Skip to content

chore(deps): bump the cargo-minor-patch group with 30 updates - #4099

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-b368284f66
Closed

chore(deps): bump the cargo-minor-patch group with 30 updates#4099
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-b368284f66

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 30 updates:

Package From To
openssl 0.10.75 0.10.80
clap 4.5.53 4.5.60
tokio 1.48.0 1.50.0
hyper 1.8.1 1.9.0
rdkafka-sys 4.9.0+2.10.0 4.10.0+2.12.1
uuid 1.19.0 1.23.1
serde_json 1.0.145 1.0.150
semver 1.0.27 1.0.28
hyper-util 0.1.19 0.1.20
anyhow 1.0.100 1.0.102
regex 1.12.2 1.12.3
chrono 0.4.42 0.4.44
bytes 1.11.0 1.11.1
futures 0.3.31 0.3.32
flate2 1.1.5 1.1.9
tar 0.4.44 0.4.46
comfy-table 7.2.1 7.2.2
tokio-stream 0.1.17 0.1.18
serial_test 3.2.0 3.4.0
tracing 0.1.43 0.1.44
tracing-subscriber 0.3.22 0.3.23
tempfile 3.23.0 3.27.0
schema-registry-client 0.4.1 0.4.2
open 5.3.3 5.3.5
tokio-util 0.7.17 0.7.18
assert_cmd 2.1.1 2.2.2
predicates 3.1.3 3.1.4
url 2.5.7 2.5.8
tokio-test 0.4.4 0.4.5
mockito 1.7.1 1.7.2

Updates openssl from 0.10.75 to 0.10.80

Release notes

Sourced from openssl's releases.

openssl-v0.10.80

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

openssl-v0.10.79

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

openssl-v0.10.78

What's Changed

... (truncated)

Commits
  • 35be7ae Release openssl 0.10.80 and openssl-sys 0.9.116 (#2639)
  • 19eceb2 Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-pad...
  • b460eb3 Prefer Homebrew openssl@4 and stop looking for openssl@1.1 (#2633)
  • 649f2d9 Release openssl 0.10.79 and openssl-sys 0.9.115 (#2632)
  • 257f9b2 Fix output buffer overflow for AES key-wrap-with-padding ciphers (#2630)
  • d43e917 Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders (#2631)
  • f46519c Add PkeyCtxRef::set_context_string for ML-DSA (#2629)
  • ad9ae31 Bind OSSL_PARAM_modified and use it for seed_into (#2628)
  • 4e25c9b Fix process abort when verify/PSK callbacks fire after SSL_CTX swap (#2624)
  • 3dd8f42 Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction (#2626)
  • Additional commits viewable in compare view

Updates clap from 4.5.53 to 4.5.60

Release notes

Sourced from clap's releases.

v4.5.60

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

v4.5.59

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

v4.5.54

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help
Changelog

Sourced from clap's changelog.

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help
Commits
  • 33d24d8 chore: Release
  • 9332409 docs: Update changelog
  • b7adce5 Merge pull request #6166 from fabalchemy/fix-dynamic-powershell-completion
  • 009bba4 fix(clap_complete): Improve powershell registration
  • d89d57d chore: Release
  • f18b67e docs: Update changelog
  • 9d218eb Merge pull request #6165 from epage/shirt
  • 126440c fix(help): Correctly calculate padding for short-only args
  • 9e3c05e test(help): Show panic with short, valueless arg
  • c9898d0 test(help): Verify short with value
  • Additional commits viewable in compare view

Updates tokio from 1.48.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

Fixed

  • io: always cleanup AsyncFd registration list on deregister (#7773)
  • macros: remove (most) local use declarations in tokio::select! (#7929)
  • net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
  • runtime: avoid redundant unpark in current_thread scheduler (#7834)
  • runtime: don't park in current_thread if before_park defers waker (#7835)
  • io: fix write readiness on ESP32 on short writes (#7872)
  • runtime: wake deferred tasks before entering block_in_place (#7879)
  • sync: drop rx waker when oneshot receiver is dropped (#7886)
  • runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

  • fs: check for io-uring opcode support (#7815)
  • runtime: avoid lock acquisition after uring init (#7850)

Documented

  • docs: update outdated unstable features section (#7839)
  • io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
  • io: explain how to flush stdout/stderr (#7904)
  • io: fix incorrect and confusing AsyncWrite documentation (#7875)
  • rt: clarify the documentation of Runtime::spawn (#7803)
  • rt: fix missing quotation in docs (#7925)
  • runtime: correct the default thread name in docs (#7896)
  • runtime: fix event_interval doc (#7932)
  • sync: clarify RwLock fairness documentation (#7919)
  • sync: clarify that recv returns None once closed and no more messages (#7920)
  • task: clarify when to use spawn_blocking vs dedicated threads (#7923)
  • task: doc that task drops before JoinHandle completion (#7825)
  • signal: guarantee that listeners never return None (#7869)
  • task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

Updates hyper from 1.8.1 to 1.9.0

Release notes

Sourced from hyper's releases.

v1.9.0

Features

  • client:
  • error: add 'Error::is_parse_version_h2' method (393c77c7)
  • http1: add UpgradeableConnection::into_parts (e21205cf)

Bug Fixes

  • ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
  • http1:
  • http2:
    • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
    • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Refactors and chores

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.9.0 (2026-03-31)

Bug Fixes

  • ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
  • http1:
  • http2:
    • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
    • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Features

  • client:
  • error: add 'Error::is_parse_version_h2' method (393c77c7)
  • http1: add UpgradeableConnection::into_parts (e21205cf)
Commits
  • 0d6c7d5 v1.9.0
  • e21205c feat(http1): add UpgradeableConnection::into_parts
  • 393c77c feat(error): add 'Error::is_parse_version_h2' method
  • 5b17a69 fix(http2): cancel sending client request body on response future drop (#4042)
  • 7211ec2 fix(http1): allow keep-alive for chunked requests with trailers (#4043)
  • d51cb71 feat(client): expose HTTP/2 current max stream count (#4026)
  • 28e73cc fix(ffi): validate null pointers before dereferencing in request/response fun...
  • e13e783 docs(client): fix HTTP/2 max concurrent stream link to spec (#4037)
  • 8ba9008 chore(dependencies): drop pin-utils dependency (#4023)
  • 5778745 feat(client): add HTTP/2 max_local_error_reset_streams option (#4021)
  • Additional commits viewable in compare view

Updates rdkafka-sys from 4.9.0+2.10.0 to 4.10.0+2.12.1

Commits

Updates uuid from 1.19.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

v1.23.0

What's Changed

New Contributors

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

  • Context: Renamed to ContextV1
  • Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to Version::Max

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to Uuid::get_version for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

v1.22.0

What's Changed

... (truncated)

Commits
  • ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
  • b4db015 prepare for 1.23.1 release
  • 771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
  • 80994a2 fix: Timestamp::from_gregorian deprecation note
  • 90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
  • 8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
  • 00ab922 Merge pull request #876 from uuid-rs/cargo/v1.23.0
  • 726ba45 prepare for 1.23.0 release
  • 996dade Merge pull request #875 from uuid-rs/fix/context-ordering
  • e140479 simplify a use stmt
  • Additional commits viewable in compare view

Updates serde_json from 1.0.145 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • dc8003a Raise required compiler for preserve_order feature to 1.85
  • a42fa98 Unpin CI miri toolchain
  • 684a60e Pin CI miri to nightly-2026-02-11
  • 7c7da33 Raise required compiler to Rust 1.71
  • acf4850 Simplify Number::is_f64
  • 6b8ceab Resolve unnecessary_map_or clippy lint
  • Additional commits viewable in compare view

Updates semver from 1.0.27 to 1.0.28

Release notes

Sourced from semver's releases.

1.0.28

  • Documentation improvements
Commits
  • 7625c7a Release 1.0.28
  • fd404d0 Merge pull request 351 from czy-29/master
  • f75f26e The doc_auto_cfg and doc_cfg features have been merged
  • 9e2bfa2 Enable serde on docs.rs and automatically add serde flag to the docs
  • 8591f23 Unpin CI miri toolchain
  • 66bdd2c Pin CI miri to nightly-2026-02-11
  • 324ffce Switch from cargo bench to criterion
  • 34133a5 Update actions/upload-artifact@v5 -> v6
  • 7f935ff Update actions/upload-artifact@v4 -> v5
  • c07fb91 Switch from test::black_box to std::hint::black_box
  • Additional commits viewable in compare view

Updates hyper-util from 0.1.19 to 0.1.20

Release notes

Sourced from hyper-util's releases.

v0.1.20

What's Changed

New Contributors

Full Changelog: hyperium/hyper-util@v0.1.19...v0.1.20

Changelog

Sourced from hyper-util's changelog.

0.1.20 (2026-02-02)

  • Fix proxy::Matcher to properly match domains regardless of casing
  • Fix system proxy matcher dependency on macOS when used in sandboxed environements.
  • Increased MSRV to 1.64.
Commits
  • b23a13e v0.1.20
  • ffa5391 chore: use standard library api (#263)
  • b43aeab chore: bump system-configuration to 0.7 (#256)
  • d841f5d bump MSRV to 1.64 (#258)
  • af19656 chore(client): remove unused mac imports in system proxy (#260)
  • ad6a63d chore(ci): update to actions/checkout@v6 (#261)
  • d5503b2 docs(client): correct malformed reference link in set_interface (#254)
  • 8c4f4a0 fix(matcher): improve subdomain matching case insensitivity (#252)
  • 1b3fa96 fix(matcher): improve domain matching case insensitivity (#251)
  • See full diff in compare view

Updates anyhow from 1.0.100 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

1.0.101

Commits
  • 5c657b3 Release 1.0.102
  • e737fb6 Merge pull request #442 from dtolnay/backtrace
  • 7fe62b5 Further simply backtrace conditional compilation
  • c8cb5ca Merge pull request #441 from dtolnay/backtrace
  • de27df7 Delete CI use of --features=backtrace
  • 9b67e5d Merge pull request #440 from dtolnay/backtrace
  • efdb11a Simplify std_backtrace conditional code
  • b8a9a70 Merge pull request #439 from dtolnay/backtrace
  • a42fc2c Remove feature = "backtrace" conditional code
  • 2a2a3ce Re-word backtrace feature comment
  • Additional commits viewable in compare view

Updates regex from 1.12.2 to 1.12.3

Changelog

Sourced from regex's changelog.

1.12.3 (2025-02-03)

This release excludes some unnecessary things from the archive published to crates.io. Specifically, fuzzing data and various shell scripts are now excluded. If you run into problems, please file an issue.

Improvements:

  • #1319: Switch from a Cargo exclude list to an include list, and exclude some unnecessary stuff.
Commits
  • b028e4f 1.12.3
  • 5e195de regex-automata-0.4.14
  • a3433f6 regex-syntax-0.8.9
  • 0c07fae regex-lite-0.1.9
  • 6a81006...

    Description has been truncated


    [!NOTE]
    Medium Risk
    Moderate risk due to broad dependency upgrades across networking/crypto/runtime crates (e.g., hyper, reqwest, tokio, openssl, rustls) which can change behavior at runtime and in TLS/HTTP interactions.

    Overview
    Updates Rust dependencies across the workspace, refreshing core runtime/networking/serialization crates (notably tokio, hyper/hyper-util, reqwest, openssl, uuid, serde_json, regex, tracing, and related test tooling) and regenerates Cargo.lock accordingly.

    The lockfile changes also pull in new transitive components for updated TLS/HTTP stacks (e.g., rustls verifier pieces and QUIC-related crates via reqwest) and bump rdkafka-sys/schema registry client versions used by the CLI.

    Reviewed by Cursor Bugbot for commit 0fddee2. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps the cargo-minor-patch group with 30 updates:

| Package | From | To |
| --- | --- | --- |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.75` | `0.10.80` |
| [clap](https://github.com/clap-rs/clap) | `4.5.53` | `4.5.60` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.50.0` |
| [hyper](https://github.com/hyperium/hyper) | `1.8.1` | `1.9.0` |
| [rdkafka-sys](https://github.com/fede1024/rust-rdkafka) | `4.9.0+2.10.0` | `4.10.0+2.12.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.19.0` | `1.23.1` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.150` |
| [semver](https://github.com/dtolnay/semver) | `1.0.27` | `1.0.28` |
| [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.19` | `0.1.20` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.102` |
| [regex](https://github.com/rust-lang/regex) | `1.12.2` | `1.12.3` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.44` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.0` | `1.11.1` |
| [futures](https://github.com/rust-lang/futures-rs) | `0.3.31` | `0.3.32` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.5` | `1.1.9` |
| [tar](https://github.com/composefs/tar-rs) | `0.4.44` | `0.4.46` |
| [comfy-table](https://github.com/nukesor/comfy-table) | `7.2.1` | `7.2.2` |
| [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.17` | `0.1.18` |
| [serial_test](https://github.com/palfrey/serial_test) | `3.2.0` | `3.4.0` |
| [tracing](https://github.com/tokio-rs/tracing) | `0.1.43` | `0.1.44` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.27.0` |
| [schema-registry-client](https://github.com/rayokota/rust-schema-registry-client) | `0.4.1` | `0.4.2` |
| [open](https://github.com/Byron/open-rs) | `5.3.3` | `5.3.5` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.17` | `0.7.18` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.1` | `2.2.2` |
| [predicates](https://github.com/assert-rs/predicates-rs) | `3.1.3` | `3.1.4` |
| [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` |
| [tokio-test](https://github.com/tokio-rs/tokio) | `0.4.4` | `0.4.5` |
| [mockito](https://github.com/lipanski/mockito) | `1.7.1` | `1.7.2` |


Updates `openssl` from 0.10.75 to 0.10.80
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.80)

Updates `clap` from 4.5.53 to 4.5.60
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.53...clap_complete-v4.5.60)

Updates `tokio` from 1.48.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.50.0)

Updates `hyper` from 1.8.1 to 1.9.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.8.1...v1.9.0)

Updates `rdkafka-sys` from 4.9.0+2.10.0 to 4.10.0+2.12.1
- [Changelog](https://github.com/fede1024/rust-rdkafka/blob/master/changelog.md)
- [Commits](https://github.com/fede1024/rust-rdkafka/commits)

Updates `uuid` from 1.19.0 to 1.23.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.19.0...v1.23.1)

Updates `serde_json` from 1.0.145 to 1.0.150
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.150)

Updates `semver` from 1.0.27 to 1.0.28
- [Release notes](https://github.com/dtolnay/semver/releases)
- [Commits](dtolnay/semver@1.0.27...1.0.28)

Updates `hyper-util` from 0.1.19 to 0.1.20
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.19...v0.1.20)

Updates `anyhow` from 1.0.100 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.102)

Updates `regex` from 1.12.2 to 1.12.3
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.2...1.12.3)

Updates `chrono` from 0.4.42 to 0.4.44
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.42...v0.4.44)

Updates `bytes` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.0...v1.11.1)

Updates `futures` from 0.3.31 to 0.3.32
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.31...0.3.32)

Updates `flate2` from 1.1.5 to 1.1.9
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.5...1.1.9)

Updates `tar` from 0.4.44 to 0.4.46
- [Release notes](https://github.com/composefs/tar-rs/releases)
- [Commits](composefs/tar-rs@0.4.44...0.4.46)

Updates `comfy-table` from 7.2.1 to 7.2.2
- [Release notes](https://github.com/nukesor/comfy-table/releases)
- [Changelog](https://github.com/Nukesor/comfy-table/blob/main/CHANGELOG.md)
- [Commits](Nukesor/comfy-table@v7.2.1...v7.2.2)

Updates `tokio-stream` from 0.1.17 to 0.1.18
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-stream-0.1.17...tokio-stream-0.1.18)

Updates `serial_test` from 3.2.0 to 3.4.0
- [Release notes](https://github.com/palfrey/serial_test/releases)
- [Commits](palfrey/serial_test@v3.2.0...v3.4.0)

Updates `tracing` from 0.1.43 to 0.1.44
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-0.1.43...tracing-0.1.44)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `tempfile` from 3.23.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.23.0...v3.27.0)

Updates `schema-registry-client` from 0.4.1 to 0.4.2
- [Commits](https://github.com/rayokota/rust-schema-registry-client/commits)

Updates `open` from 5.3.3 to 5.3.5
- [Release notes](https://github.com/Byron/open-rs/releases)
- [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md)
- [Commits](Byron/open-rs@v5.3.3...v5.3.5)

Updates `tokio-util` from 0.7.17 to 0.7.18
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.17...tokio-util-0.7.18)

Updates `assert_cmd` from 2.1.1 to 2.2.2
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.1.1...v2.2.2)

Updates `predicates` from 3.1.3 to 3.1.4
- [Changelog](https://github.com/assert-rs/predicates-rs/blob/master/CHANGELOG.md)
- [Commits](assert-rs/predicates-rs@v3.1.3...v3.1.4)

Updates `url` from 2.5.7 to 2.5.8
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](servo/rust-url@v2.5.7...v2.5.8)

Updates `tokio-test` from 0.4.4 to 0.4.5
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-test-0.4.4...tokio-test-0.4.5)

Updates `mockito` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/lipanski/mockito/releases)
- [Commits](lipanski/mockito@1.7.1...1.7.2)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.80
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: clap
  dependency-version: 4.5.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: hyper
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: rdkafka-sys
  dependency-version: 4.10.0+2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: semver
  dependency-version: 1.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: hyper-util
  dependency-version: 0.1.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: regex
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: chrono
  dependency-version: 0.4.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: bytes
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: futures
  dependency-version: 0.3.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: flate2
  dependency-version: 1.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tar
  dependency-version: 0.4.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: comfy-table
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio-stream
  dependency-version: 0.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: serial_test
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: tracing
  dependency-version: 0.1.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: schema-registry-client
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: open
  dependency-version: 5.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio-util
  dependency-version: 0.7.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: assert_cmd
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: predicates
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: url
  dependency-version: 2.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio-test
  dependency-version: 0.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: mockito
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 23, 2026
@vercel

vercel Bot commented May 23, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs-v2 Ready Ready Preview, Comment May 23, 2026 3:03am

Request Review

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 0fddee2. Configure here.

serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
tokio = { version = "1.0", features = ["full"] }
tokio = { version = "1.50", features = ["full"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overly restrictive tokio minimum version in library crate

Medium Severity

The tokio version constraint in posthog514client-rs was changed from "1.0" to "1.50", requiring tokio >= 1.50.0. This crate is a publishable library (no publish = false) and only uses tokio for #[tokio::test] attributes — it has no runtime dependency on any tokio 1.50-specific API. This unnecessarily restricts downstream consumers from using any tokio version between 1.0 and 1.49, breaking semver best practices for library crates.

Fix in Cursor Fix in Web

Triggered by team rule: Pragmatic Developper

Reviewed by Cursor Bugbot for commit 0fddee2. Configure here.

Comment thread Cargo.lock
"hyper 1.8.1",
"hyper-rustls",
"hyper-tls 0.6.0",
"hyper 1.9.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

reqwest 0.12 lost TLS for OpenTelemetry transitive usage

Medium Severity

reqwest 0.12.24 lost its native-tls, hyper-tls, tokio-native-tls, and other TLS dependencies. It's still used by opentelemetry-http 0.26.0 and opentelemetry-otlp 0.26.0. Previously, jsonschema and schema-registry-client also used reqwest 0.12 with TLS features enabled, and Cargo's feature unification provided TLS to OpenTelemetry. Now those crates moved to reqwest 0.13, so TLS features are no longer activated for reqwest 0.12, potentially breaking HTTPS-based OTLP telemetry export.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 0fddee2. Configure here.

@dependabot @github

dependabot Bot commented on behalf of github May 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 30, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-minor-patch-b368284f66 branch May 30, 2026 03:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants