Update Rust

[bootc-bot]

This PR contains the following updates:

Package	Type	Update	Change
bcvk-qemu	dependencies	digest	22a4223 → 441e2e1
camino	workspace.dependencies	patch	1.2.2 → 1.2.3
chrono	workspace.dependencies	patch	0.4.44 → 0.4.45
composefs-ctl	workspace.dependencies	digest	e277075 → 679a342
hyper (source)	workspace.dependencies	minor	1.9.0 → 1.10.1
itertools	dependencies	minor	0.14.0 → 0.15.0
log	workspace.dependencies	patch	0.4.29 → 0.4.33
openssl	workspace.dependencies	patch	0.10.78 → 0.10.81
regex	workspace.dependencies	patch	1.12.3 → 1.12.4
rexpect	dependencies	patch	0.7.0 → 0.7.1
serde_json	workspace.dependencies	patch	1.0.149 → 1.0.150
tokio (source)	workspace.dependencies	patch	1.52.1 → 1.52.3
uuid	dependencies	patch	1.23.3 → 1.23.4
which	dependencies	patch	8.0.3 → 8.0.4

---

Release Notes

camino-rs/camino (camino)

v1.2.3

Compare Source

Performance improvements

• Utf8Path::hash now delegates to std::path::Path::hash, resulting in hashing requiring ~2x fewer instructions. Thanks stormslowly for your first contribution!

chronotope/chrono (chrono)

v0.4.45: 0.4.45

Compare Source

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in #​1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in #​1789

hyperium/hyper (hyper)

v1.10.1

Compare Source

Bug Fixes

• http1: fix busy loop when peer half-closes and open body (#​4086) (c6cb906f, closes #​4085)

v1.10.0

Compare Source

Bug Fixes

• http1:
  • send error when dispatcher is dropped mid-body (#​4069) (b7a679ba, closes #​3995, #​4016)
  • fix reading large bodies on 32-bit systems (#​4056) (b12f6525, closes #​4055)
  • fix rare missed write wakeup on connections v2 (743a3ba0)
• http2:
  • do not reserve capacity before body data is available (#​4061) (99f24345, closes #​4003)
  • reading trailers shouldn't propagate NO_ERROR from early response (#​3998) (e5ad96b1)

Features

• http2:
  • add reset_stream_duration() client option (#​4068) (156a6f6a, closes #​2599)
  • Add 'header_table_size()' method to server builder (#​4062) (6c9182c4)

rust-itertools/itertools (itertools)

v0.15.0

Compare Source

Breaking

• Restructure Position as struct instead of enum (#​1042, #​1043)
• Canonicalize all_equal_value's error type (#​1032)

Added

• Add *_with_hasher adaptors (#​1007)
• Add strip_prefix and strip_prefix_by methods (#​1104)

Changed

• Remove Clone bounds from tuple_combinations and array_combinations(#​1011)
• must_use for collect_vec (#​1009)
• Make izip! temporary friendly (#​1021)
• Add array_combinations_with_replacement (#​1033)
• Implement Debug for remaining public types (#​1038)
• Specialize ExactlyOneError::count (#​1046)
• Implement PeekingNext for more types, in particular vec::IntoIter (#​1059, #​1073)
• Fix PadUsing::next_back (#​1082)
• Introduce [circular_]array_windows, deprecate tuple_windows (#​1086)
• Deprecate tuple_combinations (replaced by array_combinations) (#​1085)

Notable Internal Changes

• Make into_group_map code more idiomatic (#​1027)
• Fix clippy lints (#​1017, #​1029, #​1076, #​1099)

rust-lang/log (log)

v0.4.33

Compare Source

v0.4.32

Compare Source

What's Changed

• Support Value -> string conversions with kv + std features instead of kv_std by @​tisonkun in #​729

Full Changelog: rust-lang/log@0.4.31...0.4.32

v0.4.31

Compare Source

What's Changed

• Support Value -> string conversions with kv + std features instead of kv_std by @​tisonkun in #​729

Full Changelog: rust-lang/log@0.4.31...0.4.32

v0.4.30

Compare Source

What's Changed

• Leverage static str key when possible by @​tisonkun in #​727

New Contributors

• @​Isvane made their first contribution in #​726

Full Changelog: rust-lang/log@0.4.30...0.4.31

rust-openssl/rust-openssl (openssl)

v0.10.81

Compare Source

What's Changed

• Bump aws-ls-sys to 0.41 by @​joshgodsiff in #​2640
• Add brainpoolP224r1 and brainpoolP224t1 NID constants by @​sfarestam-iproov in #​2642
• x509: add minimal support for CRL building by @​DavidFontaineOcd in #​2538
• add mldsa.h to the boringssl bindgen by @​reaperhulk in #​2650
• Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @​alex in #​2652
• Fix verify_mode() panic on unmodeled verify mode bits by @​alex in #​2651
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​2653
• Release openssl 0.10.81 and openssl-sys 0.9.117 by @​reaperhulk in #​2655

New Contributors

• @​joshgodsiff made their first contribution in #​2640
• @​sfarestam-iproov made their first contribution in #​2642
• @​DavidFontaineOcd made their first contribution in #​2538

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81

v0.10.80

Compare Source

What's Changed

• Prefer Homebrew openssl@​4 and stop looking for openssl@​1.1 by @​alex in #​2633
• Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @​alex in #​2638
• Release openssl 0.10.80 and openssl-sys 0.9.116 by @​alex in #​2639

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

v0.10.79

Compare Source

What's Changed

• Bump actions/cache from 5.0.4 to 5.0.5 by @​dependabot[bot] in #​2610
• Try to fix OpenSSL 1.1.0l download by @​botovq in #​2614
• Require &mut BigNumContextRef for EcPointRef mul/invert by @​alex in #​2615
• Fix UB in EcGroupRef::generator on groups without a generator by @​alex in #​2617
• Replace use libc::*; with targeted imports in openssl-sys by @​alex in #​2618
• Add PKeyRef::is_a and KeyType for name-based key identification by @​reaperhulk in #​2619
• Add PKey::{public,private}_key_from_raw_bytes_ex by @​reaperhulk in #​2620
• Bump MSRV to 1.80 by @​reaperhulk in #​2622
• Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @​reaperhulk in #​2623
• Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @​reaperhulk in #​2621
• parallelize more builds in CI for cold caches by @​reaperhulk in #​2625
• Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @​reaperhulk in #​2626
• Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @​alex in #​2624
• Bind OSSL_PARAM_modified and use it for seed_into by @​reaperhulk in #​2628
• Add PkeyCtxRef::set_context_string for ML-DSA by @​reaperhulk in #​2629
• Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @​alex in #​2631
• Fix output buffer overflow for AES key-wrap-with-padding ciphers by @​alex in #​2630
• Release openssl 0.10.79 and openssl-sys 0.9.115 by @​reaperhulk in #​2632

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

rust-lang/regex (regex)

v1.12.4

Compare Source

===================
This release includes a performance optimization for compilation of regexes
with very large character classes.

Improvements:

• #​1308:
  Avoid re-canonicalizing the entire interval set when pushing new class ranges.

rust-cli/rexpect (rexpect)

v0.7.1

Compare Source

Fixes

• Avoid char boundary panics with NBReader::try_read

serde-rs/json (serde_json)

v1.0.150

Compare Source

• Reject non-string enum object keys (#​1324, thanks @​puneetdixit200)

tokio-rs/tokio (tokio)

v1.52.3: Tokio v1.52.3

Compare Source

1.52.3 (May 8th, 2026)

Fixed

• sync: fix underflow in mpsc channel len() (#​8062)
• sync: notify receivers in mpsc OwnedPermit::release() method (#​8075)
• sync: require that an RwLock has max_readers != 0 (#​8076)
• sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#​8074)

v1.52.2: Tokio v1.52.2

Compare Source

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#​7431), due to its performance impact. (#​8100)

uuid-rs/uuid (uuid)

v1.23.4

Compare Source

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in #​888
• document fixes by @​frostyplanet in #​889
• Prepare for 1.23.4 release by @​KodrAus in #​890

New Contributors

• @​frostyplanet made their first contribution in #​889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

harryfei/which-rs (which)

v8.0.4

Compare Source

• On Windows we now emit a NonFatalError if the PATHEXT environment variable is not populated, and the query did not specify a file extension.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.