chore(deps): bump the cargo-minor-and-patch group across 1 directory with 19 updates

[dependabot]

Bumps the cargo-minor-and-patch group with 19 updates in the / directory:

Package	From	To
tokio	1.52.3	1.53.1
tokio-util	0.7.18	0.7.19
tokio-stream	0.1.18	0.1.19
crossbeam-channel	0.5.15	0.5.16
anyhow	1.0.103	1.0.104
thiserror	2.0.18	2.0.19
bytemuck	1.25.0	1.25.2
clap	4.6.1	4.6.5
serde	1.0.228	1.0.229
bytes	1.12.0	1.12.1
serde_json	1.0.150	1.0.151
async-trait	0.1.89	0.1.91
c-kzg	2.1.7	2.1.8
lru	0.18.0	0.18.2
either	1.16.0	1.17.0
uuid	1.23.4	1.24.0
aws-nitro-enclaves-nsm-api	0.5.1	0.5.2
sp1-sdk	6.1.0	6.2.3
sp1-build	6.2.3	6.3.1

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

• signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

• time: fix alt timer cancellation and insertion race (#8252)

Documented

• runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

• fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
• metrics: add task schedule latency metric (#7986)
• net: add SocketAddr methods to Unix sockets (#8144)

Changed

• io: add #[inline] to IO trait impls for in-memory types (#8242)
• net: implement UCred::pid on FreeBSD (#8086)
• net: support Nuttx target os (#8259)
• signal: refactor global variables on Windows (#8231)
• sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
• taskdump: support taskdumps on s390x (#8192)
• time: add #[track_caller] to timeout_at() (#8077)
• time: consolidate mutex locks on spurious poll (#8124)
• time: defer waker clone on spurious poll (#8107)
• time: move lazy-registration state into Sleep (#8132)
• tracing: remove unnecessary span clone (#8126)

Fixed

• io: do not treat zero-length reads as EOF in Chain (#8251)
• net: use getpeereid for QNX peer credentials (#8270)
• runtime: avoid illegal state in FastRand (#8078)
• sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
• taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
• time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• be689a3 chore: prepare Tokio v1.53.0 (#8294)
• 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
• f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
• efdba5f chore: prepare Tokio v1.52.4 (#8289)
• b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
• Additional commits viewable in compare view

Updates tokio-util from 0.7.18 to 0.7.19

Commits

• f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
• 52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
• ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• be689a3 chore: prepare Tokio v1.53.0 (#8294)
• 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
• Additional commits viewable in compare view

Updates tokio-stream from 0.1.18 to 0.1.19

Commits

• bc0933c chore: prepare tokio-stream v0.1.19 (#8310)
• e3786d0 readme: remove obsolete TokioConf notices (#8311)
• f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
• 52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
• ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• Additional commits viewable in compare view

Updates crossbeam-channel from 0.5.15 to 0.5.16

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.16

• Improve support for rust-analyzer auto-completion of code inside select!/select_biased! macro. (#1240)
• Make never const. (#1250)

Commits

• 9b56303 Prepare for the next release
• a078b17 ci: Sync config with main
• 508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
• 6a20e57 tests: Fix mismatched_lifetime_syntaxes
• c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
• bd6563e Update no_atomic.rs
• d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
• c0c466e channel: Use non-poison Mutex
• 8b3940f Add missing word to docs (#1208)
• df6eec0 docs: Link select_biased! from select! macro (#1202)
• Additional commits viewable in compare view

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

• Update to syn 3

Commits

• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
• c50e387 chore: improve thiserror maintenance path
• d4a2507 Raise minimum tested compiler to rust 1.85
• 99e8a6c Unpin CI miri toolchain
• 9ac165c Pin CI miri to nightly-2026-02-11
• Additional commits viewable in compare view

Updates bytemuck from 1.25.0 to 1.25.2

Changelog

Sourced from bytemuck's changelog.

1.25.2

• implement NoUninit for char, bool, NonZero* arrays

1.25.1

• Don't impl core::error::Error on spirv, which was causing a build error on that target.
• Added a reminder on try_cast_slice that empty slices must still be aligned.

1.25

• Remove extern "stdcall" fn ptr impls on non-x86-32 windows.
• Fix nightly_portable_simd after LaneCount removal.

1.24

• use new stable avx512 types from rust 1.89
• impl AnyBitPattern for [MaybeUninit<T: AnyBitPattern>; N]
• bump derive minimum version.

1.23.2

• bump derive minimum version.

1.23.1

• Added a windows-only ZeroableInOption impl for "stdcall" functions.

1.23

• impl_core_error crate feature adds core::error::Error impl.
• More ZeroableInOption impls.

1.22

• Add the pod_saturating feature, which adds Pod impls for Saturating<T> when T is already Pod.
• A bump in the minimum bytemuck_derive dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient cargo.lock file sitting around.
• Adds Send and Sync impls to BoxBytes.

1.21

• Implement Pod and Zeroable for core::arch::{x86, x86_64}::__m512, __m512d and __m512i without nightly. Requires Rust 1.72, and is gated through the avx512_simd cargo feature.
• Allow the use of must_cast_mut and must_cast_slice_mut in const contexts. Requires Rust 1.83, and is gated through the must_cast_extra cargo feature.
• internal: introduced the maybe_const_fn macro that allows defining some function to be const depending upon some cfg predicate.

... (truncated)

Commits

• f363643 chore: Release bytemuck version 1.25.2
• 3de980b changelog
• 1d05bec implement NoUninit for char,bool,NoZero* array (#350)
• cabc8e7 chore: Release bytemuck version 1.25.1
• 2d4d8ca changelog
• 946e7a9 chore: Release bytemuck_derive version 1.11.0
• 8a8f7cf changelog derive
• ee6742e changelog
• e2d1c7f Don't impl core::error::Error on spirv (#348)
• 7dd7174 make the note more terse
• Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.5

Release notes

Sourced from clap's releases.

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• c8c9355 chore: Release
• af74def docs: Update changelog
• c96f222 Merge pull request #6368 from truffle-dev/fix/fish-env-escaping
• 49a05cd fix(complete): Two-pass quote fish env-completer
• e791004 test(complete): Snapshot fish env quoting cases
• 87ec1ad chore: Release
• 78f2529 docs: Update changelog
• b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
• 74c6666 fix(complete): Keep zsh candidate order
• d142d8f Merge pull request #6360 from epage/string
• Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates bytes from 1.12.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Commits

• 76c0fbb Release bytes v1.12.1 (#838)
• 924c82b Handle unwinding from Box::new (#837)
• See full diff in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates async-trait from 0.1.89 to 0.1.91

Release notes

Sourced from async-trait's releases.

0.1.91

• Update to syn 3 (#299)
• Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits

• d049ee0 Release 0.1.91
• 7a0961f Merge pull request #301 from dtolnay/mutability
• 740f86f Ignore mut_mut pedantic clippy lint in test
• 4699cd3 Fix mutability for by-reference receivers
• 6dd3573 Add regression test for issue 300
• 2371797 Release 0.1.90
• d03f075 Merge pull request #299 from dtolnay/syn3
• 6cf42c1 Update to syn 3
• b9daaba Ignore match_same_arms pedantic clippy lint
• aa706d1 Update actions/upload-artifact@v6 -> v7
• Additional commits viewable in compare view

Updates c-kzg from 2.1.7 to 2.1.8

Updates lru from 0.18.0 to 0.18.2

Changelog

Sourced from lru's changelog.

v0.18.2 - 2026-08-03

• Fix panic-safety unsoundness in pop method.

v0.18.1 - 2026-07-09

• Add find_and_promote method.

Commits

• 2544aae Merge pull request #239 from jeromefroe/jerome/prepare-0-18-2-release
• 7fc46b1 Prepare 0.18.2 release
• f9a7f00 Merge pull request #238 from tooson9010-spec/fix/pop-panic-safety
• 2776ded Fix panic-safety unsoundness in LruCache::pop (UAF when key Drop panics)
• c6620d1 Merge pull request #237 from jeromefroe/jerome/prepare-0-18-1-release
• da3c0fc Prepare 0.18.1 release
• 1166263 Merge pull request #236 from pixmaip/find-and-promote
• 2daba12 Apply suggestions from code review
• 2ea00dc feat: add find_and_promote API
• See full diff in compare view

Updates either from 1.16.0 to 1.17.0

Changelog

Sourced from either's changelog.

• 1.17.0 - 2026-07-24
  • Add implementations for all std::fmt traits, by @​msrd0 (#141)

Commits

• e514cb1 Merge pull request #141 from msrd0/hex
• bc7c1f3 Release 1.17.0
• 9acb4b9 ci: downgrade serde manually
• c4ffc53 Add test for fmt::Pointer
• ba48d31 Implement all the fmt traits using a macro
• a8f48ea Add implementations for UpperHex and LowerHex
• 331cda7 Merge pull request #139 from atouchet/bdg
• 08dc1fb Fix build status badge
• See full diff in compare view

Updates uuid from 1.23.4 to 1.24.0

Release notes

Sourced from uuid's releases.

v1.24.0

What's Changed

• feat(fmt): support encoding into MaybeUninit buffers by @​weifanglab in uuid-rs/uuid#892
• Prepare for 1.24.0 release by @​KodrAus in uuid-rs/uuid#896

New Contributors

• @​weifanglab made their first contribution in uuid-rs/uuid#892

Full Changelog: uuid-rs/uuid@v1.23.5...v1.24.0

v1.23.5

What's Changed

• doc: Fix broken link by @​frostyplanet in uuid-rs/uuid#891
• perf: Optimize UUID hex parsing and formatting by @​geeknoid in uuid-rs/uuid#894
• Prepare for 1.23.5 release by @​KodrAus in uuid-rs/uuid#895

New Contributors

• @​geeknoid made their first contribution in uuid-rs/uuid#894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

Commits

• 6a8aeab Merge pull request #896 from uuid-rs/cargo/v1.24.0
• e6db8ec prepare for 1.24.0 release
• 606f236 Merge pull request #892 from weifanglab/main
• ab848db feat(fmt): support encoding into MaybeUninit buffers
• 5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
• 5a7dfe5 prepare for 1.23.5 release
• 9b4bfc8 Merge pull request #894 from geeknoid/main
• 5acc5a5 perf: Optimize UUID hex parsing and formatting
• 6fa1a1e feat(fmt): support encoding into MaybeUninit buffers
• 1e5d867 Merge pull request #891 from frostyplanet/doc
• Additional commits viewable in compare view

Updates aws-nitro-enclaves-nsm-api from 0.5.1 to 0.5.2

Release notes

Sourced from aws-nitro-enclaves-nsm-api's releases.

v0.5.2

What's Changed

• build.rs: Set soname when building by @​tylerfanelli in aws/aws-nitro-enclaves-nsm-api#69

Full Changelog: aws/aws-nitro-enclaves-nsm-api@v0.5.1...v0.5.2

Changelog

Sourced from aws-nitro-enclaves-nsm-api's changelog.

0.5.2

• Set soname while building nsm-lib

Commits

• 1993eeb Update to 0.5.2
• 25b032e build.rs: Set soname when building
• See full diff in compare view

Updates sp1-sdk from 6.1.0 to 6.2.3

Release notes

Sourced from sp1-sdk's releases.

v6.2.3

What's Changed

New Features

• executor: derive Serialize/Deserialize for ExecutionReport by @​fakedev9999 in succinctlabs/sp1#2825
• cli: Add support for Succinct Rust 1.94 toolchain by @​bergkvist in succinctlabs/sp1#2824

Full Changelog: succinctlabs/sp1@v6.2.2...v6.2.3

v6.2.2

What's Changed

New Features

• sdk: add hosted mode to NetworkProver by @​tamirhemo in succinctlabs/sp1#2812

Bug Fixes

• sdk: treat gRPC Cancelled as transient when polling proof status by @​Farhad-Shabani in succinctlabs/sp1#2807
• executor: report unimp traps instead of "Unknown" by @​Farhad-Shabani in succinctlabs/sp1#2809

Performance

• sdk: reuse a single gRPC channel instead of reconnecting every poll by @​Farhad-Shabani in succinctlabs/sp1#2808

Chores

• Bump p3 to v0.4.3-succinct, and sp1/slop to v6.2.2 by @​bergkvist in succinctlabs/sp1#2813

Full Changelog: succinctlabs/sp1@v6.2.1...v6.2.2

v6.2.1

What's Changed

New Features

• Add stdin_private field to controller/executor task inputs by @​bergkvist in succinctlabs/sp1#2789

Bug Fixes

• sdk: populate public value digest when calculate_gas is false by @​fakedev9999 in succinctlabs/sp1#2783
• Parse empty proof_nonce as None instead of Artifact("") by @​bergkvist in succinctlabs/sp1#2792

Performance

• gpu: increase grid size for grind kernel launches as number of bits grows by @​erabinov in succinctlabs/sp1#2775
• gpu: more efficient interpolation for zerocheck evaluation points by @​erabinov in succinctlabs/sp1#2787
• gpu: more efficient column evaluation claims at the end of GKR by @​erabinov in succinctlabs/sp1#2754
• shrink global memory event tracking via per-chunk bitmap union by @​tamirhemo in succinctlabs/sp1#2793

Chores

• deps: drop zkhash, inline BN254 Poseidon2 constants by @​tamirhemo in succinctlabs/sp1#2788
• Bump sp1 version to v6.2.1 by @​bergkvist in succinctlabs/sp1#2794

Full Changelog: succinctlabs/sp1@v6.2.0...v6.2.1

v6.2.0

... (truncated)

Commits

• 4809e79 feat(cli): Add support for Succinct Rust 1.94 toolchain (#2824)
• 9af2656 feat(executor): derive Serialize/Deserialize for ExecutionReport (#2825)
• 150e629 chore: Bump p3 to v0.4.3-succinct, and sp1/slop to v6.2.2 (#2813)
• 487bb76 feat(sdk): add hosted mode to NetworkProver (#2812)
• 59637a6 fix(executor): report unimp traps instead of "Unknown" (#2809)
• a1b6874 perf(sdk): reuse a single gRPC channel instead of reconnecting every poll (#2...
• c276455 fix(sdk): treat gRPC Cancelled as transient when polling proof status (#2807)
• 29bce2f fix(sdk): treat gRPC Cancelled as transient when polling proof status
• 98a376e perf: shrink global memory event tracking via per-chunk bitmap union (#2793)
• 166eb9b chore: Bump sp1 version to v6.2.1 (#2794)
• Additional commits viewable in compare view

Updates sp1-build from 6.2.3 to 6.3.1

Release notes

Sourced from sp1-build's releases.

v6.3.1

What's Changed

New Features

• prover-types: expose cluster component build info by @​fakedev9999 in succinctlabs/sp1#2850

Refactoring

• proto: drop ClusterComponentInfo.instance_id by @​fakedev9999 in succinctlabs/sp1#2855

Chores

• bump SP1 version to v6.3.1 by @​fakedev9999 in succinctlabs/sp1#2854

Full Changelog: succinctlabs/sp1@v6.3.0...v6.3.1

v6.3.0

What's Changed

New Features

• sdk: default PGU pricing to buffered market-based rates by @​Farhad-Shabani in succinctlabs/sp1#2831
• gpu: DAG-native zerocheck prover by @​tamirhemo in succinctlabs/sp1#2795
• zkevm: SP1 platform for ZKEVM guests (eth-act zkvm-standards) by @​tamirhemo in succinctlabs/sp1#2763
• Update sp1/slop versions to v6.3.0 by @​bergkvist in succinctlabs/sp1#2849

Bug Fixes

• executor: make chunk-threshold gas test robust to per-chunk rounding by @​tamirhemo in succinctlabs/sp1#2845
• prover: recompute gkr trace settings by @​tamirhemo in succinctlabs/sp1#2853
• prover: make shard and reduce tasks idempotent under re-delivery by @​Farhad-Shabani in succinctlabs/sp1#2848

Performance

• gpu: JaggedMle.column_heights device-resident, on-device fold metadata by @​tamirhemo in succinctlabs/sp1#2816

Refactoring

• sdk: rename max_price_buffer_pct to max_price_per_pgu_buffer by @​Farhad-Shabani in succinctlabs/sp1#2846

Full Changelog: succinctlabs/sp1@v6.2.4...v6.3.0

v6.2.4

What's Changed

New Features

• gpu-server: add experimental and mprotect feature flags by @​tamirhemo in succinctlabs/sp1#2832
• Bump version to v6.2.4 by @​bergkvist in succinctlabs/sp1#2841

Bug Fixes

• gpu-server: forward experimental to sp1-gpu-prover by @​tamirhemo in succinctlabs/sp1#2833
• zkvm: rename memcpy.s jump-table label to avoid LTO symbol collision by @​tamirhemo in succinctlabs/sp1#2835
• sdk: retry gRPC poll_ready "not ready" errors on reused channel by @​Farhad-Shabani in succinctlabs/sp1#2838
• prover: release per-proof task bookkeeping and artifacts in SP1LocalNode by @​tamirhemo in succinctlabs/sp1#2837
• executor: decouple gas-estimation chunk cadence from memory chunk threshold by @​tamirhemo in succinctlabs/sp1#2836
• runner: don't panic when the executor child dies during input-send by @​Farhad-Shabani in succinctlabs/sp1#2834

... (truncated)

Commits

• 8252c29 chore: bump SP1 version to v6.3.1 (#2854)
• 0ec8c4a refactor(proto): drop ClusterComponentInfo.instance_id (#2855)
• 9069dd6 feat(prover-types): expose cluster component build info (#2850)
• ca8700e feat: Update sp1/slop versions to v6.3.0 (#2849)
• e5e2706 fix(prover): make shard and reduce tasks idempotent under re-delivery (#2848)
• 1c8e2fc fix(prover): recompute gkr trace settings (#2853)
• fa9c8cb feat(zkevm): SP1 platform for ZKEVM guests (eth-act zkvm-standards) (#2763)
• c604834 refactor(sdk): rename max_price_buffer_pct to max_price_per_pgu_buffer (#2846)
• 08d1f49 fix(executor): make chunk-threshold gas test robust to per-chunk rounding (#2...
• e3274ad perf(gpu): JaggedMle.column_heights device-resident, on-device fold metadata ...
• Additional commits viewable in compare view

---

Note

Medium Risk
Wide transitive updates touch async I/O and TLS site-wide; the sp1-sdk jump and lockfile graph change warrant extra CI on proof/prover paths even though no app logic changed.

Overview
Refreshes Cargo.lock for a Dependabot minor/patch group (tokio 1.53.x, serde/serde_json, clap, thiserror 2.0.19, c-kzg, lru, and others) and collapses duplicate HTTP/TLS entries so dependents resolve a single h2 / hyper / rustls graph instead of parallel 0.3/0.14 and 0.21/0.23 stacks.

Succinct proving pins move in the proof tree: sp1-sdk 6.1.0 → 6.2.3 (prover-sp1, succinct host utils, elfs) and sp1-build 6.3.1 for ELF builds. Several proc-macro crates in the lockfile now pull syn 3.0.3 (e.g. thiserror-impl, clap_derive, serde_derive, async-trait).

No application Rust sources change—only lockfile resolution and the three proof Cargo.toml SP1 version lines.

^{Reviewed by Cursor Bugbot for commit 348d8c1. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		License policy violation: cargo crossbeam-channel under CC-BY-3.0 License: CC-BY-3.0 - The applicable license policy does not permit this license (5) (crossbeam-channel-0.5.16/LICENSE-THIRD-PARTY) From: Cargo.lock → cargo/crossbeam-channel@0.5.16 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/crossbeam-channel@0.5.16. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: cargo tokio is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: Cargo.lock → cargo/tokio@1.53.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/tokio@1.53.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[github-actions]

Benchmark Results

Base and PR measured on the same runner in the same workflow run.

Benchmark	Base	PR	Change
flashblock_validation_launch_flashblock_sequence_eth_transfers/stream/4fb_x_125tx	28.8±0.16ms	28.6±0.36ms	🟢 -0.99%
flashblock_validation_launch_flashblock_sequence_eth_transfers/stream/4fb_x_250tx	56.9±0.30ms	56.5±0.31ms	🟢 -0.99%
flashblock_validation_launch_flashblock_sequence_eth_transfers/stream/4fb_x_50tx	11.9±0.07ms	11.8±0.02ms	🟢 -0.99%
flashblock_validation_launch_flashblock_sequence_eth_transfers_with_bal/stream/4fb_x_125tx	35.1±0.26ms	35.7±0.60ms	🟡 +2.00%
flashblock_validation_launch_flashblock_sequence_eth_transfers_with_bal/stream/4fb_x_250tx	74.7±0.47ms	75.0±0.36ms	🟢 +0.00%
flashblock_validation_launch_flashblock_sequence_eth_transfers_with_bal/stream/4fb_x_50tx	14.9±0.11ms	14.7±0.14ms	🟢 -0.99%
flashblock_validation_launch_flashblock_sequence_fib/stream/4fb_x_125tx	27.1±0.09ms	26.9±0.03ms	🟢 -0.99%
flashblock_validation_launch_flashblock_sequence_fib/stream/4fb_x_250tx	53.4±0.18ms	53.1±0.18ms	🟢 -0.99%
flashblock_validation_launch_flashblock_sequence_fib/stream/4fb_x_50tx	11.5±0.20ms	11.2±0.04ms	🟢 -2.91%
flashblock_validation_launch_flashblock_sequence_fib_with_bal/stream/4fb_x_125tx	29.2±0.24ms	29.1±0.24ms	🟢 +0.00%
flashblock_validation_launch_flashblock_sequence_fib_with_bal/stream/4fb_x_250tx	55.3±0.43ms	55.4±0.18ms	🟢 +0.00%
flashblock_validation_launch_flashblock_sequence_fib_with_bal/stream/4fb_x_50tx	13.7±0.24ms	13.8±0.19ms	🟡 +1.00%
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254/stream/4fb_x_10tx	136.5±0.29ms	136.3±0.45ms	🟢 +0.00%
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254/stream/4fb_x_12tx	163.6±0.65ms	162.8±0.39ms	🟢 +0.00%
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254/stream/4fb_x_5tx	68.8±0.17ms	68.5±0.19ms	🟢 +0.00%
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254_with_bal/stream/4fb_x_10tx	24.1±1.58ms	23.7±1.31ms	🟢 -1.96%
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254_with_bal/stream/4fb_x_12tx	26.4±0.88ms	26.2±1.46ms	🟢 -0.99%
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254_with_bal/stream/4fb_x_5tx	18.2±0.58ms	19.5±1.09ms	🟡 +7.00%
flashblock_validation_process_flashblock_eth_transfers/txs/1000	49.6±0.20ms	49.9±0.81ms	🟡 +1.00%
flashblock_validation_process_flashblock_eth_transfers/txs/50	2.7±0.03ms	2.7±0.02ms	🟢 +0.00%
flashblock_validation_process_flashblock_eth_transfers/txs/500	25.0±0.33ms	25.0±0.14ms	🟢 +0.00%
flashblock_validation_process_flashblock_eth_transfers_with_bal/txs/1000	51.0±0.49ms	50.9±0.25ms	🟢 +0.00%
flashblock_validation_process_flashblock_eth_transfers_with_bal/txs/50	3.4±0.07ms	3.3±0.04ms	🟢 -1.96%
flashblock_validation_process_flashblock_eth_transfers_with_bal/txs/500	26.0±0.22ms	26.1±0.85ms	🟢 +0.00%
flashblock_validation_process_flashblock_fib/txs/1000	48.9±0.16ms	48.4±0.14ms	🟢 -0.99%
flashblock_validation_process_flashblock_fib/txs/50	2.6±0.01ms	2.7±0.02ms	🟡 +1.00%
flashblock_validation_process_flashblock_fib/txs/500	24.6±0.10ms	24.3±0.06ms	🟢 -0.99%
flashblock_validation_process_flashblock_fib_with_bal/txs/1000	49.4±0.26ms	48.9±0.14ms	🟢 -0.99%
flashblock_validation_process_flashblock_fib_with_bal/txs/50	3.3±0.06ms	3.3±0.04ms	🟢 +0.00%
flashblock_validation_process_flashblock_fib_with_bal/txs/500	25.2±0.11ms	25.0±0.13ms	🟢 -0.99%
flashblock_validation_process_flashblock_world_id_like_bn254/txs/10	34.3±0.20ms	34.0±0.08ms	🟢 -0.99%
flashblock_validation_process_flashblock_world_id_like_bn254/txs/25	85.3±0.28ms	84.4±0.09ms	🟢 -0.99%
flashblock_validation_process_flashblock_world_id_like_bn254/txs/50	170.1±0.48ms	168.6±0.36ms	🟢 -0.99%
flashblock_validation_process_flashblock_world_id_like_bn254_with_bal/txs/10	6.0±0.36ms	5.9±0.39ms	🟢 -1.96%
flashblock_validation_process_flashblock_world_id_like_bn254_with_bal/txs/25	7.8±0.08ms	7.8±0.09ms	🟢 +0.00%
flashblock_validation_process_flashblock_world_id_like_bn254_with_bal/txs/50	14.3±0.18ms	14.3±0.15ms	🟢 +0.00%

🔴 regression > 10%  ·  🟡 slower  ·  🟢 faster. A regression > 10% fails the check.

Raw critcmp output

group                                                                                              base                                   pr
-----                                                                                              ----                                   --
flashblock_validation_launch_flashblock_sequence_eth_transfers/stream/4fb_x_125tx                  1.01     28.8±0.16ms        ? ?/sec    1.00     28.6±0.36ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_eth_transfers/stream/4fb_x_250tx                  1.01     56.9±0.30ms        ? ?/sec    1.00     56.5±0.31ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_eth_transfers/stream/4fb_x_50tx                   1.01     11.9±0.07ms        ? ?/sec    1.00     11.8±0.02ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_eth_transfers_with_bal/stream/4fb_x_125tx         1.00     35.1±0.26ms        ? ?/sec    1.02     35.7±0.60ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_eth_transfers_with_bal/stream/4fb_x_250tx         1.00     74.7±0.47ms        ? ?/sec    1.00     75.0±0.36ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_eth_transfers_with_bal/stream/4fb_x_50tx          1.01     14.9±0.11ms        ? ?/sec    1.00     14.7±0.14ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_fib/stream/4fb_x_125tx                            1.01     27.1±0.09ms        ? ?/sec    1.00     26.9±0.03ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_fib/stream/4fb_x_250tx                            1.01     53.4±0.18ms        ? ?/sec    1.00     53.1±0.18ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_fib/stream/4fb_x_50tx                             1.03     11.5±0.20ms        ? ?/sec    1.00     11.2±0.04ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_fib_with_bal/stream/4fb_x_125tx                   1.00     29.2±0.24ms        ? ?/sec    1.00     29.1±0.24ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_fib_with_bal/stream/4fb_x_250tx                   1.00     55.3±0.43ms        ? ?/sec    1.00     55.4±0.18ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_fib_with_bal/stream/4fb_x_50tx                    1.00     13.7±0.24ms        ? ?/sec    1.01     13.8±0.19ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254/stream/4fb_x_10tx             1.00    136.5±0.29ms        ? ?/sec    1.00    136.3±0.45ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254/stream/4fb_x_12tx             1.00    163.6±0.65ms        ? ?/sec    1.00    162.8±0.39ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254/stream/4fb_x_5tx              1.00     68.8±0.17ms        ? ?/sec    1.00     68.5±0.19ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254_with_bal/stream/4fb_x_10tx    1.02     24.1±1.58ms        ? ?/sec    1.00     23.7±1.31ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254_with_bal/stream/4fb_x_12tx    1.01     26.4±0.88ms        ? ?/sec    1.00     26.2±1.46ms        ? ?/sec
flashblock_validation_launch_flashblock_sequence_world_id_like_bn254_with_bal/stream/4fb_x_5tx     1.00     18.2±0.58ms        ? ?/sec    1.07     19.5±1.09ms        ? ?/sec
flashblock_validation_process_flashblock_eth_transfers/txs/1000                                    1.00     49.6±0.20ms        ? ?/sec    1.01     49.9±0.81ms        ? ?/sec
flashblock_validation_process_flashblock_eth_transfers/txs/50                                      1.00      2.7±0.03ms        ? ?/sec    1.00      2.7±0.02ms        ? ?/sec
flashblock_validation_process_flashblock_eth_transfers/txs/500                                     1.00     25.0±0.33ms        ? ?/sec    1.00     25.0±0.14ms        ? ?/sec
flashblock_validation_process_flashblock_eth_transfers_with_bal/txs/1000                           1.00     51.0±0.49ms        ? ?/sec    1.00     50.9±0.25ms        ? ?/sec
flashblock_validation_process_flashblock_eth_transfers_with_bal/txs/50                             1.02      3.4±0.07ms        ? ?/sec    1.00      3.3±0.04ms        ? ?/sec
flashblock_validation_process_flashblock_eth_transfers_with_bal/txs/500                            1.00     26.0±0.22ms        ? ?/sec    1.00     26.1±0.85ms        ? ?/sec
flashblock_validation_process_flashblock_fib/txs/1000                                              1.01     48.9±0.16ms        ? ?/sec    1.00     48.4±0.14ms        ? ?/sec
flashblock_validation_process_flashblock_fib/txs/50                                                1.00      2.6±0.01ms        ? ?/sec    1.01      2.7±0.02ms        ? ?/sec
flashblock_validation_process_flashblock_fib/txs/500                                               1.01     24.6±0.10ms        ? ?/sec    1.00     24.3±0.06ms        ? ?/sec
flashblock_validation_process_flashblock_fib_with_bal/txs/1000                                     1.01     49.4±0.26ms        ? ?/sec    1.00     48.9±0.14ms        ? ?/sec
flashblock_validation_process_flashblock_fib_with_bal/txs/50                                       1.00      3.3±0.06ms        ? ?/sec    1.00      3.3±0.04ms        ? ?/sec
flashblock_validation_process_flashblock_fib_with_bal/txs/500                                      1.01     25.2±0.11ms        ? ?/sec    1.00     25.0±0.13ms        ? ?/sec
flashblock_validation_process_flashblock_world_id_like_bn254/txs/10                                1.01     34.3±0.20ms        ? ?/sec    1.00     34.0±0.08ms        ? ?/sec
flashblock_validation_process_flashblock_world_id_like_bn254/txs/25                                1.01     85.3±0.28ms        ? ?/sec    1.00     84.4±0.09ms        ? ?/sec
flashblock_validation_process_flashblock_world_id_like_bn254/txs/50                                1.01    170.1±0.48ms        ? ?/sec    1.00    168.6±0.36ms        ? ?/sec
flashblock_validation_process_flashblock_world_id_like_bn254_with_bal/txs/10                       1.02      6.0±0.36ms        ? ?/sec    1.00      5.9±0.39ms        ? ?/sec
flashblock_validation_process_flashblock_world_id_like_bn254_with_bal/txs/25                       1.00      7.8±0.08ms        ? ?/sec    1.00      7.8±0.09ms        ? ?/sec
flashblock_validation_process_flashblock_world_id_like_bn254_with_bal/txs/50                       1.00     14.3±0.18ms        ? ?/sec    1.00     14.3±0.15ms        ? ?/sec

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 348d8c1. Configure here.}

[cursor]

SP1 build/sdk version skew

High Severity

sp1-build is pinned to =6.3.1 while sp1-sdk is pinned to =6.2.3. That pulls sp1-primitives 6.3.1 into a still-6.2.3 prover stack (sp1-sdk, sp1-prover, sp1-hypercube, etc.), mixing incompatible SP1 release lines and risking broken or incompatible proofs.

Additional Locations (2)

• proofs/succinct/utils/host/Cargo.toml#L29-L30
• proofs/debug/bin/prover-sp1/Cargo.toml#L21-L22

 

^{Reviewed by Cursor Bugbot for commit 348d8c1. Configure here.}

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.