chore(deps): bump the rust-dependencies group across 1 directory with 20 updates by dependabot[bot] · Pull Request #153 · ArchAstro/aster

dependabot · 2026-10-16T18:21:00Z

Bumps the rust-dependencies group with 20 updates in the / directory:

Package	From	To
clap	`4.6.5`	`4.6.7`
ignore	`0.4.31`	`0.4.33`
serde_json	`1.0.151`	`1.0.154`
toml	`1.1.4+spec-1.1.0`	`1.1.8+spec-1.1.0`
console	`0.16.4`	`0.16.6`
sha2	`0.11.0`	`0.11.1`
zstd	`0.13.3`	`0.14.2`
libc	`0.2.189`	`0.2.190`
crossbeam-channel	`0.5.16`	`0.5.17`
http-body-util	`0.1.4`	`0.1.5`
hyper	`1.11.0`	`1.12.0`
hyper-util	`0.1.20`	`0.1.21`
tokio	`1.53.1`	`1.53.2`
tokio-rustls	`0.26.4`	`0.26.6`
tree-sitter-language	`0.1.7`	`0.1.9`
base64	`0.22.1`	`0.23.1`
dirs	`6.0.0`	`7.0.0`
rcgen	`0.14.9`	`0.14.10`
jsonwebtoken	`9.3.1`	`11.1.0`
aws-lc-rs	`1.18.0`	`1.18.2`

Updates clap from 4.6.5 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates ignore from 0.4.31 to 0.4.33

Commits

3fce3b5 ignore-0.4.33
5055264 globset-0.4.20
020687a ignore,globset: increase pool capacity
5ed408e ignore-0.4.32
435f59f ignore: skip loading unreachable ignore files
f9c05a9 index: remove incorrect README
8372866 index: add some initial indexing scaffolding
d99ac34 core: add index module
2ed0c00 flags: disable many flags when indexing is enabled
See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates toml from 1.1.4+spec-1.1.0 to 1.1.8+spec-1.1.0

Commits

ceac6e4 chore: Release
0fe9e93 docs: Update changelog
e3a64aa fix(display): Ensure all keys are encoded (#1245)
76484d0 fix(display): Ensure all keys are encoded
711b1ba refactor(display): Clarify that we are working with encoded keys
4f73ebd test(display): Reproduce the key bug
6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
4d45944 perf(parser): Remove no-op code (#1243)
189c91c perf(parser): Remove no-op code
Additional commits viewable in compare view

Updates console from 0.16.4 to 0.16.6

Release notes

Sourced from console's releases.

0.16.6

What's Changed

Fix truncate_str panicking mid-character without ansi-parsing by @lenamonj in console-rs/console#296

perf: accelerate printable ASCII text width by @dexhunter in console-rs/console#297

fix: measure the truncation tail in visible columns, not raw width by @youdie006 in console-rs/console#298

Prepare 0.16.6 by @djc in console-rs/console#299

0.16.5

What's Changed

Strip OSC and DCS sequences to support e.g. OSC 8 hyperlinks over tmux. by @khoek in console-rs/console#280

Commits

4329b77 Bump version to 0.16.6
bdf46b0 utils: wrap tests in module
4f54213 fix: measure the truncation tail in visible columns
ed342d0 test: consolidate text width regression coverage
48b99e9 perf: accelerate printable ASCII text width
abf0358 Fix truncate_str panicking mid-character without ansi-parsing
ac3cb73 Bump version to 0.16.5
97a91ae ansi: strip OSC and DCS sequences
See full diff in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates zstd from 0.13.3 to 0.14.2

Commits

1e52c7e Release zstd 0.14.2
42fc51f Add reader-preserving fallible decoder constructors
78170db Add Decoder::into_inner for reader recovery without additional input
9167d35 Release zstd 0.14.1, zstd-safe 8.1.0, and zstd-sys 2.1.1
b59becf Propagate C API deprecations through Rust bindings and wrappers
d8a325a Simplify Rust allocator constructors and test support
594e743 Delegate panicking dictionary constructors to fallible variants
779d39a Add fallible constructors for prepared dictionaries
fc5d2b7 Merge pull request #379 from gyscos/fix/pr-378-rust-allocator
18028cd Count actual newline bytes in dictionary training samples
Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.190

Release notes

Sourced from libc's releases.

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

Docs: Add more links to public headers and manual pages (#5407), (#5485)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

... (truncated)

Commits

7b0ab55 ci: Rename publish_0.2.yml to release.yaml
ac85dde ci: Sync release permissions with main
8f8cd20 libc: Release 0.2.190
052c6e6 changelog: Fix an incorrect commit link
ea19fd7 test: Remove explicit libc version
6dbf3a2 dragonfly: Move INHERIT_ZERO to the freebsd module
8a64766 apple: add posix_spawn_file_actions_add(f)chdir(_np)
28de514 linux, netbsd: Give statvfs a Default impl
a58a95f cygwin: Change POSIX_SPAWN_* flags to c_short
d175264 apple: timeval32 is exhaustive
Additional commits viewable in compare view

Updates crossbeam-channel from 0.5.16 to 0.5.17

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.17

Fix UB in bounded channel when SelectedOperation is leaked. (#1295)

Fix behavior inconsistency on already received case in at(). (#1296)

Handle overflow in bounded channel initialization. (#1301)

Use 64-bit index on 32-bit platforms if 64-bit atomic is available. (#1321)

Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)

Commits

2920c98 Prepare for the next release
808b75a ci: Update codegen job
46774e0 channel: Document that send_timeout sends an available message even if the ti...
89a3fe4 epoch: Make Shared::null const
383d74a Use *::MAX associated constants
a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
30e5963 epoch: Add missing fence emulation for tsan
708a6bd Handle overflow in bounded channel/queue initialization (#1301)
Additional commits viewable in compare view

Updates http-body-util from 0.1.4 to 0.1.5

Commits

07838bd http-body-util v0.1.5
612118c docs: migrate from doc_auto_cfg to doc_cfg (#175)
See full diff in compare view

Updates hyper from 1.11.0 to 1.12.0

Release notes

Sourced from hyper's releases.

v1.12.0

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Everything

docs: fix typo responsibile -> responsible by @vaibhav8a in hyperium/hyper#4177

style: replace single-character lifetime names with descriptive names by @dox4 in hyperium/hyper#4173

refactor(http1): resolve collapsible_match lint by @nakaryo716 in hyperium/hyper#4178

hyper Improvement Proposals by @seanmonstar in hyperium/hyper#4131

perf(body): simpler custom Incoming channel by @seanmonstar in hyperium/hyper#4168

docs(maintainers): add 0x676e67 as a collaborator by @seanmonstar in hyperium/hyper#4184

fix(ext): remove broken OriginalHeaderOrder doctest by @cratelyn in hyperium/hyper#4188

build(deps): remove unused futures-channel from http1 feature by @0x676e67 in hyperium/hyper#4185

chore(ci): update to cargo-check-external-types 0.5.0 by @tottoto in hyperium/hyper#4189

style(lib): address ignored_unit_patterns lint by @nakaryo716 in hyperium/hyper#4193

Preserve hop-by-hop when setting close or keep-alive by @dtolnay in hyperium/hyper#4196

fix(http2): do not reserve capacity for idle Upgraded streams by @Dev-next-gen in hyperium/hyper#4198

style(lib): Address clippy panics and missing_panics_doc lints by @Siech0 in hyperium/hyper#4191

docs: fix typos in capi README, MSRV and governance docs by @toyeshhm in hyperium/hyper#4204

style(lib): Address trivial, low quantity clippy lints. by @Siech0 in hyperium/hyper#4190

chore(clippy): allow clippy lints following 1.99.0 release by @dswij in hyperium/hyper#4219

style: remove useless_borrows_in_formatting from the clippy allowlist by @ump45nose in hyperium/hyper#4220

style(h1): mark partial Debug impls as non-exhaustive by @badimalex in hyperium/hyper#4218

style(lib): Address cast-possible-truncation clippy findings. by @Siech0 in hyperium/hyper#4192

feat(http1): add max_header_size limit for server and client by @Aditya-9-6 in hyperium/hyper#4183

fix(http1): let a Connection close token win over a later keep-alive by @shoemoney in hyperium/hyper#4201

fix(http1): always remove content-length if transfer-encoding is sent by @seanmonstar in hyperium/hyper#4223

fix(http1): remove invalid content-length if transfer-encoding is auto-added by @seanmonstar in hyperium/hyper#4224

fix(http1): withdraw a stale want when the client dispatcher takes a request by @shodoco in hyperium/hyper#4208

perf(body): skip waking a closed peer when a channel end drops by @0x676e67 in hyperium/hyper#4225

Prepare v1.12.0 by @seanmonstar in hyperium/hyper#4226

New Contributors

@vaibhav8a made their first contribution in hyperium/hyper#4177

@dox4 made their first contribution in hyperium/hyper#4173

@dtolnay made their first contribution in hyperium/hyper#4196

@Dev-next-gen made their first contribution in hyperium/hyper#4198

@Siech0 made their first contribution in hyperium/hyper#4191

@toyeshhm made their first contribution in hyperium/hyper#4204

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.12.0 (2026-10-06)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

v1.11.1 (2026-08-27)

Bug Fixes

http1:

detect TE: trailers caselessly and with other values (#4152) (72fcf545)

recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)

flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)

evict pooled conn on request-side Connection: close (#4110) (da19be08)

Commits

7f67699 v1.12.0
254bf12 perf(body): skip waking a closed peer when a channel end drops (#4225)
c44f1cc fix(http1): withdraw a stale want when the client dispatcher takes a request ...
69396fd fix(http1): remove content-length if transfer-encoding is auto-added (#4224)
a5d7fd7 fix(http1): always remove content-length if transfer-encoding is sent (#4223)
5dadff7 fix(http1): let a Connection close token win over a later keep-alive (#4201)
d1cd14e feat(http1): add max_header_size limit for server and client (#4183)
714c7cf style(lib): address cast-possible-truncation clippy findings (#4192)
0d47440 style(lib): mark partial Debug impls as non-exhaustive (#4218)
da3b1b1 style(lib): remove useless_borrows_in_formatting from the clippy allowlist (#...
Additional commits viewable in compare view

Updates hyper-util from 0.1.20 to 0.1.21

Release notes

Sourced from hyper-util's releases.

v0.1.21

Additions

Add crate-level documentation. (#327)

Add client::legacy::Builder::http2_header_table_size() method. (#274)

Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)

Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)

Add client::legacy::connect::HttpConnector::set_mark() method. (#303)

Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)

Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)

Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)

Fix client::pool::cache to preserve readiness with clones. (#297)

Fix client::pool::cache to wake its waiters in FIFO order. (#298)

Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)

Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)

Fix client::proxy::matcher handling for IP wildcards. (#309)

The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)

Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.21 (2026-09-24)

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

Additions

Add crate-level documentation. (#327)

Add client::legacy::Builder::http2_header_table_size() method. (#274)

Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)

Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)

Add client::legacy::connect::HttpConnector::set_mark() method. (#303)

Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)

Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)

Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)

Fix client::pool::cache to preserve readiness with clones. (#297)

Fix client::pool::cache to wake its waiters in FIFO order. (#298)

Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)

Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)

Fix client::proxy::matcher handling for IP wildcards. (#309)

The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)

Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

Commits

23a8689 v0.1.21
cdb2346 doc(client/pool): add broken_intra_doc_links allowance (#326)
13b6110 chore(error): remove disabled hyper_util::error submodule (#325)
b9ee451 docs(lib): add crate-level documentation (#327)
d6b7d7e feat(rt/tracing): introduce tracing executors (#323)
f2da915 feat(client): add HttpConnector::set_mark for SO_MARK (#303)
4dbd494 feat(rt): change TokioExecutor to not trace, add rt-tracing-exec-force feat...
d480d9f fix(client): parse proxy CONNECT response with httparse (#315)
7e0958b chore(ci): simplify msrv check (#317)
0734568 chore(ci): update to actions/checkout@v7 (#316)
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

fs: clamp io_uring read length to u32::MAX (#8572)

rt: ignore current_thread task dumps from other runtimes (#8544)

rt: preserve io_uring context if a completion waker panics (#8566)

sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)

taskdump: restore deferred leaf wakes during capture (#8445)

time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564:

… 20 updates Bumps the rust-dependencies group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.7` | | [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.31` | `0.4.33` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [toml](https://github.com/toml-rs/toml) | `1.1.4+spec-1.1.0` | `1.1.8+spec-1.1.0` | | [console](https://github.com/console-rs/console) | `0.16.4` | `0.16.6` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [zstd](https://github.com/gyscos/zstd-rs) | `0.13.3` | `0.14.2` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.190` | | [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam) | `0.5.16` | `0.5.17` | | [http-body-util](https://github.com/hyperium/http-body) | `0.1.4` | `0.1.5` | | [hyper](https://github.com/hyperium/hyper) | `1.11.0` | `1.12.0` | | [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.20` | `0.1.21` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` | | [tokio-rustls](https://github.com/rustls/tokio-rustls) | `0.26.4` | `0.26.6` | | [tree-sitter-language](https://github.com/tree-sitter/tree-sitter) | `0.1.7` | `0.1.9` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` | | dirs | `6.0.0` | `7.0.0` | | [rcgen](https://github.com/rustls/rcgen) | `0.14.9` | `0.14.10` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `9.3.1` | `11.1.0` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.0` | `1.18.2` | Updates `clap` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.7) Updates `ignore` from 0.4.31 to 0.4.33 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@ignore-0.4.31...ignore-0.4.33) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `toml` from 1.1.4+spec-1.1.0 to 1.1.8+spec-1.1.0 - [Commits](toml-rs/toml@toml-v1.1.4...toml-v1.1.8) Updates `console` from 0.16.4 to 0.16.6 - [Release notes](https://github.com/console-rs/console/releases) - [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md) - [Commits](console-rs/console@0.16.4...0.16.6) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `zstd` from 0.13.3 to 0.14.2 - [Release notes](https://github.com/gyscos/zstd-rs/releases) - [Commits](gyscos/zstd-rs@v0.13.3...v0.14.2) Updates `libc` from 0.2.189 to 0.2.190 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.190/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.190) Updates `crossbeam-channel` from 0.5.16 to 0.5.17 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-channel-0.5.16...crossbeam-channel-0.5.17) Updates `http-body-util` from 0.1.4 to 0.1.5 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@http-body-util-v0.1.4...http-body-util-v0.1.5) Updates `hyper` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.11.0...v1.12.0) Updates `hyper-util` from 0.1.20 to 0.1.21 - [Release notes](https://github.com/hyperium/hyper-util/releases) - [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper-util@v0.1.20...v0.1.21) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2) Updates `tokio-rustls` from 0.26.4 to 0.26.6 - [Release notes](https://github.com/rustls/tokio-rustls/releases) - [Commits](rustls/tokio-rustls@v/0.26.4...v/0.26.6) Updates `tree-sitter-language` from 0.1.7 to 0.1.9 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](https://github.com/tree-sitter/tree-sitter/commits) Updates `base64` from 0.22.1 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1) Updates `dirs` from 6.0.0 to 7.0.0 Updates `rcgen` from 0.14.9 to 0.14.10 - [Release notes](https://github.com/rustls/rcgen/releases) - [Commits](rustls/rcgen@v/0.14.9...v0.14.10) Updates `jsonwebtoken` from 9.3.1 to 11.1.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v9.3.1...v11.1.0) Updates `aws-lc-rs` from 1.18.0 to 1.18.2 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.18.0...v1.18.2) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: ignore dependency-version: 0.4.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: toml dependency-version: 1.1.8+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: console dependency-version: 0.16.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: zstd dependency-version: 0.14.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: libc dependency-version: 0.2.190 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: crossbeam-channel dependency-version: 0.5.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: http-body-util dependency-version: 0.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: hyper dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: hyper-util dependency-version: 0.1.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tokio-rustls dependency-version: 0.26.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tree-sitter-language dependency-version: 0.1.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: dirs dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: rcgen dependency-version: 0.14.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: jsonwebtoken dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: aws-lc-rs dependency-version: 1.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team October 16, 2026 18:21

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 16, 2026

Navigation Menu

Repository navigation

chore(deps): bump the rust-dependencies group across 1 directory with 20 updates - #153

chore(deps): bump the rust-dependencies group across 1 directory with 20 updates#153
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-68205cc185

dependabot Bot commented on behalf of github Oct 16, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 16, 2026

v4.6.7

[4.6.7] - 2026-09-14

Features

v4.6.6

[4.6.6] - 2026-08-06

Features

[4.6.7] - 2026-09-14

Features

[4.6.6] - 2026-08-06

Features

v1.0.154

v1.0.153

v1.0.152

0.16.6

What's Changed

0.16.5

What's Changed

0.2.190

Support

Added

0.2.190 - 2026-10-02

Support

Added

crossbeam-channel 0.5.17

v1.12.0

Features

Bug Fixes

Everything

New Contributors

v1.12.0 (2026-10-06)

Bug Fixes

Features

v1.11.1 (2026-08-27)

Bug Fixes

v0.1.21

Additions

Fixes

Changes

0.1.21 (2026-09-24)

Additions

Fixes

Changes

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

Fixed (unstable)

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants