Skip to content
This repository was archived by the owner on Jan 19, 2026. It is now read-only.

build(deps): update all dependencies updates#1335

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-updates
Closed

build(deps): update all dependencies updates#1335
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-updates

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Dec 20, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
alpine stage patch 3.23.0 → 3.23.2
axum dependencies patch 0.8.7 → 0.8.8
clap dependencies patch 4.5.53 → 4.5.54
crate-ci/typos action minor v1.40.0 → v1.41.0
docker/setup-buildx-action action minor v3.11.1 → v3.12.0
otel/opentelemetry-collector minor 0.141.0 → 0.143.1
reqwest dev-dependencies minor 0.12 → 0.13
rustls dependencies patch 0.23.35 → 0.23.36
rustls-pki-types dependencies patch 1.13.1 → 1.13.2
serde_json dependencies patch 1.0.145 → 1.0.149
tempfile (source) dev-dependencies minor 3.23.0 → 3.24.0
testcontainers dev-dependencies patch 0.26.0 → 0.26.3
tokio (source) dependencies minor 1.48.0 → 1.49.0
tokio-stream (source) dependencies patch 0.1.17 → 0.1.18
tracing (source) dependencies patch 0.1.43 → 0.1.44
updatecli/updatecli-action action minor v2.97.0 → v2.98.0

Release Notes

tokio-rs/axum (axum)

v0.8.8: axum v0.8.8

Compare Source

  • Clarify documentation for Router::route_layer (#​3567)
clap-rs/clap (clap)

v4.5.54

Compare Source

crate-ci/typos (crate-ci/typos)

v1.41.0

Compare Source

Bug Fixes
  • Ignore numbers as identifiers (a00831c8)
  • Improve the organization of --help (a48a457c)
Features
  • Dump files, identifiers, and words (ce365ae1, closes #​41)
  • Give control over allowed identifier characters for leading vs rest (107308a6)
Performance
  • Use standard identifier rules to avoid doing umber checks (107308a6)
  • Only do hex check if digits are in identifiers (68cd36d0)

v1.40.1

Compare Source

Bug Fixes
  • Ignore numbers as identifiers (a00831c8)
  • Improve the organization of --help (a48a457c)
Features
  • Dump files, identifiers, and words (ce365ae1, closes #​41)
  • Give control over allowed identifier characters for leading vs rest (107308a6)
Performance
  • Use standard identifier rules to avoid doing umber checks (107308a6)
  • Only do hex check if digits are in identifiers (68cd36d0)
docker/setup-buildx-action (docker/setup-buildx-action)

v3.12.0

Compare Source

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector)

v0.143.1

Compare Source

🧰 Bug fixes 🧰
  • opampsupervisor: revert "Add MSI package release artifacts for the OpAMP supervisor (#​1261)" (#​1332)

v0.143.0

Compare Source

💡 Enhancements 💡
  • opampsupervisor: Add MSI package release artifacts for the OpAMP supervisor (#​1261)

v0.142.0

Compare Source

🚀 New components 🚀
  • contrib: Add yanggrpcreceiver to the contrib distribution (#​1306)
  • otelcol-contrib: Add the macOS Unified Logging receiver (#​44089)
  • otelcol-contrib: Add the systemd receiver (#​1298)
💡 Enhancements 💡
  • otelcol-ebpf-profiler: update ebpf-profiler to v0.0.202549 (#​1295)
seanmonstar/reqwest (reqwest)

v0.13.1

Compare Source

  • Fixes compiling with rustls on Android targets.

v0.13.0

Compare Source

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

v0.12.24

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.

v0.12.23

  • Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
  • Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
  • Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
  • Add http3_* options to blocking::ClientBuilder.
  • Fix default TCP timeout values to enabled and faster.
  • Fix SOCKS proxies to default to port 1080
  • (wasm) Add cache methods to RequestBuilder.

v0.12.22

  • Fix socks proxies when resolving IPv6 destinations.

v0.12.21

  • Fix socks proxy to use socks4a:// instead of socks4h://.
  • Fix Error::is_timeout() to check for hyper and IO timeouts too.
  • Fix request Error to again include URLs when possible.
  • Fix socks connect error to include more context.
  • (wasm) implement Default for Body.

v0.12.20

  • Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
  • Fix proxy headers only using the first matched proxy.
  • (wasm) Fix re-adding Error::is_status().

v0.12.19

  • Fix redirect that changes the method to GET should remove payload headers.
  • Fix redirect to only check the next scheme if the policy action is to follow.
  • (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

  • Fix compilation when socks enabled without TLS.

v0.12.17

  • Fix compilation on macOS.

v0.12.16

  • Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
  • Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
  • Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
  • Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
  • Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
  • Add Proxy::headers() to add extra headers that should be sent to a proxy.
  • Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
  • Fix HTTP/3 to support streaming request bodies.
  • (wasm) Fix null bodies when calling Response::bytes_stream().

v0.12.15

  • Fix Windows to support both ProxyOverride and NO_PROXY.
  • Fix http3 to support streaming response bodies.
  • Fix http3 dependency from public API misuse.

v0.12.14

  • Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

  • Add Form::into_reader() for blocking multipart forms.
  • Add Form::into_stream() for async multipart forms.
  • Add support for SOCKS4a proxies.
  • Fix decoding responses with multiple zstd frames.
  • Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.
  • Fix cloning of request timeout in blocking::Request.
  • Fix http3 synchronization of connection creation, reducing unneccesary extra connections.
  • Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.
  • Fix blocking read to correctly reserve and zero read buffer.
  • (wasm) Add support for request timeouts.
  • (wasm) Fix Error::is_timeout() to return true when from a request timeout.

v0.12.12

  • (wasm) Fix compilation by not compiler tokio/time on WASM.

v0.12.11

  • Fix decompression returning an error when HTTP/2 ends with an empty data frame.

v0.12.10

  • Add ClientBuilder::connector_layer() to allow customizing the connector stack.
  • Add ClientBuilder::http2_max_header_list_size() option.
  • Fix propagating body size hint (content-length) information when wrapping bodies.
  • Fix decompression of chunked bodies so the connections can be reused more often.

v0.12.9

  • Add tls::CertificateRevocationLists support.
  • Add crate features to enable webpki roots without selecting a rustls provider.
  • Fix connection_verbose() to output read logs.
  • Fix multipart::Part::file() to automatically include content-length.
  • Fix proxy to internally no longer cache system proxy settings.

v0.12.8

  • Add support for SOCKS4 proxies.
  • Add multipart::Form::file() method for adding files easily.
  • Add Body::wrap() to wrap any http_body::Body type.
  • Fix the pool configuration to use a timer to remove expired connections.

v0

Configuration

📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner December 20, 2025 02:56
@codecov
Copy link
Copy Markdown

codecov Bot commented Dec 20, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.83%. Comparing base (75c22e7) to head (30a1b95).

Additional details and impacted files 
@@             Coverage Diff             @@
##             main    #1335       +/-   ##
===========================================
+ Coverage   40.76%   73.83%   +33.07%     
===========================================
  Files          16       17        +1     
  Lines        1207     1246       +39     
===========================================
+ Hits          492      920      +428     
+ Misses        715      326      -389
Flag Coverage Δ
integration-tests 62.32% <ø> (?)
unit-tests 40.76% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate Bot force-pushed the renovate/all-updates branch 6 times, most recently from b16d51a to 3b38641 Compare December 27, 2025 10:14
@renovate renovate Bot force-pushed the renovate/all-updates branch 2 times, most recently from 30a1b95 to d6e1685 Compare December 30, 2025 19:07
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Dec 30, 2025 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock
Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package axum@0.8.7 --precise 0.8.8
    Updating crates.io index
    Updating git repository `https://github.com/kubewarden/policy-evaluator`
From https://github.com/kubewarden/policy-evaluator
 * [new ref]         eadc1242ac9d1e073b44a6b648983736e707ed90 -> refs/commit/eadc1242ac9d1e073b44a6b648983736e707ed90
    Updating git repository `https://github.com/kubewarden/policy-fetcher`
From https://github.com/kubewarden/policy-fetcher
 * [new ref]         0fc117d3d525547cf9f0bb5f2c248074f06d6e16 -> refs/commit/0fc117d3d525547cf9f0bb5f2c248074f06d6e16
error: failed to select a version for `reqwest`.
    ... required by package `policy-server v1.31.0 (/tmp/renovate/repos/github/kubewarden/policy-server)`
versions that meet the requirements `^0.13` are: 0.13.1, 0.13.0

package `policy-server` depends on `reqwest` with feature `rustls-tls-manual-roots` but `reqwest` does not have that feature.


failed to select a version for `reqwest` which could resolve this conflict

@renovate renovate Bot force-pushed the renovate/all-updates branch 3 times, most recently from 2925add to dd98ea2 Compare January 2, 2026 12:03
@viccuad viccuad self-assigned this Jan 2, 2026
@viccuad
Copy link
Copy Markdown
Member

viccuad commented Jan 2, 2026

This brings a reqwest breaking change, they are moving to rustls for default and changing their feature set.

@viccuad viccuad moved this from Pending review to In Progress in Kubewarden Admission Controller Jan 2, 2026
@renovate renovate Bot force-pushed the renovate/all-updates branch from dd98ea2 to 360e442 Compare January 6, 2026 19:04
@viccuad
Copy link
Copy Markdown
Member

viccuad commented Jan 7, 2026

Deferring until we move to monorepo.

@viccuad viccuad closed this Jan 7, 2026
@github-project-automation github-project-automation Bot moved this from In Progress to Done in Kubewarden Admission Controller Jan 7, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

1 more reviewer

@pohanhuangtw pohanhuangtw pohanhuangtw approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

@viccuad viccuad

Labels

area/dependencies

Projects

Kubewarden Admission Controller
Archived in project

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@viccuad @pohanhuangtw