Skip to content

chore(deps): bump the cargo-deps group across 1 directory with 16 updates - #62

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-deps-9dc0973cff
Open

chore(deps): bump the cargo-deps group across 1 directory with 16 updates#62
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-deps-9dc0973cff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown

Bumps the cargo-deps group with 14 updates in the / directory:

Package From To
pinocchio 0.9.2 0.9.3
pinocchio-system 0.3.0 0.6.1
solana-security-txt 1.1.2 1.1.3
solana-sdk 2.2.1 4.1.0
litesvm 0.6.1 0.12.0
rand 0.8.5 0.10.2
anyhow 1.0.100 1.0.104
p256 0.13.2 0.14.0
sha2 0.10.9 0.11.0
ecdsa 0.16.9 0.17.0
base64ct 1.6.0 1.8.3
blake3 1.5.5 1.8.5
getrandom 0.2.17 0.4.3
proc-macro2 1.0.106 1.0.107

Updates pinocchio from 0.9.2 to 0.9.3

Release notes

Sourced from pinocchio's releases.

pinocchio@v0.9.3

What's new

  • v0.9: Remove no_mangle attribute (#372) by @​febo
  • v0.9: ci: Pin cargo-semver-checks version (#371) by @​febo
  • v0.9: Fix maximum transaction accounts constant value (#370) by @​febo
  • v0.9.x: Use sol_get_sysvar in sysvars (#290) by @​febo
  • pinocchio: Add AccountInfo invariant details (#254) by @​febo
Commits

Updates pinocchio-system from 0.3.0 to 0.6.1

Release notes

Sourced from pinocchio-system's releases.

pinocchio-system@v0.6.1

What's new

pinocchio-system@v0.6.0

What's new

pinocchio-system@v0.5.0

What's new

pinocchio-system@v0.4.0

What's new

  • system: Add create account helper by @​febo
  • Update advance_nonce_account.rs by @​dedeleono
  • Use Create Account Checked & Create Account with Seed Checked by @​zubayr1
  • system: Fix instruction helper by @​febo
Commits
  • ec5125d Publish pinocchio-system v0.6.1
  • 34baafd programs/system: Use invoke unchecked (#403)
  • d713b2d Publish pinocchio-token-2022 v0.3.1
  • 0e84f78 programs/token-2022: Fix Mint owner check (#404)
  • a2ba652 Publish pinocchio v0.11.1
  • db561ef sdk: Enable default features (#402)
  • 3a3a1a6 Publish pinocchio-associated-token-account v0.4.0
  • 8ba3a05 Publish pinocchio-memo v0.4.0
  • ef16a3a Publish pinocchio-system v0.6.0
  • 2a0c858 Publish pinocchio-token-2022 v0.3.0
  • Additional commits viewable in compare view

Updates solana-security-txt from 1.1.2 to 1.1.3

Commits

Updates solana-sdk from 2.2.1 to 4.1.0

Release notes

Sourced from solana-sdk's releases.

sdk@v4.1.0

What's new

program@v4.1.0

What's new

system-transaction@v4.1.0

What's new

cluster-type@v3.2.0

What's new

  • Publish solana-cluster-type v3.2.0
  • Enable frozen-abi feature by default (#763) by @​kskalski

client-traits@v4.1.0

What's new

genesis-config@v4.1.0

What's new

poh-config@v3.1.0

What's new

... (truncated)

Commits
  • 666e40d Publish solana-sdk v4.1.0
  • 62b6617 Publish solana-program v4.1.0
  • b7494c0 Publish solana-system-transaction v4.1.0
  • 366a1f4 Publish solana-svm-transaction v4.3.0
  • 0250d4c Publish solana-sdk-wasm-js v2.1.0
  • 552f838 Publish solana-cluster-type v3.2.0
  • a865d64 Publish solana-client-traits v4.1.0
  • c893e79 Publish solana-secp256k1-recover v3.3.0
  • 9e91e2f Publish solana-transaction v4.2.0
  • af2193f Publish solana-genesis-config v4.1.0
  • Additional commits viewable in compare view

Updates litesvm from 0.6.1 to 0.12.0

Release notes

Sourced from litesvm's releases.

v0.12.0

Changed

  • Refresh LiteSVM documentation and README with additional usage information (#328).

Added

  • Add mainnet feature set support in LiteSVM (#327).
  • Add the litesvm-persistence crate for saving and loading LiteSVM state snapshots (#319).
  • Include the p-token feature (#336).

Fixed

  • Use the native loader id when adding builtins (#334).
  • Remove the config program from the default program set (#331).

v0.11.0

Added

  • Add feature gate account support (#308).
  • Add custom syscall registration (#309).

Fixed

  • Align rent checks and assertions with Solana behavior (#304).
  • Update rent.exemption_threshold based on feature gating (#307).
  • Load the p-token binary instead of spl-token when the feature gate is enabled (#310).
  • Treat upgradeable v3 programs without program data as Closed (#311).
  • Update transaction account lock limits based on the active feature set (#312).

v0.10.0

Changed

  • Load register-tracing ELF bytes from accounts instead of walking directories (#278).
  • Sync dependencies with mainnet (#294).
  • Document the SBF_TRACE_DISASSEMBLE environment variable in docs (#298).

Added

  • Add register trace disassembly dumps when SBF_TRACE_DISASSEMBLE is set (#296).

Fixed

  • Fix CUs discrepancy (#299).
  • Avoid double-loading trusted default programs (#295).
  • Validate account locks when sanitizing transactions (#293).
  • Disable debugging for runtime v2 by default (#292).
  • Use ComputeBudget::to_cost in InvokeContext instead of defaults (#288).

v0.9.1

... (truncated)

Changelog

Sourced from litesvm's changelog.

[0.12.0] - 2026-05-13

Added

  • Add mainnet feature set support in LiteSVM (#327).
  • Add the litesvm-persistence crate for saving and loading LiteSVM state snapshots (#319).
  • Include the p-token feature (#336).

Changed

  • Refresh LiteSVM documentation and README with additional usage information (#328).

Fixed

  • Use the native loader id when adding builtins (#334).
  • Remove the config program from the default program set (#331).

[0.11.0] - 2026-03-30

Added

  • Add feature gate account support (#308).
  • Add custom syscall registration (#309).

Fixed

  • Align rent checks and assertions with Solana behavior (#304).
  • Update rent.exemption_threshold based on feature gating (#307).
  • Load the p-token binary instead of spl-token when the feature gate is enabled (#310).
  • Treat upgradeable v3 programs without program data as Closed (#311).
  • Update transaction account lock limits based on the active feature set (#312).

[0.10.0] - 2026-02-26

Added

  • Add register trace disassembly dumps when SBF_TRACE_DISASSEMBLE is set (#296).

Changed

  • Load register-tracing ELF bytes from accounts instead of walking directories (#278).
  • Sync dependencies with mainnet (#294).
  • Document the SBF_TRACE_DISASSEMBLE environment variable in docs (#298).

Fixed

  • Fix CUs discrepancy (#299).
  • Avoid double-loading trusted default programs (#295).
  • Validate account locks when sanitizing transactions (#293).
  • Disable debugging for runtime v2 by default (#292).

... (truncated)

Commits

Updates rand from 0.8.5 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

... (truncated)

Commits

Updates anyhow from 1.0.100 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

1.0.102

1.0.101

Commits
  • 1dbe186 Release 1.0.104
  • f6479f8 Update to syn 3
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • 5c657b3 Release 1.0.102
  • Additional commits viewable in compare view

Updates p256 from 0.13.2 to 0.14.0

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates ecdsa from 0.16.9 to 0.17.0

Commits

Updates base64ct from 1.6.0 to 1.8.3

Commits

Updates blake3 from 1.5.5 to 1.8.5

Release notes

Sourced from blake3's releases.

1.8.5

version 1.8.5

Changes since 1.8.4:

  • Forcibly disable LTO when compiling C intrinsics from the Rust build. This fixes a build break on Arch Linux ARM: BLAKE3-team/BLAKE3#550

1.8.4

version 1.8.4

Changes since 1.8.3:

  • Updated the digest dependency from v0.10 to v0.11. THIS IS A POTENTIALLY BREAKING CHANGE for callers using the traits-preview Cargo feature. But this is not considered a breaking change for the blake3 crate itself; see the docs for traits-preview.
  • Performance for WASM SIMD targets is improved by ~20% when the wasm32_simd feature is enabled. Contributed by @​lamb356.

1.8.3

version 1.8.3

Changes since 1.8.2:

  • Add Hash::as_slice.
  • Update to the 2024 Edition and bump the MSRV to 1.85.
  • Fix a set of Miri failures in the intrinsics implementations. We were computing (though not dereferencing) an out-of-bounds pointer using add rather than wrapping_add. I'm not aware of any observable consequences of this bug. See BLAKE3-team/BLAKE3#507.
  • CPU feature detection on x86/x86-64 no longer requires the std Cargo feature in the blake3 crate.
  • Build fixes in the C implementation for macOS and Cygwin, and various improvements to the CMake build.

1.8.2

version 1.8.2

Changes since 1.8.1:

  • Fixes to the CMake build, particularly around the new TBB feature.

1.8.1

version 1.8.1

Changes since 1.8.0:

  • [CMake] Fix transitive dependencies for TBB when libblake3 is built with BLAKE3_USE_TBB=1 (#460 and #461).

1.8.0

version 1.8.0

... (truncated)

Commits
  • 93a431c version 1.8.5
  • 299b1e2 fix LTO builds by disabling LTO
  • 6a45fee add LTO builds to CI
  • 15e83a5 c: Use correct SIMD flags when compiling with Clang-Cl (#549)
  • 2e3727d cargo fmt everywhere
  • b97a24f version 1.8.4
  • 0ebe469 update to new rustcrypto trait releases
  • d4b005a wasm32_simd: use i8x16_shuffle for rot8 and rot16
  • 6eebbbd fix a struct size mismatch in tests
  • fb1411e c: use SIZE_MAX instead of -1 for size_t sentinels, add <stdint.h>
  • Additional commits viewable in compare view

Updates getrandom from 0.2.17 to 0.4.3

Changelog

Sourced from getrandom's changelog.

0.4.3 - 2026-06-17

Added

  • wasm64-unknown-unknown target support for wasm_js backend #848

Changed

  • Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

#830: rust-random/getrandom#830 #848: rust-random/getrandom#848

0.4.2 - 2026-03-03

Changed

  • Bump r-efi dependency to v6 #814

Fixed

  • Read errno only when it is set #810
  • Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

0.4.1 - 2026-02-03

Fixed

  • Documentation build on docs.rs #801

#801: rust-random/getrandom#801

0.4.0 - 2026-02-02

Added

  • RawOsError type alias #739
  • SysRng behind new feature sys_rng #751
  • WASIp3 support #779
  • extern_impl opt-in backend #786 #794
  • Motor OS support #797

Changed

  • Use Edition 2024 and MSRV 1.85 #749

#739: rust-random/getrandom#739 #749: rust-random/getrandom#749 #751: rust-random/getrandom#751 #779: rust-random/getrandom#779

... (truncated)

Commits

Updates syn from 2.0.114 to 2.0.119

Release notes

Sourced from syn's releases.

2.0.119

  • Preserve attributes on tail-call expressions in statement position (#1994)
  • Parse field-representing types builtin in type position (#1996)

2.0.118

  • Documentation improvements

2.0.117

  • Fix parsing of self:: pattern in first function argument (#1970)

2.0.116

  • Optimize parse_fn_arg_or_variadic for less lookahead on erroneous receiver (#1968)

2.0.115

  • Enable GenericArgument::Constraint parsing in non-full mode (#1966)
Commits
  • 3295f9e Release 2.0.119
  • 6ae9c18 Merge pull request #1996 from dtolnay/fieldrepresenting
  • 8ebd963 Parse field-representing types builtin
  • 540ccf8 Drop unneeded lifetime on covariant Cursor in verbatim::between
  • aa05887 Merge pull request #1995 from dtolnay/cursor
  • b7160d3 Reduce forking for Verbatim construction
  • efdc925 Merge pull request #1994 from dtolnay/tailcall
  • de6424c Preserve attribute on tail-call expression in statement position
  • 050dd73 Stricter const move closure grammar
  • c7d514b Merge pull request #1992 from dtolnay/scanconstmove
  • Additional commits viewable in compare view

Updates quote from 1.0.44 to 1.0.47

Release notes

Sourced from quote's releases.

1.0.47

  • Documentation improvements

1.0.46

  • Avoid repeated get_span in quote_spanned (#329, thanks

…ates

Bumps the cargo-deps group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pinocchio](https://github.com/anza-xyz/pinocchio) | `0.9.2` | `0.9.3` |
| [pinocchio-system](https://github.com/anza-xyz/pinocchio) | `0.3.0` | `0.6.1` |
| [solana-security-txt](https://github.com/neodyme-labs/solana-security-txt) | `1.1.2` | `1.1.3` |
| [solana-sdk](https://github.com/anza-xyz/solana-sdk) | `2.2.1` | `4.1.0` |
| [litesvm](https://github.com/LiteSVM/litesvm) | `0.6.1` | `0.12.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.10.2` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.104` |
| [p256](https://github.com/RustCrypto/elliptic-curves) | `0.13.2` | `0.14.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [ecdsa](https://github.com/RustCrypto/signatures) | `0.16.9` | `0.17.0` |
| [base64ct](https://github.com/RustCrypto/formats) | `1.6.0` | `1.8.3` |
| [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.5.5` | `1.8.5` |
| [getrandom](https://github.com/rust-random/getrandom) | `0.2.17` | `0.4.3` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.106` | `1.0.107` |



Updates `pinocchio` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/anza-xyz/pinocchio/releases)
- [Commits](https://github.com/anza-xyz/pinocchio/compare/pinocchio@v0.9.2...pinocchio@v0.9.3)

Updates `pinocchio-system` from 0.3.0 to 0.6.1
- [Release notes](https://github.com/anza-xyz/pinocchio/releases)
- [Commits](https://github.com/anza-xyz/pinocchio/compare/pinocchio-system@v0.3.0...pinocchio-system@v0.6.1)

Updates `solana-security-txt` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/neodyme-labs/solana-security-txt/releases)
- [Commits](https://github.com/neodyme-labs/solana-security-txt/commits)

Updates `solana-sdk` from 2.2.1 to 4.1.0
- [Release notes](https://github.com/anza-xyz/solana-sdk/releases)
- [Commits](https://github.com/anza-xyz/solana-sdk/compare/sdk@v2.2.1...sdk@v4.1.0)

Updates `litesvm` from 0.6.1 to 0.12.0
- [Release notes](https://github.com/LiteSVM/litesvm/releases)
- [Changelog](https://github.com/LiteSVM/litesvm/blob/master/CHANGELOG.md)
- [Commits](LiteSVM/litesvm@v0.6.1...v0.12.0)

Updates `rand` from 0.8.5 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.10.2)

Updates `anyhow` from 1.0.100 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.104)

Updates `p256` from 0.13.2 to 0.14.0
- [Commits](RustCrypto/elliptic-curves@p256/v0.13.2...p256/v0.14.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `ecdsa` from 0.16.9 to 0.17.0
- [Commits](RustCrypto/signatures@ecdsa/v0.16.9...ecdsa/v0.17.0)

Updates `base64ct` from 1.6.0 to 1.8.3
- [Commits](RustCrypto/formats@base64ct/v1.6.0...base64ct/v1.8.3)

Updates `blake3` from 1.5.5 to 1.8.5
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases)
- [Commits](BLAKE3-team/BLAKE3@1.5.5...1.8.5)

Updates `getrandom` from 0.2.17 to 0.4.3
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.2.17...v0.4.3)

Updates `syn` from 2.0.114 to 2.0.119
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.114...2.0.119)

Updates `quote` from 1.0.44 to 1.0.47
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.44...1.0.47)

Updates `proc-macro2` from 1.0.106 to 1.0.107
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.106...1.0.107)

---
updated-dependencies:
- dependency-name: pinocchio
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: pinocchio-system
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: solana-security-txt
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: solana-sdk
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-deps
- dependency-name: litesvm
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: p256
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: ecdsa
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: base64ct
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: blake3
  dependency-version: 1.8.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: getrandom
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: syn
  dependency-version: 2.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: quote
  dependency-version: 1.0.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: proc-macro2
  dependency-version: 1.0.107
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 1, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants