chore: bump the minor-and-patch group across 1 directory with 7 updates - #808
Closed
dependabot[bot] wants to merge 39 commits into
Closed
chore: bump the minor-and-patch group across 1 directory with 7 updates#808dependabot[bot] wants to merge 39 commits into
dependabot[bot] wants to merge 39 commits into
Conversation
Add fuzzing, parity checks, audit log filters, and SSE log streaming
feat: theme toggle, api-key usage charts, settings panel, leaderboard…
…zing-718-722-728-731 test: add verification, fuzzing, and cross-browser E2E coverage
feat: implement sandbox transaction builder interface (#741)
…locust feat: implement load testing bypass configuration, scripts, and docum…
…sandbox-webhook-gateway feat: sandbox cleanup, webhook backoff tests, and Envoy gateway config
feat: cache soroban contracts, decouple notifications, tenant isolation, read replica
…cal-mock-horizon-api-server, extract-congestion-fee-calculator-module - #709: Add W3C traceparent distributed tracing in fluid-server (tracing.rs) - SpanContext with trace/span ID generation and propagation - Extract/inject helpers for HTTP headers - traceparent header on fee-bump responses - #711: Partition AuditLog table by month in server - SQL migration (20260601000000_partition_audit_logs_by_month) - AuditLogPartitionManager service with ensurePartitions/listPartitions/pruneOldPartitions - Full unit test coverage - #712: Extract congestion fee calculator module in fluid-server (fee_calculator.rs) - Pure calculate_fee() function decoupled from API server - FeeCalculator struct with configurable base_fee and multiplier - CongestionLevel classification (low/medium/high) - #720: Local mock Horizon API server in fluid-server (mock_horizon.rs) - Simulates success, 429, 500, 502, 503, 504, connection reset - Horizon tx error extras (tx_bad_seq, tx_insufficient_fee, tx_failed) - Latency injection, per-path scenario overrides, request capture - fail_count auto-reset for transient failure simulation Also fix pre-existing compile errors: xdr.rs borrow, archive.rs ByteStream, memory_leak_profiling.rs import, load_testing_integration.rs String type, main.rs duplicate serde import.
Harden admin sessions, fee-bump errors, and DB adapters
feat: security-limits-congestion-graph-wcag-audit-and-alert-cooldowns
Add CI matrix workflow for cargo-audit and npm audit on fluid-server, with JSON report artifacts and failure on high/critical advisories. Closes #674 Co-authored-by: Cursor <cursoragent@cursor.com>
Validate inner transaction signature weight against the source account med_threshold via Horizon before fee-bumping, with unit and integration tests. Closes #686 Co-authored-by: Cursor <cursoragent@cursor.com>
Integrate HashiCorp Vault for Secure Fee Payer Secret Management
#688 - Short-lived hash cache to prevent replay attacks (server/) - Add markTransactionHashProcessed() and isTransactionHashProcessed() to server/src/utils/redis.ts using atomic SET NX with 5-minute TTL - Integrate replay check in processFeeBump() in feeBump.ts; returns 409 DUPLICATE_TRANSACTION on repeated inner tx hash #692 - Graceful shutdown in Rust server (fluid-server/) - Add shutdown_signal() async fn that listens for SIGTERM and SIGINT - Wire axum::serve().with_graceful_shutdown(shutdown_signal()) so in-flight fee-bump requests complete before the process exits #691 - Log aggregator failure fallback (fluid-server/) - flush_batch() now returns bool indicating remote export failure - After 3 consecutive failures, export_worker() calls flush_batch_to_disk() - flush_batch_to_disk() writes NDJSON lines to FLUID_LOG_FALLBACK_PATH (default: fluid-server-fallback.log) for later re-ingestion #687 - Muxed account (M...) support in address validation (fluid-server/) - inner_source_account_id() now delegates to muxed_account_to_account_id() which handles both Ed25519 and MuxedEd25519 variants - blocklist.rs normalize_address() strips mux id so M... and G... addresses for the same key share a single blocklist entry - Add muxed_account_resolves_to_base_account_id test
Bumps the minor-and-patch group with 6 updates in the /fluid-server directory: | Package | From | To | | --- | --- | --- | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.0` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [uuid](https://github.com/uuid-rs/uuid) | `1.22.0` | `1.23.3` | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [tokio](https://github.com/tokio-rs/tokio) | `1.50.0` | `1.52.3` | Updates `bytes` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.0) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `js-sys` from 0.3.91 to 0.3.92 - [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases) - [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md) - [Commits](https://github.com/wasm-bindgen/wasm-bindgen/commits) Updates `uuid` from 1.22.0 to 1.23.3 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.22.0...v1.23.3) Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `tokio` from 1.50.0 to 1.52.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.50.0...tokio-1.52.3) --- updated-dependencies: - dependency-name: bytes dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: js-sys dependency-version: 0.3.92 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: uuid dependency-version: 1.23.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tokio dependency-version: 1.52.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
0xVida
force-pushed
the
main
branch
4 times, most recently
from
June 20, 2026 10:53
573ca4c to
5b76891
Compare
Contributor
Author
|
Looks like these dependencies are no longer a dependency, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/cargo/fluid-server/minor-and-patch-36867b6b19
branch
June 20, 2026 11:39
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 6 updates in the /fluid-server directory:
1.11.11.12.00.4.440.4.451.22.01.23.30.8.80.8.91.0.1491.0.1501.50.01.52.3Updates
bytesfrom 1.11.1 to 1.12.0Release notes
Sourced from bytes's releases.
Changelog
Sourced from bytes's changelog.
Commits
91402ceRelease bytes v1.12.0 (#831)2256e6dchore: add safety comments on unsafe blocks (#827)245adffPass vtable data by value (#826)00cc5ffImplementBytesMut::extend_from_within(#818)5b79d31Merge tag 'v1.11.1'804ee6dMake try_unsplit method public (#746)fd426caExclude development scripts from published package (#810)b4ed70dAdd test for copy_to_bytes() -> BytesMut avoiding clone (#809)94e4291Document thatBytesMut::{reserve,try_reserve}doesn't preserve unused capac...acd1e0fFixget_intifnbytesis zero (#806)Updates
chronofrom 0.4.44 to 0.4.45Release notes
Sourced from chrono's releases.
Commits
1703382Prepare 0.4.45 release881f9abtz_data: fix tzdata locations on Androidf14ead4fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflowc6063e6Update similar-asserts requirement from 1.6.1 to 2.0.0120686cBump codecov/codecov-action from 5 to 6Updates
js-sysfrom 0.3.91 to 0.3.92Commits
Updates
uuidfrom 1.22.0 to 1.23.3Release notes
Sourced from uuid's releases.
... (truncated)
Commits
20da78bMerge pull request #887 from uuid-rs/cargo/v1.23.362232caprepare for 1.23.3 release2320c6aMerge pull request #886 from uuid-rs/fix/parser-panics2d034d4fix some invalid indexers on error reportinga8b9f14update fuzz infra and run in CId119657Merge pull request #883 from uuid-rs/cargo/v1.23.20651cfcprepare for 1.23.2 releasee8dea0cMerge pull request #882 from uuid-rs/fix/error-msgsbdc429afix up serde messagesd4342e4make indexes 0 based and fix up more error messagesUpdates
axumfrom 0.8.8 to 0.8.9Release notes
Sourced from axum's releases.
Commits
c59208crevert axum-core changelog changes99068f5Revert "FixIntoResponsefor tuples overriding error response codes (#3603)"23d7098Revert "axum-core 0.5.6"e8a39adaxum-macros 0.5.16e9a249axum-extra 0.12.60ec9041axum 0.8.9c3fcebbaxum-core 0.5.6a8790fcupdate release notes26ba7bbdocs: consolidate state management docs in crate root (#3683)9fc59efUpdate to tokio-tungstenite 0.29 (#3689)Updates
serde_jsonfrom 1.0.149 to 1.0.150Release notes
Sourced from serde_json's releases.
Commits
a1ae73aRelease 1.0.1501a360b0Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys2037b63Reject non-string enum object keys5d30df6Resolve manual_assert_eq pedantic clippy lintdc8003aRaise required compiler for preserve_order feature to 1.85a42fa98Unpin CI miri toolchain684a60ePin CI miri to nightly-2026-02-117c7da33Raise required compiler to Rust 1.71acf4850Simplify Number::is_f646b8ceabResolve unnecessary_map_or clippy lintUpdates
tokiofrom 1.50.0 to 1.52.3Release notes
Sourced from tokio's releases.
... (truncated)
Commits
d875691chore: prepare Tokio v1.52.3 (#8130)e1aebb0Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)fd63094chore: prepare Tokio v1.51.3 (#8127)8c600d0Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)11bfc13chore: prepare Tokio v1.47.5 (#8122)f085b62sync: notify receivers in mpscOwnedPermit::release()method (#8075)30d25ccsync: require that anRwLockhasmax_readers != 0(#8076)9fccf53sync: returnEmptyfromtry_recv()when mpsc is closed with outstanding p...ebf61b4sync: fix underflow in mpsc channellen()(#8062)4abe9d7chore: prepare Tokio v1.52.2 (#8115)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions