[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aes-gcm	workspace.dependencies	minor	0.10.3 → 0.11.0
argon2 (source)	workspace.dependencies	minor	0.5.3 → 0.6.0
parking_lot	workspace.dependencies	minor	0.12 → 0.13
rusqlite	dependencies	minor	0.40 → 0.41
rusqlite	workspace.dependencies	minor	0.40 → 0.41
serde_json	dev-dependencies	pin	1 → =1.0.154
tokio (source)	dev-dependencies	pin	1 → =1.54.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

RustCrypto/AEADs (aes-gcm)

v0.11.1

Compare Source

v0.11.0

Compare Source

RustCrypto/password-hashes (argon2)

v0.6.0

Compare Source

Amanieu/parking_lot (parking_lot)

v0.13.0

Compare Source

• Signficantly improved Mutex and RwLock performance under contention by
  deferring waking up parked threads until after the lock is released. (#​545)
• Added per-acquisition state to lock_api raw locks. RawMutex::Guard
  replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard,
  and UpgradableGuard types. Unlock operations consume this state, while
  upgrade and downgrade operations return replacement state. Bump and raw
  condition-variable waits borrow and update the state. Consuming operations
  must release their acquisition on unwind; borrowing operations must restore
  ownership and valid state, or abort if restoration fails. (#​544)
• Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#​533)
• Removed the hardware-lock-elision feature. (#​533)
• Removed automatic eventual fairness. Fair unlocking remains available through
  the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#​533)
• Removed the no-op lock_api/nightly feature. (#​533)
• Removed the legacy lock_api const_new methods and the redundant
  parking_lot const_* constructor functions; the corresponding new
  methods can be called in constant contexts. (#​533)
• Replaced the recursive read methods on RwLock with a dedicated reader-biased
  RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed
  extension traits have been removed from lock_api. (#​533)
• Added Once::new_completed for constructing a Once in the completed state. (#​520)
• Added Once::{is_completed, wait, wait_force} and the corresponding
  OnceState query methods. (#​533)
• Made additional lock, timeout, parking, and spin-wait accessors usable in
  constant contexts. (#​533)
• Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#​524)
• Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to
  lock_api, and implemented parking_lot::Condvar using them. Custom raw
  condition variables may allow spurious wakeups; their notification methods
  must then return false or 0. parking_lot::Condvar still guarantees no
  spurious wakeups and exact notification counts. (#​523) (#​533)
• Corrected the Send and Sync bounds of lock guards in lock_api. (#​533)
• Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#​533)
• Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#​533)
• Clarified the safety requirements of raw lock implementations, including
  acquire/release synchronization, moving or dropping a locked raw lock,
  preserving the original lock mode on a failed upgrade, and stable thread IDs.
  Acquisitions may unwind without leaving a new acquisition held; consuming
  guard operations release their acquisition on unwind, while bump and wait
  operations must restore ownership or abort. (#​533) (#​544)
• Clarified the aliasing requirements of unsafe raw-access, force-unlock, and
  guard-construction APIs in lock_api. (#​533)
• Guard unlocked and unlocked_fair operations now abort if re-locking panics.
  Default raw-lock bump implementations also abort if re-locking panics. (#​533)
• Guard with_upgraded operations abort if raw upgrading or downgrading panics,
  preserving continuous lock ownership. (#​544)
• Parking-lot operations in parking_lot_core are now guaranteed to never
  unwind. (#​533)
• Documented that parking-lot-based synchronization primitives must not be used
  internally by global allocators. (#​533)
• Fixed unlock_upgradable_fair not forcing a fair handoff. (#​533)
• Fixed conditional Condvar waits reporting a timeout without rechecking the predicate. (#​533)
• Fixed the generic thread parker continuously busy-spinning while parked. (#​533)
• Fixed parking on WASI by using the pthread backend when the nightly atomic
  intrinsics are unavailable, including on stable threaded WASI targets. (#​538)
• Fixed timed waits on ESP-IDF using the wrong clock. (#​533)
• Made timed waits on Apple platforms independent of wall-clock changes. (#​533)
• Fixed the futex timeout ABI on 32-bit Linux targets, including time64-only
  architectures, with fallback to time32 when the kernel lacks time64 support. (#​533)
• Corrected RwLock deadlock tracking to avoid false positives and missed
  cycles, and prevented dependency feature unification from enabling tracking
  when only parking_lot_core/deadlock_detection is enabled. (#​533)
• Added Once deadlock tracking and made overlapping wait cycles report as a
  single component. (#​533)
• Fixed compilation on L4Re. (#​549)

rusqlite/rusqlite (rusqlite)

v0.41.0: 0.41.0

Compare Source

What's Changed

• Check PRAGMA is valid with the help of pragma_list #​1857
• Fix UtcDateTime #​1859
• Bump sqlite3-parser version #​1864
• Edition 2024 #​1863
• Use u64 for zeroblob #​1867
• Fix virtual table set_result #​1868
• Bump bundled SQLCipher to version 4.17.0 #​1870
• Refactor bind_parameter and set_result #​1871
• Update prettyplease requirement from 0.2.20 to 0.3.0 #​1872
• Update syn requirement from 2.0.89 to 3.0.1 #​1873
• Fix Connection::serialize #​1874 (#​1875)
• Make Statement::column_names,columns,columns_with_metadata return Iterator #​1877
• Introduce DEFAULT_NAME #​1883
• Expose sqlite3_file_control #​1881 (#​1882)
• Replace assert!(matches! with assert_matches! #​1851
• Lower MSRV to 1.88.0 #​1885
• Fix clippy warnings #​1888
• Apply and check MSRV #​1890
• Bump minimal SQLite version to 3.45.3 #​1894
• sqlite3_set_clientdata / sqlite3_get_clientdata #​977, #​1708 (#​1791)
• Fix discrepancy between backup and restore #​1893
• Don't enable SQLITE_ENABLE_MEMORY_MANAGEMENT in the bundled build #​1900
• create_aggregate_function / create_window_function are missing a Send bound #​1898
• use-after-free from safe code in trace_v2 / busy_handler / ... #​1899
• feat: add Values::get_subtype to read SQLite value subtype in vtab callbacks #​1879
• Bump bindgen version to 0.73 #​1903
• Bump sqlite-wasm-rs to 0.6.1 #​1904
• Relax sqlite-wasm-rs version #​1906
• Rerun bundled-sqlcipher build when OPENSSL_* env changes #​1910
• Bump bundled SQLite version to 3.54.0 #​1913
• Fix possible memory leak on error in deserialize_read_exact #​1909
• Move sqlite3_wal_checkpoint_v2 binding #​1667 (#​1915)
• Bump uuid version to 1.28 #​1916

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.41.0

---

Configuration

📅 Schedule: (in timezone America/Havana)

• Branch creation
  • At 05:00 PM through 11:59 PM and 12:00 AM through 06:59 AM, Monday through Friday (* 17-23,0-6 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​aes-gcm@​0.10.3 ⏵ 0.11.1
	cargo/​argon2@​0.5.3 ⏵ 0.6.0
	cargo/​rusqlite@​0.40.2 ⏵ 0.41.0

View full report

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud