chore(deps): bump the prod-deps group across 1 directory with 7 updates by dependabot[bot] · Pull Request #2440 · mozilla-services/syncstorage-rs

dependabot · 2026-07-01T19:47:57Z

Bumps the prod-deps group with 7 updates in the / directory:

Package	From	To
diesel	`2.3.9`	`2.3.10`
diesel-async	`0.9.0`	`0.9.2`
chrono	`0.4.44`	`0.4.45`
http	`1.4.0`	`1.4.2`
regex	`1.12.3`	`1.12.4`
uuid	`1.23.1`	`1.23.4`
config	`0.15.22`	`0.15.24`

Updates diesel from 2.3.9 to 2.3.10

Changelog

Sourced from diesel's changelog.

[2.3.10] 2026-06-05

Fixed a wrong value of a internal MYSQL flag

Fixed several possible panics in the PostgreSQL deserialization code for malformed packages in the

Fixed an issue that caused unexpected results while calling custom aggregated SQL functions twice in the SQLite backend

Fixed a potential use after free bug in the SQLite backend while deserializing a database from a byte buffer

Fixed potential invalid schema generation if column or table names "inject" rust code

Fixed potential SQL injections during schema introspection via diesel print-schema

Fixed a regression that resulted in rejecting valid combinations of ORDER BY and GROUP BY clauses

Commits

7b4f888 Merge pull request #5067 from weiznich/prepare_2.3.10
bdc40a1 Prepare a 2.3.10 release
ad149aa Merge pull request #5059 from ayarotsky/fix-order-and-group
5a5b6a8 Merge pull request #5064 from weiznich/bump/rust_1.96
a535124 Merge pull request #5056 from weiznich/even_fix_more_issues
207391c Merge pull request #5054 from weiznich/fix_more_issues
60b9d3a Merge pull request #5051 from weiznich/new_sponsor
See full diff in compare view

Updates diesel-async from 0.9.0 to 0.9.2

Release notes

Sourced from diesel-async's releases.

Diesel-Async 0.9.2

Fixed

Improve the check if a connection is still working in our connection pool implementation by actually loading the response

Improve mapping of SQL error states to diesel database error kinds for PostgreSQL 18 and newer

New Contributors

@ajesipow made their first contribution in diesel-rs/diesel_async#293

@DhineshKrishnan1206 made their first contribution in diesel-rs/diesel_async#294

Full Changelog: diesel-rs/diesel_async@v0.9.1...v0.9.2

You can support the development of Diesel by:

Contributing Code, Documentation or Guides. Checkout the planing for Diesel 2.4 for open tasks.

Providing knowledge and help to maintain the MySQL/MariaDB backend. This is currently the only in-tree backend that is not used by any maintainers, so having someone around that actually uses this backend would be very helpful for the Diesel project.

Answering questions in our discussion forum

Reporting bugs in our issue tracker

Helping triaging issues in our issue tracker

Sponsoring the maintainers.

Diesel-Async 0.9.1

Fixed

Correctly check if a connection is a broken state (e.g. has an open transaction) for the mobc pool implementation

Full Changelog: diesel-rs/diesel_async@v0.9.1...v0.9.1

You can support the development of Diesel by:

Contributing Code, Documentation or Guides. Checkout the planing for Diesel 2.4 for open tasks.

Providing knowledge and help to maintain the MySQL/MariaDB backend. This is currently the only in-tree backend that is not used by any maintainers, so having someone around that actually uses this backend would be very helpful for the Diesel project.

Answering questions in our discussion forum

Reporting bugs in our issue tracker

Helping triaging issues in our issue tracker

Sponsoring the maintainers.

Changelog

Sourced from diesel-async's changelog.

[0.9.2] - 2026-06-19

Improve the check if a connection is still working in our connection pool implementation by actually loading the response

Improve mapping of SQL error states to diesel database error kinds for PostgreSQL 18 and newer

[0.9.1] - 2026-06-05

Correctly check if a connection is a broken state (e.g. has an open transaction) for the mobc pool implementation

Commits

d2f1886 Prepare a 0.9.2 release
39987dc Merge pull request #294 from DhineshKrishnan1206/fix/pool-ping-read-response
66a6877 Use get_result instead of execute for pool connection ping
f839111 Merge pull request #293 from ajesipow/map-more-pg-errors
1496154 Include more CI robustness fixes from diesel
bd5f55a Fix sqlite windows job
e4a2a6c Fix PG install in CI
38914a8 Fmt
407e2a4 Adapt CI to run tests against postgres 17 and postgres 18
ae45068 Add tests for postgres error conversions
Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in chronotope/chrono#1787

tz_data: fix tzdata locations on Android by @caruschalalamove in chronotope/chrono#1789

Commits

1703382 Prepare 0.4.45 release
881f9ab tz_data: fix tzdata locations on Android
f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
120686c Bump codecov/codecov-action from 5 to 6
See full diff in compare view

Updates http from 1.4.0 to 1.4.2

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

chore(header): fix clippy::assign_op_pattern by @rxc-amzn in hyperium/http#806

ci: pin itoa in msrv job by @seanmonstar in hyperium/http#813

Remove unnecessary explicit lifetimes by @jplatte in hyperium/http#815

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/http#819

tests: update to rand 0.10 by @tottoto in hyperium/http#818

refactor: Remove usage of float instruction by @AurelienFT in hyperium/http#823

refactor(uri): consolidate PathAndQuery::from_shared and from_static by @seanmonstar in hyperium/http#825

fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @seanmonstar in hyperium/http#826

Rephrase comment by @daalfox in hyperium/http#827

Fix typo in request builder docs by @vleksis in hyperium/http#831

fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @SAY-5 in hyperium/http#833

fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @seanmonstar in hyperium/http#837

fix(header): use a set_len guard in IntoIter drop by @seanmonstar in hyperium/http#838

New Contributors

@rxc-amzn made their first contribution in hyperium/http#806

@AurelienFT made their first contribution in hyperium/http#823

@daalfox made their first contribution in hyperium/http#827

@vleksis made their first contribution in hyperium/http#831

@SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.

Fix Uri to properly reject DEL characters.

1.4.1 (May 25, 2026)

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

82db5b8 v1.4.2
a9cdbf8 fix(uri): reject DEL character (#842)
df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
ec3f8ce feat(method): impl PartialOrd + Ord (#840)
a24c968 v1.4.1
bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
68e0abb docs: fix typo in request builder docs (#831)
29dd307 docs(extensions): rephrase internal comment (#827)
Additional commits viewable in compare view

Updates regex from 1.12.3 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

#1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.

Commits

7b96fdc 1.12.4
7b89cf0 deps: update to regex-syntax 0.8.11
1401679 regex-syntax-0.8.11
d709000 changelog: 1.12.4
9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
a7f2ff6 docs: clarify regex-lite word boundaries
2c7b172 docs: clarify unsupported Anchored::Pattern searches
839d16b regex-syntax-0.8.10
c4865a0 syntax: fix negation handling in HIR translation
d8761c0 cargo: also include benches
Additional commits viewable in compare view

Updates uuid from 1.23.1 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

Improve error messages for ambiguous formats by @KodrAus in uuid-rs/uuid#882

Prepare for 1.23.2 release by @KodrAus in uuid-rs/uuid#883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

Commits

3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
cba53d0 prepare for 1.23.4 release
e347af4 Merge pull request #889 from frostyplanet/main
e9bf55c doc: Fix broken link warnings
5351af4 doc: Enable feature flag label for docs.rs
1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
c9619f6 fix up name of fuzz script in readme
20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
62232ca prepare for 1.23.3 release
2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
Additional commits viewable in compare view

Updates config from 0.15.22 to 0.15.24

Changelog

Sourced from config's changelog.

[0.15.24] - 2026-06-16

Fixes

(json) Support u64, and not just i64

[0.15.23] - 2026-05-14

Fixes

Environment::convert_case: correctly apply casing to each key segment

Commits

6314dde chore: Release config version 0.15.24
edd5da5 docs: Update changelog
13c188b fix: support u64 for parse json file (#758)
be51260 chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0 (#760)
1de84e0 chore(deps): Update compatible (dev) (#759)
8c27a5b chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
895c66d fix: support u64 for parse json file
fc956b2 chore(deps): Update Rust Stable to v1.96 (#756)
9053d29 chore: Release config version 0.15.23
e194797 docs: Update changelog
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [diesel](https://github.com/diesel-rs/diesel) | `2.3.9` | `2.3.10` | | [diesel-async](https://github.com/weiznich/diesel_async) | `0.9.0` | `0.9.2` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.2` | | [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.12.4` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.1` | `1.23.4` | | [config](https://github.com/rust-cli/config-rs) | `0.15.22` | `0.15.24` | Updates `diesel` from 2.3.9 to 2.3.10 - [Release notes](https://github.com/diesel-rs/diesel/releases) - [Changelog](https://github.com/diesel-rs/diesel/blob/main/CHANGELOG.md) - [Commits](diesel-rs/diesel@v2.3.9...v2.3.10) Updates `diesel-async` from 0.9.0 to 0.9.2 - [Release notes](https://github.com/weiznich/diesel_async/releases) - [Changelog](https://github.com/diesel-rs/diesel_async/blob/main/CHANGELOG.md) - [Commits](diesel-rs/diesel_async@v0.9.0...v0.9.2) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `http` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.0...v1.4.2) Updates `regex` from 1.12.3 to 1.12.4 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.3...1.12.4) Updates `uuid` from 1.23.1 to 1.23.4 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.1...v1.23.4) Updates `config` from 0.15.22 to 0.15.24 - [Changelog](https://github.com/rust-cli/config-rs/blob/main/CHANGELOG.md) - [Commits](rust-cli/config-rs@v0.15.22...v0.15.24) --- updated-dependencies: - dependency-name: diesel dependency-version: 2.3.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: diesel-async dependency-version: 0.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: http dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: regex dependency-version: 1.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: uuid dependency-version: 1.23.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: config dependency-version: 0.15.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 1, 2026

taddes added 2 commits July 1, 2026 22:06

Merge branch 'master' into dependabot/cargo/prod-deps-f47b67675f

76cf323

Merge branch 'master' into dependabot/cargo/prod-deps-f47b67675f

1a16481

taddes self-assigned this Jul 2, 2026

taddes approved these changes Jul 2, 2026

View reviewed changes

taddes merged commit bd3275e into master Jul 2, 2026
24 checks passed

taddes deleted the dependabot/cargo/prod-deps-f47b67675f branch July 2, 2026 16:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the prod-deps group across 1 directory with 7 updates#2440

chore(deps): bump the prod-deps group across 1 directory with 7 updates#2440
taddes merged 3 commits into
masterfrom
dependabot/cargo/prod-deps-f47b67675f

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026

[2.3.10] 2026-06-05

Diesel-Async 0.9.2

Fixed

New Contributors

Diesel-Async 0.9.1

Fixed

[0.9.2] - 2026-06-19

[0.9.1] - 2026-06-05

0.4.45

What's Changed

v1.4.1

tl;dr

What's Changed

New Contributors

1.4.2 (June 8, 2026)

1.4.1 (May 25, 2026)

1.12.4 (2025-06-09)

v1.23.4

What's Changed

New Contributors

v1.23.3

What's Changed

v1.23.2

What's Changed

[0.15.24] - 2026-06-16

Fixes

[0.15.23] - 2026-05-14

Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant