chore(deps): bump the cargo-minor-patch group with 31 updates - #4085
chore(deps): bump the cargo-minor-patch group with 31 updates#4085dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the cargo-minor-patch group with 31 updates: | Package | From | To | | --- | --- | --- | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.75` | `0.10.79` | | [clap](https://github.com/clap-rs/clap) | `4.5.53` | `4.5.60` | | [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.50.0` | | [hyper](https://github.com/hyperium/hyper) | `1.8.1` | `1.9.0` | | [rdkafka-sys](https://github.com/fede1024/rust-rdkafka) | `4.9.0+2.10.0` | `4.10.0+2.12.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.19.0` | `1.23.1` | | [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.149` | | [semver](https://github.com/dtolnay/semver) | `1.0.27` | `1.0.28` | | [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.19` | `0.1.20` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.102` | | [regex](https://github.com/rust-lang/regex) | `1.12.2` | `1.12.3` | | [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.44` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.0` | `1.11.1` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.31` | `0.3.32` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.5` | `1.1.9` | | [tar](https://github.com/alexcrichton/tar-rs) | `0.4.44` | `0.4.45` | | [comfy-table](https://github.com/nukesor/comfy-table) | `7.2.1` | `7.2.2` | | [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.17` | `0.1.18` | | [serial_test](https://github.com/palfrey/serial_test) | `3.2.0` | `3.4.0` | | [tracing](https://github.com/tokio-rs/tracing) | `0.1.43` | `0.1.44` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.27.0` | | [schema-registry-client](https://github.com/rayokota/rust-schema-registry-client) | `0.4.1` | `0.4.2` | | [toon-format](https://github.com/toon-format/toon-rust) | `0.4.0` | `0.4.5` | | [open](https://github.com/Byron/open-rs) | `5.3.3` | `5.3.5` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.17` | `0.7.18` | | [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.1` | `2.2.2` | | [predicates](https://github.com/assert-rs/predicates-rs) | `3.1.3` | `3.1.4` | | [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` | | [tokio-test](https://github.com/tokio-rs/tokio) | `0.4.4` | `0.4.5` | | [mockito](https://github.com/lipanski/mockito) | `1.7.1` | `1.7.2` | Updates `openssl` from 0.10.75 to 0.10.79 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.79) Updates `clap` from 4.5.53 to 4.5.60 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.53...clap_complete-v4.5.60) Updates `tokio` from 1.48.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.50.0) Updates `hyper` from 1.8.1 to 1.9.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.8.1...v1.9.0) Updates `rdkafka-sys` from 4.9.0+2.10.0 to 4.10.0+2.12.1 - [Changelog](https://github.com/fede1024/rust-rdkafka/blob/master/changelog.md) - [Commits](https://github.com/fede1024/rust-rdkafka/commits) Updates `uuid` from 1.19.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.19.0...v1.23.1) Updates `serde_json` from 1.0.145 to 1.0.149 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.145...v1.0.149) Updates `semver` from 1.0.27 to 1.0.28 - [Release notes](https://github.com/dtolnay/semver/releases) - [Commits](dtolnay/semver@1.0.27...1.0.28) Updates `hyper-util` from 0.1.19 to 0.1.20 - [Release notes](https://github.com/hyperium/hyper-util/releases) - [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper-util@v0.1.19...v0.1.20) Updates `anyhow` from 1.0.100 to 1.0.102 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.100...1.0.102) Updates `regex` from 1.12.2 to 1.12.3 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.2...1.12.3) Updates `chrono` from 0.4.42 to 0.4.44 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.42...v0.4.44) Updates `bytes` from 1.11.0 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.0...v1.11.1) Updates `futures` from 0.3.31 to 0.3.32 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.31...0.3.32) Updates `flate2` from 1.1.5 to 1.1.9 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.5...1.1.9) Updates `tar` from 0.4.44 to 0.4.45 - [Commits](composefs/tar-rs@0.4.44...0.4.45) Updates `comfy-table` from 7.2.1 to 7.2.2 - [Release notes](https://github.com/nukesor/comfy-table/releases) - [Changelog](https://github.com/Nukesor/comfy-table/blob/main/CHANGELOG.md) - [Commits](Nukesor/comfy-table@v7.2.1...v7.2.2) Updates `tokio-stream` from 0.1.17 to 0.1.18 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-stream-0.1.17...tokio-stream-0.1.18) Updates `serial_test` from 3.2.0 to 3.4.0 - [Release notes](https://github.com/palfrey/serial_test/releases) - [Commits](palfrey/serial_test@v3.2.0...v3.4.0) Updates `tracing` from 0.1.43 to 0.1.44 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-0.1.43...tracing-0.1.44) Updates `tracing-subscriber` from 0.3.22 to 0.3.23 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23) Updates `tempfile` from 3.23.0 to 3.27.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.23.0...v3.27.0) Updates `schema-registry-client` from 0.4.1 to 0.4.2 - [Commits](https://github.com/rayokota/rust-schema-registry-client/commits) Updates `toon-format` from 0.4.0 to 0.4.5 - [Release notes](https://github.com/toon-format/toon-rust/releases) - [Changelog](https://github.com/toon-format/toon-rust/blob/main/CHANGELOG.md) - [Commits](toon-format/toon-rust@v0.4.0...v0.4.5) Updates `open` from 5.3.3 to 5.3.5 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.3.5) Updates `tokio-util` from 0.7.17 to 0.7.18 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.17...tokio-util-0.7.18) Updates `assert_cmd` from 2.1.1 to 2.2.2 - [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md) - [Commits](assert-rs/assert_cmd@v2.1.1...v2.2.2) Updates `predicates` from 3.1.3 to 3.1.4 - [Changelog](https://github.com/assert-rs/predicates-rs/blob/master/CHANGELOG.md) - [Commits](assert-rs/predicates-rs@v3.1.3...v3.1.4) Updates `url` from 2.5.7 to 2.5.8 - [Release notes](https://github.com/servo/rust-url/releases) - [Commits](servo/rust-url@v2.5.7...v2.5.8) Updates `tokio-test` from 0.4.4 to 0.4.5 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-test-0.4.4...tokio-test-0.4.5) Updates `mockito` from 1.7.1 to 1.7.2 - [Release notes](https://github.com/lipanski/mockito/releases) - [Commits](lipanski/mockito@1.7.1...1.7.2) --- updated-dependencies: - dependency-name: openssl dependency-version: 0.10.79 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: clap dependency-version: 4.5.60 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: hyper dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rdkafka-sys dependency-version: 4.10.0+2.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.149 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: semver dependency-version: 1.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: hyper-util dependency-version: 0.1.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: anyhow dependency-version: 1.0.102 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: regex dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: chrono dependency-version: 0.4.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: bytes dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: futures dependency-version: 0.3.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: flate2 dependency-version: 1.1.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tar dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: comfy-table dependency-version: 7.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio-stream dependency-version: 0.1.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serial_test dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tracing dependency-version: 0.1.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tracing-subscriber dependency-version: 0.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tempfile dependency-version: 3.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: schema-registry-client dependency-version: 0.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: toon-format dependency-version: 0.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio-util dependency-version: 0.7.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: assert_cmd dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: predicates dependency-version: 3.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: url dependency-version: 2.5.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio-test dependency-version: 0.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: mockito dependency-version: 1.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit a22e012. Configure here.
| url = "2.4" | ||
| chrono = "0.4.41" | ||
| url = "2.5" | ||
| chrono = "0.4.44" |
There was a problem hiding this comment.
Library minimum version constraints unnecessarily tightened
Low Severity
The posthog514client-rs library had its minimum dependency versions aggressively raised (tokio from "1.0" to "1.50", url from "2.4" to "2.5", chrono from "0.4.41" to "0.4.44") despite the code not requiring any APIs from these newer versions. The package lacks publish = false and has crates.io metadata, so it appears publishable. For a library, minimum versions should reflect the oldest compatible version, not the latest available.
Triggered by team rule: Pragmatic Developper
Reviewed by Cursor Bugbot for commit a22e012. Configure here.
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |


Bumps the cargo-minor-patch group with 31 updates:
0.10.750.10.794.5.534.5.601.48.01.50.01.8.11.9.04.9.0+2.10.04.10.0+2.12.11.19.01.23.11.0.1451.0.1491.0.271.0.280.1.190.1.201.0.1001.0.1021.12.21.12.30.4.420.4.441.11.01.11.10.3.310.3.321.1.51.1.90.4.440.4.457.2.17.2.20.1.170.1.183.2.03.4.00.1.430.1.440.3.220.3.233.23.03.27.00.4.10.4.20.4.00.4.55.3.35.3.50.7.170.7.182.1.12.2.23.1.33.1.42.5.72.5.80.4.40.4.51.7.11.7.2Updates
opensslfrom 0.10.75 to 0.10.79Release notes
Sourced from openssl's releases.
... (truncated)
Commits
649f2d9Release openssl 0.10.79 and openssl-sys 0.9.115 (#2632)257f9b2Fix output buffer overflow for AES key-wrap-with-padding ciphers (#2630)d43e917Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders (#2631)f46519cAdd PkeyCtxRef::set_context_string for ML-DSA (#2629)ad9ae31Bind OSSL_PARAM_modified and use it for seed_into (#2628)4e25c9bFix process abort when verify/PSK callbacks fire after SSL_CTX swap (#2624)3dd8f42Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction (#2626)2c5e5a8parallelize more builds in CI for cold caches (#2625)6685591Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import (#2621)8f8fdceDrop once_cell in favor of std::sync::{LazyLock, OnceLock} (#2623)Updates
clapfrom 4.5.53 to 4.5.60Release notes
Sourced from clap's releases.
Changelog
Sourced from clap's changelog.
Commits
33d24d8chore: Release9332409docs: Update changelogb7adce5Merge pull request #6166 from fabalchemy/fix-dynamic-powershell-completion009bba4fix(clap_complete): Improve powershell registrationd89d57dchore: Releasef18b67edocs: Update changelog9d218ebMerge pull request #6165 from epage/shirt126440cfix(help): Correctly calculate padding for short-only args9e3c05etest(help): Show panic with short, valueless argc9898d0test(help): Verify short with valueUpdates
tokiofrom 1.48.0 to 1.50.0Release notes
Sourced from tokio's releases.
... (truncated)
Commits
0273e45chore: prepare Tokio v1.50.0 (#7934)e3ee4e5chore: prepare tokio-macros v2.6.1 (#7943)8c980eaio: addwrite_all_vectoredtotokio-util(#7768)e35fd6dci: fix patch during clippy step (#7935)03fe44cruntime: fixevent_intervaldoc (#7932)d18e5dfio: fix race inMock::poll_write(#7882)f21f269runtime: fix race condition during the blocking pool shutdown (#7922)d81e8f0macros: remove (most) localusedeclarations intokio::select!(#7929)25e7f26rt: fix missing quotation in docs (#7925)e1a91efutil: fix typo in docs (#7926)Updates
hyperfrom 1.8.1 to 1.9.0Release notes
Sourced from hyper's releases.
... (truncated)
Changelog
Sourced from hyper's changelog.
Commits
0d6c7d5v1.9.0e21205cfeat(http1): add UpgradeableConnection::into_parts393c77cfeat(error): add 'Error::is_parse_version_h2' method5b17a69fix(http2): cancel sending client request body on response future drop (#4042)7211ec2fix(http1): allow keep-alive for chunked requests with trailers (#4043)d51cb71feat(client): expose HTTP/2 current max stream count (#4026)28e73ccfix(ffi): validate null pointers before dereferencing in request/response fun...e13e783docs(client): fix HTTP/2 max concurrent stream link to spec (#4037)8ba9008chore(dependencies): drop pin-utils dependency (#4023)5778745feat(client): add HTTP/2max_local_error_reset_streamsoption (#4021)Updates
rdkafka-sysfrom 4.9.0+2.10.0 to 4.10.0+2.12.1Commits
Updates
uuidfrom 1.19.0 to 1.23.1Release notes
Sourced from uuid's releases.
... (truncated)
Commits
ca0c85fMerge pull request #879 from uuid-rs/cargo/v1.23.1b4db015prepare for 1.23.1 release771069dMerge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note80994a2fix: Timestamp::from_gregorian deprecation note90c5be8Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv8b8c4f4Remove deprecated feature from wasm-bindgen dependency00ab922Merge pull request #876 from uuid-rs/cargo/v1.23.0726ba45prepare for 1.23.0 release996dadeMerge pull request #875 from uuid-rs/fix/context-orderinge140479simplify a use stmtUpdates
serde_jsonfrom 1.0.145 to 1.0.149Release notes
Sourced from serde_json's releases.
Commits
4f6dbfaRelease 1.0.149f3df680Touch up PR 1306e16730fMerge pull request #1306 from b41sh/fix-float-number-displayeeb2bcdAlignarbitrary_precisionnumber strings with zmij’s formatting8b291c4Release 1.0.1481aefe15Update to zmij 1.062d6e8dRelease 1.0.147fd829a6Merge pull request #1304 from dtolnay/zmije757a3dSwitch from ryu -> zmij for float formatting75ad7e6Release 1.0.146Updates
semverfrom 1.0.27 to 1.0.28Release notes
Sourced from semver's releases.
Commits
7625c7aRelease 1.0.28fd404d0Merge pull request 351 from czy-29/masterf75f26eThedoc_auto_cfganddoc_cfgfeatures have been merged9e2bfa2Enableserdeondocs.rsand automatically addserdeflag to the docs8591f23Unpin CI miri toolchain66bdd2cPin CI miri to nightly-2026-02-11324ffceSwitch from cargo bench to criterion34133a5Update actions/upload-artifact@v5 -> v67f935ffUpdate actions/upload-artifact@v4 -> v5c07fb91Switch from test::black_box to std::hint::black_boxUpdates
hyper-utilfrom 0.1.19 to 0.1.20Release notes
Sourced from hyper-util's releases.
Changelog
Sourced from hyper-util's changelog.
Commits
b23a13ev0.1.20ffa5391chore: use standard library api (#263)b43aeabchore: bumpsystem-configurationto 0.7 (#256)d841f5dbump MSRV to 1.64 (#258)af19656chore(client): remove unused mac imports in system proxy (#260)ad6a63dchore(ci): update to actions/checkout@v6 (#261)d5503b2docs(client): correct malformed reference link in set_interface (#254)8c4f4a0fix(matcher): improve subdomain matching case insensitivity (#252)1b3fa96fix(matcher): improve domain matching case insensitivity (#251)Updates
anyhowfrom 1.0.100 to 1.0.102Release notes
Sourced from anyhow's releases.
Commits
5c657b3Release 1.0.102e737fb6Merge pull request #442 from dtolnay/backtrace7fe62b5Further simply backtrace conditional compilationc8cb5caMerge pull request #441 from dtolnay/backtracede27df7Delete CI use of --features=backtrace9b67e5dMerge pull request #440 from dtolnay/backtraceefdb11aSimplifystd_backtraceconditional codeb8a9a70Merge pull request #439 from dtolnay/backtracea42fc2cRemovefeature = "backtrace"conditional code2a2a3ceRe-word backtrace feature commentUpdates
regexfrom 1.12.2 to 1.12.3Changelog
Sourced from regex's changelog.
Commits
b028e4f1.12.35e195deregex-automata-0.4.14a3433f6regex-syntax-0.8.90c07faeregex-lite-0.1.96a81006cargo: exclude development scripts and fuzzing data