chore(deps): bump the cargo-weekly group across 1 directory with 8 updates

[dependabot]

Bumps the cargo-weekly group with 8 updates in the / directory:

Package	From	To
syn	2.0.119	3.0.2
prettyplease	0.2.37	0.3.0
k256	0.13.4	0.14.0
rand	0.9.5	0.10.2
tokio-tungstenite	0.28.0	0.29.0
p256	0.13.2	0.14.0
ecdsa	0.16.9	0.17.0
quick-junit	0.6.1	0.7.0

Updates syn from 2.0.119 to 3.0.2

Release notes

Sourced from syn's releases.

3.0.2

• Add Error::new_range(start..end, "msg") (#2068, #2070)
• Add Cursor::prev_span

3.0.1

• Parse const traits (#2056, #2057, #2058, #2063, #2064)
• Parse unsafe binder types (#2065)
• Parse impl restrictions (#2066)

3.0.0

This release contains adjustments to the syntax tree to account for ongoing Rust language development from the 3 years since syn 2.0.0 and to anticipate some in-flight Rust language RFCs.

These include: default values in fields, pinned type sugar, raw lifetimes, generator blocks and functions, unnamed enum variants, attributes in tuple types and tuple patterns, named arguments in parenthesized generic argument lists, lightweight clones, const traits, const function pointers, mutability restricted fields, supertrait auto implementation, final associated functions, trait implementability restrictions, const blocks in path arguments, item-level const blocks, return type notation, never patterns, function delegation, mutable by-reference bindings, in-place initialization, field projections, explicitly dyn-compatible traits, view types, file-level frontmatter, generic const arguments, guard patterns, lazy type aliases, explicitly safe foreign items, super let, unsafe fields, pattern types, heterogeneous try-blocks, function contracts, async function trait bounds, static closure coroutine syntax, unsafe binder types, move expressions, for-await loops, and postfix keywords.

Breaking changes

Modifiers

To reserve more room for language evolution, there are 10 new non-exhaustive structs in the syntax tree having the following commonality:

• Name ending in Modifiers. {BlockModifiers, ClosureModifiers, ConstModifiers, FieldModifiers, FnModifiers, ImplModifiers, LocalModifiers, TraitBoundModifiers, TraitModifiers, TypeModifiers}

• Each implements Default. The default value is guaranteed to comprise no tokens.

• Non-exhaustive. Can only be instantiated by Syn's parser or by creating and then mutating ▁▁Modifiers::default().

• Does not implement Parse. When parsing, they are parsed by the enclosing syntax tree node.

• Does not implement ToTokens. In some cases the syntax that these nodes might hold in the future is not necessarily contiguous tokens.

• Provides .require_empty() -> Result<()> which returns a meaningfully spanned error if the modifiers are different from the empty default. This enables a caller to reject syntax it does not recognize without knowing what that syntax may be.

Types

• Type::BareFn has been renamed to Type::FnPtr to mirror the compiler's terminology. Together with this, BareVariadic is renamed to FnPtrVariadic.

• The mutually exclusive const_token and mutability fields of Type::Ptr have been unified into an enum of type PointerMutability, which was already previously used by Expr::RawAddr.

• Every Type variant now holds attributes, which can represent the attributes of element types inside a tuple type, or attributes for a function return type.

• BareFnArg is renamed to NamedArg and is used in ParenthesizedGenericArguments, in addition to the existing use in Type::FnPtr.

Expressions

• In Expr::Closure, the fields or1_token and or2_token have been renamed to inputs_begin and inputs_end to indicate the beginning and ending | token of the closure inputs.

... (truncated)

Commits

• 88ee7be Release 3.0.2
• 587bc20 Merge pull request #2070 from dtolnay/emptyrange
• 96801f7 Allow Error::new_range at empty cursor range
• 9dc16c9 Merge pull request #2069 from dtolnay/prevspan
• 1db76b7 Align on using impl trait across all Error constructors
• bfa1ebf Make Cursor::prev_span public
• c6ac5e5 Merge pull request #2068 from dtolnay/newrange
• 1436454 Add Error::new_range constructor taking Range<Cursor>
• 123c148 Release 3.0.1
• bc11ddd Merge pull request #2067 from dtolnay/fastpeek
• Additional commits viewable in compare view

Updates prettyplease from 0.2.37 to 0.3.0

Release notes

Sourced from prettyplease's releases.

0.3.0

• Update to syn 3 (release notes: https://github.com/dtolnay/syn/releases/tag/3.0.0)

Commits

• 49e5089 Release 0.3.0
• fcbf4d3 Merge pull request #128 from dtolnay/syn3
• 3bcd9d9 Update to syn 3
• 1a89d07 Format with rustfmt
• daa39f5 Update actions/upload-artifact@v6 -> v7
• 44d4c3d Update actions/checkout@v6 -> v7
• 87d1c22 Update examples to nightly-2026-02-09
• 50a7042 Raise required compiler to Rust 1.71
• ae76ee8 Resolve unnecessary_map_or clippy lint
• 938b756 Raise required compiler to Rust 1.70
• Additional commits viewable in compare view

Updates k256 from 0.13.4 to 0.14.0

Commits

• 788867b k256 v0.14.0 (#1900)
• 7631df0 Cargo.lock: bump dependencies (#1901)
• 9b15fb8 k256: schnorr::SigningKey::sign_prehash retry support (#1899)
• 523448e build(deps): bump crate-ci/typos from 1.47.0 to 1.48.0 (#1893)
• a955b37 k256: have Schnorr signing reduce k mod n (#1898)
• 857cd25 k256: remove duplicate ecdsa CI build (#1897)
• c3f7f08 k256: lint improvements (#1896)
• eb24e09 build(deps): bump num-bigint from 0.4.6 to 0.5.1 (#1894)
• 3f1b528 p521: lint improvements (#1895)
• 24b65d1 p384 v0.14.0 (#1892)
• Additional commits viewable in compare view

Updates rand from 0.9.5 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#1761)
• Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

• The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
• Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
• Use Edition 2024 and MSRV 1.85 (#1653)
• Let Fill be implemented for element types, not sliceable types (#1652)
• Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
• Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
• Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
• Remove Clone support for StdRng, ReseedingRng (#1677)
• Use postcard instead of bincode to test the serde feature (#1693)
• Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
• Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
• Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

• Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
• Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
• Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
• Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

• Removed ReseedingRng (#1722)
• Removed unused feature "nightly" (#1732)
• Removed feature small_rng (#1732)

... (truncated)

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates tokio-tungstenite from 0.28.0 to 0.29.0

Changelog

Sourced from tokio-tungstenite's changelog.

0.29.0

• Update tungstenite to 0.29.0. See tungstenite release.

Commits

• 7930ff2 Bump version
• 38d0465 Update Readme (#369)
• See full diff in compare view

Updates p256 from 0.13.2 to 0.14.0

Commits

• 27e62fd p256 v0.14.0 (#1890)
• 693577d p256: vendor and fix workspace-level lints (#1888)
• ef3a3b1 primeorder v0.14.0 (#1887)
• 3688e30 primeorder: enable and fix workspace level lints (#1886)
• 7f576df wnaf v0.14.0 (#1884)
• a6aeae5 wnaf: enable and fix workspace-level lints (#1885)
• b212497 Bump ecdsa to v0.17 (#1883)
• df6d7bd document PKCS#8 key loading (#1874)
• a0442be build(deps): bump actions/cache from 5 to 6 (#1878)
• aa95e81 k256: extract arithmetic::mul::glv submodule (#1880)
• Additional commits viewable in compare view

Updates ecdsa from 0.16.9 to 0.17.0

Commits

• a51becc ecdsa v0.17.0 (#1412)
• 40e4daa ecdsa: fix clippy::missing_errors_doc lints (#1411)
• 71ebd8f ecdsa: use MulByGeneratorVartime for public key recovery (#1410)
• ac0c257 ecdsa: enable and fix workspace-level lints (#1409)
• 055e9a4 ecdsa: move Array* bounds to EcdsaCurve (#1408)
• c844e26 dsa v0.7.0 (#1407)
• 3bec131 dsa: enable and fix workspace-level lints (#1406)
• d8d07e8 dsa: make secret_number_rfc6979 infallible; cleanups (#1405)
• 13c89f8 rfc6979 v0.6.0 (#1404)
• d6fa985 rfc6979: clippy cleanups
• Additional commits viewable in compare view

Updates quick-junit from 0.6.1 to 0.7.0

Release notes

Sourced from quick-junit's releases.

quick-junit 0.7.0

Changed

Skipped test counts

Skipped test counts are now reported via the skipped attribute rather than disabled. For <testsuite>, skipped matches the llg schema and the Jenkins junit-10 schema, as well as pytest and Maven Surefire.

• Each <testsuite> now emits skipped="N", and the root <testsuites> element now emits an aggregated skipped="N" count. Previously the root didn't carry a skip count at all.
• Root-level skipped is a quick-junit extension. It follows the modern JUnit convention (as documented, for example, by testmoapp/junitxml) and is similar to quick-junit's existing extensions such as uuid.
• TestSuite's disabled field has been renamed to skipped.
• Report gains new public skipped and disabled fields, and Report::add_test_suite now aggregates skip counts into Report::skipped.

disabled is now modeled as a separate optional count on both Report and TestSuite, distinct from skipped. (disabled is intended to count tests that are disabled by design, such as googletest's DISABLED_-prefixed tests. Note, however, that quick-junit doesn't have a notion of disabled tests at the moment.)

Other changes

• Report is now #[non_exhaustive], consistent with TestSuite and TestCase. Construct it via Report::new and then assign fields, so that future field additions are non-breaking.
• Childless <testsuite> and <testcase> elements are now serialized as self-closing tags (for example, <testcase name="my-test"/> rather than <testcase name="my-test"></testcase>). The output is semantically identical XML, only more compact and idiomatic. The deserializer already accepted these self-closing forms, so serializing them means round-trip tests now cover those parse paths.

Changelog

Sourced from quick-junit's changelog.

[0.7.0] - 2026-07-20

Changed

Skipped test counts

Skipped test counts are now reported via the skipped attribute rather than disabled. For <testsuite>, skipped matches the llg schema and the Jenkins junit-10 schema, as well as pytest and Maven Surefire.

• Each <testsuite> now emits skipped="N", and the root <testsuites> element now emits an aggregated skipped="N" count. Previously the root didn't carry a skip count at all.
• Root-level skipped is a quick-junit extension. It follows the modern JUnit convention (as documented, for example, by testmoapp/junitxml) and is similar to quick-junit's existing extensions such as uuid.
• TestSuite's disabled field has been renamed to skipped.
• Report gains new public skipped and disabled fields, and Report::add_test_suite now aggregates skip counts into Report::skipped.

disabled is now modeled as a separate optional count on both Report and TestSuite, distinct from skipped. (disabled is intended to count tests that are disabled by design, such as googletest's DISABLED_-prefixed tests. Note, however, that quick-junit doesn't have a notion of disabled tests at the moment.)

Other changes

• Report is now #[non_exhaustive], consistent with TestSuite and TestCase. Construct it via Report::new and then assign fields, so that future field additions are non-breaking.
• Childless <testsuite> and <testcase> elements are now serialized as self-closing tags (for example, <testcase name="my-test"/> rather than <testcase name="my-test"></testcase>). The output is semantically identical XML, only more compact and idiomatic. The deserializer already accepted these self-closing forms, so serializing them means round-trip tests now cover those parse paths.

Commits

• 670fdd1 [quick-junit] version 0.7.0
• d23b7ca make Report non-exhaustive (#607)
• 1034a9d aggregate counts should be skipped, not disabled (#606)
• 822674a serialize childless testsuite and testcase elements as self-closing tags (#605)
• b3634bf Update taiki-e/install-action digest (#604)
• ba3c00b Update taiki-e/install-action digest (#603)
• cfedf0c Update taiki-e/install-action digest (#601)
• 9faa11c Update taiki-e/install-action digest (#600)
• c73b0c2 Update taiki-e/install-action digest (#599)
• 57610a2 Update Rust crate xxhash-rust to 0.8.16 (#598)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
next	Ready	Preview, Comment	Jul 27, 2026 2:31pm
react	Ready	Preview, Comment	Jul 27, 2026 2:31pm

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.