chore(deps): bump the minor-and-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #99 · brammittendorff/linux-guardian

dependabot · 2026-09-07T09:09:22Z

Bumps the minor-and-patch group with 6 updates in the / directory:

Package	From	To
clap	`4.6.4`	`4.6.6`
toml	`1.1.3+spec-1.1.0`	`1.1.5+spec-1.1.0`
futures	`0.3.33`	`0.3.34`
rusqlite	`0.40.1`	`0.40.2`
thiserror	`2.0.19`	`2.0.20`
hickory-resolver	`0.26.1`	`0.26.2`

Updates clap from 4.6.4 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

Commits

348cff3 chore: Release
d478377 docs: Update changelog
04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
f90a966 fix(complete): Use spaces for indentation in fish
dd4997b fix(complete): Don't glob-expand bash positionals
8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
8141e11 chore(deps): Update compatible (dev) (#6398)
8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
Additional commits viewable in compare view

Updates toml from 1.1.3+spec-1.1.0 to 1.1.5+spec-1.1.0

Commits

e93ed4e chore: Release
d23436d docs: Update changelog
151afcd fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat (#1211)
26a4050 fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat
232f136 chore(deps): Update Prek to v0.5.1 (#1209)
9ee4b4e chore(deps): Update crate-ci/typos digest to 4d9c206 (#1208)
525f352 chore(deps): Update crate-ci/committed digest to 800a04e (#1207)
46043ed chore(deps): Update crate-ci/typos digest to 4d9c206
c00e894 chore(deps): Update crate-ci/committed digest to 800a04e
1ae0158 chore(deps): Update Prek to v0.5.0 (#1205)
Additional commits viewable in compare view

Updates futures from 0.3.33 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Commits

705e6b5 Release 0.3.34
616dac7 compat: Inline RawWaker clone function
4176369 Inline remaining RawWaker clone functions
f17a895 Fix cloned FuturesUnordered waker identity
51d62ad macro: bump syn to v3 (#3028)
9e26177 ci: Reduce timeout-minutes
b2d0983 tsan: Enable Adaptive Delay
f733d0e Miri: Ignore compat tests
e5def2f Rename default branch to main
See full diff in compare view

Updates rusqlite from 0.40.1 to 0.40.2

Release notes

Sourced from rusqlite's releases.

0.40.2

What's Changed

Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

Commits

e88f112 Prepare release
d11c76e Update main.yml
c922ca5 Lower MSRV to 1.88.0
See full diff in compare view

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

Commits

b1d5db5 Release 2.0.20
c4c3ebd Merge pull request #454 from dtolnay/clippy
2266152 Suppress redundant_field_names clippy lint
2901cfd Raise minimum tested compiler to rust 1.88
aa9d91f Update ui tests for version 2.0.19
See full diff in compare view

Updates hickory-resolver from 0.26.1 to 0.26.2

Release notes

Sourced from hickory-resolver's releases.

v0.26.2

This release fixes a large number of security vulnerabilities. Most of the issues were related to DNSSEC validation, denial of service and resource consumption attacks, and reachable panics in parsers. Other issues were related to UDP spoofing defenses, caching issues, and general DNS protocol correctness issues.

This is our first post-vulnpocalypse release, and most of these vulnerabilities were discovered through LLM-based workflows. The sheer volume of reports has been a challenge for our volunteer maintainers.

Resolved advisories:

GHSA-2vgh-3wfw-qj7c: RRSIG Signer's Name not checked against the RRset's zone

GHSA-57pw-897j-v4j6: Improper check of signature validity of NSEC and NSEC3 records

GHSA-wjgj-fvg9-65w9: DNSSEC validation ignores bogus records with a DNS class other than IN

GHSA-588m-chg6-8jqj: Inverted NSEC3 comparison allows forgery of proofs of nonexistence

GHSA-qw83-5pm2-ggp5: DNSSEC nonexistence forgery via incorrect handling of wraparound NSEC records

GHSA-3jvh-8vj5-65rq: NSEC3 apex NODATA accepted as secure with no QNAME-matching NSEC3

GHSA-3r6v-f3jh-vvqm: ancestor-delegation NSEC accepted as proof of nonexistence below the zone cut

GHSA-624w-vvww-xvpw: ancestor-delegation NSEC3 accepted as proof of nonexistence at and below the zone cut

GHSA-7php-9j59-g3ch: DNSSEC validation is missing RFC 6840 §4.4 checks

GHSA-vrv5-968r-5ggm: DNSSEC validation accepts bogus positive response with wildcard expansion

GHSA-p2jv-r3m3-7wf4: Nonexistence proof forgery due to insufficient checks on NSEC3 record names

GHSA-86vr-jm6c-7cpg: NSEC validator accepts NXDOMAIN for an empty non-terminal (ENT) that the covering NSEC proves exists

GHSA-8hq4-5836-w6q4: Server does not check validation status of SOA record in negative responses

GHSA-5j98-2g5x-46v6: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

GHSA-929p-gjf6-5hqj: DNSSEC validation accepts responses with the wrong RRset as a positive answer

GHSA-j2rc-wxwh-62g9: TrustAnchors does not check name of DNSKEY

GHSA-rx82-4p2j-j5cv: Name::hash discards label boundaries; ValidationCacheKey(u64) reuses the digest in Eq implementation, leaking an Insecure DNSSEC verdict across distinct owner names

GHSA-2hxp-x833-73f7: Hickory DNS recursor: ghost domain attack via child-side NS RRset queries

GHSA-x962-5xwx-fr8x: Unchecked subtraction in TSIG RDATA decoding panics when overflow checks are enabled

GHSA-wgfr-mphw-j5g4: Panic in zone file parser for SVCB and HTTPS

GHSA-hx8c-fjhc-hmf5: Panic in zone file parser for SVCB and HTTPS

GHSA-4rph-pmrw-mwpw: Zone file parser panics when parsing long lines

GHSA-3w89-7rx5-hpwx: Responses with QDCOUNT=0 bypass check for matching question section

GHSA-vcjp-57rr-mpfw: Out-of-bailiwick filtering is not applied to negative responses

GHSA-6w6g-hm98-mhgm: Unbounded TC-retry loop in NameServerPool::try_send (resource-exhaustion DoS)

GHSA-cx5j-p54p-q756: Cyclic sibling domain name server referrals without glue records cause exponential upstream query amplification in the recursor

GHSA-6h5c-jjg5-wj59: Glueless-NS referral fan-out without per-query work budget

GHSA-v44v-c8m4-gc43: Denial of service of client UDP connections via spoofed malformed responses

GHSA-67wc-6jq8-ghrc: Remote memory-amplification DoS via attacker-controlled RR counts in DNS message parsing

GHSA-2f4m-fq7w-mrgx: Remote memory exhaustion in Hickory DNS through incomplete DNS-over-QUIC request bodies

GHSA-g8wg-4mwh-fjfv: DoQ server has no timeout when reading request

GHSA-5r56-v84h-c3w5: DoH request body is buffered without a size limit

GHSA-6f2x-v7q7-m7m5: Resolver follows irrelevant CNAME records

GHSA-xv7c-h5g9-x25x: transient DS-fetch error inappropriately cached as BOGUS

GHSA-9px7-7m25-f6q2: Recursive resolver: Empty connection pool is cached after failed IP lookup

GHSA-29q9-p769-j8gq: Bogus answers cached for the attacker-supplied record TTL

GHSA-4jwp-xjwm-333g: Missing IPv4-Mapped IPv6 address canonicalization

Special thanks go out to @qifan-sailboat and Palo Alto Networks for their research and for reporting the bulk of these vulnerabilities. Thanks to @ATinyShoe, @kirk-baird, @thesmartshadow, @BeaCox, @jpds, @N0zoM1z0, and @JasonPap for reporting vulnerabilities as well.

If your organization is interested in coordinated disclosure of future security vulnerabilities, please contact @djc for commercial support.

What's Changed

... (truncated)

Commits

48323ef Bump version to 0.26.2
ccd6952 Only follow one CNAME record from each response
c04ad2b Better distinguish NODATA response and wildcards
64b4291 Add test for bogus wildcard expansion
478998b proto: constrain peer-controlled allocation sizes
8392769 resolver: avoid caching empty nameserver pools
e2d21d8 Replace use of SOA name with NSEC3 record parents
84fa8ab Check for correct zone name in covering NSEC3s too
09803ba Look for correct zone name in matching NSEC3s
26f45d3 Rename Nsec3RecordPair to Nsec3RecordInfo
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the minor-and-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.6` | | [toml](https://github.com/toml-rs/toml) | `1.1.3+spec-1.1.0` | `1.1.5+spec-1.1.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` | | [rusqlite](https://github.com/rusqlite/rusqlite) | `0.40.1` | `0.40.2` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` | | [hickory-resolver](https://github.com/hickory-dns/hickory-dns) | `0.26.1` | `0.26.2` | Updates `clap` from 4.6.4 to 4.6.6 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.6) Updates `toml` from 1.1.3+spec-1.1.0 to 1.1.5+spec-1.1.0 - [Commits](toml-rs/toml@toml-v1.1.3...toml-v1.1.5) Updates `futures` from 0.3.33 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.33...0.3.34) Updates `rusqlite` from 0.40.1 to 0.40.2 - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.40.1...v0.40.2) Updates `thiserror` from 2.0.19 to 2.0.20 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.19...2.0.20) Updates `hickory-resolver` from 0.26.1 to 0.26.2 - [Release notes](https://github.com/hickory-dns/hickory-dns/releases) - [Changelog](https://github.com/hickory-dns/hickory-dns/blob/main/CHANGELOG.md) - [Commits](hickory-dns/hickory-dns@v0.26.1...v0.26.2) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: toml dependency-version: 1.1.5+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: futures dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: rusqlite dependency-version: 0.40.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: thiserror dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: hickory-resolver dependency-version: 0.26.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-07T09:09:22Z

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-10-13T02:04:41Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot closed this Oct 13, 2026

dependabot Bot deleted the dependabot/cargo/minor-and-patch-0d489a946d branch October 13, 2026 02:04

Navigation Menu

Repository navigation

chore(deps): bump the minor-and-patch group across 1 directory with 6 updates - #99

chore(deps): bump the minor-and-patch group across 1 directory with 6 updates#99
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-and-patch-0d489a946d

dependabot Bot commented on behalf of github Sep 7, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.6.6

[4.6.6] - 2026-08-06

Features

v4.6.5

[4.6.5] - 2026-07-31

Fixes

[4.6.6] - 2026-08-06

Features

[4.6.5] - 2026-07-31

Fixes

0.3.34

0.3.34 - 2026-08-11

0.40.2

What's Changed

2.0.20

v0.26.2

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Oct 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 7, 2026 •

edited

Loading