What the developer wrote
Authored by dependabot[bot]
Bump rayon from 1.10.0 to 1.11.0 (#1215)
Bumps [rayon](https://github.com/rayon-rs/rayon) from 1.10.0 to 1.11.0.
- [Changelog](https://github.com/rayon-rs/rayon/blob/main/RELEASES.md)
- [Commits](https://github.com/rayon-rs/rayon/compare/rayon-core-v1.10.0...rayon-core-v1.11.0)
---
updated-dependencies:
- dependency-name: rayon
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
What changed, and why it matters
This is a routine automated dependency update by Dependabot, bumping the Rust 'rayon' library from version 1.10.0 to 1.11.0. The change only updates version numbers and checksums in the project's package manifest files. There is no indication of a security fix or vulnerability in the commit itself.
No security action required. Treat as normal dependency maintenance. Review the upstream rayon 1.11.0 release notes separately if desired, but this commit provides no security-relevant information.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the direct dependency ‘rayon’ from 1.10.0 to 1.11.0 and its transitive dependency ‘rayon-core’ from 1.12.1 to 1.13.0. The Cargo.lock format version also changed from 3 to 4. No source code changes are present. The commit message is a standard Dependabot version bump with no security context provided.
Changed components
Cargo.tomlCargo.lockrayon dependencyInspect captured patch +6 / −6
diff --git a/Cargo.lock b/Cargo.lock
index bb812e1..6952ad8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1,6 +1,6 @@
# This file is automatically @generated by Cargo.
# It is not intended for manual editing.
-version = 3
+version = 4
[[package]]
name = "aho-corasick"
@@ -844,9 +844,9 @@ dependencies = [
[[package]]
name = "rayon"
-version = "1.10.0"
+version = "1.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b418a60154510ca1a002a752ca9714984e21e4241e804d32555251faf8b78ffa"
+checksum = "368f01d005bf8fd9b1206fb6fa653e6c4a81ceb1466406b81792d87c5677a58f"
dependencies = [
"either",
"rayon-core",
@@ -854,9 +854,9 @@ dependencies = [
[[package]]
name = "rayon-core"
-version = "1.12.1"
+version = "1.13.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1465873a3dfdaa8ae7cb14b4383657caab0b3e8a0aa9ae8e04b044854c8dfce2"
+checksum = "22e18b0f0062d30d4230b2e85ff77fdfe4326feb054b9783a3460d8435c8ab91"
dependencies = [
"crossbeam-deque",
"crossbeam-utils",
diff --git a/Cargo.toml b/Cargo.toml
index d7ca5b1..7d62362 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -33,7 +33,7 @@ env_logger = "0.10"
log = "0.4"
parking_lot = "0.12"
prometheus = { version = "0.13", optional = true }
-rayon = "1.9"
+rayon = "1.11"
serde = "1.0"
serde_derive = "1.0, <=1.0.171" # avoid precompiled binaries (https://github.com/serde-rs/serde/issues/2538)
serde_json = "1.0"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.