[dependabot]

Bumps the cargo-minor group with 38 updates in the / directory:

Package	From	To
tokio	1.53.3	1.54.1
open	5.4.4	5.4.5
zip	9.0.3	9.1.3
aws-lc-rs	1.18.2	1.19.0
aws-lc-sys	0.46.0	0.47.0
cc	1.8.0	1.10.0
clipboard-win	5.4.1	5.4.3
combine	4.6.8	4.6.9
crc32fast	1.5.2	1.5.3
find-msvc-tools	0.1.14	0.1.15
font-types	0.12.6	0.12.7
icu_locale_core	2.3.0	2.4.0
icu_normalizer	2.3.0	2.4.0
icu_normalizer_data	2.3.0	2.4.0
icu_properties	2.3.0	2.4.0
icu_properties_data	2.3.0	2.4.0
icu_provider	2.3.1	2.4.0
libc	0.2.190	0.2.191
memmap2	0.9.11	0.9.12
openssl-probe	0.2.1	0.2.2
redox_syscall	0.9.4	0.9.5
rustix	1.1.5	1.1.6
rustls-webpki	0.103.15	0.103.16
schannel	0.1.29	0.1.30
smallvec	1.16.3	1.16.4
tinystr	0.8.4	0.8.5
typed-path	0.12.3	0.13.0
unicode-width	0.2.2	0.2.3
utf8_iter	1.0.4	1.1.0
webpki-root-certs	1.0.9	1.0.11
xattr	1.6.1	1.7.0
yoke	0.8.3	0.8.4
zbus_names	4.3.4	4.3.5
zcheapstr	1.1.0	1.2.0
zerovec	0.11.8	0.11.9
zerovec-derive	0.11.6	0.11.7
zvariant	5.15.0	5.15.1
zvariant_derive	5.15.0	5.15.1

Updates tokio from 1.53.3 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

• time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

• fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
• net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
• runtime: add Builder::max_io_events_per_busy_tick (#8410)
• runtime: stabilize tokio::runtime::worker_index() (#8431)
• sync: add SemaphorePermit::semaphore() (#8482)
• sync: add blocking_acquire methods to Semaphore (#8269)
• sync: add watch::Receiver::is_closed (#8481)
• wasm: support JSPI for Emscripten target (#8285, #8627)
• wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

• fs: reject zero in File::set_max_buf_size (#8449)
• io: make copy_buf cooperative (#8459)
• io: panic when BufReader or BufStream is created with zero capacity (#8494)
• io: panic when in-memory pipe is created with zero capacity (#8397)
• io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
• io: support vectored writes in Sink (#8663)
• net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
• net: start accepted sockets as readable and writable (#8435)
• net: support UCred on Fuchsia (#8257)
• process: use mio::unix::pipe for Unix child stdio (#8603)
• runtime: cache-pad the shared injection queue and idle state (#8622)
• runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
• runtime: make enable_io available whenever rt is enabled (#8387)
• runtime: move block_in_place setup into a non-generic function (#8315)
• runtime: move the multi-thread inject queue to its own mutex (#8382)
• runtime: panic when max_io_events_per_tick is zero (#8476)
• runtime: suggest .await in nested block_on panic message (#8501)
• sync: avoid atomic reader count in broadcast slots (#8357)
• sync: use acquire/release orderings in Notify (#8325)
• time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

• b53b200 chore: prepare Tokio v1.54.1 (#8693)
• 5ed619b time: revert "remove the runtime handle from timers" (#8692)
• 66d34e4 chore: prepare Tokio v1.54.0 (#8667)
• 0d322ce io: support vectored writes in sink (#8663)
• 4167c56 codec: expose I/O sources from codec errors (#8665)
• cdd9dae fs: propagate iouring stress test failures (#8644)
• 52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
• 4890d02 stream: implement FusedStream for JoinSetStream (#8629)
• a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
• 9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
• Additional commits viewable in compare view

Updates open from 5.4.4 to 5.4.5

Release notes

Sourced from open's releases.

v5.4.5

Bug Fixes

• check that_detached launchers for immediate failures that_detached() returned as soon as a launcher spawned, so a launcher that failed right after starting was reported as success and no fallback ran.

  Observe each launcher for 250 ms by delegating to that_detached_with_timeout(). A launcher that exits unsuccessfully within that window falls through to the next candidate; one still running is treated as handed off. The macOS and shellexecute-on-windows paths are unchanged.

  Extend the fixture tests to call that_detached() directly.

• restore launcher fallback and support Plasma 6

  When xdg-open starts but exits unsuccessfully, that() and the CLI previously stopped before trying another installed opener. On Plasma 6, the fallback list also omitted the versioned KDE launchers.

  Launcher behavior

  • Retry reported failures from UNIX desktop launchers and retain the first unsuccessful exit when later candidates are missing.
  • Add kde-open6 and kde-open5 before the existing kde-open fallback.
  • Keep launcher ordering, argument boundaries, and exit-status policy together so compatibility decisions are explicit.
  • Preserve Windows' stop-on-failure policy and the existing protections for option-shaped and non-UTF-8 paths.

  Bounded detached checks

  Add that_detached_with_timeout(path, timeout) to opt into checking the actual launcher status for a configurable interval per candidate. Retry confirmed UNIX launcher failures; consider successful exits or launchers still running at the deadline handed off. A zero timeout polls once.

  On UNIX, use setsid() while retaining the launcher as a child. Reserve a background waiter before spawning and transfer ownership after a timeout so the launcher can outlive its caller and is eventually reaped. Stop fallback if observing an already-started launcher fails, avoiding a second launch based only on a wait error. Existing detached calls retain their timing behavior. The new API uses command-based launchers on Windows, including when shellexecute-on-windows is enabled.

  Historical constraints

  55dc10d relaxed exit checks for argumentless availability probes, where usage errors are expected. It did not establish that failed real opening operations should stop fallback. 245c95e introduced that behavior; the earlier implementation retried unsuccessful operations.

... (truncated)

Changelog

Sourced from open's changelog.

5.4.5 (2026-10-22)

Bug Fixes

• check that_detached launchers for immediate failures that_detached() returned as soon as a launcher spawned, so a launcher that failed right after starting was reported as success and no fallback ran.

  Observe each launcher for 250 ms by delegating to that_detached_with_timeout(). A launcher that exits unsuccessfully within that window falls through to the next candidate; one still running is treated as handed off. The macOS and shellexecute-on-windows paths are unchanged.

  Extend the fixture tests to call that_detached() directly.

• restore launcher fallback and support Plasma 6

  When xdg-open starts but exits unsuccessfully, that() and the CLI previously stopped before trying another installed opener. On Plasma 6, the fallback list also omitted the versioned KDE launchers.

  Launcher behavior

  • Retry reported failures from UNIX desktop launchers and retain the first unsuccessful exit when later candidates are missing.
  • Add kde-open6 and kde-open5 before the existing kde-open fallback.
  • Keep launcher ordering, argument boundaries, and exit-status policy together so compatibility decisions are explicit.
  • Preserve Windows' stop-on-failure policy and the existing protections for option-shaped and non-UTF-8 paths.

  Bounded detached checks

  Add that_detached_with_timeout(path, timeout) to opt into checking the actual launcher status for a configurable interval per candidate. Retry confirmed UNIX launcher failures; consider successful exits or launchers still running at the deadline handed off. A zero timeout polls once.

  On UNIX, use setsid() while retaining the launcher as a child. Reserve a background waiter before spawning and transfer ownership after a timeout so the launcher can outlive its caller and is eventually reaped. Stop fallback if observing an already-started launcher fails, avoiding a second launch based only on a wait error. Existing detached calls retain their timing behavior. The new API uses command-based launchers on Windows, including when shellexecute-on-windows is enabled.

  Historical constraints

  55dc10d relaxed exit checks for argumentless availability probes, where usage errors are expected. It did not establish that failed real opening operations should stop fallback. 245c95e introduced that behavior;

... (truncated)

Commits

• a60a9d5 Release open v5.4.5
• 4e64f6b Merge pull request #135 from Byron/fix-linux-launchers
• c88759b auto-review
• 42a34b0 fix(unix): check that_detached launchers for immediate failures
• 279c1b2 fix(unix): restore launcher fallback and support Plasma 6
• See full diff in compare view

Updates zip from 9.0.3 to 9.1.3

Release notes

Sourced from zip's releases.

v9.1.3

🚀 Features

• (extra_fields) support 0xd935 Android ZIP alignment extra field (#928) (#1198)

🐛 Bug Fixes

• (format) record correct 32-bit EOCD offset in ZIP64 archives (#1205)
• (aes) wipe AES round keys when the cipher is dropped (#1204)
• (fuzz) treat a comment change in a merged sub-writer as non-streamable (#1188)
• (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#1196)
• (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#1195)
• (write) drop a stale Unicode Path extra field when copying an entry (#1187)
• (write) don't leave a stale tail that completes a fake EOCD in the comment (#1186)
• (write) reject deflate levels below 10 when only zopfli is enabled (#1182)

⚡ Performance

• (read) accelerate extraction with 64 KiB reusable buffer (#1206)
• (aes) encrypt AES-CTR counter blocks in batches (#1203)
• (read) eliminate double allocation by populating IndexMap directly (#1200)
• (read) preallocate files vector in read_central_header (#1199)

v9.1.1

🐛 Bug Fixes

• store the raw count instead of a bool (#1174)
• preserve extra fields in raw_copy_file_touch (#1172)
• (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
• (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

v9.1.0

🚀 Features

• (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
• Add borrowing inner method to reader wrappers (#1050)
• add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
• add file_names_raw iterator (#1082)

🐛 Bug Fixes

• raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
• (write) prevent seek panic on streaming writer with comment (#1151)
• Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#1134)
• apply unix permissions at creation (#1104)
• raw_copy_file should work with any extra fields (#1120)
• (read) avoid full-file forward scans and redundant allocations in central directory (#1142)
• don't enable typed-path's default std feature (#1112)
• ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#1107)
• resolve decoded CP437 member names (#1080) (#1085)

... (truncated)

Changelog

Sourced from zip's changelog.

9.1.3 - 2026-10-27

🚀 Features

• (extra_fields) support 0xd935 Android ZIP alignment extra field (#928) (#1198)

🐛 Bug Fixes

• (format) record correct 32-bit EOCD offset in ZIP64 archives (#1205)
• (aes) wipe AES round keys when the cipher is dropped (#1204)
• (fuzz) treat a comment change in a merged sub-writer as non-streamable (#1188)
• (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#1196)
• (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#1195)
• (write) drop a stale Unicode Path extra field when copying an entry (#1187)
• (write) don't leave a stale tail that completes a fake EOCD in the comment (#1186)
• (write) reject deflate levels below 10 when only zopfli is enabled (#1182)

⚡ Performance

• (read) accelerate extraction with 64 KiB reusable buffer (#1206)
• (aes) encrypt AES-CTR counter blocks in batches (#1203)
• (read) eliminate double allocation by populating IndexMap directly (#1200)
• (read) preallocate files vector in read_central_header (#1199)

9.1.2 - 2026-10-26

🐛 Bug Fixes

• preserve the file kind (normal/directory/symlink) in raw_copy_file_touch (#1179)
• (write) reject a Unicode Path extra field that would rename the entry (#1177)
• (extract) prevent following symbolic links during file creation (#1116)

9.1.1 - 2026-10-25

🐛 Bug Fixes

• store the raw count instead of a bool (#1174)
• preserve extra fields in raw_copy_file_touch (#1172)
• (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
• (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

9.1.0 - 2026-10-24

🚀 Features

• (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
• Add borrowing inner method to reader wrappers (#1050)
• add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
• add file_names_raw iterator (#1082)

... (truncated)

Commits

• af2ed2a chore: release v9.1.3 (#1185)
• 019776a perf(read): accelerate extraction with 64 KiB reusable buffer (#1206)
• 5b5c4a0 fix(format): record correct 32-bit EOCD offset in ZIP64 archives (#1205)
• 20e809a perf(aes): encrypt AES-CTR counter blocks in batches (#1203)
• 9865299 fix(aes): wipe AES round keys when the cipher is dropped (#1204)
• e656c5d perf(read): eliminate double allocation by populating IndexMap directly (#1200)
• 2431276 perf(read): preallocate files vector in read_central_header (#1199)
• 09d6a8b ci: Manually update version to 9.1.3 (#1202)
• f2fe6c4 feat(extra_fields): support 0xd935 Android ZIP alignment extra field (#928) (...
• 5125442 test(fuzz): tolerate reopen failures once the comment holds an EOCD signature...
• Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.2 to 1.19.0

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.19.0

What's Changed

• Add AES OFB, CFB8, and CFB1 modes by @​lokeswarivejju in aws/aws-lc-rs#1259
  • Adds OperatingMode::OFB, OperatingMode::CFB8, and OperatingMode::CFB1 for AES-128, AES-192, and AES-256 through both the one-shot and streaming cipher APIs.
• Add an on-demand AWS-LC self-test API by @​Elvrarin in aws/aws-lc-rs#1262
  • Adds aws_lc_rs::try_fips_self_test(), allowing applications to re-run all AWS-LC cryptographic algorithm self-tests without calling the sys crate through unsafe FFI. This does not re-run the module integrity test.
• Add Keccak-256 digest support behind "unstable" feature flag by @​fabrice102 in aws/aws-lc-rs#1266
  • Adds aws_lc_rs::unstable::digest::KECCAK256 and KECCAK256_OUTPUT_LEN behind the unstable feature for use with the existing digest::digest and digest::Context APIs.
• Add configurable RSA-PSS salt lengths by @​PaulDance in aws/aws-lc-rs#1267
  • Adds RsaPssSaltLength::{Digest, Max, Custom} and with_pss_salt_length builders on RsaSignatureEncoding and RsaParameters, covering signing and verification for both message and precomputed-digest APIs.
• Implement Clone for signing key pairs by @​JakeHuneau in aws/aws-lc-rs#1277
  • rsa::KeyPair, EcdsaKeyPair, Ed25519KeyPair, and PqdsaKeyPair can now be cloned directly rather than wrapped in an Arc.
  • Clones share the immutable, reference-counted EVP_PKEY; key material is not duplicated, and a clone remains usable after the original is dropped.

Upstream AWS-LC

• aws-lc-sys v0.47.0 aligns with AWS-LC v5.12.0 (previously v5.11.0).
• aws-lc-fips-sys v0.14.4 updates its bundled AWS-LC FIPS 4.2.0 snapshot with recent FIPS 4.x backports.

Build Improvements

• Lower the minimum system-installed AWS-LC version to 4.2.0 by @​justsmth in aws/aws-lc-rs#1268
  • The default aws-lc-sys system-library path now accepts AWS-LC 4.2.0 or newer, previously 5.7.0, allowing use of a FIPS 4.x system library.
  • Enabling the unstable feature requires AWS-LC 5.7.0 or newer because unstable APIs currently include Keccak-256. Bundled-source builds are unaffected.
• Share cc compiler detection across builds by @​johncarmack1984 in aws/aws-lc-rs#1273
  • Reuses compiler detection results across the main library build and compiler feature probes, reducing repeated compiler invocations during cold builds.

Issues Being Closed

• Implement Clone for rsa::KeyPair -- aws/aws-lc-rs#1260
• Expose AWS-LC FIPS on-demand self-test -- aws/aws-lc-rs#1261
• Add a way to specify the RSA-PSS salt length -- aws/aws-lc-rs#1263

Other Merged PRs

• build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @​dependabot[bot] in aws/aws-lc-rs#1264
• build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @​dependabot[bot] in aws/aws-lc-rs#1265
• fix: satisfy Clippy deprecated-since lint and lint legacy-des in CI by @​justsmth in aws/aws-lc-rs#1269
• ci: keep upstream Cargo.lock in rustls integration by @​justsmth in aws/aws-lc-rs#1270
• ci: use dynamic musl CRT for ARM FIPS tests by @​justsmth in aws/aws-lc-rs#1271
• Prepare aws-lc-fips-sys v0.14.4 by @​justsmth in aws/aws-lc-rs#1275
• Prepare aws-lc-sys v0.47.0 by @​justsmth in aws/aws-lc-rs#1274
• Prepare aws-lc-rs v1.19.0 by @​justsmth in aws/aws-lc-rs#1278

New Contributors

• @​lokeswarivejju made their first contribution in aws/aws-lc-rs#1259
• @​johncarmack1984 made their first contribution in aws/aws-lc-rs#1273
• @​JakeHuneau made their first contribution in aws/aws-lc-rs#1277

... (truncated)

Commits

• 5d496f8 Prepare aws-lc-rs v1.19.0 (#1278)
• d099134 Feat: Add the ability to specify an RSA-PSS salt length (#1267)
• b639322 feat(signature): implement Clone for signing key pairs (#1277)
• 7548d5c Prepare aws-lc-sys v0.47.0 (#1274)
• a5862bd Prepare aws-lc-fips-sys v0.14.4 (#1275)
• 9bba3fb perf(builder): share cc's compiler detection across builds (#1273)
• 6a66144 Add Keccak-256 digest algorithm (unstable) (#1266)
• cf4f62b feat(fips): add on-demand AWS-LC self-test API (#1262)
• 825d0e3 feat: support AES OFB, CFB8 and CFB1 modes (#1259)
• c225ce4 Lower minimum system AWS-LC to 4.2.0 and add an unstable floor (#1268)
• Additional commits viewable in compare view

Updates aws-lc-sys from 0.46.0 to 0.47.0

Commits

• 5d496f8 Prepare aws-lc-rs v1.19.0 (#1278)
• d099134 Feat: Add the ability to specify an RSA-PSS salt length (#1267)
• b639322 feat(signature): implement Clone for signing key pairs (#1277)
• 7548d5c Prepare aws-lc-sys v0.47.0 (#1274)
• a5862bd Prepare aws-lc-fips-sys v0.14.4 (#1275)
• 9bba3fb perf(builder): share cc's compiler detection across builds (#1273)
• 6a66144 Add Keccak-256 digest algorithm (unstable) (#1266)
• cf4f62b feat(fips): add on-demand AWS-LC self-test API (#1262)
• 825d0e3 feat: support AES OFB, CFB8 and CFB1 modes (#1259)
• c225ce4 Lower minimum system AWS-LC to 4.2.0 and add an unstable floor (#1268)
• Additional commits viewable in compare view

Updates cc from 1.8.0 to 1.10.0

Release notes

Sourced from cc's releases.

cc-v1.10.0

Added

• Initial libtool support (#1618)

Fixed

• (parallel) print the child's exit status as debug output (#2055)
• (target-parsing) wasm32-none-component (#2054)

Other

• Regenerate target info (#2053)

cc-v1.9.0

Added

• pass AddressSanitizer on to the C compiler (#2045)
• add source root for stable external object names (#2034)
• emit rerun-if-env-changed for the compiler's own env vars (#2035)
• (env) read Cargo's variables from the env snapshot (#2028)
• collect compile commands into a compile_commands.json (#1990)

Fixed

• don't prefer clang for -Clinker-plugin-lto=no (#2046)
• keep the order of flag and flag_if_supported (#2044)
• correct "arbitary" typo in target parser comment (#2039)
• correct "stablised" typos in TODO comments (#2040)
• (msvc) pass objects to the archiver relative to the output directory (#2033)
• honor disabled linker-plugin LTO (#2024)
• apply RUSTC_WRAPPER to the cl.exe cc finds itself (#2022)

Other

• (parallel) poll on jobserver helper thread (#2021)
• (parallel) add jobserver polling for windows (#2020)
• Regenerate windows sys bindings (#2019)
• (parallel) add polling for process exit on windows (#2016)
• (parallel) poll for process exit on macOS/bsd (#2014)

Changelog

Sourced from cc's changelog.

1.10.0 - 2026-10-23

Added

• Initial libtool support (#1618)

Fixed

• (parallel) print the child's exit status as debug output (#2055)
• (target-parsing) wasm32-none-component (#2054)

Other

• Regenerate target info (#2053)

1.9.0 - 2026-10-19

Added

• pass AddressSanitizer on to the C compiler (#2045)
• add source root for stable external object names (#2034)
• emit rerun-if-env-changed for the compiler's own env vars (#2035)
• (env) read Cargo's variables from the env snapshot (#2028)
• collect compile commands into a compile_commands.json (#1990)

Fixed

• don't prefer clang for -Clinker-plugin-lto=no (#2046)
• keep the order of flag and flag_if_supported (#2044)
• correct "arbitary" typo in target parser comment (#2039)
• correct "stablised" typos in TODO comments (#2040)
• (msvc) pass objects to the archiver relative to the output directory (#2033)
• honor disabled linker-plugin LTO (#2024)
• apply RUSTC_WRAPPER to the cl.exe cc finds itself (#2022)

Other

• (parallel) poll on jobserver helper thread (#2021)
• (parallel) add jobserver polling for windows (#2020)
• Regenerate windows sys bindings (#2019)
• (parallel) add polling for process exit on windows (#2016)
• (parallel) poll for process exit on macOS/bsd (#2014)

Commits

• 8d06fcb chore(cc): release v1.10.0 (#2059)
• 551c5f3 ci(deps): bump tombi-toml/setup-tombi from 1.8.4 to 1.8.5 (#2058)
• b075cc2 fix(parallel): print the child's exit status as debug output (#2055)
• ed362e2 fix(target-parsing): wasm32-none-component (#2054)
• 23faf0b feat: Initial libtool support (#1618)
• acc1bc5 feat: Initial libtool support (#1618)
• d6ff9fc Regenerate target info (#2053)
• 1abad3f ci(deps): bump release-plz/action from 0.5.141 to 0.5.142 (#2051)
• bd8ed44 refactor(env): cache parsed rustflags and keep EnvSnapshot in one Arc (#2050)
• ffbb10d chore: release (#2038)
• Additional commits viewable in compare view

Updates clipboard-win from 5.4.1 to 5.4.3

Commits

• See full diff in compare view

Updates combine from 4.6.8 to 4.6.9

Release notes

Sourced from combine's releases.

v4.6.9

4.6.9 - 2026-10-15

Bug Fixes

• Handle partial parsing in parsers based on TokensCmp - (c8742a5) - Markus Westerlind
• Make count/length_prefix/escaped handle partial parsing correctly - (148333e) - Markus Westerlind

Changelog

Sourced from combine's changelog.

4.6.9 - 2026-10-15

Bug Fixes

• Handle partial parsing in parsers based on TokensCmp - (c8742a5) - Markus Westerlind
• Make count/length_prefix/escaped handle partial parsing correctly - (148333e) - Markus Westerlind

Commits

• a2da738 chore: Version 4.6.9
• 12cd53c Merge pull request #383 from Marwes/release
• 73bffc7 chore: Try to setup a one-click release method
• 8067353 Merge pull request #382 from Marwes/issue_381
• 6a74b92 chore: Remove leak from tests
• 148333e fix: Make count/length_prefix/escaped handle partial parsing correctly
• c8742a5 fix: Handle partial parsing in parsers based on TokensCmp
• 96538fe Merge pull request #380 from icecream17/patch-1
• 72969c9 typo (stream/mod.rs)
• 21fe1e4 Merge pull request #379 from atouchet/trv
• Additional commits viewable in compare view

Updates crc32fast from 1.5.2 to 1.5.3

Commits

• d2363ea Release 1.5.3
• f694286 Publish to crates.io with trusted publishing
• 348edd9 Expose the total byte length of a CRC32 hash state (#68)
• ad14266 Centralize state handling (#67)
• 92c03d6 bench: switch from bencher to criterion (#66)
• 32b1983 Scope the msrv job to the published library, and take rand 0.10 (#65)
• 369da36 Bump actions/checkout from 4 to 7 in the actions group (#63)
• 6d5596e ci: enable dependabot version updates (#62)
• See full diff in compare view

Updates find-msvc-tools from 0.1.14 to 0.1.15

Release notes

Sourced from find-msvc-tools's releases.

find-msvc-tools-v0.1.15

Other

• Regenerate windows sys bindings (#2019)

Commits

• ffbb10d chore: release (#2038)
• b30f5b4 fix: don't prefer clang for -Clinker-plugin-lto=no (#2046)
• fb5eb51 feat: pass AddressSanitizer on to the C compiler (#2045)
• 399d494 fix: keep the order of flag and flag_if_supported (#2044)
• 53786d5 ci(deps): bump taiki-e/install-action from 2.87.21 to 2.87.28 (#2047)
• 53d06d3 ci(deps): bump release-plz/action from 0.5.140 to 0.5.141 (#2048)
• dfef159 ci(deps): bump tombi-toml/setup-tombi from 1.7.3 to 1.8.4 (#2049)
• fd9c840 feat: add source root for stable external object names (#2034)
• bf0c5fb feat: emit rerun-if-env-changed for the compiler's own env vars (#2035)
• 2ba8b6d refactor(target): convert large match into data (#2043)
• Additional commits viewable in compare view

Updates font-types from 0.12.6 to 0.12.7

Commits

• ef66666 Release types 0.12.7, read 0.45.1 (#2355)
• 1c3d0af [read-fonts] Expose the shared tables as a cache host for HarfRust
• 0f0be1b [codegen] Read fixed table fields from a header struct (#2353)
• b5512a3 [codegen] Read fixed table fields from a header struct
• d551721 [font-types] Add TableDataRef
• 2decca7 Merge pull request #2351 from googlefonts/fix_packing_order
• 0e6380f [skrifa] Share outline drawing across pen types (#2349)
• 65395d2 [read-fonts] fix ISO Latin-1 glyph names for codes 0xA1..0xFF (#2342)
• c8e5db1 [codegen] Fall back to defaults in validated field getters (#2350)
• dc0caac [skera] Subset GSUB/GPOS lists in harfbuzz's order
• Additional commits viewable in compare view

Updates icu_locale_core from 2.3.0 to 2.4.0

Release notes

Sourced from icu_locale_core's releases.

ICU4X 2.4.0

The ICU4X Technical Committee is happy to announce ICU4X 2.4, an update to our modular, portable, and secure i18n library.

Important changes in ICU4X 2.4 include:

• Unicode 18, CLDR 49, and TZDB 2026e: All data has been updated to the latest Unicode, CLDR, and time zone database releases.
• icu_datetime: Preview of the new fieldbag module for expressing datetime formats field-by-field, with full UTS #35 skeleton parsing and serialization and conversions to and from FieldSetBuilder. Date range f...

  Description has been truncated