chore(deps): bump the cargo-minor-patch group with 30 updates - #4099
chore(deps): bump the cargo-minor-patch group with 30 updates#4099dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the cargo-minor-patch group with 30 updates: | Package | From | To | | --- | --- | --- | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.75` | `0.10.80` | | [clap](https://github.com/clap-rs/clap) | `4.5.53` | `4.5.60` | | [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.50.0` | | [hyper](https://github.com/hyperium/hyper) | `1.8.1` | `1.9.0` | | [rdkafka-sys](https://github.com/fede1024/rust-rdkafka) | `4.9.0+2.10.0` | `4.10.0+2.12.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.19.0` | `1.23.1` | | [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.150` | | [semver](https://github.com/dtolnay/semver) | `1.0.27` | `1.0.28` | | [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.19` | `0.1.20` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.102` | | [regex](https://github.com/rust-lang/regex) | `1.12.2` | `1.12.3` | | [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.44` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.0` | `1.11.1` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.31` | `0.3.32` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.5` | `1.1.9` | | [tar](https://github.com/composefs/tar-rs) | `0.4.44` | `0.4.46` | | [comfy-table](https://github.com/nukesor/comfy-table) | `7.2.1` | `7.2.2` | | [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.17` | `0.1.18` | | [serial_test](https://github.com/palfrey/serial_test) | `3.2.0` | `3.4.0` | | [tracing](https://github.com/tokio-rs/tracing) | `0.1.43` | `0.1.44` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.27.0` | | [schema-registry-client](https://github.com/rayokota/rust-schema-registry-client) | `0.4.1` | `0.4.2` | | [open](https://github.com/Byron/open-rs) | `5.3.3` | `5.3.5` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.17` | `0.7.18` | | [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.1` | `2.2.2` | | [predicates](https://github.com/assert-rs/predicates-rs) | `3.1.3` | `3.1.4` | | [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` | | [tokio-test](https://github.com/tokio-rs/tokio) | `0.4.4` | `0.4.5` | | [mockito](https://github.com/lipanski/mockito) | `1.7.1` | `1.7.2` | Updates `openssl` from 0.10.75 to 0.10.80 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.80) Updates `clap` from 4.5.53 to 4.5.60 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.53...clap_complete-v4.5.60) Updates `tokio` from 1.48.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.50.0) Updates `hyper` from 1.8.1 to 1.9.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.8.1...v1.9.0) Updates `rdkafka-sys` from 4.9.0+2.10.0 to 4.10.0+2.12.1 - [Changelog](https://github.com/fede1024/rust-rdkafka/blob/master/changelog.md) - [Commits](https://github.com/fede1024/rust-rdkafka/commits) Updates `uuid` from 1.19.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.19.0...v1.23.1) Updates `serde_json` from 1.0.145 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.145...v1.0.150) Updates `semver` from 1.0.27 to 1.0.28 - [Release notes](https://github.com/dtolnay/semver/releases) - [Commits](dtolnay/semver@1.0.27...1.0.28) Updates `hyper-util` from 0.1.19 to 0.1.20 - [Release notes](https://github.com/hyperium/hyper-util/releases) - [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper-util@v0.1.19...v0.1.20) Updates `anyhow` from 1.0.100 to 1.0.102 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.100...1.0.102) Updates `regex` from 1.12.2 to 1.12.3 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.2...1.12.3) Updates `chrono` from 0.4.42 to 0.4.44 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.42...v0.4.44) Updates `bytes` from 1.11.0 to 1.11.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.0...v1.11.1) Updates `futures` from 0.3.31 to 0.3.32 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.31...0.3.32) Updates `flate2` from 1.1.5 to 1.1.9 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.5...1.1.9) Updates `tar` from 0.4.44 to 0.4.46 - [Release notes](https://github.com/composefs/tar-rs/releases) - [Commits](composefs/tar-rs@0.4.44...0.4.46) Updates `comfy-table` from 7.2.1 to 7.2.2 - [Release notes](https://github.com/nukesor/comfy-table/releases) - [Changelog](https://github.com/Nukesor/comfy-table/blob/main/CHANGELOG.md) - [Commits](Nukesor/comfy-table@v7.2.1...v7.2.2) Updates `tokio-stream` from 0.1.17 to 0.1.18 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-stream-0.1.17...tokio-stream-0.1.18) Updates `serial_test` from 3.2.0 to 3.4.0 - [Release notes](https://github.com/palfrey/serial_test/releases) - [Commits](palfrey/serial_test@v3.2.0...v3.4.0) Updates `tracing` from 0.1.43 to 0.1.44 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-0.1.43...tracing-0.1.44) Updates `tracing-subscriber` from 0.3.22 to 0.3.23 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23) Updates `tempfile` from 3.23.0 to 3.27.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.23.0...v3.27.0) Updates `schema-registry-client` from 0.4.1 to 0.4.2 - [Commits](https://github.com/rayokota/rust-schema-registry-client/commits) Updates `open` from 5.3.3 to 5.3.5 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.3.5) Updates `tokio-util` from 0.7.17 to 0.7.18 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.17...tokio-util-0.7.18) Updates `assert_cmd` from 2.1.1 to 2.2.2 - [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md) - [Commits](assert-rs/assert_cmd@v2.1.1...v2.2.2) Updates `predicates` from 3.1.3 to 3.1.4 - [Changelog](https://github.com/assert-rs/predicates-rs/blob/master/CHANGELOG.md) - [Commits](assert-rs/predicates-rs@v3.1.3...v3.1.4) Updates `url` from 2.5.7 to 2.5.8 - [Release notes](https://github.com/servo/rust-url/releases) - [Commits](servo/rust-url@v2.5.7...v2.5.8) Updates `tokio-test` from 0.4.4 to 0.4.5 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-test-0.4.4...tokio-test-0.4.5) Updates `mockito` from 1.7.1 to 1.7.2 - [Release notes](https://github.com/lipanski/mockito/releases) - [Commits](lipanski/mockito@1.7.1...1.7.2) --- updated-dependencies: - dependency-name: openssl dependency-version: 0.10.80 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: clap dependency-version: 4.5.60 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: hyper dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rdkafka-sys dependency-version: 4.10.0+2.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: semver dependency-version: 1.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: hyper-util dependency-version: 0.1.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: anyhow dependency-version: 1.0.102 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: regex dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: chrono dependency-version: 0.4.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: bytes dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: futures dependency-version: 0.3.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: flate2 dependency-version: 1.1.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tar dependency-version: 0.4.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: comfy-table dependency-version: 7.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio-stream dependency-version: 0.1.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serial_test dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tracing dependency-version: 0.1.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tracing-subscriber dependency-version: 0.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tempfile dependency-version: 3.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: schema-registry-client dependency-version: 0.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio-util dependency-version: 0.7.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: assert_cmd dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: predicates dependency-version: 3.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: url dependency-version: 2.5.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio-test dependency-version: 0.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: mockito dependency-version: 1.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 2 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 0fddee2. Configure here.
| serde = { version = "1.0", features = ["derive"] } | ||
| serde_json = "1.0" | ||
| tokio = { version = "1.0", features = ["full"] } | ||
| tokio = { version = "1.50", features = ["full"] } |
There was a problem hiding this comment.
Overly restrictive tokio minimum version in library crate
Medium Severity
The tokio version constraint in posthog514client-rs was changed from "1.0" to "1.50", requiring tokio >= 1.50.0. This crate is a publishable library (no publish = false) and only uses tokio for #[tokio::test] attributes — it has no runtime dependency on any tokio 1.50-specific API. This unnecessarily restricts downstream consumers from using any tokio version between 1.0 and 1.49, breaking semver best practices for library crates.
Triggered by team rule: Pragmatic Developper
Reviewed by Cursor Bugbot for commit 0fddee2. Configure here.
| "hyper 1.8.1", | ||
| "hyper-rustls", | ||
| "hyper-tls 0.6.0", | ||
| "hyper 1.9.0", |
There was a problem hiding this comment.
reqwest 0.12 lost TLS for OpenTelemetry transitive usage
Medium Severity
reqwest 0.12.24 lost its native-tls, hyper-tls, tokio-native-tls, and other TLS dependencies. It's still used by opentelemetry-http 0.26.0 and opentelemetry-otlp 0.26.0. Previously, jsonschema and schema-registry-client also used reqwest 0.12 with TLS features enabled, and Cargo's feature unification provided TLS to OpenTelemetry. Now those crates moved to reqwest 0.13, so TLS features are no longer activated for reqwest 0.12, potentially breaking HTTPS-based OTLP telemetry export.
Reviewed by Cursor Bugbot for commit 0fddee2. Configure here.
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |


Bumps the cargo-minor-patch group with 30 updates:
0.10.750.10.804.5.534.5.601.48.01.50.01.8.11.9.04.9.0+2.10.04.10.0+2.12.11.19.01.23.11.0.1451.0.1501.0.271.0.280.1.190.1.201.0.1001.0.1021.12.21.12.30.4.420.4.441.11.01.11.10.3.310.3.321.1.51.1.90.4.440.4.467.2.17.2.20.1.170.1.183.2.03.4.00.1.430.1.440.3.220.3.233.23.03.27.00.4.10.4.25.3.35.3.50.7.170.7.182.1.12.2.23.1.33.1.42.5.72.5.80.4.40.4.51.7.11.7.2Updates
opensslfrom 0.10.75 to 0.10.80Release notes
Sourced from openssl's releases.
... (truncated)
Commits
35be7aeRelease openssl 0.10.80 and openssl-sys 0.9.116 (#2639)19eceb2Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-pad...b460eb3Prefer Homebrew openssl@4 and stop looking for openssl@1.1 (#2633)649f2d9Release openssl 0.10.79 and openssl-sys 0.9.115 (#2632)257f9b2Fix output buffer overflow for AES key-wrap-with-padding ciphers (#2630)d43e917Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders (#2631)f46519cAdd PkeyCtxRef::set_context_string for ML-DSA (#2629)ad9ae31Bind OSSL_PARAM_modified and use it for seed_into (#2628)4e25c9bFix process abort when verify/PSK callbacks fire after SSL_CTX swap (#2624)3dd8f42Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction (#2626)Updates
clapfrom 4.5.53 to 4.5.60Release notes
Sourced from clap's releases.
Changelog
Sourced from clap's changelog.
Commits
33d24d8chore: Release9332409docs: Update changelogb7adce5Merge pull request #6166 from fabalchemy/fix-dynamic-powershell-completion009bba4fix(clap_complete): Improve powershell registrationd89d57dchore: Releasef18b67edocs: Update changelog9d218ebMerge pull request #6165 from epage/shirt126440cfix(help): Correctly calculate padding for short-only args9e3c05etest(help): Show panic with short, valueless argc9898d0test(help): Verify short with valueUpdates
tokiofrom 1.48.0 to 1.50.0Release notes
Sourced from tokio's releases.
... (truncated)
Commits
0273e45chore: prepare Tokio v1.50.0 (#7934)e3ee4e5chore: prepare tokio-macros v2.6.1 (#7943)8c980eaio: addwrite_all_vectoredtotokio-util(#7768)e35fd6dci: fix patch during clippy step (#7935)03fe44cruntime: fixevent_intervaldoc (#7932)d18e5dfio: fix race inMock::poll_write(#7882)f21f269runtime: fix race condition during the blocking pool shutdown (#7922)d81e8f0macros: remove (most) localusedeclarations intokio::select!(#7929)25e7f26rt: fix missing quotation in docs (#7925)e1a91efutil: fix typo in docs (#7926)Updates
hyperfrom 1.8.1 to 1.9.0Release notes
Sourced from hyper's releases.
... (truncated)
Changelog
Sourced from hyper's changelog.
Commits
0d6c7d5v1.9.0e21205cfeat(http1): add UpgradeableConnection::into_parts393c77cfeat(error): add 'Error::is_parse_version_h2' method5b17a69fix(http2): cancel sending client request body on response future drop (#4042)7211ec2fix(http1): allow keep-alive for chunked requests with trailers (#4043)d51cb71feat(client): expose HTTP/2 current max stream count (#4026)28e73ccfix(ffi): validate null pointers before dereferencing in request/response fun...e13e783docs(client): fix HTTP/2 max concurrent stream link to spec (#4037)8ba9008chore(dependencies): drop pin-utils dependency (#4023)5778745feat(client): add HTTP/2max_local_error_reset_streamsoption (#4021)Updates
rdkafka-sysfrom 4.9.0+2.10.0 to 4.10.0+2.12.1Commits
Updates
uuidfrom 1.19.0 to 1.23.1Release notes
Sourced from uuid's releases.
... (truncated)
Commits
ca0c85fMerge pull request #879 from uuid-rs/cargo/v1.23.1b4db015prepare for 1.23.1 release771069dMerge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note80994a2fix: Timestamp::from_gregorian deprecation note90c5be8Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv8b8c4f4Remove deprecated feature from wasm-bindgen dependency00ab922Merge pull request #876 from uuid-rs/cargo/v1.23.0726ba45prepare for 1.23.0 release996dadeMerge pull request #875 from uuid-rs/fix/context-orderinge140479simplify a use stmtUpdates
serde_jsonfrom 1.0.145 to 1.0.150Release notes
Sourced from serde_json's releases.
Commits
a1ae73aRelease 1.0.1501a360b0Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys2037b63Reject non-string enum object keys5d30df6Resolve manual_assert_eq pedantic clippy lintdc8003aRaise required compiler for preserve_order feature to 1.85a42fa98Unpin CI miri toolchain684a60ePin CI miri to nightly-2026-02-117c7da33Raise required compiler to Rust 1.71acf4850Simplify Number::is_f646b8ceabResolve unnecessary_map_or clippy lintUpdates
semverfrom 1.0.27 to 1.0.28Release notes
Sourced from semver's releases.
Commits
7625c7aRelease 1.0.28fd404d0Merge pull request 351 from czy-29/masterf75f26eThedoc_auto_cfganddoc_cfgfeatures have been merged9e2bfa2Enableserdeondocs.rsand automatically addserdeflag to the docs8591f23Unpin CI miri toolchain66bdd2cPin CI miri to nightly-2026-02-11324ffceSwitch from cargo bench to criterion34133a5Update actions/upload-artifact@v5 -> v67f935ffUpdate actions/upload-artifact@v4 -> v5c07fb91Switch from test::black_box to std::hint::black_boxUpdates
hyper-utilfrom 0.1.19 to 0.1.20Release notes
Sourced from hyper-util's releases.
Changelog
Sourced from hyper-util's changelog.
Commits
b23a13ev0.1.20ffa5391chore: use standard library api (#263)b43aeabchore: bumpsystem-configurationto 0.7 (#256)d841f5dbump MSRV to 1.64 (#258)af19656chore(client): remove unused mac imports in system proxy (#260)ad6a63dchore(ci): update to actions/checkout@v6 (#261)d5503b2docs(client): correct malformed reference link in set_interface (#254)8c4f4a0fix(matcher): improve subdomain matching case insensitivity (#252)1b3fa96fix(matcher): improve domain matching case insensitivity (#251)Updates
anyhowfrom 1.0.100 to 1.0.102Release notes
Sourced from anyhow's releases.
Commits
5c657b3Release 1.0.102e737fb6Merge pull request #442 from dtolnay/backtrace7fe62b5Further simply backtrace conditional compilationc8cb5caMerge pull request #441 from dtolnay/backtracede27df7Delete CI use of --features=backtrace9b67e5dMerge pull request #440 from dtolnay/backtraceefdb11aSimplifystd_backtraceconditional codeb8a9a70Merge pull request #439 from dtolnay/backtracea42fc2cRemovefeature = "backtrace"conditional code2a2a3ceRe-word backtrace feature commentUpdates
regexfrom 1.12.2 to 1.12.3Changelog
Sourced from regex's changelog.
Commits
b028e4f1.12.35e195deregex-automata-0.4.14a3433f6regex-syntax-0.8.90c07faeregex-lite-0.1.96a81006...Description has been truncated