Bump the cli group across 1 directory with 9 updates #327

dependabot · 2025-10-13T14:04:06Z

Bumps the cli group with 8 updates in the / directory:

Package	From	To
axum	`0.8.4`	`0.8.6`
axum-extra	`0.10.1`	`0.10.3`
lettre	`0.11.18`	`0.11.19`
postgres-openssl	`0.5.1`	`0.5.2`
regex	`1.11.2`	`1.12.1`
serde	`1.0.226`	`1.0.228`
serde_with	`3.14.1`	`3.15.0`
thiserror	`2.0.16`	`2.0.17`

Updates axum from 0.8.4 to 0.8.6

Release notes

Sourced from axum's releases.

axum v0.8.5

fixed: Reject JSON request bodies with trailing characters after the JSON document (#3453)

added: Implement OptionalFromRequest for Multipart (#3220)

added: Getter methods Location::{status_code, location}

added: Support for writing arbitrary binary data into server-sent events (#3425)]

added: middleware::ResponseAxumBodyLayer for mapping response body to axum::body::Body (#3469)

added: impl FusedStream for WebSocket (#3443)

changed: The sse module and Sse type no longer depend on the tokio feature (#3154)

changed: If the location given to one of Redirects constructors is not a valid header value, instead of panicking on construction, the IntoResponse impl now returns an HTTP 500, just like Json does when serialization fails (#3377)

changed: Update minimum rust version to 1.78 (#3412)

#3154: tokio-rs/axum#3154 #3220: tokio-rs/axum#3220 #3377: tokio-rs/axum#3377 #3412: tokio-rs/axum#3412 #3425: tokio-rs/axum#3425 #3443: tokio-rs/axum#3443 #3453: tokio-rs/axum#3453 #3469: tokio-rs/axum#3469

Commits

c1bb9c3 Release axum 0.8.6 and related crates
4a50581 Update changelogs
5c76cfd Remove usage of the doc_auto_cfg feature (#3505)
c720f56 Release axum-core v0.5.4
0c96ead Remove unused rustversion dependency of axum-core (#3502)
a1d22f6 Release axum 0.8.5 and related crates
ad2fd5b Update changelogs
a0692f9 Reject JSON bodies with trailing chars (#3453)
ae80850 Update to cargo-deny api version 2 (#3475)
651cc1e Remove unused link def
Additional commits viewable in compare view

Updates axum-extra from 0.10.1 to 0.10.3

Release notes

Sourced from axum-extra's releases.

axum-extra v0.10.2

added: Implement OptionalFromRequest for Host (#3177)

#3177: tokio-rs/axum#3177

Commits

c1bb9c3 Release axum 0.8.6 and related crates
4a50581 Update changelogs
5c76cfd Remove usage of the doc_auto_cfg feature (#3505)
c720f56 Release axum-core v0.5.4
0c96ead Remove unused rustversion dependency of axum-core (#3502)
a1d22f6 Release axum 0.8.5 and related crates
ad2fd5b Update changelogs
a0692f9 Reject JSON bodies with trailing chars (#3453)
ae80850 Update to cargo-deny api version 2 (#3475)
651cc1e Remove unused link def
Additional commits viewable in compare view

Updates lettre from 0.11.18 to 0.11.19

Release notes

Sourced from lettre's releases.

v0.11.19

Features

Add raw header setter to MessageBuilder (#1108)

Misc

Fix README example (#1114)

Replace custom static_assert! macro with std::assert! (#1112)

Changelog

Sourced from lettre's changelog.

v0.11.19 (2025-10-08)

Features

Add raw header setter to MessageBuilder (#1108)

Misc

Fix README example (#1114)

Replace custom static_assert! macro with std::assert! (#1112)

#1108: lettre/lettre#1108 #1112: lettre/lettre#1112 #1114: lettre/lettre#1114

Commits

12dccd2 Prepare v0.11.19 (#1115)
7899da9 docs: fix readme example (#1114)
a85fdef build(deps): upgrade semver compatible dependencies (#1113)
b73611c refactor: replace static_assert! with std assert! (#1112)
55cea7d feat: add method to set raw custom headers in MessageBuilder (#1108)
d2b9d50 build(deps): upgrade semver compatible dependencies (#1103)
See full diff in compare view

Updates postgres-openssl from 0.5.1 to 0.5.2

Release notes

Sourced from postgres-openssl's releases.

postgres-openssl v0.5.2

Changed

Updated repository links to use rust-postgres organization.

Upgraded to Rust 2021 edition.

Commits

6226d7c Release postgres-openssl v0.5.2
53a929e Release tokio-postgres v0.7.14
683a306 Release postgres-types v0.2.10
cb2ba1c Release postgres-protocol v0.6.9
a6a0d53 Release postgres-derive v0.4.7
429b76b Merge pull request #1275 from rust-postgres/paolobarbolini/switch-to-dtolnay-...
6add4c2 chore(ci): switch to dtolnay/rust-toolchain
8364bb2 Merge pull request #1274 from rust-postgres/paolobarbolini/regen-sql-state-map
6811c01 chore(tokio-postgres): regenerate SQLSTATE_MAP
dfcb6af Merge pull request #1248 from duarten/duarte/fallible-rexport
Additional commits viewable in compare view

Updates regex from 1.11.2 to 1.12.1

Changelog

Sourced from regex's changelog.

1.12.1 (2025-10-10)

This release makes a bug fix in the new regex::Captures::get_match API introduced in 1.12.0. There was an oversight with the lifetime parameter for the Match returned. This is technically a breaking change, but given that it was caught almost immediately and I've yanked the 1.12.0 release, I think this is fine.

1.12.0 (2025-10-10)

This release contains a smattering of bug fixes, a fix for excessive memory consumption in some cases and a new regex::Captures::get_match API.

Improvements:

[FEATURE #1146](rust-lang/regex#1146): Add Capture::get_match for returning the overall match without unwrap().

Bug fixes:

[BUG #1083](rust-lang/regex#1083): Fixes a panic in the lazy DFA (can only occur for especially large regexes).

[BUG #1116](rust-lang/regex#1116): Fixes a memory usage regression for large regexes (introduced in regex 1.9).

[BUG #1195](rust-lang/regex#1195): Fix universal start states in sparse DFA.

[BUG #1295](rust-lang/regex#1295): Fixes a panic when deserializing a corrupted dense DFA.

BUG 8f5d9479: Make regex_automata::meta::Regex::find consistently return None when WhichCaptures::None is used.

1.11.3 (2025-09-25)

This is a small patch release with an improvement in memory usage in some cases.

Improvements:

[BUG #1297](rust-lang/regex#1297): Improve memory usage by trimming excess memory capacity in some spots.

Commits

27d6d65 1.12.1
85398ad changelog: 1.12.1
764efbd api: tweak the lifetime of Captures::get_match
ee6aa55 rure-0.2.4
42076c6 1.12.0
aef2153 deps: bump to regex-automata 0.4.12
459dbbe regex-automata-0.4.12
610bf2d regex-syntax-0.8.7
7dbb384 changelog: 1.12.0
bd345d7 automata: fix broken universal start states with sparse DFA
Additional commits viewable in compare view

Updates serde from 1.0.226 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

Documentation improvements (#2991)

Commits

a866b33 Release 1.0.228
5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
415d9fc Release 1.0.227
7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
9d3410e Merge pull request #2992 from dtolnay/inplaceseed
2fb6748 Remove InPlaceSeed public re-export
f8137c7 Inline serde_core into serde in docsrs mode
b7dbf7e Merge pull request #2990 from dtolnay/integer128
7c83691 No longer macro_use integer128 module
Additional commits viewable in compare view

Updates serde_with from 3.14.1 to 3.15.0

Release notes

Sourced from serde_with's releases.

serde_with v3.15.0

Added
Added error inspection to VecSkipError and MapSkipError by @michelhe (#878) This allows interacting with the previously hidden error, for example for logging. Checkout the newly added example to both types.
Allow documenting the types generated by serde_conv!. The serde_conv! macro now acceps outer attributes before the optional visibility modifier. This allow adding doc comments in the shape of #[doc = "..."] or any other attributes, such as lint modifiers.
serde_conv!(
    #[doc = "Serialize bools as string"]
    #[allow(dead_code)]
    pub BoolAsString,
    bool,
    |x: &bool| ::std::string::ToString::to_string(x),
    |x: ::std::string::String| x.parse()
);
Add support for hashbrown v0.16 (#877)

This extends the existing support for hashbrown v0.14 and v0.15 to the newly released version.
Changed

Bump MSRV to 1.76, since that is required for toml dev-dependency.

Commits

ea38dce Bump version to 3.15.0 (#892)
a3da8e6 Bump version to 3.15.0
c36e692 Bump dev-dependencies (#891)
ae8466d Bump dev-dependencies
f7337ff Support serde_core and remove dependencies on serde_derive (#889)
c1d73b3 Replace serde with serde_core in all files
320d292 Remove dependency on serde_derive
dca6df8 Remove version-sync crate and reimplement needed functionality with regex and...
6c6e53f Remove version-sync crate and reimplement needed functionality with regex and...
f64ea40 Add support for hashbrown v0.16 (#888)
Additional commits viewable in compare view

Updates thiserror from 2.0.16 to 2.0.17

Release notes

Sourced from thiserror's releases.

2.0.17

Use differently named __private module per patch release (#434)

Commits

72ae716 Release 2.0.17
599fdce Merge pull request #434 from dtolnay/private
9ec05f6 Use differently named __private module per patch release
d2c492b Raise minimum tested compiler to rust 1.76
fc3ab95 Opt in to generate-macro-expansion when building on docs.rs
819fe29 Update ui test suite to nightly-2025-09-12
259f48c Enforce trybuild >= 1.0.108
470e6a6 Update ui test suite to nightly-2025-08-24
544e191 Update actions/checkout@v4 -> v5
cbc1eba Delete duplicate cap-lints flag from build script
See full diff in compare view

Updates tokio-postgres from 0.7.13 to 0.7.15

Release notes

Sourced from tokio-postgres's releases.

tokio-postgres v0.7.15

Added

Added Client::check_connection API.

Added Client::simple_query_raw API.

Changed

Improved the effectiveness of Client::is_closed.

Stop including error chain in Display impl of Error

tokio-postgres v0.7.14

Added

Added support for jiff v0.2.

Added support for bit-vec versions v0.7 and v0.8.

Re-exported fallible-iterator

Expose sync rollback as a private API method

Fixes

Changed set_tcp_user_timeout to only be called when enabled

Changed

Updated repository links to use rust-postgres organization.

Upgraded to Rust 2021 edition.

Upgraded phf to v0.13

Upgraded socket2 to v0.6

Disabled default features of futures-util

Commits

4737438 Release tokio-postgres v0.7.15
6ed4781 Release postgres-types v0.2.11
87ef8ad Merge pull request #1278 from razein97/master
628a696 Merge pull request #1280 from rust-postgres/paolobarbolini/check_connection-d...
f34ed1b Merge pull request #1262 from CobaltCause/push-sswwslomtkmm
c5d3442 fix an Error/Display impl
bbd1301 Merge pull request #1282 from rust-postgres/paolobarbolini/futures-util-no-de...
153b86e Merge pull request #1281 from rust-postgres/paolobarbolini/pg-18
e128d4c feat: disable default features of futures-util for postgres
2393b34 chore: start testing with PostgreSQL 18
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cli group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axum](https://github.com/tokio-rs/axum) | `0.8.4` | `0.8.6` | | [axum-extra](https://github.com/tokio-rs/axum) | `0.10.1` | `0.10.3` | | [lettre](https://github.com/lettre/lettre) | `0.11.18` | `0.11.19` | | [postgres-openssl](https://github.com/rust-postgres/rust-postgres) | `0.5.1` | `0.5.2` | | [regex](https://github.com/rust-lang/regex) | `1.11.2` | `1.12.1` | | [serde](https://github.com/serde-rs/serde) | `1.0.226` | `1.0.228` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.14.1` | `3.15.0` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.16` | `2.0.17` | Updates `axum` from 0.8.4 to 0.8.6 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.4...axum-v0.8.6) Updates `axum-extra` from 0.10.1 to 0.10.3 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-extra-v0.10.1...axum-extra-v0.10.3) Updates `lettre` from 0.11.18 to 0.11.19 - [Release notes](https://github.com/lettre/lettre/releases) - [Changelog](https://github.com/lettre/lettre/blob/master/CHANGELOG.md) - [Commits](lettre/lettre@v0.11.18...v0.11.19) Updates `postgres-openssl` from 0.5.1 to 0.5.2 - [Release notes](https://github.com/rust-postgres/rust-postgres/releases) - [Commits](rust-postgres/rust-postgres@postgres-openssl-v0.5.1...postgres-openssl-v0.5.2) Updates `regex` from 1.11.2 to 1.12.1 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.11.2...1.12.1) Updates `serde` from 1.0.226 to 1.0.228 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.226...v1.0.228) Updates `serde_with` from 3.14.1 to 3.15.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.14.1...v3.15.0) Updates `thiserror` from 2.0.16 to 2.0.17 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.16...2.0.17) Updates `tokio-postgres` from 0.7.13 to 0.7.15 - [Release notes](https://github.com/rust-postgres/rust-postgres/releases) - [Commits](rust-postgres/rust-postgres@tokio-postgres-v0.7.13...tokio-postgres-v0.7.15) --- updated-dependencies: - dependency-name: axum dependency-version: 0.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cli - dependency-name: axum-extra dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cli - dependency-name: lettre dependency-version: 0.11.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cli - dependency-name: postgres-openssl dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cli - dependency-name: regex dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cli - dependency-name: serde dependency-version: 1.0.228 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cli - dependency-name: serde_with dependency-version: 3.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cli - dependency-name: thiserror dependency-version: 2.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cli - dependency-name: tokio-postgres dependency-version: 0.7.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cli ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 13, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the cli group across 1 directory with 9 updates #327

Bump the cli group across 1 directory with 9 updates #327

Uh oh!

dependabot bot commented on behalf of github Oct 13, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the cli group across 1 directory with 9 updates #327

Are you sure you want to change the base?

Bump the cli group across 1 directory with 9 updates #327

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

axum v0.8.5

axum-extra v0.10.2

v0.11.19

Features

Misc

v0.11.19 (2025-10-08)

Features

Misc

postgres-openssl v0.5.2

Changed

1.12.1 (2025-10-10)

1.12.0 (2025-10-10)

1.11.3 (2025-09-25)

v1.0.228

v1.0.227

serde_with v3.15.0

Added

Changed

2.0.17

tokio-postgres v0.7.15

Added

Changed

tokio-postgres v0.7.14

Added

Fixes

Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Oct 13, 2025 •

edited

Loading