Skip to content

Bump twox-hash from 2.1.2 to 2.1.3#54

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/twox-hash-2.1.3
Open

Bump twox-hash from 2.1.2 to 2.1.3#54
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/twox-hash-2.1.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps twox-hash from 2.1.2 to 2.1.3.

Changelog

Sourced from twox-hash's changelog.

2.1.3 - 2026-07-18

Fixed

  • Removed a panic that could occur when using XxHash32 or XxHash64 in debug mode. Release mode is unaffected.

Changed

  • The version range for the optional rand dependency now allows 0.10 in addtion to 0.9.
Commits
  • cfe253f Release version 2.1.3
  • cb3ca84 Update the changelog
  • 32e7132 Merge pull request #121 from shepmaster/length_overflow
  • 103a4c8 Don't panic when adding the hashed length to the XxHash64 result
  • 7abcfc1 Don't panic when adding the hashed length to the XxHash32 result
  • df7f72f Merge pull request #122 from shepmaster/ci-fixin
  • 97e70bc Do not import proptest prelude a second time
  • 6c7b013 Downgrade any version of rand, not just that patch level
  • 9705684 Merge pull request #116 from tisonkun/rand-010
  • 445efe3 build(dep): allow rand 0.10 in addition to 0.9
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [twox-hash](https://github.com/shepmaster/twox-hash) from 2.1.2 to 2.1.3.
- [Changelog](https://github.com/shepmaster/twox-hash/blob/main/CHANGELOG.md)
- [Commits](shepmaster/twox-hash@v2.1.2...v2.1.3)

---
updated-dependencies:
- dependency-name: twox-hash
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants