Skip to content

chore(deps): Bump the cargo-minor-patch group with 2 updates - #438

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-bb57b56f0e
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-bb57b56f0e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 2 updates: openidconnect and zip.

Updates openidconnect from 4.0.1 to 4.1.0

Release notes

Sourced from openidconnect's releases.

4.1.0

This release increases the Minimum Supported Rust Version (MSRV) of this crate to 1.88.

New Features

Bug Fixes

  • Fix "invalid_request_obbject" typo in CoreAuthErrorResponseType by @​adamgreg (#248)
  • Update p256 and p384 to 0.14 to fix RUSTSEC-2026-0387. This adds a dependency on getrandom 0.4, which by default breaks compilation on wasm32-unknown-unknown and wasm64-unknown-unknown targets.

Other Changes

  • Update itertools to 0.14 and base64 to 0.22 by @​davidbarsky (#225)
  • Enable wasm_js feature on getrandom 0.4 to keep backward compatibility for WASM builds (see above)
  • Fix warnings in rustc 1.99
  • Update curve25519-dalek to 5.0

Full Changelog: ramosbugs/openidconnect-rs@4.0.1...4.1.0

Commits
  • e20ddbb Bump curve25519-dalek to 5.0
  • 9feca9b Fix codecov upload
  • 03dd424 Fix warnings in rustc 1.99
  • 820867b Enable getrandom 0.4 wasm_js feature to fix WASM build
  • 4e5d672 Bump p256 and p384 to fix RUSTSEC-2026-0387
  • 7ef505e Fix fmt
  • b83c7e2 Bump MSRV to 1.88 and crate version to 4.1.0
  • 28e05aa Bump tarpaulin CI image
  • 6b1c186 Fix "invalid_request_obbject" typo in CoreAuthErrorResponseType (#248)
  • 202c8b1 chore: update itertools and base64 (#225)
  • Additional commits viewable in compare view

Updates zip from 9.1.3 to 9.4.1

Release notes

Sourced from zip's releases.

v9.4.1

🐛 Bug Fixes

🚜 Refactor

  • Use boxed slices instead of Vec when growability isn't needed (#1271)

v9.4.0

🚀 Features

  • Implement ZipIterable::files_with_reader (#1267)

v9.3.0

🚀 Features

  • (write) implement TryFrom for PreparedZipFile (#1258)

v9.2.3

🐛 Bug Fixes

  • (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

  • Replace std:: with core:: where possible (#1253)

v9.2.2

🚜 Refactor

  • Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

  • Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.1

🚜 Refactor

  • Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

  • Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.0

🚀 Features

  • (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)

... (truncated)

Changelog

Sourced from zip's changelog.

9.4.1 - 2026-11-06

🐛 Bug Fixes

🚜 Refactor

  • Use boxed slices instead of Vec when growability isn't needed (#1271)

9.4.0 - 2026-11-05

🚀 Features

  • Implement ZipIterable::files_with_reader (#1267)

9.3.0 - 2026-11-03

🚀 Features

  • (write) implement TryFrom for PreparedZipFile (#1258)

9.2.3 - 2026-11-03

🐛 Bug Fixes

  • (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

  • Replace std:: with core:: where possible (#1253)

9.2.2 - 2026-11-01

🚜 Refactor

  • Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

  • Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

9.2.0 - 2026-10-31

🚀 Features

  • (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
  • add index_for_name_raw (#1210)
  • (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
  • (read) add index-free iterable ZIP reader (#1218)

... (truncated)

Commits
  • 96e8cce chore: release v9.4.1 (#1272)
  • f1b82f2 docs(example): Fix bug in memory-tracking example where reallocations were co...
  • 2308d6d refactor: Use boxed slices instead of Vec when growability isn't needed (#1271)
  • b3ad5df fix: Add a OwnedZipFileEntry for #177 (#1270)
  • 196b805 chore(deps): update lzma-rust2 from 0.24 to 0.25 (#1268)
  • f347dd4 chore: release v9.4.0 (#1269)
  • e9b7dcd feat: Implement ZipIterable::files_with_reader (#1267)
  • 47765a9 docs(security): Clarify that some "vulnerabilities" are necessary for legitim...
  • 53cfe46 ci(deps): bump useblacksmith/checkout from 1.8.1 to 1.8.2 (#1260)
  • b66f6b1 ci(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#1262)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-minor-patch group with 2 updates: [openidconnect](https://github.com/ramosbugs/openidconnect-rs) and [zip](https://github.com/zip-rs/zip2).


Updates `openidconnect` from 4.0.1 to 4.1.0
- [Release notes](https://github.com/ramosbugs/openidconnect-rs/releases)
- [Commits](ramosbugs/openidconnect-rs@4.0.1...4.1.0)

Updates `zip` from 9.1.3 to 9.4.1
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v9.1.3...v9.4.1)

---
updated-dependencies:
- dependency-name: openidconnect
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: zip
  dependency-version: 9.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

github-actions Bot commented Nov 9, 2026

Copy link
Copy Markdown

Frontend Code Coverage

Frontend SPA coverage (by module)

Module Line Rate Branch Rate Function Rate Health
api 89.3% (316 / 354) 82.7% 86.3% ✔
components 74.1% (2234 / 3015) 62.7% 70.5% ➖
components/graph 100.0% (9 / 9) 66.7% 100.0% ✔
components/reports 86.1% (87 / 101) 70.6% 74.1% ✔
components/table 100.0% (7 / 7) 80.0% 100.0% ✔
context 77.8% (56 / 72) 40.0% 69.6% ➖
hooks 72.3% (146 / 202) 71.1% 70.0% ➖
lib 100.0% (18 / 18) 100.0% 100.0% ✔
pages 69.3% (2395 / 3457) 55.8% 61.8% ➖
pages/catalog 34.8% (162 / 465) 24.5% 18.3% ❌
pages/groups 0.0% (0 / 219) 0.0% 0.0% ❌
src (root) 33.3% (8 / 24) 38.1% 60.0% ❌
types 100.0% (0 / 0) 100.0% 100.0% ✔
utils 97.2% (620 / 638) 89.1% 98.8% ✔
Summary 70.6% (6058 / 8581) 59.2% 65.4% ➖

Generated from Vitest @vitest/coverage-v8 (frontend/src).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants