[dependabot]

Bumps the rust-dependencies group with 6 updates in the / directory:

Package	From	To
tokio	1.53.1	1.54.1
rustls	0.23.45	0.23.46
sha2	0.11.0	0.11.1
serde_json	1.0.151	1.0.154
tokio-util	0.7.19	0.7.20
webpki-roots	1.0.9	1.0.11

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

• time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

• fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
• net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
• runtime: add Builder::max_io_events_per_busy_tick (#8410)
• runtime: stabilize tokio::runtime::worker_index() (#8431)
• sync: add SemaphorePermit::semaphore() (#8482)
• sync: add blocking_acquire methods to Semaphore (#8269)
• sync: add watch::Receiver::is_closed (#8481)
• wasm: support JSPI for Emscripten target (#8285, #8627)
• wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

• fs: reject zero in File::set_max_buf_size (#8449)
• io: make copy_buf cooperative (#8459)
• io: panic when BufReader or BufStream is created with zero capacity (#8494)
• io: panic when in-memory pipe is created with zero capacity (#8397)
• io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
• io: support vectored writes in Sink (#8663)
• net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
• net: start accepted sockets as readable and writable (#8435)
• net: support UCred on Fuchsia (#8257)
• process: use mio::unix::pipe for Unix child stdio (#8603)
• runtime: cache-pad the shared injection queue and idle state (#8622)
• runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
• runtime: make enable_io available whenever rt is enabled (#8387)
• runtime: move block_in_place setup into a non-generic function (#8315)
• runtime: move the multi-thread inject queue to its own mutex (#8382)
• runtime: panic when max_io_events_per_tick is zero (#8476)
• runtime: suggest .await in nested block_on panic message (#8501)
• sync: avoid atomic reader count in broadcast slots (#8357)
• sync: use acquire/release orderings in Notify (#8325)
• time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

• b53b200 chore: prepare Tokio v1.54.1 (#8693)
• 5ed619b time: revert "remove the runtime handle from timers" (#8692)
• 66d34e4 chore: prepare Tokio v1.54.0 (#8667)
• 0d322ce io: support vectored writes in sink (#8663)
• 4167c56 codec: expose I/O sources from codec errors (#8665)
• cdd9dae fs: propagate iouring stress test failures (#8644)
• 52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
• 4890d02 stream: implement FusedStream for JoinSetStream (#8629)
• a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
• 9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
• Additional commits viewable in compare view

Updates rustls from 0.23.45 to 0.23.46

Commits

• f04804f Delay saving KX hint until handshake confirmation
• 049d39b Bump version to 0.23.46
• 6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
• 2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
• 74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
• 795eea7 Advance the HPKE sequence only after seal succeeds
• d67cb71 stream: provide backpressure while buffering received plaintext
• 7a69ade util: fuse flushes from connections with errors
• 493d089 conn: fuse writes for connections with errors
• db00e01 util: keep flushing after short writes
• Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

• 138dc5a Release sha2 v0.11.1 (#927)
• cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
• 7c59cad Update Cargo.lock (#921)
• f57b947 streebog: tweak internal implementation (#925)
• 336611f Fix cargo::manual_readme lint (#924)
• 1df8877 md2: fix clippy::needless_range_loop lint (#923)
• 6075989 sha2: fix loading of round constants on AArch64 backends (#922)
• eadfd90 Update Cargo.lock (#913)
• fa30840 blake2 v0.11.0 (#911)
• f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

• 5ec9e6b chore: prepare tokio-util v0.7.20 (#8608)
• afd1b26 docs: fix stray braces and broken links in rustdoc (#8605)
• 3eb95a4 wasm: use sleep on emscripten without JSPI (#8528)
• b22c802 wasm: link emscripten_promise_await for Emscripten 4.x compatibility (#8528)
• 16b1f9d ci: pin libc to 0.2.189 on FreeBSD (#8594)
• b263675 time: clean up stale Err(Invalid) doc and typo (#8590)
• 5d5cd8b Merge 'tokio-1.53.2' into 'master' (#8578)
• ff0c406 chore: prepare Tokio v1.53.2 (#8580)
• a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
• ec31a9f chore: prepare Tokio v1.51.5 (#8579)
• Additional commits viewable in compare view

Updates webpki-roots from 1.0.9 to 1.0.11

Release notes

Sourced from webpki-roots's releases.

1.0.11

Track CCADB removal of further eMudhra CAs: "emSign Root CA - C1" and "emSign ECC Root CA - C3": https://bugzilla.mozilla.org/show_bug.cgi?id=2083709

What's Changed

• Remove 2 more eMudhra CAs (C1 and C3) by @​kpcyrd in rustls/webpki-roots#136
• Prepare 1.0.11 by @​ctz in rustls/webpki-roots#137

New Contributors

• @​kpcyrd made their first contribution in rustls/webpki-roots#136

Full Changelog: rustls/webpki-roots@v/1.0.10...v/1.0.11

1.0.10

Changes:

• Removed "emSign ECC Root CA - G3"

What's Changed

• webpki-roots|webpki-root-certs: Prepare 1.0.10, remove emSign roots by @​cpu in rustls/webpki-roots#133

Commits

• 7ebfa0b Prepare 1.0.11
• 4c905cb Take semver-compatible updates
• f75f3cb Remove 2 more eMudhra CAs (C1 and C3)
• 7076047 webpki-roots|webpki-root-certs: 1.0.9 -> 1.0.10
• c644e3e webpki-roots|webpki-root-certs: remove emSign roots
• b7815ff ccadb: bump version to 0.2.2
• 86423a8 ccadb: replace chrono with jiff
• 3d8edab Upgrade num-bigint to 0.5
• aa88673 ccadb: add crl_hosts() API
• bb89979 ccadb: extract specific root PEM from build_client()
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Coverage Report

Filename                                          Regions    Missed Regions     Cover   Functions  Missed Functions  Executed       Lines      Missed Lines     Cover    Branches   Missed Branches     Cover
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
ans-client/src/client.rs                              504                42    91.67%          73                 5    93.15%         384                22    94.27%           0                 0         -
ans-client/src/csr.rs                                 249                10    95.98%          20                 1    95.00%         156                 1    99.36%           0                 0         -
ans-client/src/error.rs                               193                26    86.53%          20                 3    85.00%         147                11    92.52%           0                 0         -
ans-client/src/models.rs                              205                23    88.78%          27                 4    85.19%         156                17    89.10%           0                 0         -
ans-types/src/badge.rs                                186                25    86.56%          22                 3    86.36%         148                15    89.86%           0                 0         -
ans-types/src/fingerprint.rs                          304                 2    99.34%          35                 0   100.00%         180                 3    98.33%           0                 0         -
ans-types/src/scitt.rs                                325                 0   100.00%          22                 0   100.00%         212                 0   100.00%           0                 0         -
ans-types/src/types.rs                                571                 9    98.42%          73                 1    98.63%         334                 7    97.90%           0                 0         -
ans-verify/src/cache.rs                               884                27    96.95%          82                 5    93.90%         492                18    96.34%           0                 0         -
ans-verify/src/dane.rs                                917                31    96.62%          54                 0   100.00%         572                15    97.38%           0                 0         -
ans-verify/src/dns.rs                                2281               196    91.41%         225                26    88.44%        1470               159    89.18%           0                 0         -
ans-verify/src/error.rs                                66                 9    86.36%          11                 2    81.82%          64                 6    90.62%           0                 0         -
ans-verify/src/p256_verify.rs                          55                 0   100.00%           3                 0   100.00%          39                 0   100.00%           0                 0         -
ans-verify/src/pop/cache.rs                            69                18    73.91%          14                 2    85.71%          45                11    75.56%           0                 0         -
ans-verify/src/pop/caller.rs                          309                48    84.47%          31                 8    74.19%         257                41    84.05%           0                 0         -
ans-verify/src/pop/error.rs                            60                30    50.00%           8                 2    75.00%          61                27    55.74%           0                 0         -
ans-verify/src/pop/http.rs                             59                15    74.58%           4                 1    75.00%          42                11    73.81%           0                 0         -
ans-verify/src/pop/jws.rs                              93                16    82.80%           9                 2    77.78%          62                21    66.13%           0                 0         -
ans-verify/src/pop/proof.rs                           384                86    77.60%          31                11    64.52%         255                72    71.76%           0                 0         -
ans-verify/src/pop/replay.rs                          122                67    45.08%          14                 5    64.29%          93                44    52.69%           0                 0         -
ans-verify/src/pop/sign.rs                            146                47    67.81%          13                 7    46.15%         113                33    70.80%           0                 0         -
ans-verify/src/pop/verify.rs                          248                14    94.35%          15                 1    93.33%         203                25    87.68%           0                 0         -
ans-verify/src/rustls_verifier.rs                     376                67    82.18%          39                11    71.79%         260                78    70.00%           0                 0         -
ans-verify/src/scitt/client.rs                        384               145    62.24%          52                18    65.38%         250               101    59.60%           0                 0         -
ans-verify/src/scitt/cose.rs                          750                40    94.67%          35                 3    91.43%         454                31    93.17%           0                 0         -
ans-verify/src/scitt/error.rs                         229                 0   100.00%          28                 0   100.00%         181                 0   100.00%           0                 0         -
ans-verify/src/scitt/headers.rs                       299                 6    97.99%          24                 0   100.00%         153                 2    98.69%           0                 0         -
ans-verify/src/scitt/identity.rs                       42                 6    85.71%           4                 1    75.00%          38                 8    78.95%           0                 0         -
ans-verify/src/scitt/merkle.rs                        606                15    97.52%          33                 0   100.00%         302                 4    98.68%           0                 0         -
ans-verify/src/scitt/mod.rs                             5                 0   100.00%           2                 0   100.00%           4                 0   100.00%           0                 0         -
ans-verify/src/scitt/receipt.rs                      1244                39    96.86%          43                 3    93.02%         700                33    95.29%           0                 0         -
ans-verify/src/scitt/refreshable_key_store.rs         698                88    87.39%          54                12    77.78%         353                53    84.99%           0                 0         -
ans-verify/src/scitt/root_keys.rs                     676                28    95.86%          33                 0   100.00%         321                14    95.64%           0                 0         -
ans-verify/src/scitt/scitt_cache.rs                   501                24    95.21%          54                 4    92.59%         285                17    94.04%           0                 0         -
ans-verify/src/scitt/status_token.rs                 1341                78    94.18%          59                10    83.05%         892                55    93.83%           0                 0         -
ans-verify/src/scitt/supplier.rs                      871                80    90.82%          55                 5    90.91%         538                65    87.92%           0                 0         -
ans-verify/src/scitt/verification_cache.rs           1252                18    98.56%         103                 2    98.06%         773                10    98.71%           0                 0         -
ans-verify/src/tlog.rs                                612                25    95.92%          66                 5    92.42%         415                13    96.87%           0                 0         -
ans-verify/src/verify.rs                             5952               460    92.27%         349                39    88.83%        4011               345    91.40%           0                 0         -
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
TOTAL                                               24068              1860    92.27%        1839               202    89.02%       15415              1388    91.00%           0                 0         -

Threshold: 90% line coverage | Full LCOV report