Skip to content

chore(deps): bump rpassword from 7.4.0 to 7.5.1#658

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rpassword-7.5.1
Open

chore(deps): bump rpassword from 7.4.0 to 7.5.1#658
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rpassword-7.5.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 29, 2026

Bumps rpassword from 7.4.0 to 7.5.1.

Release notes

Sourced from rpassword's releases.

v7.5.1

This release fixes a cross-platform compilation issue that appeared in v.7.5.0 (conradkleinespel/rpassword@60ee071).

Thanks @​aharpervc for bringing this to my attention in conradkleinespel/rpassword#126.

No other changes since v.7.5.0.

v7.5.0

This release comes with lots of stuff. It should be fully backward compatible.

New features

  • Support for masking or partially masking a password as it's being typed. Thank you, @​chipsenkbeil, for your contribution.
  • New API. The documentation has been vastly improved to support this, see https://docs.rs/rpassword/. To sum up, you can now call read_password_with_config(config) and there is a ConfigBuilder that allows you to configure how passwords should be read. This makes the library much more flexible and means new options will be added without breaking existing code.

Fixes

  • Fix for CVE-2025-64170 which affects rpassword on versions v7.4.0 and below. Thank you, @​squell and @​DevLaTron, for reporting this.
  • Better support for multibyte characters and more reliable handling of control characters and terminal escape sequences. Thank you again, @​chipsenkbeil, for your contribution.

Deprecations

  • _from_bufread functions have been deprecated. You are encouraged to migrate to _with_config functions. See UPGRADE.md as well as the documentation which has examples that you can most likely drop into your code without other changes.

Misc

  • Update of the windows-sys dependency.
  • Update Rust edition from 2018 to 2024.
  • Better cross-platform testing, through more unit tests and a CI that runs Linux, Windows and Wasm.

Feedback is very much welcome.

Commits
  • 1ecf07d bump to 7.5.1
  • 60ee071 remove errno clean up, not cross-platform
  • 2d9873e release v7.5.0
  • e67e3b4 removes commented out code
  • fdde958 remove .idea from .gitignore
  • d531c59 allow reading from any Read and writing to any Write
  • 205dfb2 differentiate Input and Output targets
  • 6aa333a make PasswordFeedback internal though ConfigBuilder
  • aadeef2 allow more flexible input/output
  • ff7be55 add support for Ctrl-W
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 29, 2026
@dependabot dependabot Bot requested a review from replydev as a code owner April 29, 2026 15:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 29, 2026
Bumps [rpassword](https://github.com/conradkleinespel/rpassword) from 7.4.0 to 7.5.1.
- [Release notes](https://github.com/conradkleinespel/rpassword/releases)
- [Commits](conradkleinespel/rpassword@v7.4.0...v7.5.1)

---
updated-dependencies:
- dependency-name: rpassword
  dependency-version: 7.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/rpassword-7.5.1 branch from ef9c9aa to cec67a1 Compare May 3, 2026 10:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants