Skip to content

chore(deps): bump the rust-deps group across 1 directory with 6 updates - #31

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-deps-93d9da4cfa
Open

chore(deps): bump the rust-deps group across 1 directory with 6 updates#31
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-deps-93d9da4cfa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown

Bumps the rust-deps group with 6 updates in the / directory:

Package From To
rustix 1.1.5 1.1.6
rolldown 1.2.15 1.2.16
rolldown_common 1.2.15 1.3.0
brotli 9.0.0 9.1.1
boring 5.3.0 5.4.0
similar 3.2.0 3.2.1

Updates rustix from 1.1.5 to 1.1.6

Commits
  • 4a563ad chore: Release rustix version 1.1.6
  • 8e6aaa6 Merge commit from fork
  • 4686873 fix: expose additional termios output mode flags (#1709)
  • c9ad9d3 fix(net): don't trust cmsg_len past the end of a truncated control buffer (...
  • 98358af Avoid constructing a zero Pid in tcgetpgrp on non-Linux targets (#1710)
  • 664aeae fix(net): use IPPROTO_IPV6 for IPV6_MULTICAST_HOPS (#1692)
  • bf78ee6 freebsd: Fix cfg gates for FreeBSD 12 (#1707)
  • b3d81bd Fix fallocate on Apple platforms. (#1708)
  • 915ab6f fix(fs): Set proper inotify WatchFlags values on libc backend (#1714)
  • 52d5db7 Use 32-bit UID/GID syscalls on arm, sparc, and x86 (#1716)
  • Additional commits viewable in compare view

Updates rolldown from 1.2.15 to 1.2.16

Release notes

Sourced from rolldown's releases.

v1.2.16

[1.2.16] - 2026-10-29

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.16] - 2026-10-29

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

... (truncated)

Commits
  • de6facf release: v1.2.16 (#11383)
  • d2d8295 feat(perf-kit): check rendered output against the original build (#11140)
  • 5e2187d feat(perf-kit): node/deno server startup mode (#10601)
  • 880434a feat(perf-kit): browser page-load perf harness for coding agents (#10365)
  • c9e8b54 feat(devtools): report mode - agent-readable build metrics report (#10364)
  • 9c0af88 fix: await bundle.close() in loadConfig and clean up every generated config f...
  • e540bff fix(deps): update mimalloc-safe to 0.1.69 (#11376)
  • 155368e fix(transform): don't crash when the working directory has been deleted (#11352)
  • d2b79ac fix(import-glob): follow directory symlinks on the wasm binding (#10624)
  • f79cf6c feat(inline-common-chunks): print record factories parenthesized so they comp...
  • Additional commits viewable in compare view

Updates rolldown_common from 1.2.15 to 1.3.0

Release notes

Sourced from rolldown_common's releases.

v1.3.0

[!IMPORTANT] This is a minor release. It adds experimental support for import attributes, and some changes alter default behavior compared to 1.2.16. Please read Breaking changes before upgrading.

[!WARNING] Vite users: Please do not force rolldown@1.3.0 into Vite with overrides or resolutions yet. Vite 8.3.6 and earlier need changes to work with it. Vite pins its rolldown version, so a normal install is not affected. Please wait for a Vite release that supports Rolldown 1.3.

🌟 Import attributes support (experimental)

Import attributes are the with { ... } part of an import. Node.js and browsers require them for JSON and CSS module scripts, so they are common in code written for these runtimes.

import config from './config.json' with { type: 'json' };
import shader from './shader.glsl' with { type: 'text' };
import wasm from './module.wasm' with { type: 'bytes' };

With experimental.importAttributes:

  • The same file imported with different attributes becomes different modules.
  • type: 'json', 'text' and 'bytes' work without a plugin.
  • Plugins can read the attributes in resolveId, load and transform, and change them in resolveId.
// rolldown.config.js
export default {
  experimental: {
    importAttributes: true,
  },
};

The design follows Rollup 5. The option is off by default, because it changes the id of modules imported with attributes, and plugins that use the id as a file path can break.

Rolldown's dev mode and Vite do not support it yet. See the Import Attributes guide for details and plugin migration.

🌟 Agent-friendly build report (experimental)

With devtools: { mode: 'report' }, Rolldown writes small Markdown and JSON files about each build to node_modules/.rolldown/report/. A coding agent can read the numbers directly, and does not need scripts to parse a large event log. People and CI can use them too.

// rolldown.config.js
export default {
  devtools: { mode: 'report' },
};

The report shows:

  • Time: scan and generate times, plugin timings for each hook, hooks that did no work, and the slowest modules in transform hooks.

... (truncated)

Changelog

Sourced from rolldown_common's changelog.

[1.3.0] - 2026-11-05

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

... (truncated)

Commits
  • be42c65 release: v1.3.0 (#11502)
  • 2bf91c2 fix: respect NO_COLOR in error and warning diagnostics (#11499)
  • 51419d3 release: perf-kit@0.1.0 (#11501)
  • 9d9a381 docs: add build report and perf-kit in-depth pages (#11480)
  • 8b36bf7 fix(perf-kit): Worker mode with nested rolldown, external bindings, redirects...
  • ac13c6a refactor: remove dead concatenated wrapped module code (#11453)
  • b863fa9 fix(rolldown_plugin_vite_import_glob): match negated ** globs from the walk...
  • f28098b fix(lazy-barrel): report used lazy barrel uncertain bindings with a dedicated...
  • 38c68c2 docs(rolldown_plugin_vite_import_glob): describe how import.meta.glob follows...
  • 048642a fix: avoid following output directory symlinks with output.cleanDir (#11494)
  • Additional commits viewable in compare view

Updates brotli from 9.0.0 to 9.1.1

Commits
  • a3cb931 release 9.1.1
  • b47cb22 Refactor into a more legible reader
  • e0efe1c BroCatli: hold back trailing header bytes and handle short and chunked streams
  • afa8585 BroCatli: keep both header bytes when an empty stream straddles a byte boundary
  • e951e7e brotli CLI: accept -bare and -bytealign with -catable, exit 1 when rejected
  • c550341 Fix index out of bounds under the disallow_large_window_size feature
  • 73e6947 Release 9.1.0
  • 73766fc Forward portable float from the C FFI crate
  • 6518a4e fix: correct BroCatli empty-stream concatenation for small windows
  • See full diff in compare view

Updates boring from 5.3.0 to 5.4.0

Release notes

Sourced from boring's releases.

v5.4.0

What's Changed

Full Changelog: cloudflare/boring@v5.3.0...v5.4.0

Changelog

Sourced from boring's changelog.

5.4.0

  • 2026-10-30 Add unchecked DER certificate setters
  • 2026-10-28 Update to boringssl 0.20261020.0 with ML-DSA by default
  • 2026-10-23 Add Asn1IntegerRef::to_der_contents
  • 2026-10-19 Make crates.io publishing a guarded manual release (#541)
  • 2026-03-27 Constants for rust-openssl compat
  • 2026-03-27 ASN1_INTEGER_*, BN_* functions
  • 2026-10-14 Add crates.io trusted publishing (#535)
Commits
  • 309bf35 Release 5.4.0
  • fa5efdc Add unchecked DER certificate setters
  • c4e2393 boring-sys: clear repository-local git env vars in build script
  • 7a80a79 Update to boringssl 0.20261020.0 with ML-DSA by default
  • 3d73b84 Add Asn1IntegerRef::to_der_contents
  • fdb42cd Make crates.io publishing a guarded manual release (#541)
  • da1240d Clippy
  • d18291d Changelog
  • 1d63370 Report real key_index error
  • 23dd17f Constants for rust-openssl
  • Additional commits viewable in compare view

Updates similar from 3.2.0 to 3.2.1

Changelog

Sourced from similar's changelog.

3.2.1

  • Improved real-world diffing performance substantially without changing the produced diffs. On a corpus of real source file revisions, line diffs run about 4x faster with Algorithm::Myers, 5x faster with Algorithm::Histogram, and 2.5x faster with Algorithm::Patience; word diffs run about 2x faster. This comes from a faster line tokenizer, a SipHash-1-3 content hash that consumes whole words (randomly keyed with std), cheaper integer-keyed lookup tables, hashing only the changed middle of Myers line diffs, flat occurrence tables in Histogram, and a gap buffer in the compaction pass that was quadratic on diffs with many ops. Allocation counts and peak memory dropped as well; in particular one sided and heavily unbalanced inputs no longer build index structures proportional to the larger side for Algorithm::Hunt, Algorithm::Histogram, and Algorithm::Patience.
  • Fixed Algorithm::Histogram overflowing the stack on inputs with many scattered changes. Pending ranges are now tracked on the heap, so stack usage no longer grows with the number of anchors. #105
  • Fixed TextMerge::labels writing carriage returns and newlines verbatim into conflict markers, which let a label add lines to the output that looked like merged content. Line terminators in labels are now replaced with spaces. #101
Commits
  • 71d4831 chore(release): prepare 3.2.1
  • b61e6c3 test(histogram): skip small stack tests on WASI
  • a4ee936 fix(histogram): track pending ranges on the heap
  • 96993d9 docs: add runnable example output gallery (#104)
  • 1c64280 docs(changelog): describe diff performance and memory improvements
  • a3da6ec perf(compact): use a gap buffer for large operation lists
  • ce3a403 perf(histogram): reuse indexes and bound unbalanced input allocations
  • 2bcae2f perf(myers): skip unchanged hashing and unused split bookkeeping
  • 5a5aa8d perf(text): accelerate line and word tokenization
  • 80bc240 perf(hash): accelerate content hashing and integer lookups
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the rust-deps group across 1 directory with 6 updates
cabb5a0 
Bumps the rust-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rustix](https://github.com/bytecodealliance/rustix) | `1.1.5` | `1.1.6` |
| [rolldown](https://github.com/rolldown/rolldown) | `1.2.15` | `1.2.16` |
| [rolldown_common](https://github.com/rolldown/rolldown) | `1.2.15` | `1.3.0` |
| [brotli](https://github.com/dropbox/rust-brotli) | `9.0.0` | `9.1.1` |
| [boring](https://github.com/cloudflare/boring) | `5.3.0` | `5.4.0` |
| [similar](https://github.com/mitsuhiko/similar) | `3.2.0` | `3.2.1` |



Updates `rustix` from 1.1.5 to 1.1.6
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.1.5...v1.1.6)

Updates `rolldown` from 1.2.15 to 1.2.16
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](rolldown/rolldown@v1.2.15...v1.2.16)

Updates `rolldown_common` from 1.2.15 to 1.3.0
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](rolldown/rolldown@v1.2.15...v1.3.0)

Updates `brotli` from 9.0.0 to 9.1.1
- [Release notes](https://github.com/dropbox/rust-brotli/releases)
- [Commits](dropbox/rust-brotli@9.0.0...9.1.1)

Updates `boring` from 5.3.0 to 5.4.0
- [Release notes](https://github.com/cloudflare/boring/releases)
- [Changelog](https://github.com/cloudflare/boring/blob/master/RELEASE_NOTES)
- [Commits](cloudflare/boring@v5.3.0...v5.4.0)

Updates `similar` from 3.2.0 to 3.2.1
- [Changelog](https://github.com/mitsuhiko/similar/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/similar@3.2.0...3.2.1)

---
updated-dependencies:
- dependency-name: rustix
  dependency-version: 1.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: rolldown
  dependency-version: 1.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: rolldown_common
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: brotli
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: boring
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: similar
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants