[dependabot]

Bumps the cargo-weekly group with 61 updates in the / directory:

Package	From	To
tokio	1.53.2	1.53.3
home	0.5.11	0.5.12
quick-xml	0.41.0	0.42.0
sha2	0.11.0	0.11.1
sigstore-verify	0.11.0	0.15.0
sysinfo	0.36.1	0.38.4
zip	9.0.4	9.0.5
async-compression	0.4.50	0.4.51
aws-lc-rs	1.18.1	1.18.2
aws-lc-sys	0.45.0	0.46.0
block-buffer	0.10.4	0.12.1
cc	1.8.0	1.9.0
combine	4.6.8	4.6.9
compression-codecs	0.4.45	0.4.46
compression-core	0.4.33	0.4.34
cpufeatures	0.2.17	0.3.1
crypto-common	0.1.7	0.2.2
defmt	1.1.1	1.2.0
defmt-macros	1.1.1	1.2.0
defmt-parser	1.0.0	1.1.0
deranged	0.5.8	0.5.9
digest	0.10.7	0.11.3
equivalent	1.0.2	1.0.3
find-msvc-tools	0.1.14	0.1.15
icu_locale_core	2.1.1	2.3.0
icu_normalizer	2.1.1	2.3.0
icu_normalizer_data	2.1.1	2.4.0
icu_properties	2.1.2	2.4.0
icu_properties_data	2.1.2	2.4.0
icu_provider	2.1.1	2.4.0
idna_adapter	1.2.1	1.2.2
libc	0.2.190	0.2.191
pem	3.0.6	4.0.0
r-efi	5.3.0	6.0.0
rand	0.9.5	0.10.3
rand_core	0.6.4	0.10.1
rustls-native-certs	0.8.4	0.8.5
schannel	0.1.29	0.1.30
serde_json_canonicalizer	0.3.2	0.4.1
sigstore-bundle	0.11.0	0.15.1
sigstore-crypto	0.11.0	0.15.1
sigstore-merkle	0.11.0	0.15.1
sigstore-rekor	0.11.0	0.15.1
sigstore-trust-root	0.11.0	0.15.1
sigstore-tsa	0.11.0	0.15.1
sigstore-types	0.11.0	0.15.1
tinystr	0.8.4	0.8.5
untrusted	0.7.1	0.9.0
windows	0.61.3	0.62.2
windows-collections	0.2.0	0.3.2
windows-core	0.61.2	0.62.2
windows-future	0.2.1	0.3.2
windows-link	0.1.3	0.2.1
windows-numerics	0.2.0	0.3.1
windows-result	0.3.4	0.4.1
windows-strings	0.4.2	0.5.1
windows-threading	0.1.0	0.2.1
yoke	0.8.3	0.8.4
zerovec	0.11.8	0.11.9
zerovec-derive	0.11.6	0.11.7
zopfli	0.8.3	0.8.4

Updates tokio from 1.53.2 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

• io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

• io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

• io: wake and drop DuplexStream wakers outside the lock (#8618)
• macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
• runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
• sync: wake waiters outside the lock when closing a semaphore (#8529)
• test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

• rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Commits

• a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
• df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
• f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
• 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
• 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
• c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
• 0448618 sync: make tracing_sync tests synchronous (#8427)
• 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
• bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
• 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
• Additional commits viewable in compare view

Updates home from 0.5.11 to 0.5.12

Commits

• 4f15cc8 Make shell completion variables private. (#16144)
• f71caeb More warning conversions (#16143)
• fcd0c86 Make shell completion variables private.
• 1f9d059 Convert RUST_FLAGS and RUSTDOC_FLAGS warnings
• 5e6929f Convert cargo tree warning
• 36bf7f6 Add a test for the cargo tree --all warning.
• b118df4 Bump openssl-src to 300.3.5.4+3.5.4 (#16140)
• 85a3813 Bump openssl-src to 300.3.5.4+3.5.4
• 211aad4 build: remove duplicate dependency, consolidate over unicode-ident (#16137)
• 391c970 Bump unicode-ident to 1.0.20
• Additional commits viewable in compare view

Updates quick-xml from 0.41.0 to 0.42.0

Release notes

Sourced from quick-xml's releases.

v0.42.0 - String Ergonomics

What's Changed

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

• #963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.
• #963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.
• #963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.
• #963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].
• #963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.
• #963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.
• #963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.
• #963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.
• #963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).
• #980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has

... (truncated)

Changelog

Sourced from quick-xml's changelog.

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

• #963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.
• #963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.
• #963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.
• #963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].
• #963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.
• #963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.
• #963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.
• #963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.
• #963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).
• #980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has changed slightly. The default maximum has also been reduced from 256 to 128.
• #1000: DeError::UnexpectedStart renamed to DeError::MixedContent. That error is emitted when you try to deserialize boolean, number or string field from something like <field>text <tag/> another text</field>.

... (truncated)

Commits

• 36a2c52 Release 0.42.0
• a4b9fca cargo fmt
• 22c99f5 Update Rust Edition to 2024
• 83351fb Add rename = $value to a table in serde example comments
• f4db767 Clarify documentation about lifetimes of the events and attributes
• 9f4c66a Fix formatting for correct assertions in read_nodes_serde
• 6950ef7 Add GHA job to execute examples
• dbf9e3f Show XML Decl tracking in examples
• aab9452 Add writing a Decl event to the writer example
• 1573e05 Avoid trim_text(true) in the in-depth examples
• Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

• 138dc5a Release sha2 v0.11.1 (#927)
• cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
• 7c59cad Update Cargo.lock (#921)
• f57b947 streebog: tweak internal implementation (#925)
• 336611f Fix cargo::manual_readme lint (#924)
• 1df8877 md2: fix clippy::needless_range_loop lint (#923)
• 6075989 sha2: fix loading of round constants on AArch64 backends (#922)
• eadfd90 Update Cargo.lock (#913)
• fa30840 blake2 v0.11.0 (#911)
• f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
• Additional commits viewable in compare view

Updates sigstore-verify from 0.11.0 to 0.15.0

Release notes

Sourced from sigstore-verify's releases.

sigstore-verify-v0.15.0

Fixed

• (verify) verify RFC 3161 timestamps with managed keys, earliest integrated time (#269)

Other

• [breaking] final API naming polish before 1.0 (#325)
• Crypto agility (#326)
• (deps) remove unused dependencies and features across workspace (#329)
• (verify) [breaking] collapse verification entry points (#316)
• (verify) pass the signing certificate chain to chain verification (#315)
• (verify) remove unit test from verify_bundle example (#314)
• [breaking] document every public item, enforce missing_docs (#271)
• (interop) Make interop tests use conformance test token (#303)
• (verify) [breaking] categorized, matchable verification errors (#264)

sigstore-verify-v0.14.0

Added

• (crypto) [breaking] parse the Fulcio CI claims and expose the verified certificate (#250)

Other

• (crypto,verify) [breaking] typed identities and extensible verification policy (#255)
• (rekor,trust-root) [breaking] typed Rekor client and extensible trust material (#251)
• (types) [breaking] 1.0 naming and conversion conventions (#247)
• (tsa) [breaking] keep the RFC 3161 ASN.1 model private (#245)
• (bundle) [breaking] typed builder, options and validation errors (#244)
• (types) [breaking] make wire types and enums extensible (#236)

sigstore-verify-v0.13.0

Fixed

• (types) [breaking] keep checkpoint fields consistent with the signed note (#229)
• [breaking] restore fixes dropped from the pre-1.0 stack (#214–#219) (#226)

sigstore-verify-v0.12.0

Added

• (verify) [breaking] harden policy, results and trust preparation (#209)
• (artifact) [breaking] stream artifacts from sync and async readers (#185)
• complete and harden Rekor v2 support (#176)
• (trust-root) [breaking] make TUF bootstrap trust explicit (#180)

Fixed

• (crypto) validate and share algorithm resolution (#207)
• (types) accept ProtoJSON base64 log IDs (#223)
• (test) reject mutation-harness false positives and honor fixture trust (#201)

... (truncated)

Commits

• f950b1b chore: release v0.15.0 (#333)
• 6d33879 test(crypto): fix boring_provider build after sha384 returns Sha384Hash (#332)
• 64dc020 chore(deps): update rust crate serde_json_canonicalizer to 0.4 (#331)
• f6a4df5 refactor!: final API naming polish before 1.0 (#325)
• 84d980b Crypto agility (#326)
• 74e83c6 ci: consolidate feature and dependency checks into check-features.py (#320)
• 5392db2 chore(deps): remove unused dependencies and features across workspace (#329)
• be15e40 refactor(tsa): gate rand dependency behind client feature (#328)
• 1351617 refactor(tuf): use sigstore-crypto for hashing instead of sha2 (#327)
• 892ceeb chore(deps): update github-actions (#324)
• Additional commits viewable in compare view

Updates sysinfo from 0.36.1 to 0.38.4

Changelog

Sourced from sysinfo's changelog.

0.38.4

• macOS: Unpin objc2-* crates version.
• Linux: Fix computation of disk size.

0.38.3

• macOS: Improve accuracy of System::available_memory and System::used_memory.
• Documentation: add missing unit for CPU::frequency returned value.

0.38.2

• Implement Error trait for MacAddrFromStrError, IpNetworkFromStrError and KillError types.

0.38.1

• macOS: Put back support for versions below macOS 12.

0.38.0

• Add NetBSD support.
• Windows: Fix unsoundness for a function used in Motherboard and Product.
• Linux: Improve CPU info parsing.
• Fix serde serialization of MacAddr and of Disk::file_system.

0.37.2

• Improve documentation of System::refresh_cpu_all and of System::refresh_cpu_specifics.
• Android: Fix System::uptime.
• Linux: Correctly handled modified/removed Process::exe paths.

0.37.1

• Fix serde serialization on Process::name.
• Linux: Fix get_cpu_frequency on loongarch64.
• Windows: Correctly handle invalid UTF-8 string in Motherboard.

0.37.0

• Update minimum supported Rust version to 1.88 (for 2024 edition and if let chain feature).
• Added Component::id API.
• Linux: Greatly improve partial processes retrieval.
• Linux: Simplify internal components retrieval code.

Commits

• 97c194d Merge pull request #1642 from GuillaumeGomez/update
• 91b92f1 Update crate version to 0.38.4
• 8e8f76c Update CHANGELOG for 0.38.4
• 9e6f37c Merge pull request #1641 from madsmtm/macos-no-pin-deps
• 73d545c Fix warnings introduced in new objc2-* versions
• 5cc4bcb Don't pin objc2-* crates
• 5d4c63b Merge pull request #1640 from patjakdev/patjakdev/fix-1639
• a8ee05c Use fragment size instead of block size for disk stats
• 61257e4 Merge pull request #1635 from GuillaumeGomez/update
• 3cf4b65 Update crate version to 0.38.3
• Additional commits viewable in compare view

Updates zip from 9.0.4 to 9.0.5

Release notes

Sourced from zip's releases.

v9.0.5

🐛 Bug Fixes

• use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
• (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

• Enable release-plz on backport branches in future (#1079)

Changelog

Sourced from zip's changelog.

9.0.5 - 2026-10-17

🐛 Bug Fixes

• use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
• (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

• Enable release-plz on backport branches in future (#1079)

Commits

• 0123ed1 chore: release v9.0.5 (#1093)
• 00cf82b docs: Repeal policy of yanking versions with known vulnerabilities, add menti...
• 52165b9 chore: Enable release-plz on backport branches in future (#1079)
• ca51e64 docs: Remove doc links that break when doc build doesn't enable all features ...
• 6639687 fix: use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
• 5e06fa8 fix(write): prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)
• b6f9fb8 Merge commit from fork
• ea2ccfe Merge commit from fork
• 8068ab4 Merge commit from fork
• 0b51128 doc: Clarifications to security policy (#1074)
• See full diff in compare view

Updates async-compression from 0.4.50 to 0.4.51

Release notes

Sourced from async-compression's releases.

async-compression-v0.4.51

Added

• (zstd) add mzstd v0.2.5 (#505)

Other

• add keywords to compression crates (#502)

Commits

• f2559fd chore: release (#503)
• c259d25 feature(zstd): add mzstd v0.2.5 (#505)
• a9de8ca chore: add keywords to compression crates (#502)
• e548b13 ci: run compression-core tests under Miri (#498)
• See full diff in compare view

Updates aws-lc-rs from 1.18.1 to 1.18.2

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.2

What's Changed

• Implement Eq and PartialEq for RSA and EdDSA parameters by @​dsykes16 in aws/aws-lc-rs#1228
  • RsaParameters can now be compared directly against RSA verification constants. Algorithms with different digests, padding schemes, or modulus-size ranges compare unequal. EdDSAParameters also gains equality support.
• Add wasm32-wasip2 and wasm32-wasip3 support by @​ricochet in aws/aws-lc-rs#1239
  • Adds non-FIPS builds using universal bindings, with CI coverage under Wasmtime and wasi-sdk 34. WASIp3 requires nightly Rust.
  • Direct aws-lc-sys consumers must disable the default all-bindings feature for these targets.
• Publish the intended RandomizedNonceKey::open_in_place documentation by @​Serophots in aws/aws-lc-rs#1227
  • Makes the existing nonce, ciphertext/tag layout, and buffer-on-error contract visible in rustdoc. No runtime behavior changes.

Upstream AWS-LC

• aws-lc-sys v0.46.0 aligns with AWS-LC v5.11.0 (previously v5.7.0). See also the release notes for v5.8.0, v5.9.0, and v5.10.0.
  • The Ed25519 C-implementation decoder now rejects non-canonical public keys, matching the assembly-optimized implementations: aws/aws-lc#3457
  • Includes ChaCha20-Poly1305 key-material zeroization and fixes ML-KEM CPU feature detection to avoid illegal-instruction failures on x86-64 CPUs with AVX2 but no BMI2: aws/aws-lc#3552 and aws/aws-lc#3596
• aws-lc-fips-sys v0.14.3 updates its bundled AWS-LC FIPS 4.2.0 snapshot and regenerates bindings. It remains on the FIPS 4.x release line.

Build Improvements

• Raise the minimum system AWS-LC version to 5.7.0 by @​justsmth in aws/aws-lc-rs#1243
  • Non-FIPS system-library installations must now provide AWS-LC 5.7.0 or newer, previously 1.68.0. Bundled-source builds and FIPS version requirements are unchanged.
• Fix static FIPS system-library linking by @​justsmth in aws/aws-lc-rs#1236
  • Fixes unresolved FIPS_mode references with GNU ld.bfd when linking a prebuilt static FIPS library, including binaries that do not call crypto and builds where LTO removes those calls.
  • Uses whole-archive linking to retain libcrypto, including in downstream Rust staticlib outputs. This can increase binary size; dynamic FIPS and non-FIPS linking are unchanged.
• Fix Cranelift linking by @​justsmth in aws/aws-lc-rs#1234
  • Normalizes binding link names to avoid undefined-symbol failures, including when Cranelift is selected through Cargo profiles rather than RUSTFLAGS. The AWS_LC_SYS_NO_U1_BINDINGS workaround is no longer needed.
• Fix jitterentropy builds with optimizing CFLAGS and newer cc versions by @​justsmth in aws/aws-lc-rs#1254
  • Keeps filtered flags in effect throughout the jitterentropy builder's lifetime, preventing cached environment reads from allowing flags such as -O2 to override its required -O0.
• Honor AWS_LC_SYS_CC in the main library build by @​justsmth in aws/aws-lc-rs#1255
  • Applies crate-specific compiler overrides before compiler lookup in both CC and CMake build paths, keeping compiler selection and capability probes consistent when cc caches environment reads.
• Improve archive reproducibility through symlinked build paths by @​justsmth in aws/aws-lc-rs#1238
  • Prevents the non-Windows CC builder from incorporating symlink-resolved absolute build paths into archive member names, avoiding unnecessary downstream compile-cache misses. Windows short-path handling is unchanged.
• Upgrade bindgen to 0.73 by @​xtqqczze in aws/aws-lc-rs#1244
• Document the system-library trust model by @​justsmth in aws/aws-lc-rs#1218
  • Clarifies that supplied paths and pkg-config results are trusted build inputs, and that FIPS validation can execute candidate library code before accepting or rejecting it. Documents runner requirements and how to disable automatic system-library detection.

Issues Being Closed

• Cranelift builds fail with codegen-backend = "cranelift" -- aws/aws-lc-rs#1231
• Upgrade bindgen to v0.73 -- aws/aws-lc-rs#1245
• Undefined FIPS_mode when linking a prebuilt FIPS module into a binary that does not use crypto -- aws/aws-lc-rs#1246
• Jitterentropy fails with "must not be compiled with optimizations" in aws-lc-rs v1.18.1 / aws-lc-sys v0.45.0 -- aws/aws-lc-rs#1252

Other Merged PRs

• Add security review workflow by @​nhatnghiho in aws/aws-lc-rs#1226
• docs: align pull request template with AWS-LC by @​justsmth in aws/aws-lc-rs#1219
• ci: verify docs.rs build with read-only crate sources by @​justsmth in aws/aws-lc-rs#1209
• ci: harden workflows and release tooling by @​justsmth in aws/aws-lc-rs#1216

... (truncated)

Commits

• 9df4975 Prepare aws-lc-fips-sys v0.14.3 (#1258)
• 83d5809 Prepare aws-lc-sys v0.46.0 and aws-lc-rs v1.18.2 (#1256)
• a97b9df fix(builder): export AWS_LC_SYS_CC before the main build's compiler lookup (#...
• 040d834 fix: normalize binding link names for Cranelift (#1234)
• ecd9a26 fix(builder): hold jitterentropy CFLAGS guard for the builder's lifetime (#1254)
• d17b165 fix: link static FIPS system libcrypto with whole-archive (#1236)
• 841a718 fix: update Clippy allowances for bindgen 0.73 (#1250)
• 4492dcd build(deps): upgrade bindgen to version 0.73 (#1244)
• a0314cb fix(builder): use unresolved CARGO_MANIFEST_DIR for source paths (#1238)
• e81bb0d build(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 (#1237)
• Additional commits viewable in compare view

Updates aws-lc-sys from 0.45.0 to 0.46.0

Commits

• 9df4975 Prepare aws-lc-fips-sys v0.14.3 (#1258)
• 83d5809 Prepare aws-lc-sys v0.46.0 and aws-lc-rs v1.18.2 (#1256)
• a97b9df fix(builder): export AWS_LC_SYS_CC before the main build's compiler lookup (#...
• 040d834 fix: normalize binding link names for Cranelift (#1234)
• ecd9a26 fix(builder): hold jitterentropy CFLAGS guard for the builder's lifetime (#1254)
• d17b165 fix: link static FIPS system libcrypto with whole-archive (#1236)
• 841a718 fix: update Clippy allowances for bindgen 0.73 (#1250)
• 4492dcd build(deps): upgrade bindgen to version 0.73 (#1244)
• a0314cb fix(builder): use unresolved CARGO_MANIFEST_DIR for source paths (#1238)
• e81bb0d build(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 (#1237)
• Additional commits viewable in compare view

Updates block-buffer from 0.10.4 to 0.12.1

Commits

• cbd0963 Release block-buffer v0.12.1 (#1488)
• 9aa541d block-buffer: fix exception safety (#1487)
• 5c7e4f9 cmov v0.5.4 (#1485)
• 87cadbc cmov: fix clippy (#1484)
• 85600e9 rustfmt
• dba6c35 Merge commit from fork
• dad5e3b block-buffer: pin to zeroize v1.8 (#1483)
• 66cb272 ctutils: bump subtle version requirement to v2.6 (#1482)
• 34881f2 build(deps): bump hybrid-array from 0.4.11 to 0.4.12 (#1480)
• c211865 Update crates table (#1479)
• Additional commits viewable in compare view

Updates cc from 1.8.0 to 1.9.0

Release notes

Sourced from cc's releases.

cc-v1.9.0

Added

• pass AddressSanitizer on to the C compiler (#2045)
• add source root for stable external object names (#2034)
• emit rerun-if-env-changed for the compiler's own env vars (#2035)
• (env) read Cargo's variables from the env snapshot (#2028)
• collect compile commands into a compile_commands.json (#1990)

Fixed

• don't prefer clang for -Clinker-plugin-lto=no (#2046)
• keep the order of flag and flag_if_supported (#2044)
• correct "arbitary" typo in target parser comment (#2039)
• correct "stablised" typos in TODO comments (#2040)
• (msvc) pass objects to the archiver relative to the output directory (#2033)
• honor disabled linker-plugin LTO (#2024)
• apply RUSTC_WRAPPER to the cl.exe cc finds itself (#2022)

Other

• (parallel) poll on jobserver helper thread (#2021)
• (parallel) add jobserver polling for windows (#2020)
• Regenerate windows sys bindings (#2019)
• (parallel) add polling for process exit on windows (