chore(deps): bump the minor group with 9 updates by dependabot[bot] · Pull Request #238 · agentclientprotocol/rust-sdk

dependabot · 2026-07-06T13:21:04Z

Bumps the minor group with 9 updates:

Package	From	To
rustc-hash	`2.1.2`	`2.1.3`
aws-lc-rs	`1.17.0`	`1.17.1`
aws-lc-sys	`0.41.0`	`0.42.0`
cc	`1.2.65`	`1.2.66`
jobserver	`0.1.34`	`0.1.35`
quinn-proto	`0.11.15`	`0.11.16`
rustls-pki-types	`1.14.1`	`1.15.0`
time	`0.3.51`	`0.3.53`
time-macros	`0.2.30`	`0.2.31`

Updates rustc-hash from 2.1.2 to 2.1.3

Changelog

Sourced from rustc-hash's changelog.

2.1.3

Use derive_const to fix feature = "nightly" build

Internally update to rand 0.9

Commits

c13e7cc Merge pull request #78 from Noratrieb/new-version-2-1-3
4c3fabd Bump to 2.1.3
3f1c099 Merge pull request #64 from DaniPopes/rand-0.9
07c3f48 Merge pull request #77 from DaniPopes/const-update
cbf0baf Use derive_const in nightly feature
c74d2b3 Update to rand 0.9
See full diff in compare view

Updates aws-lc-rs from 1.17.0 to 1.17.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

[Certificate #5314](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314) (static)

[Certificate #5298](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298) (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

Support linking against a system-installed AWS-LC:

Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @justsmth in aws/aws-lc-rs#1129

Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @justsmth in aws/aws-lc-rs#1143

Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @justsmth in aws/aws-lc-rs#1156

Gate system AWS-LC on a declared minimum version by @justsmth in aws/aws-lc-rs#1152

Implement Send/Sync for RSA hazmat encryption key types by @justsmth in aws/aws-lc-rs#1128

Add Salt::none constructor for HKDF by @justsmth in aws/aws-lc-rs#1135

Add wasm32-unknown-emscripten build and test support by @justsmth in aws/aws-lc-rs#1059

Report specific key rejection reasons for invalid RSA key sizes by @justsmth in aws/aws-lc-rs#1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @jakemas in aws/aws-lc#3195 and aws/aws-lc#3219

Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

Fix memcmp_check build failure when CFLAGS contains LTO flags by @justsmth in aws/aws-lc-rs#1134

Fix missing poly_Rq_mul symbol in Linux x86_64 build by @Lebei2046 in aws/aws-lc-rs#1130

Apply -ffile-prefix-map to jitterentropy builder by @justsmth in aws/aws-lc-rs#1139

Select compiler flag dialect by driver mode, not target ABI by @justsmth in aws/aws-lc-rs#1147

Issues Being Closed

RSA hazmat encryption key types missing Send/Sync -- aws/aws-lc-rs#1125

RSA key rejection reports generic Unspecified for invalid key sizes -- aws/aws-lc-rs#1082

Build failure when CFLAGS contains LTO flags (Windows/clang) -- aws/aws-lc-rs#1132

cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- aws/aws-lc-rs#1146

Support system-provided AWS-LC library -- aws/aws-lc-rs#936

cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- aws/aws-lc-rs#1108

jitterentropy embeds absolute paths to files -- aws/aws-lc-rs#1137

Other Merged PRs

Add ML-DSA aarch64 native assembly to CC builder scripts by @jakemas in aws/aws-lc-rs#1113

Clarify HKDF info concatenation and encoding responsibility by @justsmth in aws/aws-lc-rs#1145

CI: support zig cross compile for arm32 by @justsmth in aws/aws-lc-rs#1124

fix(clippy): fix truncate warnings by @justsmth in aws/aws-lc-rs#1126

ci: replace dtolnay/rust-toolchain with direct rustup invocations by @justsmth in aws/aws-lc-rs#1133

... (truncated)

Commits

741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
00e016a Bump actions/checkout from 6 to 7 (#1157)
e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
26838da rsa: report specific key rejection for invalid sizes (#1153)
Additional commits viewable in compare view

Updates aws-lc-sys from 0.41.0 to 0.42.0

Commits

741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
00e016a Bump actions/checkout from 6 to 7 (#1157)
e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
26838da rsa: report specific key rejection for invalid sizes (#1153)
Additional commits viewable in compare view

Updates cc from 1.2.65 to 1.2.66

Release notes

Sourced from cc's releases.

cc-v1.2.66

Other

Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)

Support new QNX targets (#1775)

Add kache to the supported compiler wrappers (#1770)

Changelog

Sourced from cc's changelog.

1.2.66 - 2026-07-05

Other

Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)

Support new QNX targets (#1775)

Add kache to the supported compiler wrappers (#1770)

Commits

9c53ddc chore(cc): release v1.2.66 (#1777)
f2836c0 Fix target parsing (#1779)
3299691 ci(test-wasm): do not download pre release of wasi-sdk (#1778)
bfd1ac9 Support new QNX targets (#1775)
1887a73 Add kache to the supported compiler wrappers (#1770)
e4847e1 Bump actions/checkout from 6.0.3 to 7.0.0 (#1767)
See full diff in compare view

Updates jobserver from 0.1.34 to 0.1.35

Commits

85ba04e chore: bump to 0.1.35
89f2303 Merge pull request #122 from weihanglo/nix-0.31.3
c539363 chore: bump to nix@0.31.3
6753b4d Merge pull request #120 from kpcyrd/getrandom-0.4
922f23b chore: bump MSRV to 1.85
c28a13d Merge pull request #121 from weihanglo/ci-native-make
d51b4bb ci: use native GNU Make instead of building from source
2195928 test: exercise both jobserver styles in make-as-server tests
18d138c Update getrandom to 0.4
See full diff in compare view

Updates quinn-proto from 0.11.15 to 0.11.16

Release notes

Sourced from quinn-proto's releases.

quinn-proto-0.11.16

What's Changed

0.11.x: upgrade dependencies by @djc in quinn-rs/quinn#2707

Commits

a96949f Take semver-compatible update for anyhow
5429f60 udp: bump version to 0.5.15
262a493 proto: bump version to 0.11.16
c19b63a Upgrade rustls-platform-verifier to 0.7
aff3652 Disable default features for fastbloom
01b2eee Upgrade fastbloom to 0.17
2c82013 Switch BBR RNG to PCG
544dd9e Upgrade to rand 0.10.1
See full diff in compare view

Updates rustls-pki-types from 1.14.1 to 1.15.0

Release notes

Sourced from rustls-pki-types's releases.

v/1.15.0

New feature: add a constructor for FipsStatus::Certified.

What's Changed

ci: sync cargo-check-external-types nightly by @cpu in rustls/pki-types#109

1.15.0: ensure FipsStatus::Certified is usable by @ctz in rustls/pki-types#110

Full Changelog: rustls/pki-types@v/1.14.1...v/1.15.0

Commits

ab46a65 Prepare 1.15.0
13d2dee Ensure FipsStatus::Certified is usable
23bc39f ci: sync cargo-check-external-types nightly
See full diff in compare view

Updates time from 0.3.51 to 0.3.53

Release notes

Sourced from time's releases.

v0.3.53

See the changelog for details.

v0.3.52

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result in a loss of precision and even invalid values.

The date! macro could previously create an invalid value that would then panic at compile time. The macro now emits a proper error instead.

When parsing an invalid format description, an edge case would inadvertently panic. This now returns an error as intended.

Added

Support default values when parsing

Commits

0ae2f84 v0.3.53 release
cea8c96 Avoid issue with cookie crate temporarily
55e1f2b Require private type to properly seal traits
7cf4780 v0.3.52 release
0e5b04f Fix trusted publishing workflow
6e4140a Support default values when parsing
10ac36a Add more doctests to Timestamp
6b0d468 Restore lexer depth on the unclosed-bracket error path
0abc06d Add trusted publishing
43cf0c0 Preferentially group shards by target
Additional commits viewable in compare view

Updates time-macros from 0.2.30 to 0.2.31

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor group with 9 updates: | Package | From | To | | --- | --- | --- | | [rustc-hash](https://github.com/rust-lang/rustc-hash) | `2.1.2` | `2.1.3` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.17.0` | `1.17.1` | | [aws-lc-sys](https://github.com/aws/aws-lc-rs) | `0.41.0` | `0.42.0` | | [cc](https://github.com/rust-lang/cc-rs) | `1.2.65` | `1.2.66` | | [jobserver](https://github.com/rust-lang/jobserver-rs) | `0.1.34` | `0.1.35` | | [quinn-proto](https://github.com/quinn-rs/quinn) | `0.11.15` | `0.11.16` | | [rustls-pki-types](https://github.com/rustls/pki-types) | `1.14.1` | `1.15.0` | | [time](https://github.com/time-rs/time) | `0.3.51` | `0.3.53` | | [time-macros](https://github.com/time-rs/time) | `0.2.30` | `0.2.31` | Updates `rustc-hash` from 2.1.2 to 2.1.3 - [Changelog](https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md) - [Commits](rust-lang/rustc-hash@v2.1.2...v2.1.3) Updates `aws-lc-rs` from 1.17.0 to 1.17.1 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.17.0...v1.17.1) Updates `aws-lc-sys` from 0.41.0 to 0.42.0 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@aws-lc-sys/v0.41.0...aws-lc-sys/v0.42.0) Updates `cc` from 1.2.65 to 1.2.66 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@cc-v1.2.65...cc-v1.2.66) Updates `jobserver` from 0.1.34 to 0.1.35 - [Commits](rust-lang/jobserver-rs@0.1.34...0.1.35) Updates `quinn-proto` from 0.11.15 to 0.11.16 - [Release notes](https://github.com/quinn-rs/quinn/releases) - [Commits](quinn-rs/quinn@quinn-proto-0.11.15...quinn-proto-0.11.16) Updates `rustls-pki-types` from 1.14.1 to 1.15.0 - [Release notes](https://github.com/rustls/pki-types/releases) - [Commits](rustls/pki-types@v/1.14.1...v/1.15.0) Updates `time` from 0.3.51 to 0.3.53 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.51...v0.3.53) Updates `time-macros` from 0.2.30 to 0.2.31 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](https://github.com/time-rs/time/commits) --- updated-dependencies: - dependency-name: rustc-hash dependency-version: 2.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: aws-lc-rs dependency-version: 1.17.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor - dependency-name: aws-lc-sys dependency-version: 0.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: minor - dependency-name: cc dependency-version: 1.2.66 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor - dependency-name: jobserver dependency-version: 0.1.35 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor - dependency-name: quinn-proto dependency-version: 0.11.16 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor - dependency-name: rustls-pki-types dependency-version: 1.15.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: minor - dependency-name: time dependency-version: 0.3.53 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor - dependency-name: time-macros dependency-version: 0.2.31 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 6, 2026

benbrandt merged commit fb73186 into main Jul 6, 2026
11 checks passed

benbrandt deleted the dependabot/cargo/minor-89794ee303 branch July 6, 2026 14:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the minor group with 9 updates#238

chore(deps): bump the minor group with 9 updates#238
benbrandt merged 1 commit into
mainfrom
dependabot/cargo/minor-89794ee303

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 6, 2026

2.1.3

aws-lc-rs v1.17.1

What's Changed

Upstream AWS-LC (v5.1.0)

Build Improvements

Issues Being Closed

Other Merged PRs

cc-v1.2.66

Other

1.2.66 - 2026-07-05

Other

quinn-proto-0.11.16

What's Changed

v/1.15.0

What's Changed

v0.3.53

v0.3.52

0.3.53 [2026-07-01]

0.3.52 [2026-06-30]

Fixed

Added

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant