.22.0`

Compare Source

Updated windows-sys requirement to allow version 0.61.x
Remove unstable-windows-keep-open-tempfile feature.

`v3.21.0`

Compare Source

Updated windows-sys requirement to allow version 0.60.x

`v3.20.0`

Compare Source

This release mostly unifies the behavior/capabilities around "keeping" temporary files:

Rename Builder::keep(bool) (via deprecation) to Builder::disable_cleanup(bool) to make it clear that behaves differently from NamedTempFile::keep(). The former disables automatic cleanup while the latter consumes the NamedTempFile object entirely and unsets the "temporary file" attribute (on Windows).
Rename TempDir::into_path (via deprecation) to TempDir::keep to mirror NamedTempFile::keep.
Add TempDir::disable_cleanup, NamedTempFile::disable_cleanup, and TempPath::disable_cleanup making it possible to disable automatic cleanup in-place after creating a temporary file/directory (equivalent to calling Builder::disable_cleanup before creating the file/directory).

Additionally, it adds a few spooled temporary file features:
git lo

Add SpooledTempFile::into_file for turning a SpooledTempFile into a regular unnamed temporary file, writing it to the backing storage ("rolling" it) if it was still stored in-memory.
Add spooled_tempfile_in and SpooledTempFile::new_in methods for creating spooled temporary files in a specific directory. This makes it possible to choose the backing device for your spooled temporary file which is rather important on Linux where the default temporary directory is likely backed by memory (defeating the entire point of having a spooled temporary file).

Finally, this release improves documentation, especially the top-level documentation explaining which temporary file type to use.

BREAKING for those with deny(warnings):

Builder::keep deprecated in favor of Builder::disable_cleanup.
TempDir::into_path is deprecated in favor of TempDir::keep.

`v3.19.1`

Compare Source

Don't unlink temporary files immediately on Windows (fixes #339). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary.

`v3.19.0`

Compare Source

Remove direct dependency on cfg-if. It's still in the tree, but we didn't really need to use it in this crate.
Add an unstable feature (unstable-windows-keep-open-tempfile) to test a potential fix to #339.

`v3.18.0`

Compare Source

Update rustix to 1.0.0.
Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux · 2026-06-25T22:32:03Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path integ/failure-server/Cargo.toml --package anyhow@1.0.97 --precise 1.0.102
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/as/yn/async-recursion, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
    ... which satisfies path dependency `tough-ssm` (locked to 0.14.0) of package `tuftool v0.12.0 (/tmp/renovate/repos/github/securesign/tough/tuftool)`
versions that meet the requirements `^0.2` are: 0.2.4, 0.2.3, 0.2.2, 0.2.1, 0.2.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough-kms/Cargo.toml --package aws-config@1.5.6 --precise 1.8.18
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/as/yn/async-recursion, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
    ... which satisfies path dependency `tough-ssm` (locked to 0.14.0) of package `tuftool v0.12.0 (/tmp/renovate/repos/github/securesign/tough/tuftool)`
versions that meet the requirements `^0.2` are: 0.2.4, 0.2.3, 0.2.2, 0.2.1, 0.2.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough-ssm/Cargo.toml --package aws-config@1.5.6 --precise 1.8.18
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/as/yn/async-recursion, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
    ... which satisfies path dependency `tough-ssm` (locked to 0.14.0) of package `tuftool v0.12.0 (/tmp/renovate/repos/github/securesign/tough/tuftool)`
versions that meet the requirements `^0.2` are: 0.2.4, 0.2.3, 0.2.2, 0.2.1, 0.2.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough/Cargo.toml --package async-trait@0.1.87 --precise 0.1.89
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/se/rd/serde, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
    ... which satisfies path dependency `tough-ssm` (locked to 0.14.0) of package `tuftool v0.12.0 (/tmp/renovate/repos/github/securesign/tough/tuftool)`
versions that meet the requirements `^0.2` are: 0.2.4, 0.2.3, 0.2.2, 0.2.1, 0.2.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tuftool/Cargo.toml --package assert_cmd@2.0.16 --precise 2.2.2
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/as/yn/async-recursion, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
    ... which satisfies path dependency `tough-ssm` (locked to 0.14.0) of package `tuftool v0.12.0 (/tmp/renovate/repos/github/securesign/tough/tuftool)`
versions that meet the requirements `^0.2` are: 0.2.4, 0.2.3, 0.2.2, 0.2.1, 0.2.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path olpc-cjson/Cargo.toml --package serde@1.0.219 --precise 1.0.228
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/as/yn/async-recursion, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
    ... which satisfies path dependency `tough-ssm` (locked to 0.14.0) of package `tuftool v0.12.0 (/tmp/renovate/repos/github/securesign/tough/tuftool)`
versions that meet the requirements `^0.2` are: 0.2.4, 0.2.3, 0.2.2, 0.2.1, 0.2.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

chore(deps): update rust dependencies

e618aea

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Jun 25, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update rust dependencies#243

chore(deps): update rust dependencies#243
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/rust-deps

red-hat-konflux Bot commented Jun 25, 2026

Uh oh!

red-hat-konflux Bot commented Jun 25, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux Bot commented Jun 25, 2026

Release Notes

Fixes

Internal

Compatibility

Fixes

Fixes

Compatibility

Features

Features

v0.4.45: 0.4.45

What's Changed

v0.4.44: 0.4.44

What's Changed

v0.4.43: 0.4.43

What's Changed

v0.4.42: 0.4.42

What's Changed

What's Changed

Changes

Changes

Additions

Removals

Fixes

Changes

Deprecated

Additions

Security and unsafe

Fixes

Changes

Additions

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

API changes: RNGs

API changes: Sequences

API changes: Distributions: renames

API changes: Distributions

API changes: Weighted distributions

API changes: SIMD

Reproducibility-breaking changes

Reproducibility-breaking optimisations

Other optimisations

Other

Documentation

What's Changed

Changes

New Contributors

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Jun 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v0.4.45`: 0.4.45

`v0.4.44`: 0.4.44

`v0.4.43`: 0.4.43

`v0.4.42`: 0.4.42

red-hat-konflux Bot commented Jun 25, 2026 •

edited

Loading