Skip to content

Bump the major group across 1 directory with 17 updates - #1989

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/major-72e34aa006
Open

Bump the major group across 1 directory with 17 updates#1989
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/major-72e34aa006

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the major group with 17 updates in the / directory:

Package From To
stellar-strkey 0.0.16 0.0.18
ed25519-dalek 2.1.1 3.0.0
curve25519-dalek 4.1.3 5.0.0
rand 0.8.5 0.10.2
ctor 0.5.0 1.0.13
sha2 0.10.9 0.11.0
ark-bn254 0.5.0 0.6.0
ark-bls12-381 0.5.0 0.6.0
ark-ff 0.5.0 0.6.0
syn 2.0.103 3.0.3
itertools 0.13.0 0.14.0
darling 0.20.10 0.24.0
macro-string 0.1.4 0.3.0
thiserror 1.0.63 2.0.20
wasmparser 0.116.1 0.221.3
base64 0.22.1 0.23.1
prettyplease 0.2.22 0.3.0

Updates stellar-strkey from 0.0.16 to 0.0.18

Release notes

Sourced from stellar-strkey's releases.

0.0.18

What's Changed

Full Changelog: stellar/rs-stellar-strkey@v0.0.17...v0.0.18

0.0.17

What's Changed

Full Changelog: stellar/rs-stellar-strkey@v0.0.16...v0.0.17

Commits
  • 6d3b96e Bump version to 0.0.18 (#126)
  • 6f95126 Accept owned variant keys for Decoded<Strkey> (#125)
  • 1115608 Delete .github/workflows/claude-review.yml (#123)
  • f6a2f9d Upgrade crate-git-revision dependency to 0.0.9 (#122)
  • d16561c Add structured DecodeError variants (#121)
  • 14a5e76 Harden Claude review workflow (#114)
  • 3913c15 Expose ENCODED_LEN consts used in public to_string returns (#119)
  • d626f04 Redact private keys and expose them only via Unredacted (#115)
  • 32108d1 Remove positional input for encode and decode (#118)
  • f7b19e1 Warn when CLI outputs private keys (#116)
  • Additional commits viewable in compare view

Updates ed25519-dalek from 2.1.1 to 3.0.0

Changelog

Sourced from ed25519-dalek's changelog.

3.0.0

  • Update the digest dependency to 0.9. This requires a major version because the digest traits are part of the public API, but there are otherwise no changes to the API.

2.1.0

  • Make Scalar::from_bits a const fn, allowing its use in const contexts.

2.0.0

  • Fix a data modeling error in the serde feature pointed out by Trevor Perrin which caused points and scalars to be serialized with length fields rather than as fixed-size 32-byte arrays. This is a breaking change, but it fixes compatibility with serde-json and ensures that the serde-bincode encoding matches the conventional encoding for X/Ed25519.
  • Update rand_core to 0.5, allowing use with new rand versions.
  • Switch from clear_on_drop to zeroize (by Tony Arcieri).
  • Require subtle = ^2.2.1 and remove the note advising nightly Rust, which is no longer required as of that version of subtle. See the subtle changelog for more details.
  • Update README.md for 2.x series.
  • Remove the build.rs hack which loaded the entire crate into its own build.rs to generate constants, and keep the constants in the source code.

The only significant change is the data model change to the serde feature; besides the rand_core version bump, there are no other user-visible changes.

1.2.4

  • Specify a semver bound for clear_on_drop rather than an exact version, addressing an issue where changes to inline assembly in rustc prevented clear_on_drop from working without an update.

1.2.3

  • Fix an issue identified by a Quarkslab audit (and Jack Grigg), where manually constructing unreduced Scalar values, as needed for X/Ed25519, and then performing scalar/scalar arithmetic could compute incorrect results.
  • Switch to upstream Rust intrinsics for the IFMA backend now that they exist in Rust and don't need to be defined locally.
  • Ensure that the NAF computation works correctly, even for parameters never used elsewhere in the codebase.
  • Minor refactoring to EdwardsPoint decompression.
  • Fix broken links in documentation.
  • Fix compilation on nightly broken due to changes to the #[doc(include)] path root (not quite correctly done in 1.2.2).

1.2.2

... (truncated)

Commits
  • 6d96eb7 Bump version to 3.0.0.
  • c68b30f Merge pull request #330 from isislovecruft/fix/move-coc
  • 2ee6193 Merge pull request #327 from huitseeker/digests-0.9
  • 91a0fae Move CoC section from CONTRIBUTING.md to new file.
  • 5038fcf Merge pull request #308 from isislovecruft/fix/pippenger-typo
  • 6afd8ff Update sha2, digest to 0.9
  • 3cc13a7 Merge branch 'master' into develop
  • c4824e1 Merge branch 'release/2.1.0'
  • 7e2aed3 Fix typo of Pippenger's name.
  • See full diff in compare view

Updates curve25519-dalek from 4.1.3 to 5.0.0

Commits

Updates rand from 0.8.5 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

... (truncated)

Commits

Updates ctor from 0.5.0 to 1.0.13

Release notes

Sourced from ctor's releases.

ctor-1.0.13

What's Changed

  • Bumped internal proc macro minimum version to pick up consistent 64-bit hash chunks (#508) and the cross-crate section-name fix (#509) (should not result in any downstream visible changes)
  • Document crate_path and re-exports by @​mmastrac in mmastrac/rust-ctor#514

Full Changelog: mmastrac/linktime@ctor-1.0.12...ctor-1.0.13

ctor-1.0.12

What's Changed

  • Bumped internal proc macro minimum version to pick up PR #495 (should not result in any downstream visible changes)

Full Changelog: mmastrac/linktime@ctor-1.0.11...ctor-1.0.12

ctor-1.0.11

What's Changed

Full Changelog: mmastrac/linktime@ctor-1.0.10...ctor-1.0.11

ctor-1.0.10

What's Changed

New Contributors

Full Changelog: mmastrac/linktime@ctor-1.0.9...ctor-1.0.10

ctor-1.0.9

What's Changed

Full Changelog: mmastrac/linktime@ctor-1.0.8...ctor-1.0.9

ctor-1.0.8

What's Changed

Full Changelog: mmastrac/linktime@link-section-0.18.3...ctor-1.0.8

ctor-1.0.7

What's Changed

  • Bump downstream link-section crate version and API updates.

... (truncated)

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates ark-bn254 from 0.5.0 to 0.6.0

Changelog

Sourced from ark-bn254's changelog.

CHANGELOG

Pending

  • (ark-starkcurve) Add 252 bit Stark curve.
  • #971 (ark-ff) Make serial_batch_inversion_and_mul public.
  • Consolidated logic into bitreverse_permutation_in_place and made it public.
  • Remove redundant type constraints from Pairing::G1Prepared.
  • (ark-serialize) Add serde-compatible wrapper types CompressedChecked<T>, CompressedUnchecked<T>, UncompressedChecked<T>, UncompressedUnchecked<T>.
  • #989 (ark-poly) Replace bound F: FftField with F: Field on GeneralEvaluationDomain.
  • (ark-poly) Add fast polynomial division
  • (ark-ec) Improve GLV scalar multiplication performance by skipping leading zeroes.
  • (ark-poly) Make SparsePolynomial.coeffs field public
  • #1039 (ark-ff-asm) Remove unused dead spill buffer path.
  • #1044, #1084, #1088 Add implementation for small field with native integer types
  • #1061 (ark-poly) Reduce allocations in DenseMultilinearExtension::{concat, fix_variables, evaluate}.
  • #1109 (ark-poly) Reduce allocations in DenseMultilinearExtension::Sub and parallelize scalar Mul.
  • #1112 (ark-ec) Fix rayon::ThreadPoolBuilder panicking in wasm32 when parallel feature is enabled
  • #1108 (ark-ec) Improve scalar multiplication speed for curves using GLV.

Breaking changes

  • #1121 (all) Bump the minimum supported Rust version to 1.89.
  • (ark-poly) the Div implementation is now restricted to polynomials defined over FftField. Non-FftField polys can instead use the naive_div method.

Features

  • (ark-serialize) Implementation of CanonicalSerialize and CanonicalDeserialize for signed integer types
  • #1115 (ark-serialize) Implement CanonicalSerialize, Valid, and CanonicalDeserialize for Box<T>.
  • #1084 (ark-ff) Add from_u128 const constructor for SmallFp fields
  • #1086 (ark-ff-macros) Auto-detect small prime subgroup (bases 3, 5, 7) in define_field! for both SmallFp and Fp fields

Improvements

  • #1091(ark-ff-macros) Replace Fermat-based (a^{p-2}) modular inversion for SmallFp fields with a constant-time binary extended GCD (based on Pornin 2020).
  • #1091(ark-ff-macros) Consolidate SmallFp multiplication dispatch into a single match with Mersenne fast-paths (M7, M13, M31) and generic Montgomery backends for u8/u16/u32/u64 fields.
  • #1102 (ark-ff-macros) Add specialized SmallFp multiplication paths for the BabyBear, KoalaBear, and Goldilocks primes (shift-based Montgomery for BabyBear/KoalaBear, Pornin's reduction for Goldilocks).

Bugfixes

  • #1082 (ark-ff) Fix SmallFp::from_random_bytes / from_be_bytes_mod_order silently producing incorrect field elements by treating plaintext bytes as Montgomery-encoded.
Commits
  • a5460be Release 0.6.0
  • 4cec9f0 Inverse via GCD for SmallFp, generalize mersenne mul path (#1091)
  • 7b1b733 build(deps): update hashbrown requirement from 0.16 to 0.17 (#1095)
  • 2733e8f In define_field macro set plausibly useful FFT params for user (#1086)
  • 08aa6de Support only u64 sized primes for SmallFp (#1088)
  • 285dac2 Const initialization helper for SmallFp (#1084)
  • a2d4d66 Fix SmallFp from_random_bytes inconsistency with Fp (#1082)
  • c402d0c Ark-ff Small Field Support (#1044)
  • 8de9a9d Remove dead spill buffer path in generate_impl (#1039)
  • 6fd2656 build(deps): update criterion requirement from 0.7.0 to 0.8.2 (#1077)
  • Additional commits viewable in compare view

Updates ark-bls12-381 from 0.5.0 to 0.6.0

Changelog

Sourced from ark-bls12-381's changelog.

CHANGELOG

Pending

  • (ark-starkcurve) Add 252 bit Stark curve.
  • #971 (ark-ff) Make serial_batch_inversion_and_mul public.
  • Consolidated logic into bitreverse_permutation_in_place and made it public.
  • Remove redundant type constraints from Pairing::G1Prepared.
  • (ark-serialize) Add serde-compatible wrapper types CompressedChecked<T>, CompressedUnchecked<T>, UncompressedChecked<T>, UncompressedUnchecked<T>.
  • #989 (ark-poly) Replace bound F: FftField with F: Field on GeneralEvaluationDomain.
  • (ark-poly) Add fast polynomial division
  • (ark-ec) Improve GLV scalar multiplication performance by skipping leading zeroes.
  • (ark-poly) Make SparsePolynomial.coeffs field public
  • #1039 (ark-ff-asm) Remove unused dead spill buffer path.
  • #1044, #1084, #1088 Add implementation for small field with native integer types
  • #1061 (ark-poly) Reduce allocations in DenseMultilinearExtension::{concat, fix_variables, evaluate}.
  • #1109 (ark-poly) Reduce allocations in DenseMultilinearExtension::Sub and parallelize scalar Mul.
  • #1112 (ark-ec) Fix rayon::ThreadPoolBuilder panicking in wasm32 when parallel feature is enabled
  • #1108 (ark-ec) Improve scalar multiplication speed for curves using GLV.

Breaking changes

  • #1121 (all) Bump the minimum supported Rust version to 1.89.
  • (ark-poly) the Div implementation is now restricted to polynomials defined over FftField. Non-FftField polys can instead use the naive_div method.

Features

  • (ark-serialize) Implementation of CanonicalSerialize and CanonicalDeserialize for signed integer types
  • #1115 (ark-serialize) Implement CanonicalSerialize, Valid, and CanonicalDeserialize for Box<T>.
  • #1084 (ark-ff) Add from_u128 const constructor for SmallFp fields
  • #1086 (ark-ff-macros) Auto-detect small prime subgroup (bases 3, 5, 7) in define_field! for both SmallFp and Fp fields

Improvements

  • #1091(ark-ff-macros) Replace Fermat-based (a^{p-2}) modular inversion for SmallFp fields with a constant-time binary extended GCD (based on Pornin 2020).
  • #1091(ark-ff-macros) Consolidate SmallFp multiplication dispatch into a single match with Mersenne fast-paths (M7, M13, M31) and generic Montgomery backends for u8/u16/u32/u64 fields.
  • #1102 (ark-ff-macros) Add specialized SmallFp multiplication paths for the BabyBear, KoalaBear, and Goldilocks primes (shift-based Montgomery for BabyBear/KoalaBear, Pornin's reduction for Goldilocks).

Bugfixes

  • #1082 (ark-ff) Fix SmallFp::from_random_bytes / from_be_bytes_mod_order silently producing incorrect field elements by treating plaintext bytes as Montgomery-encoded.
Commits
  • a5460be Release 0.6.0
  • 4cec9f0 Inverse via GCD for SmallFp, generalize mersenne mul path (#1091)
  • 7b1b733 build(deps): update hashbrown requirement from 0.16 to 0.17 (#1095)
  • 2733e8f In define_field macro set plausibly useful FFT params for user (#1086)
  • 08aa6de Support only u64 sized primes for SmallFp (#1088)
  • 285dac2 Const initialization helper for SmallFp (#1084)
  • a2d4d66 Fix SmallFp from_random_bytes inconsistency with Fp (#1082)
  • c402d0c Ark-ff Small Field Support (#1044)
  • 8de9a9d Remove dead spill buffer path in generate_impl (#1039)
  • 6fd2656 build(deps): update criterion requirement from 0.7.0 to 0.8.2 (#1077)
  • Additional commits viewable in compare view

Updates ark-ff from 0.5.0 to 0.6.0

Changelog

Sourced from ark-ff's changelog.

CHANGELOG

Pending

  • (ark-starkcurve) Add 252 bit Stark curve.
  • #971 (ark-ff) Make serial_batch_inversion_and_mul public.
  • Consolidated logic into bitreverse_permutation_in_place and made it public.
  • Remove redundant type constraints from Pairing::G1Prepared.
  • (ark-serialize) Add serde-compatible wrapper types CompressedChecked<T>, CompressedUnchecked<T>, UncompressedChecked<T>, UncompressedUnchecked<T>.
  • #989 (ark-poly) Replace bound F: FftField with F: Field on GeneralEvaluationDomain.
  • (ark-poly) Add fast polynomial division
  • (ark-ec) Improve GLV scalar multiplication performance by skipping leading zeroes.
  • (ark-poly) Make SparsePolynomial.coeffs field public
  • #1039 (ark-ff-asm) Remove unused dead spill buffer path.
  • #1044, #1084, #1088 Add implementation for small field with native integer types
  • #1061 (ark-poly) Reduce allocations in DenseMultilinearExtension::{concat, fix_variables, evaluate}.
  • #1109 (ark-poly) Reduce allocations in DenseMultilinearExtension::Sub and parallelize scalar Mul.
  • #1112 (ark-ec) Fix rayon::ThreadPoolBuilder panicking in wasm32 when parallel feature is enabled
  • #1108 (ark-ec) Improve scalar multiplication speed for curves using GLV.

Breaking changes

  • #1121 (all) Bump the minimum supported Rust version to 1.89.
  • (ark-poly) the Div implementation is now restricted to polynomials defined over FftField. Non-FftField polys can instead use the naive_div method.

Features

  • (ark-serialize) Implementation of CanonicalSerialize and CanonicalDeserialize for signed integer types
  • #1115 (ark-serialize) Implement CanonicalSerialize, Valid, and CanonicalDeserialize for Box<T>.
  • #1084 (ark-ff) Add from_u128 const constructor for SmallFp fields
  • #1086 (ark-ff-macros) Auto-detect small prime subgroup (bases 3, 5, 7) in define_field! for both SmallFp and Fp fields

Improvements

  • #1091(ark-ff-macros) Replace Fermat-based (a^{p-2}) modular inversion for SmallFp fields with a constant-time binary extended GCD (based on Pornin 2020).
  • #1091(ark-ff-macros) Consolidate SmallFp multiplication dispatch into a single match with Mersenne fast-paths (M7, M13, M31) and generic Montgomery backends for u8/u16/u32/u64 fields.
  • #1102 (ark-ff-macros) Add specialized SmallFp multiplication paths for the BabyBear, KoalaBear, and Goldilocks primes (shift-based Montgomery for BabyBear/KoalaBear, Pornin's reduction for Goldilocks).

Bugfixes

  • #1082 (ark-ff) Fix SmallFp::from_random_bytes / from_be_bytes_mod_order silently producing incorrect field elements by treating plaintext bytes as Montgomery-encoded.
Commits
  • a5460be Release 0.6.0
  • 4cec9f0 Inverse via GCD for SmallFp, generalize mersenne mul path (#1091)
  • 7b1b733 build(deps): update hashbrown requirement from 0.16 to 0.17 (#1095)
  • 2733e8f In define_field macro set plausibly useful FFT params for user (#1086)
  • 08aa6de Support only u64 sized primes for SmallFp (#1088)
  • 285dac2 Const initialization helper for SmallFp (#1084)
  • a2d4d66 Fix SmallFp from_random_bytes inconsistency with Fp (#1082)
  • c402d0c Ark-ff Small Field Support (#1044)
  • 8de9a9d Remove dead spill buffer path in generate_impl (#1039)
  • 6fd2656 build(deps): update criterion requirement from 0.7.0 to 0.8.2 (#1077)
  • Additional commits viewable in compare view

Updates syn from 2.0.103 to 3.0.3

Release notes

Sourced from syn's releases.

3.0.3

  • Documentation improvements

3.0.2

3.0.1

3.0.0

This release contains adjustments to the syntax tree to account for ongoing Rust language development from the 3 years since syn 2.0.0 and to anticipate some in-flight Rust language RFCs.

These include: default values in fields, pinned type sugar, raw lifetimes, generator blocks and functions, unnamed enum variants, attributes in tuple types and tuple patterns, named arguments in parenthesized generic argument lists, lightweight clones, const traits, const function pointers, mutability restricted fields, supertrait auto implementation, final associated functions, trait implementability restrictions, const blocks in path arguments, item-level const blocks, return type notation, never patterns, function delegation, mutable by-reference bindings, in-place initialization, field projections, explicitly dyn-compatible traits, view types, file-level frontmatter, generic const arguments, guard patterns, lazy type aliases, explicitly safe foreign items, super let, unsafe fields, pattern types, heterogeneous try-blocks, function contracts, async function trait bounds, static closure coroutine syntax, unsafe binder types, move expressions, for-await loops, and postfix keywords.

Breaking changes

Modifiers

To reserve more room for language evolution, there are 10 new non-exhaustive structs in the syntax tree having the following commonality:

  • Name ending in Modifiers. {BlockModifiers, ClosureModifiers, ConstModifiers, FieldModifiers, FnModifiers, ImplModifiers, LocalModifiers, TraitBoundModifiers, TraitModifiers, TypeModifiers}

  • Each implements Default. The default value is guaranteed to comprise no tokens.

  • Non-exhaustive. Can only be instantiated by Syn's parser or by creating and then mutating ▁▁Modifiers::default().

  • Does not implement Parse. When parsing, they are parsed by the enclosing syntax tree node.

  • Does not implement ToTokens. In some cases the syntax that these nodes might hold in the future is not necessarily contiguous tokens.

  • Provides .require_empty() -> Result<()> which returns a meaningfully spanned error if the modifiers are different from the empty default. This enables a caller to reject syntax it does not recognize without knowing what that syntax may be.

Types

  • Type::BareFn has been renamed to Type::FnPtr to mirror the compiler's terminology. Together with this, BareVariadic is renamed to FnPtrVariadic.

  • The mutually exclusive const_token and mutability fields of Type::Ptr have been unified into an enum of type PointerMutability, which was already previously used by Expr::RawAddr.

  • Every Type variant now holds attributes, which can represent the attributes of element types inside a tuple type, or attributes for a function return type.

  • BareFnArg is renamed to NamedArg and is used in ParenthesizedGenericArguments, in addition to the existing use in Type::FnPtr.

Expressions

... (truncated)

Commits
  • 23dbaab Release 3.0.3
  • 16aad4e Merge pull request #2071 from dtolnay/compatibility
  • 42181b8 Add explanation of compatibility strategy
  • f3af08e Update test suite to nightly-2026-07-21
  • 88ee7be Release 3.0.2
  • 587bc20 Merge pull request #2070 from dtolnay/emptyrange
  • 96801f7 Allow Error::new_range at empty cursor range
  • 9dc16c9 Merge pull request #2069 from dtolnay/prevspan
  • 1db76b7 Align on using impl trait across all Error constructors
  • bfa1ebf Make Cursor::prev_span public
  • Additional commits viewable in compare view

Updates itertools from 0.13.0 to 0.14.0

Changelog

Sourced from itertools's changelog.

0.14.0

Breaking

  • Increased MSRV to 1.63.0 (#960)
  • Removed generic parameter from cons_tuples (#988)

Added

  • Added array_combinations (#991)
  • Added Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 4, 2026
Copilot AI review requested due to automatic review settings August 4, 2026 00:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 4, 2026
@socket-security

socket-security Bot commented Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedwasmparser@​0.221.37210093100100
Updatedthiserror@​1.0.63 ⏵ 2.0.208010093100100
Addedcurve25519-dalek@​5.0.08110093100100
Updatedprettyplease@​0.2.22 ⏵ 0.3.082 +110093100100
Addedstellar-strkey@​0.0.1889100100100100
Addedark-bn254@​0.6.010010093100100
Addedbase64@​0.23.110010093100100
Addedctor@​1.0.139910093100100
Addeded25519-dalek@​3.0.010010093100100
Addeditertools@​0.14.010010093100100
Addedmacro-string@​0.3.09910093100100
Addedrand@​0.10.210010093100100
Addedsha2@​0.11.010010093100100
Updateddarling@​0.20.10 ⏵ 0.24.010010093100100
Updatedsyn@​2.0.103 ⏵ 2.0.119100 +1100100100100
Updatedsyn@​2.0.103 ⏵ 3.0.3100 +1100100100100
Addedark-ff@​0.6.0100100100100100
Addedark-bls12-381@​0.6.0100100100100100

View full report

Copilot AI reviewed Aug 4, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

This PR updates several Rust crate dependencies across the workspace, primarily bumping crypto, parsing, and proc-macro-related libraries to newer major/minor versions.

Changes:

  • Bumped common libraries (thiserror, sha2, wasmparser, base64) in soroban-* crates.
  • Upgraded proc-macro toolchain dependencies (syn, prettyplease, darling, itertools, macro-string).
  • Updated SDK crypto/testing stack (ed25519-dalek, curve25519-dalek, rand, ctor, ark-*) and workspace stellar-strkey.

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file
File Description
soroban-spec/Cargo.toml Updates base64, thiserror, wasmparser, sha2 versions.
soroban-spec-rust/Cargo.toml Updates proc-macro dependencies including a major syn bump and prettyplease.
soroban-sdk/Cargo.toml Updates Dalek crypto crates, rand, ctor, and ark-* dependencies plus sha2.
soroban-sdk-macros/Cargo.toml Updates syn plus macro ecosystem crates (darling, itertools, etc.).
soroban-meta/Cargo.toml Updates thiserror and wasmparser.
soroban-ledger-snapshot/Cargo.toml Updates thiserror major version requirement.
Cargo.toml Updates workspace stellar-strkey version pin.

Comment thread soroban-spec-rust/Cargo.toml Outdated
Comment on lines +16 to +17
thiserror = "2.0.19"
syn = {version="3.0",features=["full"]}
Comment thread soroban-ledger-snapshot/Cargo.toml
serde_with = { version = "3.4.0", features = ["hex"] }
serde_json = "1.0.0"
thiserror = "1.0"
thiserror = "2.0"
Comment thread soroban-sdk/Cargo.toml Outdated
Comment on lines +39 to +43
ed25519-dalek = { version = "3.0.0", features = ["rand_core"], optional = true }
curve25519-dalek = { version = "5.0.0", features = ["digest"], optional = true }
# match the version of rand used in dalek
rand = "0.8.5"
ctor = { version = "0.5.0", optional = true }
rand = "0.10.2"
ctor = { version = "1.0.12", optional = true }
Comment thread soroban-sdk-macros/Cargo.toml
Comment on lines +22 to +28
syn = {version="3.0.3",features=["full"]}
quote = "1.0"
proc-macro2 = "1.0"
itertools = "0.13.0"
darling = "0.20.10"
macro-string = "0.1.4"
sha2 = "0.10.7"
itertools = "0.14.0"
darling = "0.24.0"
macro-string = "0.3.0"
sha2 = "0.11.0"
@dependabot
dependabot Bot force-pushed the dependabot/cargo/major-72e34aa006 branch 2 times, most recently from 9e2e5a6 to 8b46497 Compare August 9, 2026 02:09
@dependabot
dependabot Bot force-pushed the dependabot/cargo/major-72e34aa006 branch from 8b46497 to 6c2c5b0 Compare August 16, 2026 02:09
@dependabot
Bump the major group across 1 directory with 17 updates
f6b3280 
Bumps the major group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [stellar-strkey](https://github.com/stellar/rs-stellar-strkey) | `0.0.16` | `0.0.18` |
| [ed25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) | `2.1.1` | `3.0.0` |
| [curve25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) | `4.1.3` | `5.0.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.10.2` |
| [ctor](https://github.com/mmastrac/linktime) | `0.5.0` | `1.0.13` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [ark-bn254](https://github.com/arkworks-rs/algebra) | `0.5.0` | `0.6.0` |
| [ark-bls12-381](https://github.com/arkworks-rs/algebra) | `0.5.0` | `0.6.0` |
| [ark-ff](https://github.com/arkworks-rs/algebra) | `0.5.0` | `0.6.0` |
| [syn](https://github.com/dtolnay/syn) | `2.0.103` | `3.0.3` |
| [itertools](https://github.com/rust-itertools/itertools) | `0.13.0` | `0.14.0` |
| [darling](https://github.com/TedDriggs/darling) | `0.20.10` | `0.24.0` |
| [macro-string](https://github.com/dtolnay/macro-string) | `0.1.4` | `0.3.0` |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.63` | `2.0.20` |
| [wasmparser](https://github.com/bytecodealliance/wasm-tools) | `0.116.1` | `0.221.3` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [prettyplease](https://github.com/dtolnay/prettyplease) | `0.2.22` | `0.3.0` |



Updates `stellar-strkey` from 0.0.16 to 0.0.18
- [Release notes](https://github.com/stellar/rs-stellar-strkey/releases)
- [Commits](stellar/rs-stellar-strkey@v0.0.16...v0.0.18)

Updates `ed25519-dalek` from 2.1.1 to 3.0.0
- [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases)
- [Changelog](https://github.com/dalek-cryptography/curve25519-dalek/blob/3.0.0/CHANGELOG.md)
- [Commits](dalek-cryptography/curve25519-dalek@2.1.1...3.0.0)

Updates `curve25519-dalek` from 4.1.3 to 5.0.0
- [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases)
- [Commits](dalek-cryptography/curve25519-dalek@curve25519-4.1.3...curve25519-5.0.0)

Updates `rand` from 0.8.5 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.10.2)

Updates `ctor` from 0.5.0 to 1.0.13
- [Release notes](https://github.com/mmastrac/linktime/releases)
- [Changelog](https://github.com/mmastrac/linktime/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mmastrac/linktime/commits/ctor-1.0.13)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `ark-bn254` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/arkworks-rs/algebra/releases)
- [Changelog](https://github.com/arkworks-rs/algebra/blob/master/CHANGELOG.md)
- [Commits](arkworks-rs/algebra@v0.5.0...v0.6.0)

Updates `ark-bls12-381` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/arkworks-rs/algebra/releases)
- [Changelog](https://github.com/arkworks-rs/algebra/blob/master/CHANGELOG.md)
- [Commits](arkworks-rs/algebra@v0.5.0...v0.6.0)

Updates `ark-ff` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/arkworks-rs/algebra/releases)
- [Changelog](https://github.com/arkworks-rs/algebra/blob/master/CHANGELOG.md)
- [Commits](arkworks-rs/algebra@v0.5.0...v0.6.0)

Updates `syn` from 2.0.103 to 3.0.3
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.103...3.0.3)

Updates `itertools` from 0.13.0 to 0.14.0
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](rust-itertools/itertools@v0.13.0...v0.14.0)

Updates `darling` from 0.20.10 to 0.24.0
- [Release notes](https://github.com/TedDriggs/darling/releases)
- [Changelog](https://github.com/TedDriggs/darling/blob/master/CHANGELOG.md)
- [Commits](TedDriggs/darling@v0.20.10...v0.24.0)

Updates `macro-string` from 0.1.4 to 0.3.0
- [Release notes](https://github.com/dtolnay/macro-string/releases)
- [Commits](dtolnay/macro-string@0.1.4...0.3.0)

Updates `thiserror` from 1.0.63 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.63...2.0.20)

Updates `wasmparser` from 0.116.1 to 0.221.3
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `prettyplease` from 0.2.22 to 0.3.0
- [Release notes](https://github.com/dtolnay/prettyplease/releases)
- [Commits](dtolnay/prettyplease@0.2.22...0.3.0)

---
updated-dependencies:
- dependency-name: ark-bls12-381
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: ark-bn254
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: ark-ff
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: base64
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: ctor
  dependency-version: 1.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: curve25519-dalek
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: darling
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: ed25519-dalek
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: itertools
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: macro-string
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: prettyplease
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: stellar-strkey
  dependency-version: 0.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: major
- dependency-name: syn
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: wasmparser
  dependency-version: 0.221.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/major-72e34aa006 branch from 6c2c5b0 to f6b3280 Compare August 18, 2026 04:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant