Skip to content

chore: bump semver-compatible production dependencies - #132

Merged
jagtejsodhi merged 1 commit into
mainfrom
jagtej/dep-minor-bumps
Jun 9, 2026
Merged

chore: bump semver-compatible production dependencies#132
jagtejsodhi merged 1 commit into
mainfrom
jagtej/dep-minor-bumps

Conversation

@jagtejsodhi

@jagtejsodhi jagtejsodhi commented Jun 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Bumps safe minor/patch production dependencies:
    • serde_json: 1.0.149 → 1.0.150
    • tokio: 1.50.0 → 1.52.3
    • uuid: 1.22.0 → 1.23.3
    • chrono: 0.4.44 → 0.4.45
    • tracing-subscriber: 0.3.22 → 0.3.23
    • alloy-primitives: 1.5.7 → 1.6.0

These are all semver-compatible updates extracted from the closed dependabot PR #127.

Test plan

  • cargo check passes locally
  • CI passes

🤖 Generated with Claude Code

- serde_json: 1.0.149 → 1.0.150
- tokio: 1.50.0 → 1.52.3
- uuid: 1.22.0 → 1.23.3
- chrono: 0.4.44 → 0.4.45
- tracing-subscriber: 0.3.22 → 0.3.23
- alloy-primitives: 1.5.7 → 1.6.0

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Committed-By-Agent: claude
@socket-security

socket-security Bot commented Jun 9, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedtokio@​1.50.0 ⏵ 1.52.358 -110093100100
Updatedserde_json@​1.0.149 ⏵ 1.0.1508210093100100
Updatedalloy-primitives@​1.5.7 ⏵ 1.6.010010093100100
Updatedchrono@​0.4.44 ⏵ 0.4.459910093100100
Updatedtracing-subscriber@​0.3.22 ⏵ 0.3.239910093100100
Updateduuid@​1.22.0 ⏵ 1.23.310010093100100

View full report

@socket-security

socket-security Bot commented Jun 9, 2026

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • tokio@1.52.3

View full report

@jagtejsodhi

Copy link
Copy Markdown
Collaborator Author

@SocketSecurity ignore cargo/tokio@1.52.3

@jagtejsodhi
jagtejsodhi merged commit dd50c23 into main Jun 9, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants