chore(deps): bump the rust-minor-and-patch group across 1 directory with 8 updates by dependabot[bot] · Pull Request #76 · programming-pupil/aos

dependabot · 2026-09-27T06:16:09Z

Bumps the rust-minor-and-patch group with 8 updates in the /rust directory:

Package	From	To
uuid	`1.24.1`	`1.26.1`
jsonwebtoken	`11.0.0`	`11.1.0`
thiserror	`2.0.20`	`2.0.21`
mongodb	`3.8.0`	`3.9.1`
clickhouse	`0.15.1`	`0.15.2`
flate2	`1.1.9`	`1.1.10`
clap	`4.6.6`	`4.6.7`
rustls	`0.23.43`	`0.23.45`

Updates uuid from 1.24.1 to 1.26.1

Release notes

Sourced from uuid's releases.

v1.26.1

What's Changed

Seat the v7 counter below the version nibble by @lenamonj in uuid-rs/uuid#907

Don't panic in overflowing Timestamp to SystemTime conversion by @KodrAus in uuid-rs/uuid#909

Prepare for 1.26.1 release by @KodrAus in uuid-rs/uuid#910

New Contributors

@lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Add ContextV7::with_additional_precision_bits by @ChrisJr404 in uuid-rs/uuid#904

Prepare for 1.26.0 release by @KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

Add a serde::bytes module that encodes a Uuid as a byte string by @ChrisJr404 in uuid-rs/uuid#902

Prepare for 1.25.0 release by @KodrAus in uuid-rs/uuid#903

New Contributors

@ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

Commits

9f92712 Merge pull request #910 from uuid-rs/cargo/v1.26.1
d4df8f0 prepare for 1.26.1 release
5613f23 Merge pull request #909 from uuid-rs/fix/ts-conversion-overflow
fda00eb don't panic in overflowing Timestamp to SystemTime conversion
c82e88c Merge pull request #907 from lenamonj/v7-counter-placement
ac065a6 Align the counter diagram
34ec102 Seat the v7 counter below the version nibble
cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
34e4f49 don't test macros under miri
d9e7242 update nightly used for miri
Additional commits viewable in compare view

Updates jsonwebtoken from 11.0.0 to 11.1.0

Changelog

Sourced from jsonwebtoken's changelog.

11.1.0 (2026-09-16)

Add dangerous::insecure_decode_claims

Commits

4c0ae75 Ready for release
46690b5 Add insecure_decode_claims (#539)
See full diff in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
See full diff in compare view

Updates mongodb from 3.8.0 to 3.9.1

Release notes

Sourced from mongodb's releases.

v3.9.1

The MongoDB Rust driver team is pleased to announce the v3.9.1 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-88024. Upgrading is recommended for all users.

This release fixes a bug that would allow certain inputs to delete all files in a GridFS bucket.

Full Release Notes

Bugfixes

RUST-2469 Use exact match for file ID in GridFS methods

v3.9.0

The MongoDB Rust driver team is pleased to announce the v3.9.0 release of the mongodb crate, now available for download from crates.io.

This release adds support for the new baseBackoffMS server error field. The driver now uses the value for baseBackoffMS reported by the server in its retry backoff calculations. This new feature is part of MongoDB's Intelligent Workload Management (IWM) and is available on MongoDB Atlas server versions 9.0+.

Full Release Notes

New Features

RUST-2409 CSFLE/QE Support for HTTP Proxies (#1756)

RUST-2412 Send afterClusterTime on writes in causally-consistent sessions (#1742)

RUST-2446 Use baseBackoffMS in retry backoff calculations (#1749)

RUST-2133 Allow custom aws credential provider (#1781)

Improvements

RUST-1820 Use raw documents and smart truncation for tracing and otel (#1757)

RUST-2396 Report timeout errors for convenient transactions (#1759)

RUST-2411 Remove support for MongoDB 4.2 (#1770)

Bugfixes

RUST-2492 Check for inherited unacknowledged write concerns (#1787)

v3.8.2

The MongoDB Rust driver team is pleased to announce the v3.8.2 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-81526. Upgrading is recommended for all users.

This release fixes a bug that would allow Client::bulk_write to write to a different database than the one specified in a write model's namespace.

Full Release Notes

Bugfixes

... (truncated)

Commits

16bc932 release v3.9.1 (#1792)
e72eafb RUST-2443 Update version numbers for 3.9.0 (#1789)
4406554 RUST-2133 Allow custom aws credential provider (#1781)
fe6a8cd RUST-2492 Check for inherited unacknowledged write concerns (#1787)
01cdcf0 RUST-1740 Break up rest of evergreen config (#1786)
7b6e67c RUST-2491 Fix libmongocrypt unversioned install and failing tests (#1785)
af37d75 Bump the rust-dependencies group across 1 directory with 21 updates (#1784)
74eb7bb RUST-2411 Remove support for MongoDB 4.2 (#1770)
9a0639e minor: pin rustfmt to a specific nightly release (#1783)
57d51e9 RUST-2467 Validate database and collection name arguments against "." and NUL...
Additional commits viewable in compare view

Updates clickhouse from 0.15.1 to 0.15.2

Changelog

Sourced from clickhouse's changelog.

[0.15.2] - 2026-08-24

Added

Added support for BFloat16 (#417)

Added serde::uuid_vec for serializing/deserializing Vec<uuid::Uuid> to/from Array(UUID) (#424)

Implemented Debug for Client (#430)

Implemented support for selects and data-returning queries using FORMAT Native (#441)

Implemented Query::fetch_native() returning NativeCursor which yields Blocks.

Block holds data in columnar format and can be indexed by column name or by ordinal.

Column::iter() returns an iterator that decodes the column data.

All primitive types, Nullable, Array, Tuple, Map and LowCardinality are supported and can be decoded into their appropriate Rust types.

Zero-copy decoding to &str, borrowing from the parent Block, is supported.

Implemented support for inserts using FORMAT Native (#451)

Added Client::insert_native() for inserting Blocks

Added BlockBuilder API for filling out and validating Blocks

Client::with_url() now recognizes the database query parameter of the URL. (#456)

Added Client::database() to read back the configured default database.

Added Client::query_raw(), which sends the SQL to the server verbatim, without parsing client-side bind parameters. (#461)

In this mode, ? is not treated as a placeholder; ?? is not unescaped; ?fields is not substituted.

Server-side parameters via Query::param() still work.

Fixed

Removed error rejecting Decimal(P, S) types where S = 0 (#449)

Fixed decoding of LEB128 in rowbinary module to accept a tenth byte (#457)

Fixed parsing of JSON path names quoted with backticks (#458)

Fixed handling of enum type names containing escapes (#466)

Replaced polonius-the-crab dependency with equivalent code (release PR #465)

#417: ClickHouse/clickhouse-rs#417 #424: ClickHouse/clickhouse-rs#424 #430: ClickHouse/clickhouse-rs#430 #441: ClickHouse/clickhouse-rs#441 #449: ClickHouse/clickhouse-rs#449 #451: ClickHouse/clickhouse-rs#451 #456: ClickHouse/clickhouse-rs#456 #457: ClickHouse/clickhouse-rs#457 #458: ClickHouse/clickhouse-rs#458 #461: ClickHouse/clickhouse-rs#461 #465: ClickHouse/clickhouse-rs#465 #466: ClickHouse/clickhouse-rs#466

Commits

fcb8b02 release 0.15.2 (#465)
b82fad9 fix(types): decode escaped enum names (#466)
966f729 fix(types): decode full u64 LEB128 range (#457)
ef1efc1 fix(types): parse back-quoted JSON path names (#458)
b508875 feat: implement native format inserts over HTTP (#451)
26400aa Create raw_query to avoid query sustitutions on client side (#461)
544c35c database can now be read from the URL. Added new method to read from it (#456)
57c4e93 Docs: own and sync ClickHouse documentation (#447)
ceeac46 fix(native): decode fixed-width tuples structurally (#452)
326102e fix(types): accept Decimal types with zero scale (#449)
Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates rustls from 0.23.43 to 0.23.45

Commits

2976d90 Prepare 0.23.45
f9d4ee9 Handshake "alignment" check covers previously-received messages
c4e92e8 Keep data needed for HRR processing together
e553a7a server: TLS1.2 is not available after a HRR
5dff9da Test whether server negotiates TLS1.2 after HRR
185a063 reject a second ClientHello that changes the cipher suite
9fafe6d reject a second ClientHello that drops pre_shared_key
1b42c5f providers: zeroize private key DER
64ad386 Bump version to 0.23.44
1efbf66 bogo: remove PostQuantum setup
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 8 updates Bumps the rust-minor-and-patch group with 8 updates in the /rust directory: | Package | From | To | | --- | --- | --- | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.1` | `1.26.1` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `11.0.0` | `11.1.0` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` | | [mongodb](https://github.com/mongodb/mongo-rust-driver) | `3.8.0` | `3.9.1` | | [clickhouse](https://github.com/ClickHouse/clickhouse-rs) | `0.15.1` | `0.15.2` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` | | [rustls](https://github.com/rustls/rustls) | `0.23.43` | `0.23.45` | Updates `uuid` from 1.24.1 to 1.26.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.1...v1.26.1) Updates `jsonwebtoken` from 11.0.0 to 11.1.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v11.0.0...v11.1.0) Updates `thiserror` from 2.0.20 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.20...2.0.21) Updates `mongodb` from 3.8.0 to 3.9.1 - [Release notes](https://github.com/mongodb/mongo-rust-driver/releases) - [Commits](mongodb/mongo-rust-driver@v3.8.0...v3.9.1) Updates `clickhouse` from 0.15.1 to 0.15.2 - [Changelog](https://github.com/ClickHouse/clickhouse-rs/blob/main/CHANGELOG.md) - [Commits](ClickHouse/clickhouse-rs@v0.15.1...v0.15.2) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `clap` from 4.6.6 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7) Updates `rustls` from 0.23.43 to 0.23.45 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.43...v/0.23.45) --- updated-dependencies: - dependency-name: uuid dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-and-patch - dependency-name: jsonwebtoken dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-and-patch - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-and-patch - dependency-name: mongodb dependency-version: 3.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-and-patch - dependency-name: clickhouse dependency-version: 0.15.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-and-patch - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-and-patch - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-and-patch - dependency-name: rustls dependency-version: 0.23.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-04T06:15:01Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 27, 2026

dependabot Bot closed this Oct 4, 2026

dependabot Bot deleted the dependabot/cargo/rust/rust-minor-and-patch-982b895a17 branch October 4, 2026 06:15

Navigation Menu

Repository navigation

chore(deps): bump the rust-minor-and-patch group across 1 directory with 8 updates - #76

chore(deps): bump the rust-minor-and-patch group across 1 directory with 8 updates#76
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust/rust-minor-and-patch-982b895a17

dependabot Bot commented on behalf of github Sep 27, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.26.1

What's Changed

New Contributors

v1.26.0

What's Changed

1.25.0

What's Changed

New Contributors

11.1.0 (2026-09-16)

2.0.21

v3.9.1

Full Release Notes

Bugfixes

v3.9.0

Full Release Notes

New Features

Improvements

Bugfixes

v3.8.2

Full Release Notes

Bugfixes

[0.15.2] - 2026-08-24

Added

Fixed

1.1.10

What's Changed

New Contributors

v4.6.7

[4.6.7] - 2026-09-14

Features

[4.6.7] - 2026-09-14

Features

Uh oh!

dependabot Bot commented on behalf of github Oct 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 27, 2026 •

edited

Loading