[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the all group with 10 updates in the /fuzz directory:

Package	From	To
tokio	1.53.1	1.53.3
serde_json	1.0.151	1.0.154
thiserror	2.0.20	2.0.21
schemars	1.2.2	1.2.3
tantivy	0.26.2	0.27.0
kreuzberg	4.10.3	4.10.4
zip	8.6.0	9.0.5
zstd	0.14.0	0.14.3
libc	0.2.189	0.2.191
tokio-util	0.7.19	0.7.20

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

• io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

• io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

• io: wake and drop DuplexStream wakers outside the lock (#8618)
• macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
• runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
• sync: wake waiters outside the lock when closing a semaphore (#8529)
• test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

• rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

• fs: handle integer overflow in buffered relative seek (#8574)
• io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
• process: unregister Windows wait before closing child handle (#8564)
• rt: drop blocking pool mutex before shutting down rejected task (#8562)
• sync: fix mpsc index wraparound in block reclamation (#8546)
• sync: forget mpsc Permit before sending value (#8560)
• sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
• sync: wake broadcast Sender::closed outside mutex (#8558)
• task: drop replaced waker outside lock in JoinSet (#8554)
• time: drop timer lock before dropping waker in clear_entry (#8552)
• time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits

• a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
• df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
• f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
• 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
• 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
• c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
• 0448618 sync: make tracing_sync tests synchronous (#8427)
• 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
• bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
• 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates schemars from 1.2.2 to 1.2.3

Release notes

Sourced from schemars's releases.

v1.2.3

Fixed

• schema creation panics with arbitrary precision JSON numbers (GREsau/schemars#527)
• Resolve unused_qualifications lint violation in generated code (GREsau/schemars#539 / GREsau/schemars#541)

Changed

• Put the tag of internally-tagged enums first in the schema's properties array (GREsau/schemars#537 / GREsau/schemars#538)

Changelog

Sourced from schemars's changelog.

[1.2.3] - 2026-10-12

Fixed

• schema creation panics with arbitrary precision JSON numbers (GREsau/schemars#527)
• Resolve unused_qualifications lint violation in generated code (GREsau/schemars#539 / GREsau/schemars#541)

Changed

• Put the tag of internally-tagged enums first in the schema's properties array (GREsau/schemars#537 / GREsau/schemars#538)

Commits

• 4791bb7 v1.2.3
• c6a89b7 Put the tag of an internally tagged enum first in properties
• c5cd8b5 fix: schema creation panics with arbitrary precision JSON numbers
• 766d70b Resolve unused_qualifications lint in crate and generated code - #541 (#541)
• d07655e Resolve clippy error
• See full diff in compare view

Updates tantivy from 0.26.2 to 0.27.0

Changelog

Sourced from tantivy's changelog.

Tantivy 0.27.0

Breaking change

• MSRV is now 1.88.
• .set_fast(..) now takes a &str. The same behavior as .set_fast(None) can be obtained with .set_fast(tantivy::tokenizer::RAW_TOKENIZER_NAME). #3020 #3029(@​fulmicoton @​trinity-1686a)
• Added the FieldType::TieBreaker variant; exhaustive matches on FieldType need a new arm.
• Segment plugins add Custom variants to FieldType, Type, OwnedValue, ReferenceValueLeaf and SegmentComponent, and new TantivyError variants. SegmentComponent is no longer Copy, SegmentSerializer is removed and IndexMerger::write now takes a &Segment #2993(@​rebasedming)
• IndexSettings has a new public sort_by_field field, and ColumnarWriter::serialize / FastFieldsWriter::serialize take an optional doc id mapping #2959(@​rebasedming)
• Directory writers only need terminate(), not flush(). RamDirectory::deep_clone is removed #3095(@​PSeitz)
• BooleanWeight::new is removed; use BooleanWeight::with_minimum_number_should_match #3071(@​fulmicoton)
• SumAggregation has a new none_if_no_match field #2878(@​mdashti)
• IntermediateTermBucketResult::entries() returns a slice instead of a hash map, and intermediate aggregation results no longer implement PartialEq #3040(@​PSeitz)
• Per-segment aggregation request data types (*AggReqData) and columnar::ColumnBlockAccessor are no longer public #3110 #3066(@​fulmicoton)
• tantivy-sstable: BlockReader::from_multiple_blocks and DeltaReader::from_multiple_blocks take the first term ordinal of each block #3030(@​flow3d)
• CompactDoc::node_data is no longer public #3175(@​fulmicoton-dd)

Bugfixes

• Aggregation
  • Fix range and histogram aggregations counting a document several times when several values of a multivalued field fall into the same bucket #3150(@​PSeitz)
  • Fix terms aggregation on numeric values not merging equal keys across segments with different column types (e.g. u64 and i64 in a JSON field) #3051(@​fulmicoton)
  • Fix wrong sub-aggregation results when the terms aggregation missing value also exists as a real term #3163(@​PSeitz)
  • Fix panic in terms aggregation on text fields when missing is used with include/exclude #2907(@​barbarj)
  • Composite aggregation now always returns after_key on a non-empty page, like Elasticsearch #2910(@​Abdul-Andha)
  • Use upstream datasketches for cardinality aggregation, fixing sketch LIST serialization, and switch to HLL8 #2936(@​fulmicoton)
  • Fix possible out-of-bounds write in terms aggregation on corrupt index files #3182(@​fulmicoton-dd)
• Query Parser
  • Fix exponential parse time for deeply nested queries #2905(@​wallies)
  • Fix panic on *^2 and missing boost after a regex (foo:/bar/^2) #2960(@​Darkheir)
  • Fix panics and an endless loop on malformed input #3099(@​PSeitz)
• Fix DisjunctionMaxQuery and other non-summing score combiners being scored as a sum with TopDocs #3022(@​marcbachmann)
• Fix range queries with fractional bounds on integer columns (>= 1.5 no longer matches 1) #3074(@​fulmicoton)
• Fix Streamer::term_ord() returning wrong ordinals when an automaton prunes dictionary blocks #3030(@​flow3d)
• Fix FacetCollector returning a facet from an unrelated branch #2867(@​majiayu000)
• Fix dates outside the i64 nanosecond range wrapping to a wrong date. Dynamic JSON fields index them as strings, typed date fields return an error. Add DateTime::try_from_utc #3156(@​Darkheir)
• Fix overflow in the blockwise linear codec on large jumps #2971(@​trinity-1686a)
• Return an error instead of truncating when a merged str/bytes dictionary exceeds 4GB #3169(@​nadav-govari)
• Fix SegmentReader ignoring I/O errors when opening the positions file #2931(@​JinheLin)
• Replace unmaintained rust-stemmers with frostem, fixing a panic on some Greek words #3028(@​Xuanwo)
• Fix unsound unsafe code in StrColumn::ord_to_str, Term::get_json_path, the doc store and MemoryArena #3175 #3176(@​fulmicoton-dd)

Features/Improvements

• Add generated tie-breaker fast fields via SchemaBuilder::add_tie_breaker_field. Values are consecutive within a segment, start at a random offset, and are preserved across merges. #3104 #3143 #3158(@​PSeitz @​Mallets)
• Calculated fields (experimental, jitexpr feature)
  • Add the jitexpr crate, a Cranelift-based JIT expression compiler with arithmetic, comparison, boolean, null, math, string and regex functions #3078 #3083 #3090 #3107 #3109(@​fulmicoton @​fulmicoton-dd)
  • Add JitExprPredicate to filter documents with a jitexpr expression over fast fields #3081 #3129(@​fulmicoton)
  • Add JitExprValueSourceProvider to use calculated fields in aggregations #3162 #3166(@​fulmicoton)
• Aggregation
  • Add multi-terms aggregation #2984(@​trinity-1686a)
  • Add ValueSource abstraction to aggregate on computed values, registered via AggregationCollector::with_value_sources #3112 #3147 #3160 #3171(@​fulmicoton)

... (truncated)

Commits

• 6788926 Version bump and changelog for tantivy 0.27 (#3197)
• e1acb3e perf(aggregation): break serial Kahan/Welford chains with accumulator lanes (...
• 8a4cfc4 Fix stale JSON range query note and ARCHITECTURE.md link
• 7fea2ab columnar: read datetime columns with the right type in sort_order (#3185)
• 0f8f6c5 term_agg: use bounds-checked indexing in Vec term maps (#3182)
• 881fb3e filter_vec avx2: make target_feature helpers safe (#3178)
• a32be82 fix: Fall back to string for dates that don't fit in i64 nanoseconds (#3156)
• c6dc5cb BitUnpacker::get_range: compute range bounds in u64 (#3177)
• 59daaef Split term bucket maps into eager (lanes) and lazy variants (#3174)
• 3ecca81 MemoryArena: panic when allocating more than a page (#3176)
• Additional commits viewable in compare view

Updates kreuzberg from 4.10.3 to 4.10.4

Release notes

Sourced from kreuzberg's releases.

v4.10.4

[4.10.4] - 2026-09-21

Patch release: CLI acceleration and output-formatting fixes, a dependency refresh, and a TLS advisory bump.

Fixed

• CLI release binaries honour ORT_DYLIB_PATH. The CLI statically linked its bundled CPU ONNX Runtime, so --acceleration cuda failed with "CUDA execution provider requested but not available" even when ORT_DYLIB_PATH pointed at a GPU-enabled runtime. Release artifacts now load ONNX Runtime dynamically and ship a CPU fallback next to the binary. (#8)
• Markdown formatting is no longer stripped from DOCX, EPUB and CSV output. (#5)
• kreuzberg-tesseract releases the native text array when UTF-8 conversion fails, closing an error-path leak. (#7)

Security

• rustls bumped past RUSTSEC-2026-0285. TLS 1.3 handshake messages were accepted across encryption-level boundaries; fixed in 0.23.45.

Changed

• Dependency refresh: liter-llm 1.19 → 2.0.3, tree-sitter-language-pack 1.16.1 → 1.20.0, html-to-markdown-rs 3.12.0 → 3.14.3, and in-range bumps to reqwest, toml, encoding_rs, mail-parser, rmcp and cc.
• Breaking dependency bumps: cfb 0.15, comrak 0.55, lzma-rust2 0.21, dirs 7, lopdf 0.45, jsonschema 0.56, bindgen 0.73.
• The Node package builds with pnpm 12 (two-document lockfile).
• Internal: shell sources are formatted by poly, and the script test suite gains Bats and Pester coverage.

Changelog

Sourced from kreuzberg's changelog.

[4.10.4] - 2026-09-21

Patch release: CLI acceleration and output-formatting fixes, a dependency refresh, and a TLS advisory bump.

Fixed

• CLI release binaries honour ORT_DYLIB_PATH. The CLI statically linked its bundled CPU ONNX Runtime, so --acceleration cuda failed with "CUDA execution provider requested but not available" even when ORT_DYLIB_PATH pointed at a GPU-enabled runtime. Release artifacts now load ONNX Runtime dynamically and ship a CPU fallback next to the binary. (#8)
• Markdown formatting is no longer stripped from DOCX, EPUB and CSV output. (#5)
• kreuzberg-tesseract releases the native text array when UTF-8 conversion fails, closing an error-path leak. (#7)

Security

• rustls bumped past RUSTSEC-2026-0285. TLS 1.3 handshake messages were accepted across encryption-level boundaries; fixed in 0.23.45.

Changed

• Dependency refresh: liter-llm 1.19 → 2.0.3, tree-sitter-language-pack 1.16.1 → 1.20.0, html-to-markdown-rs 3.12.0 → 3.14.3, and in-range bumps to reqwest, toml, encoding_rs, mail-parser, rmcp and cc.
• Breaking dependency bumps: cfb 0.15, comrak 0.55, lzma-rust2 0.21, dirs 7, lopdf 0.45, jsonschema 0.56, bindgen 0.73.
• The Node package builds with pnpm 12 (two-document lockfile).
• Internal: shell sources are formatted by poly, and the script test suite gains Bats and Pester coverage.

Commits

• b8c96b3 chore(release): prepare 4.10.4
• 1094f00 fix(cli): load ONNX Runtime dynamically in release artifacts
• 331c19d fix(extraction): restore markdown formatting output (#5)
• ef63bc0 chore(deps): breaking dependency bumps
• 507ea51 chore(deps): compatible dependency bumps
• 197fa60 chore(deps): bump liter-llm, tree-sitter-language-pack, html-to-markdown-rs
• a66c5ec docs(ai-rulez): point the skills at modules that became directories
• 15182af fix(deps): bump rustls past RUSTSEC-2026-0285
• fda4a14 style(shell): let poly format shell sources
• f6b3f98 test(scripts): cover scripts/lib/tessdata.sh
• Additional commits viewable in compare view

Updates zip from 8.6.0 to 9.0.5

Release notes

Sourced from zip's releases.

v9.0.5

🐛 Bug Fixes

• use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
• (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

• Enable release-plz on backport branches in future (#1079)

v9.0.4

🐛 Bug Fixes

• enclosed_name rejects a separator inside one verbatim path component (#1066)
• return Ok(None) when read_zipfile_from_stream is called on an empty archive (#1063)

⚙️ Miscellaneous Tasks

• Revert impl Copy for Zip64CentralDirectoryEndLocator due to failing semver check, fix CI where most Miri tests weren't running, and other fixes so other PRs can pass CI (#1065)
• update lzma-rust2 and ppmd-rust dependencies (#1060)

v9.0.3

🐛 Bug Fixes

• Preserve directories' read-only status when extracting on non-Unix systems (#1054)

v9.0.1

🐛 Bug Fixes

• set_permissions was still following symlinks in non-streaming extraction (#1038)
• two arithmetic overflows in the implode decoder (#1028)
• reject an empty archive whose central directory offset is past the EOCD (#1025)
• don't panic when two entries extract to the same path (#1023)
• fail reads that exceed the declared uncompressed size (#1022)
• shrink decoder skipped LZW code 8191 (#1029)
• write only the sentinel-marked values in a central ZIP64 field (#1027)

v9.0.0

🚀 Features

• add ZipFileBuilder for parallelizing compression (#911)
• add method by_index_with_data_descriptor (#994)
• add len, is_empty and entry to ZipArchiveMetadata (#1015)
• read data descriptor from binary (#990)
• add comment and test for ZipStreamReader and symlinks (#985)
• (write) add ZipWriter::hide_file for in-place entry deletion (#924)
• add compression (#948)
• add test to in place modification (#945)
• move CustomExtraField to own file (#941)
• add a test on enum size (#939)

... (truncated)

Changelog

Sourced from zip's changelog.

9.0.5 - 2026-10-17

🐛 Bug Fixes

• use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
• (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

• Enable release-plz on backport branches in future (#1079)

9.0.4 - 2026-10-16

🐛 Bug Fixes

• enclosed_name rejects a separator inside one verbatim path component (#1066)
• return Ok(None) when read_zipfile_from_stream is called on an empty archive (#1063)

⚙️ Miscellaneous Tasks

• Revert impl Copy for Zip64CentralDirectoryEndLocator due to failing semver check, fix CI where most Miri tests weren't running, and other fixes so other PRs can pass CI (#1065)
• update lzma-rust2 and ppmd-rust dependencies (#1060)

9.0.3 - 2026-10-13

🐛 Bug Fixes

• Preserve directories' read-only status when extracting on non-Unix systems (#1054)

9.0.2 - 2026-10-11

🐛 Bug Fixes

• additional bug fixes for symlink extraction

9.0.1 - 2026-10-10

🐛 Bug Fixes

• set_permissions was still following symlinks in non-streaming extraction (#1038)
• two arithmetic overflows in the implode decoder (#1028)
• reject an empty archive whose central directory offset is past the EOCD (#1025)
• don't panic when two entries extract to the same path (#1023)
• fail reads that exceed the declared uncompressed size (#1022)
• shrink decoder skipped LZW code 8191 (#1029)
• write only the sentinel-marked values in a central ZIP64 field (#1027)

9.0.0 - 2026-10-08

🚀 Features

... (truncated)

Commits

• 0123ed1 chore: release v9.0.5 (#1093)
• 00cf82b docs: Repeal policy of yanking versions with known vulnerabilities, add menti...
• 52165b9 chore: Enable release-plz on backport branches in future (#1079)
• ca51e64 docs: Remove doc links that break when doc build doesn't enable all features ...
• 6639687 fix: use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
• 5e06fa8 fix(write): prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)
• b6f9fb8 Merge commit from fork
• ea2ccfe Merge commit from fork
• 8068ab4 Merge commit from fork
• 0b51128 doc: Clarifications to security policy (#1074)
• Additional commits viewable in compare view

Updates zstd from 0.14.0 to 0.14.3

Commits

• 75bc740 Release zstd 0.14.3, zstd-safe 8.2.0, and zstd-sys 2.1.2
• 1c580b6 zstd-safe: keep the one-shot reset check inline
• 502ee2f zstd-safe: only reset after one-shot decompression if a stream may be open
• 5ded6e0 zstd-safe: apply rustfmt
• e224018 zstd-safe: refuse to unload a dictionary under unfinished zstdmt jobs
• 6a1065b Stop a single_frame() decoder when finish_frame() ends the frame
• c7156df Don't let finish_frame() start a frame nothing was read from
• b0fb8a7 Add write::Decoder::finish() to report incomplete frames
• ab34d01 Don't retry a panicked writer when dropping AutoFlushDecoder/AutoFinishEncoder
• 74ace2d Reset the borrowed context's session in raw::{Encoder,Decoder}::with_context
• Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

• Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

• Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
• Apple: add ifaliasreq and in6_aliasreq (#5557)
• FreeBSD: Add PT_* constants (#5625)
• Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
• Hurd: Add POSIX_SPAWN_* flags (#5578)
• NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
• OpenBSD: Add sensordev (#5534)
• QuRT: Add isatty (#5618)
• WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

• FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

• AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
• Android: Make prop_info an extern type (#5561)
• Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
• FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

• 32-bit Linux-GNU
• 32-bit Linux-uClibc
• 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
• 32-bit Windows-GNU
• ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...

Note that there may still be some changes to features gated by this config option, hence "unstable"

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

• Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

• Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
• Apple: add ifaliasreq and in6_aliasreq (#5557)
• FreeBSD: Add PT_* constants (#5625)
• Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
• Hurd: Add POSIX_SPAWN_* flags (#5578)
• NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
• OpenBSD: Add sensordev (#5534)
• QuRT: Add isatty (#5618)
• WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

• FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

• AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
• Android: Make prop_info an extern type (#5561)
• Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
• FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

• 32-bit Linux-GNU
• 32-bit Linux-uClibc
• 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
• 32-bit Windows-GNU
• ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
</tr></table> 

... (truncated)

Commits

• ccc2ff4 libc: Release 0.2.191
• bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
• ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
• b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
• 9c7f568 apple: add ifaliasreq and in6_aliasreq
• 018c7e9 wasi: Add pthread_condattr_{get,set}clock
• 2c77185 openbsd: add sensordev structure
• e10813c hurd: Add missing POSIX_SPAWN_* flags
• 2ea4bc1 Fix FreeBSD/aarch64
• 6d666fd dragonfly: Parse version from headers rather than CLI
• Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

• 5ec9e6b chore: prepare tokio-util v0.7.20 (#8608)
• afd1b26 docs: fix stray braces and broken links in rustdoc (#8605)
• 3eb95a4 wasm: use sleep on emscripten without JSPI (#8528)
• b22c802 wasm: link emscripten_promise_await for Emscripten 4.x compatibility (#8528)
• 16b1f9d ci: pin libc to 0.2.189 on FreeBSD (#8594)
• b263675 time: clean up stale Err(Invalid) doc and typo (#8590)
• 5d5cd8b Merge 'tokio-1.53.2' into 'master' (#8578)
• ff0c406 chore: prepare Tokio v1.53.2 (#8580)
• a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
• ec31a9f chore: prepare Tokio v1.51.5 (#8579)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.