chore(deps): bump the cargo-deps group across 4 directories with 4 updates

[dependabot]

Bumps the cargo-deps group with 1 update in the /examples/cross-rust-overlay directory: openssl-sys.
Bumps the cargo-deps group with 1 update in the /examples/end-to-end-testing directory: thirtyfour.
Bumps the cargo-deps group with 1 update in the /examples/trunk directory: yew.
Bumps the cargo-deps group with 2 updates in the /examples/trunk-workspace directory: yew and gloo.

Updates openssl-sys from 0.9.113 to 0.9.114

Release notes

Sourced from openssl-sys's releases.

openssl-sys-v0.9.114

What's Changed

• Fix Suite B flag assignments in verify.rs by @​alex in rust-openssl/rust-openssl#2592
• Use cvt_p for OPENSSL_malloc error handling by @​alex in rust-openssl/rust-openssl#2593
• Mark BIO_get_mem_data on AWS-LC to be unsafe by @​alex in rust-openssl/rust-openssl#2594
• Set timeout for package installation step by @​alex in rust-openssl/rust-openssl#2595
• Panic in Crypter::new when IV is required but not provided by @​alex in rust-openssl/rust-openssl#2596
• openssl 4 support by @​reaperhulk in rust-openssl/rust-openssl#2591
• Avoid panic for overlong OIDs by @​botovq in rust-openssl/rust-openssl#2598
• Fix dangling stack pointer in custom extension add callback by @​alex in rust-openssl/rust-openssl#2599
• Add support for LibreSSL 4.3.x by @​botovq in rust-openssl/rust-openssl#2603
• fix inverted bounds assertion in AES key unwrap by @​reaperhulk in rust-openssl/rust-openssl#2604
• Reject oversized length returns from password callback trampoline by @​alex in rust-openssl/rust-openssl#2605
• Validate callback-returned lengths in PSK and cookie trampolines by @​alex in rust-openssl/rust-openssl#2607
• Error for short out in MdCtxRef::digest_final() by @​botovq in rust-openssl/rust-openssl#2608
• Check derive output buffer length on OpenSSL 1.1.x by @​alex in rust-openssl/rust-openssl#2606
• Release openssl v0.10.78 and openssl-sys v0.9.114 by @​alex in rust-openssl/rust-openssl#2609

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.113...openssl-sys-v0.9.114

Commits

• a6debf5 Release openssl v0.10.78 and openssl-sys v0.9.114 (#2609)
• 09b425e Check derive output buffer length on OpenSSL 1.1.x (#2606)
• 826c388 Error for short out in MdCtxRef::digest_final() (#2608)
• 1d10902 Validate callback-returned lengths in PSK and cookie trampolines (#2607)
• 5af6895 Reject oversized length returns from password callback trampoline (#2605)
• 718d07f fix inverted bounds assertion in AES key unwrap (#2604)
• 53cc69d Add support for LibreSSL 4.3.x (#2603)
• 0b41e79 Fix dangling stack pointer in custom extension add callback (#2599)
• cbdedf8 Avoid panic for overlong OIDs (#2598)
• 1fc51ef openssl 4 support (#2591)
• Additional commits viewable in compare view

Updates thirtyfour from 0.36.1 to 0.36.3

Release notes

Sourced from thirtyfour's releases.

v0.36.3

What's Changed

• Add WebDriverManager for auto-downloaded local drivers by @​stevepryde in stevepryde/thirtyfour#300
• Update zip requirement from 5 to 8 by @​dependabot[bot] in stevepryde/thirtyfour#302
• Add status events and driver-log subscriptions to WebDriverManager by @​stevepryde in stevepryde/thirtyfour#303
• Update fs4 from 0.13 to 1.1 by @​stevepryde in stevepryde/thirtyfour#304
• Document WebDriverManager and overhaul user-facing docs by @​stevepryde in stevepryde/thirtyfour#305

Full Changelog: stevepryde/thirtyfour@v0.36.2...v0.36.3

v0.36.2

What's Changed

• Update deps by @​bjones1 in stevepryde/thirtyfour#286
• Edition update by @​bjones1 in stevepryde/thirtyfour#297
• docs: update ChromeDriver download link by @​tharanijpt in stevepryde/thirtyfour#291

New Contributors

• @​bjones1 made their first contribution in stevepryde/thirtyfour#286
• @​tharanijpt made their first contribution in stevepryde/thirtyfour#291

Full Changelog: stevepryde/thirtyfour@v0.36.1...v0.36.2

• NOTE: Selenium Manager was briefly added but it used a path dependency which prevented publishing to crates.io. It's also a VERY heavy dependency and I don't think it pulls its weight. The fact that it isn't published on crates.io is a deal-breaker. I will be adding equivalent functionality directly into thirtyfour in a future release.

Commits

• ffd31c8 Merge pull request #305 from stevepryde/claude/condescending-goldwasser-dbe023
• e0bf777 Expand the Components chapter
• 25b1d1c Reframe queries chapter for readers new to thirtyfour
• 08dfb75 Expand queries and waiting chapters
• 136d3c3 Reframe the query interface as recommended, not advanced
• 156ba6f Drop Cypress/Playwright reference from CDP intro line
• 300146d Link to the WebDriver Manager page from related docs
• 991edcf Make managed the default flow throughout docs and examples
• 06468db Document WebDriverManager and add driver_binary() override
• 090012e Version 0.36.3
• Additional commits viewable in compare view

Updates yew from 0.21.0 to 0.23.0

Release notes

Sourced from yew's releases.

yew v0.23.0

bumping from 0.22 should require no code changes for most users.

🚨 Breaking changes

• Performance: use_reducer now skips re-rendering for the same Rc. [@​Pascal-So, #3945] NOTE: Whether this is breaking is arguable. It merely breaks the promise that a dispatch will always cause a re-render. For code that wishes to force re-render, use_force_update helps. Please refer to the migration guide for details.

⚡️ Features

• &str and String can now be used for props of type Option<Html>. [@​Casheeew, #4020]
• Added a scheduler::flush function to reliably finish rendering. Useful in testing as a replacement for timeouts. [@​Madoshakalaka, #4044]

🛠 Fixes

• No more broken child re-renders while setting parents' states. [@​Madoshakalaka, #4060]
• Ergonomics: Bare Nones are now allowed for Option<T> props in the html! macro. [@​Madoshakalaka, #4021]

⚙️ Improvements

• Yew's scheduler now yields to the main thread from time to time. This fix will make the web page more responsive and reduce warnings about long tasks in the console. [@​Madoshakalaka, #4033]

yew-v0.22.1

YANKED

Patch version bump with a couple of fixes and improvements

🛠 Fixes

• Domslot hydration panic caused by suspension [@​Madoshakalaka, #4003]
• Some Option<T> and &T types can be used as children again. e.g. Option<AttrValue> [@​Madoshakalaka, #4005]
• Custom hooks now compile in edition 2024. [@​Madoshakalaka, #3992]
• No more stale states in callbacks when multiple events fire rapidly. [@​Madoshakalaka, #3988]
• Fixed invisible svg issue on Chrome when included with from_html_unchecked [@​101100, #3970]
• Fixed documentation typo in introduction.mdx. [@​devfbe, #3417]

⚙️ Improvements

• Improved SSR example with meta rendering. [@​Madoshakalaka, #4011]
• Replaced once_cell with std equivalents (LazyLock, OnceLock). [@​Madoshakalaka, #4010]
• Updated rust dependencies.

🐛 KNOWN BUGS

• Calling UseStateHandle::set on a handle passed down from a parent does not re-render the child. yewstack/yew#4058

  To avoid this, either uprade to 0.23 or downgrade to 0.22.0

Changelog

Sourced from yew's changelog.

✨ yew 0.23.0 (2026-03-10)

bumping from 0.22 should require no code changes for most users.

🚨 Breaking changes

• Performance: use_reducer now skips re-rendering for the same Rc. [@​Pascal Sommer, #3945] NOTE: Whether this is breaking is arguable. It merely breaks the promise that a dispatch will always cause a re-render. For code that wishes to force re-render, use_force_update helps. Please refer to the migration guide for details.

⚡️ Features

• &str and String can now be used for props of type Option<Html>. [@​Cashew, #4020]
• Added a scheduler::flush function to reliably finish rendering. Useful in testing as a replacement for timeouts. [@​Siyuan Yan, #4044]

🛠 Fixes

• No more broken child re-renders while setting parents' states. [@​Siyuan Yan, #4060]
• Ergonomics: Bare Nones are now allowed for Option<T> props in the html! macro. [@​Siyuan Yan, #4021]

⚙️ Improvements

• Yew's scheduler now yields to the main thread from time to time. This fix will make the web page more responsive and reduce warnings about long tasks in the console. [@​Siyuan Yan, #4033]

✨ yew-router 0.20.0 (2026-03-10)

Yew pinned to 0.23 now.

🛠 Fixes

• '/' is no longer wrongly encoded in wildcard route segments. [@​Siyuan Yan, #4056]
• Fixed a url corruption issue causing redirection to /basename//basename resulting in a 404. [@​Siyuan Yan, #4030]

✨ yew-agent 0.5.0 (2026-03-10)

No changes.

Yew pinned to 0.23 now.

✨ yew 0.22.1 (2026-02-28)

🛠 Fixes

• Domslot hydration panic caused by suspension [@​Siyuan Yan, #4003]
• Some Option<T> and &T types can be used as children again. e.g. Option<AttrValue> [@​Siyuan Yan, #4005]
• Custom hooks now compiles in edition 2024. [@​Siyuan Yan, #3992]
• No more stale states in callbacks when multiple events fire rapidly. [@​Siyuan Yan, #3988]
• Fixed invisible svg issue on Chrome when included with from_html_unchecked [@​Jason Heard, #3970]
• Fixed documentation typo in introduction.mdx. [@​devfbe, #3417]

⚙️ Improvements

... (truncated)

Commits

• 9dea060 fix(ci): remove unsupported post-release-commit-message config (#4066)
• 4328ffe fix(ci): bump cargo-release to 1.1.1 and disable consolidated commits (#4065)
• b40bf34 docs: prepare 0.23 release (#4064)
• b396831 fix: skip packages with no tags in collect-release-info (#4063)
• 4e7e6bd fix(ci): support multi-package release bodies in the publish workflow (#4062)
• bf6c342 fix: avoid encoding '/' in wildcard route segments (#4056)
• 73a3e6f fix: populate GitHub Release body from CHANGELOG.md in publish workflow (#4061)
• 6227e5e fix: yield when 16ms has passed and no dom mutating tasks are pending (#4033)
• 84272ce fix: broken child re-renders while setting parent's states (#4060)
• e5259dc Revert "feat: replace Key internals with DefaultHasher for allocation-free co...
• Additional commits viewable in compare view

Updates yew from 0.21.0 to 0.23.0

Release notes

Sourced from yew's releases.

yew v0.23.0

bumping from 0.22 should require no code changes for most users.

🚨 Breaking changes

• Performance: use_reducer now skips re-rendering for the same Rc. [@​Pascal-So, #3945] NOTE: Whether this is breaking is arguable. It merely breaks the promise that a dispatch will always cause a re-render. For code that wishes to force re-render, use_force_update helps. Please refer to the migration guide for details.

⚡️ Features

• &str and String can now be used for props of type Option<Html>. [@​Casheeew, #4020]
• Added a scheduler::flush function to reliably finish rendering. Useful in testing as a replacement for timeouts. [@​Madoshakalaka, #4044]

🛠 Fixes

• No more broken child re-renders while setting parents' states. [@​Madoshakalaka, #4060]
• Ergonomics: Bare Nones are now allowed for Option<T> props in the html! macro. [@​Madoshakalaka, #4021]

⚙️ Improvements

• Yew's scheduler now yields to the main thread from time to time. This fix will make the web page more responsive and reduce warnings about long tasks in the console. [@​Madoshakalaka, #4033]

yew-v0.22.1

YANKED

Patch version bump with a couple of fixes and improvements

🛠 Fixes

• Domslot hydration panic caused by suspension [@​Madoshakalaka, #4003]
• Some Option<T> and &T types can be used as children again. e.g. Option<AttrValue> [@​Madoshakalaka, #4005]
• Custom hooks now compile in edition 2024. [@​Madoshakalaka, #3992]
• No more stale states in callbacks when multiple events fire rapidly. [@​Madoshakalaka, #3988]
• Fixed invisible svg issue on Chrome when included with from_html_unchecked [@​101100, #3970]
• Fixed documentation typo in introduction.mdx. [@​devfbe, #3417]

⚙️ Improvements

• Improved SSR example with meta rendering. [@​Madoshakalaka, #4011]
• Replaced once_cell with std equivalents (LazyLock, OnceLock). [@​Madoshakalaka, #4010]
• Updated rust dependencies.

🐛 KNOWN BUGS

• Calling UseStateHandle::set on a handle passed down from a parent does not re-render the child. yewstack/yew#4058

  To avoid this, either uprade to 0.23 or downgrade to 0.22.0

Changelog

Sourced from yew's changelog.

✨ yew 0.23.0 (2026-03-10)

bumping from 0.22 should require no code changes for most users.

🚨 Breaking changes

• Performance: use_reducer now skips re-rendering for the same Rc. [@​Pascal Sommer, #3945] NOTE: Whether this is breaking is arguable. It merely breaks the promise that a dispatch will always cause a re-render. For code that wishes to force re-render, use_force_update helps. Please refer to the migration guide for details.

⚡️ Features

• &str and String can now be used for props of type Option<Html>. [@​Cashew, #4020]
• Added a scheduler::flush function to reliably finish rendering. Useful in testing as a replacement for timeouts. [@​Siyuan Yan, #4044]

🛠 Fixes

• No more broken child re-renders while setting parents' states. [@​Siyuan Yan, #4060]
• Ergonomics: Bare Nones are now allowed for Option<T> props in the html! macro. [@​Siyuan Yan, #4021]

⚙️ Improvements

• Yew's scheduler now yields to the main thread from time to time. This fix will make the web page more responsive and reduce warnings about long tasks in the console. [@​Siyuan Yan, #4033]

✨ yew-router 0.20.0 (2026-03-10)

Yew pinned to 0.23 now.

🛠 Fixes

• '/' is no longer wrongly encoded in wildcard route segments. [@​Siyuan Yan, #4056]
• Fixed a url corruption issue causing redirection to /basename//basename resulting in a 404. [@​Siyuan Yan, #4030]

✨ yew-agent 0.5.0 (2026-03-10)

No changes.

Yew pinned to 0.23 now.

✨ yew 0.22.1 (2026-02-28)

🛠 Fixes

• Domslot hydration panic caused by suspension [@​Siyuan Yan, #4003]
• Some Option<T> and &T types can be used as children again. e.g. Option<AttrValue> [@​Siyuan Yan, #4005]
• Custom hooks now compiles in edition 2024. [@​Siyuan Yan, #3992]
• No more stale states in callbacks when multiple events fire rapidly. [@​Siyuan Yan, #3988]
• Fixed invisible svg issue on Chrome when included with from_html_unchecked [@​Jason Heard, #3970]
• Fixed documentation typo in introduction.mdx. [@​devfbe, #3417]

⚙️ Improvements

... (truncated)

Commits

• 9dea060 fix(ci): remove unsupported post-release-commit-message config (#4066)
• 4328ffe fix(ci): bump cargo-release to 1.1.1 and disable consolidated commits (#4065)
• b40bf34 docs: prepare 0.23 release (#4064)
• b396831 fix: skip packages with no tags in collect-release-info (#4063)
• 4e7e6bd fix(ci): support multi-package release bodies in the publish workflow (#4062)
• bf6c342 fix: avoid encoding '/' in wildcard route segments (#4056)
• 73a3e6f fix: populate GitHub Release body from CHANGELOG.md in publish workflow (#4061)
• 6227e5e fix: yield when 16ms has passed and no dom mutating tasks are pending (#4033)
• 84272ce fix: broken child re-renders while setting parent's states (#4060)
• e5259dc Revert "feat: replace Key internals with DefaultHasher for allocation-free co...
• Additional commits viewable in compare view

Updates gloo from 0.11.0 to 0.12.0

Release notes

Sourced from gloo's releases.

gloo-worker 0.6.0 / gloo-worker-macros 0.2.0

MSRV updated to 1.82

Breaking Changes

• Default worker type is now ES module (as_module: true by default). Users who relied on the classic default must now call .as_module(false) explicitly. (#421) by @​JonasAlaif
• spawn_with_loader() removed. Use .with_loader(true).spawn(path) instead. (#421) by @​JonasAlaif

Fixes

• Fix broken docs link for WorkerSpawner (#487) by @​ranile

Changelog

Sourced from gloo's changelog.

Version 0.12.0

• Bump all sub-crate versions, update MSRV to 1.82

gloo-console

Version 0.4.0

• Update MSRV to 1.82 (#505) by @​martinfrances107

Version 0.3.0

• Migrate to Edition 2021 and Apply MSRV in Cargo.toml (#360)
• Introduces the FromQuery and ToQuery traits to allow for customizing how query strings are encoded and decoded in gloo_history. (#364)

Version 0.2.3

• Release new gloo versions

Version 0.2.2

• feat(gloo-utils): Lift serde-serialization from wasm-bindgen (#242)
• fix: Break dependency cycle by not using serde-serialize (#239)

Version 0.2.1

• Fix utils crate and history docs. (#189)
• Hash-based History type & Unified Location. (#177)
• Fixes console_dbg! and console! expression output. Bold src info. (#174)

Version 0.2.0

• Add console_dbg macro (#170)

Version 0.1.0

• Add an dbg! equivalent to gloo-console (#158)
• Fix dir, dirxml macros in gloo-console (#154)
• Finishing touches

gloo-dialogs

Version 0.3.0

• Update MSRV to 1.82 (#505) by @​martinfrances107

Version 0.2.0

• Migrate to Edition 2021 and Apply MSRV in Cargo.toml (#360)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions