chore(deps): bump the dependencies group across 1 directory with 17 updates #93

dependabot · 2025-10-20T18:23:49Z

Bumps the dependencies group with 15 updates in the / directory:

Package	From	To
camino	`1.1.9`	`1.2.1`
clap	`4.5.27`	`4.5.50`
color-eyre	`0.6.3`	`0.6.5`
csv	`1.3.1`	`1.4.0`
needletail	`0.6.1`	`0.6.3`
niffler	`2.7.0`	`3.0.0`
reqwest	`0.12.12`	`0.12.15`
reqwest-middleware	`0.4.0`	`0.4.2`
serde_json	`1.0.138`	`1.0.145`
size	`0.4.1`	`0.5.0`
sourmash	`0.18.0`	`0.21.0`
tracing-subscriber	`0.3.19`	`0.3.20`
axum	`0.8.1`	`0.8.6`
tower-http	`0.6.2`	`0.6.6`
sentry	`0.36.0`	`0.39.0`

Updates camino from 1.1.9 to 1.2.1

Release notes

Sourced from camino's releases.

camino 1.2.1

Fixed

Replaced obsolete doc_auto_cfg with doc_cfg, to fix Rust nightly builds with the doc_cfg flag enabled.

camino 1.2.0

Changed

MSRV updated to Rust 1.61 to support the switch to serde_core.

camino now depends on serde_core rather than serde. This allows camino's compilation to be parallelized with serde_derive.

serde and proptest are no longer available as features. This is technically a breaking change, but these features were already no-ops. Instead, use serde1 and proptest1 respectively.

camino 1.1.12

Added

Utf8PathBuf::from_os_string and Utf8Path::from_os_str conversions.

TryFrom<OsString> for Utf8PathBuf and TryFrom<&OsStr> for &Utf8Path conversions.

Thanks to BenjaminBrienen for your first contribution!

camino 1.1.11

Added

Utf8PathBuf::leak on Rust 1.89 and above.

camino 1.1.10

Changed

Hand-write serde implementations, dropping the dependency on serde_derive. Thanks to Enselic for initiating the discussion and for your first contribution!

Changelog

Sourced from camino's changelog.

[1.2.1] - 2025-09-29

Fixed

Replaced obsolete doc_auto_cfg with doc_cfg, to fix Rust nightly builds with the doc_cfg flag enabled.

[1.2.0] - 2025-09-14

Changed

MSRV updated to Rust 1.61 to support the switch to serde_core.

camino now depends on serde_core rather than serde. This allows camino's compilation to be parallelized with serde_derive.

serde and proptest are no longer available as features. This is technically a breaking change, but these features were already no-ops. Instead, use serde1 and proptest1 respectively.

[1.1.12] - 2025-08-26

Added

Utf8PathBuf::from_os_string and Utf8Path::from_os_str conversions.

TryFrom<OsString> for Utf8PathBuf and TryFrom<&OsStr> for &Utf8Path conversions.

Thanks to BenjaminBrienen for your first contribution!

[1.1.11] - 2025-08-17

Added

Utf8PathBuf::leak on Rust 1.89 and above.

[1.1.10] - 2025-06-02

Changed

Hand-write serde implementations, dropping the dependency on serde_derive. Thanks to Enselic for initiating the discussion and for your first contribution!

Commits

28e15db [camino] version 1.2.1
f32d994 prepare release
ea187e4 remove doc_auto_cfg (#114)
b0c8086 remove references to dead features from README
62ddbaa [camino] version 1.2.0
b525ad9 changelog + minor doc updates
0150dc9 switch to serde_core
a2a7da0 switch to dep: for optional dependencies
f16b48f update edition to 2021
8540bc3 update MSRV to Rust 1.61
Additional commits viewable in compare view

Updates clap from 4.5.27 to 4.5.50

Release notes

Sourced from clap's releases.

v4.5.50

[4.5.50] - 2025-10-20

Features

Accept Cow where String and &str are accepted

v4.5.48

[4.5.48] - 2025-09-19

Documentation

Add a new CLI Concepts document as another way of framing clap

Expand the typed_derive cookbook entry

v4.5.47

[4.5.47] - 2025-09-02

Features

Added impl FromArgMatches for ()

Added impl Args for ()

Added impl Subcommand for ()

Added impl FromArgMatches for Infallible

Added impl Subcommand for Infallible

Fixes

(derive) Update runtime error text to match clap

v4.5.46

[4.5.46] - 2025-08-26

Features

Expose StyledStr::push_str

v4.5.45

[4.5.45] - 2025-08-12

Fixes

(unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

v4.5.44

[4.5.44] - 2025-08-11

Features

Add Command::mut_subcommands

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.50] - 2025-10-20

Features

Accept Cow where String and &str are accepted

[4.5.49] - 2025-10-13

Fixes

(help) Correctly wrap when ANSI escape codes are present

[4.5.48] - 2025-09-19

Documentation

Add a new CLI Concepts document as another way of framing clap

Expand the typed_derive cookbook entry

[4.5.47] - 2025-09-02

Features

Added impl FromArgMatches for ()

Added impl Args for ()

Added impl Subcommand for ()

Added impl FromArgMatches for Infallible

Added impl Subcommand for Infallible

Fixes

(derive) Update runtime error text to match clap

[4.5.46] - 2025-08-26

Features

Expose StyledStr::push_str

[4.5.45] - 2025-08-12

Fixes

(unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

[4.5.44] - 2025-08-11

Features

Add Command::mut_subcommands

... (truncated)

Commits

d8acd47 chore: Release
7c2b8d9 docs: Update changelog
e69a2ea Merge pull request #5987 from mernen/fix-bash-comp-words-loop
e03cc2e Merge pull request #5988 from cordx56/fix-builder-custom-version-docs
5ab2579 fix: Minor fix for builder docs about version
2f66432 fix(complete): Only parse arguments before current
4d9d210 test(complete): Illustrate current behavior in Bash
6abe2f8 chore: Release
d5c7454 docs: Update changelog
5b2e960 Merge pull request #5985 from mernen/bash-cur
Additional commits viewable in compare view

Updates color-eyre from 0.6.3 to 0.6.5

Commits

f110d78 Bump color-eyre to 0.6.5, color-spantrace to 0.3.0
6534ecd Undo eyre version bump (DO NOT PUBLISH EYRE)
9f35b8c Exclude images from published crate (#239)
6e9ced8 re-bump eyre version
97c8469 Undo eyre version bump
067cf05 Bump color-eyre to 0.6.4 (#229)
9943e52 Update PyO3, clippy fixes (#228)
a48e365 Bump color-eyre to 0.6.4
b14c715 Merge branch 'clippy' into pyo3
4f70655 Update pyo3
Additional commits viewable in compare view

Updates csv from 1.3.1 to 1.4.0

Commits

4a3997e 1.4.0
a0a3c9e csv-core-0.1.13
f8e6b07 deps: switch serde dependency to serde_core
7c7c135 style: address many Clippy lints
5b2da18 doc: simplify tutorial section on accessing headers
633552a perf: serialize 128-bit integers via itoa
e9f06f4 lint: fix needless_lifetimes and mismatched_lifetime_syntaxes
9dab947 test: fix broken test after panic message change
da00088 style: address many Clippy lints
f973cd4 enum: use #[non_exhaustive] instead of #[doc(hidden)] variant
Additional commits viewable in compare view

Updates needletail from 0.6.1 to 0.6.3

Release notes

Sourced from needletail's releases.

v0.6.3

sdist (source) wheels are now pushed to PyPI

Maturin Docker container is now used to generate manylinux-compliant wheels

v0.6.2 contains backwards-compatible enhancements to the Python library (thanks @apcamargo!):

Add new dunder methods (__hash__, __eq__, __len__, __str__, and __repr__) to needletail.Record

needletail.Record instances can now be created directly

record.normalize() now takes iupac argument (default=False)

parse_fastx_file can now take a pathlib.Path

Commits

3b916b8 Bump version to v0.6.3 (#100)
7b1ad2d Better release action (#99)
e2919fd Release v0.6.2
0010f64 Make FileParsingTestCase inherit from StrParsingTestCase
cdbb275 Add pycache to .gitignore
816f86a Use assertIsInstance in test_pathlib_path_input
f88cb3b Fix linting issue
d89e9a1 Update Python tests
6e72d6e Add new task to to-do
ad30d84 Set the default of valuehe iupac parameter to False
Additional commits viewable in compare view

Updates niffler from 2.7.0 to 3.0.0

Changelog

Sourced from niffler's changelog.

[3.0.0] - 2025-02-12

Changed

Clean up feature usage. Removed many transitive features, and xz feature (use lzma feature instead). For projects that disable default features see updated instructions on how to use specific compression formats and their crate specific feature flags (#68)

Added

Explicit wasm feature for compression formats supported in webassembly (wasm32-unknown-unknown target) (#72)

Pixi configuration for local development (#71)

CI: run benchmarks and upload results to codspeed.io

Deps: bump bzip2 to 0.5.1.

Fixed

Commits

ee822d3 Fix!: clean up feature usage (#68)
c1a687d feat: wasm feature (#72)
8be7824 dev: Add pixi configuration (#71)
See full diff in compare view

Updates reqwest from 0.12.12 to 0.12.15

Release notes

Sourced from reqwest's releases.

v0.12.15

What's Changed

Fix http3 to support streaming response bodies by @ducaale in seanmonstar/reqwest#2517

Fix Windows to support both ProxyOverride and NO_PROXY by @drewkett in seanmonstar/reqwest#2601

Fix http3 dependency from public API misuse by @seanmonstar in seanmonstar/reqwest#2605

New Contributors

@drewkett made their first contribution in seanmonstar/reqwest#2601

Full Changelog: seanmonstar/reqwest@v0.12.14...v0.12.15

v0.12.14

What's Changed

re-add fetch_mode_no_cors shim when not in wasm, but deprecated by @seanmonstar in seanmonstar/reqwest#2598

Full Changelog: seanmonstar/reqwest@v0.12.13...v0.12.14

v0.12.13

What's Changed

Add Form::into_reader() for blocking multipart forms.

Add Form::into_stream() for async multipart forms.

Add support for SOCKS4a proxies.

Fix decoding responses with multiple zstd frames.

Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.

Fix cloning of request timeout in blocking::Request.

Fix http3 synchronization of connection creation, reducing unneccesary extra connections.

Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.

Fix blocking read to correctly reserve and zero read buffer.

(wasm) Add support for request timeouts.

(wasm) Fix Error::is_timeout() to return true when from a request timeout.

New Contributors

@obi1kenobi made their first contribution in seanmonstar/reqwest#2524

@decathorpe made their first contribution in seanmonstar/reqwest#2529

@flisky made their first contribution in seanmonstar/reqwest#1760

@0x676e67 made their first contribution in seanmonstar/reqwest#2527

@maximevtush made their first contribution in seanmonstar/reqwest#2534

@Property404 made their first contribution in seanmonstar/reqwest#2554

@G1gg1L3s made their first contribution in seanmonstar/reqwest#2544

@coastalwhite made their first contribution in seanmonstar/reqwest#2562

@Fizcko made their first contribution in seanmonstar/reqwest#2559

@markussilvan made their first contribution in seanmonstar/reqwest#2573

@aunovis-heidrich made their first contribution in seanmonstar/reqwest#2593

Thanks!

@seanmonstar

@paolobarbolini

@Nuhvi

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.15

Fix Windows to support both ProxyOverride and NO_PROXY.

Fix http3 to support streaming response bodies.

Fix http3 dependency from public API misuse.

v0.12.14

Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

Add Form::into_reader() for blocking multipart forms.

Add Form::into_stream() for async multipart forms.

Add support for SOCKS4a proxies.

Fix decoding responses with multiple zstd frames.

Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.

Fix cloning of request timeout in blocking::Request.

Fix http3 synchronization of connection creation, reducing unneccesary extra connections.

Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.

Fix blocking read to correctly reserve and zero read buffer.

(wasm) Add support for request timeouts.

(wasm) Fix Error::is_timeout() to return true when from a request timeout.

Commits

54376c3 v0.12.15
e4bb3e6 upgrade h3-quinn (#2605)
96a4fea Merge tag 'v0.12.14'
5fd3d5b Re-enable NO_PROXY envs on Windows (#2601)
e9215fd Support streaming response body in HTTP/3 (#2517)
cf50f11 v0.12.14
f63c631 re-add fetch_mode_no_cors shim when not in wasm, but deprecated (#2598)
e44e371 v0.12.13
e83e138 Added osv-scanner.toml file to ignore npm packages in wasm examples during vu...
7e85d2f ci: pin once-cell in msrv job (#2594)
Additional commits viewable in compare view

Updates reqwest-middleware from 0.4.0 to 0.4.2

Release notes

Sourced from reqwest-middleware's releases.

reqwest-middleware-v0.4.2

Added

Deprecated fetch_mode_no_cors as it's been deprecated in reqwest.

Commits

591ab44 Deprecate fetch_mode_no_cors and prepare for release (#230)
af885fd feat: support OpenTelemetry 0.29 (#228)
101fa63 chore: bump versions for release (#222)
9fdba40 Merge pull request #215 from SimenB/otel-0-28
9445740 chore: fix clippy warnings
6d9320d ci: speed up CI by grouping more open-telemetry features
58df60f fix(ci): install wasm32 target in CI job
ad17f42 Move the request_span macro definition out of request_span, such that it take...
0b76240 Update wasm-timer to wasmtimer (#202)
2ab1ad1 Fix wasm32 build (#208)
Additional commits viewable in compare view

Updates serde from 1.0.217 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

Documentation improvements (#2991)

v1.0.226

Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @Mingun)

v1.0.225

Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @rcrisanti)

v1.0.224

Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

Fix serde_core documentation links (#2978)

v1.0.222

Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @aytey)

v1.0.221

Documentation improvements (#2973)

Deprecate serde_if_integer128! macro (#2975)

v1.0.220

Add a way for data formats to depend on serde traits without waiting for serde_derive compilation: https://docs.rs/serde_core (#2608, thanks @osiewicz)

v1.0.219

Prevent absolute_paths Clippy restriction being triggered inside macro-generated code (#2906, thanks @davidzeng0)

v1.0.218

Documentation improvements

Commits

a866b33 Release 1.0.228
5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
415d9fc Release 1.0.227
7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
9d3410e Merge pull request #2992 from dtolnay/inplaceseed
2fb6748 Remove InPlaceSeed public re-export
f8137c7 Inline serde_core into serde in docsrs mode
b7dbf7e Merge pull request #2990 from dtolnay/integer128
7c83691 No longer macro_use integer128 module
Additional commits viewable in compare view

Updates serde_json from 1.0.138 to 1.0.145

Release notes

Sourced from serde_json's releases.

v1.0.145

Raise serde version requirement to >=1.0.220

v1.0.144

Switch serde dependency to serde_core (#1285)

v1.0.143

Implement Clone and Debug for serde_json::Map iterators (#1264, thanks @xlambein)

Implement Default for CompactFormatter (#1268, thanks @SOF3)

Implement FromStr for serde_json::Map (#1271, thanks @mickvangelderen)

v1.0.142

impl Default for &Value (#1265, thanks @aatifsyed)

v1.0.141

Optimize string escaping during serialization (#1273, thanks @conradludgate)

v1.0.140

Documentation improvements

v1.0.139

Documentation improvements

Commits

efa66e3 Release 1.0.145
23679e2 Add serde version constraint
fc27baf Release 1.0.144
caef3c6 Ignore uninlined_format_args pedantic clippy lint
81ba3aa Merge pull request #1285 from dtolnay/serdecore
d21e8ce Switch serde dependency to serde_core
6beb6cd Merge pull request #1286 from dtolnay/up
1dbc803 Raise required compiler to Rust 1.61
0bf5d87 Enforce trybuild >= 1.0.108
d12e943 Update actions/checkout@v4 -> v5
Additional commits viewable in compare view

Updates size from 0.4.1 to 0.5.0

Release notes

Sourced from size's releases.

prettysize-rs 0.5.0

What's Changed

Support deserializing from string types with Size::from_str() by @mqudsi in neosmart/prettysize-rs#11

Re-export consts from crate root

Update consts documentation

Add rust GitHub CI pipeline

fix: cargo clippy warnings by @Antosser in neosmart/prettysize-rs#8

feat: Derive more traits by @Antosser in neosmart/prettysize-rs#9

Full Changelog: neosmart/prettysize-rs@0.4.1...0.5.0

This is the same release as 0.5.0-preview2 but with some clippy lints addressed.

Commits

d81576e Bump to version 0.5.0 final
2d59550 Address some lints, silence others
fd866ed Impl Default for SizeFormatter<()>
6453742 Fix cargo test without --all-features
6537ee3 Tidy up formatting and alignment
9ffc4c8 Tweak crate keywords
6ad6d57 Add tweet example
c3d6f4c Bump to version 0.5.0-preview2
20292b2 Support deserialization from string via from_str()
1e27b71 Add from_str() example w/ unabbreviated unit to README
Additional commits viewable in compare view

Updates sourmash from 0.18.0 to 0.21.0

Release notes

Sourced from sourmash's releases.

Second beta release before 1.0

No release notes provided.

Beta release before 1.0

The first tested, documented release.

Commits

6e736f2 MRG: release core 0.21.0 (#3712)
29826f5 MRG: minor updates to release docs (#3695)
99c2659 Build(deps): Bump cfg-if from 1.0.0 to 1.0.1 (#3689)
be84512 Build(deps): Bump roaring from 0.10.12 to 0.11.0 (#3702)
d4cad51 Build(deps): Bump getset from 0.1.5 to 0.1.6 (#3700)
408777b Build(deps): Update maturin requirement from <1.9.0,>=1 to >=1,<1.10.0 (#3699)
0c84775 [pre-commit.ci] pre-commit autoupdate (#3698)
a87ec47 MRG: small docs fixes and updates (#3681)
c9732cd EXP: Revert "Build(deps): Bump pypa/cibuildwheel from 2.23.3 to 3.0.0 (#3687)...
dc74a5b Build(deps): Bump pypa/cibuildwheel from 2.23.3 to 3.0.0 (#3687)
Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.19 to 0.3.20

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.20

Security Fix: ANSI Escape Sequence Injection (CVE-TBD)

Impact

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

Manipulate terminal title bars

Clear screens or modify terminal display

Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

Solution

Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.

Affected Versions

All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability.

Recommendations

Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application:

Logs user-provided input (form data, HTTP headers, query parameters, etc.)

Runs in environments where terminal output is displayed to users

Migration

This is a patch release with no breaking API changes. Simply update your Cargo.toml:
[dependencies]
tracing-subscriber = "0.3.20"
Acknowledgments

We would like to thank zefr0x who responsibly reported the issue at [email protected].

If you believe you have found a security vulnerability in any tokio-rs project, please email us at [email protected].

Commits

4c52ca5 fmt: fix ANSI escape sequence injection vulnerability (#3368)
f71cebe subscriber: impl Clone for EnvFilter (#3360)
3a1f571 Fix CI (#3361)
e63ef57 chore: prepare tracing-attributes 0.1.30 (#3316)
6e59a13 attributes: fix tracing::instrument regression around shadowing (#3311)
e4df761 tracing: update core to 0.1.34 and attributes to 0.1.29 (#3305)
643f392 chore: prepare tracing-attributes 0.1.29 (#3304)
d08e7a6 chore: prepare tracing-core 0.1.34 (#3302)
6e70c57 tracing-subscriber: count numbers of enters in Timings (#2944)
c01d4fd fix docs and enable CI on main branch (#3295)
Additional commits viewable in compare view

Updates axum from 0.8.1 to 0.8.6

Release notes

Sourced from axum's releases.

axum v0.8.5

fixed: Reject JSON request bodies with trailing characters after the JSON document (#3453)

added: Implement OptionalFromRequest for Multipart (#3220)

added: Getter methods Location::{status_code, location}

added: Support for writing arbitrary binary data into server-sent events (#3425)]

added: middleware::ResponseAxumBodyLayer for mapping response body to axum::body::Body (#3469)

added: impl FusedStream for WebSocket (#3443)

changed: The sse module and Sse type no longer depend on the tokio feature (#3154)

changed: If the location given to one of Redirects constructors is not a valid header value, instead of panicking on construction, the IntoResponse impl now returns an HTTP 500, just like Json does when serialization fails (#3377)

changed: Update minimum rust version to 1.78 (#3412)

#3154: tokio-rs/axum#3154 #3220: tokio-rs/axum#3220 #3377: tokio-rs/axum#3377 #3412: tokio-rs/axum#3412 #3425: tokio-rs/axum#3425 #3443: tokio-rs/axum#3443 #3453: tokio-rs/axum#3453 #3469: tokio-rs/axum#3469

axum v0.8.4

added: Router::reset_fallback (#3320)

added: WebSocketUpgrade::selected_protocol (#3248)

fixed: Panic location for overlapping method routes (#3319)

fixed: Don't leak a tokio task when using serve without graceful shutdown (#3129)

#3319: tokio-rs/axum#3319 #3320: tokio-rs/axum#3320 #3248: tokio-rs/axum#3248 #3129: tokio-rs/axum#3129

axum v0.8.3

added: Implement From<Bytes> for Message (#3273)

added: Implement OptionalFromRequest for Json (#3142)

added: Implement OptionalFromRequest for Extension (#3157)

added: Allow setting the read buffer capacity of WebSocketUpgrade (#3178)

changed: Improved code size / compile time of dependent crates (#3285, #3294)

#3273: tokio-rs/axum#3273 #3142: tokio-rs/axum#3142 #3157: tokio-rs/axum#3157 #3178: tokio-rs/axum#3178 #3285: tokio-rs/axum#3285 #3294: tokio-rs/axum#3294

axum v0.8.2

Yanked from crates.io due to unforeseen breaking change, see #3190 for details

... (truncated)

Commits

See full diff in compare view

Updates tokio from 1.43.0 to 1.48.0

Release notes

Sourced from tokio's releases.

Tokio v1.48.0

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

fs: add File::max_buf_size (#7594)

io: export Chain of AsyncReadExt::chain (#7599)

net: add SocketAddr::as_abstract_name (#7491)

net: add TcpStream::quickack and TcpStream::set_quickack (#7490)

net: implement AsRef<Self> for TcpStream and UnixStream (#7573)

task: add LocalKey::try_get (#7666)

task: implement Ord for task::Id (#7530)

Changed

deps: bump windows-sys to version 0.61 (#7645)

fs: preserve max_buf_size when cloning a File (#7593)

macros: suppress clippy::unwrap_in_result in #[tokio::main] (#7651)

net: remove PollEvented noise from Debug formats (#7675)

process: upgrade Command::spawn_with to use FnOnce (#7511)

sync: remove inner mutex in SetOnce (#7554)

sync: use UnsafeCell::get_mut in Mutex::get_mut and RwLock::get_mut (#7569)

time: reduce the generated code size of Timeout<T>::poll (#7535)

Fixed

macros: fix hygiene issue in join! and try_join! (#7638)

net: fix copy/paste errors in udp peek methods (#7604)

process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)

runtime: use release ordering in wake_by_ref() even if already woken (#7622)

sync: close the broadcast::Sender in broadcast::Sender::new() (#7629)

sync: fix implementation of unused RwLock::try_* methods (#7587)

Unstable

tokio: use cargo features instead of --cfg flags for taskdump and io_uring (#7655, #7621)

fs: support io_uring in fs::write (#7567)

fs: support io_uring with File::open() (#7617)

fs: support io_uring with OpenOptions (#7321)

macros: add local runtime flavor (#7375, #7597)

Documented

io: clarify the zero capacity case of AsyncRead::poll_read (#7580)

io: fix typos in the docs of AsyncFd readiness guards (#7583)

net: clarify socket gets closed on drop (

…pdates Bumps the dependencies group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [camino](https://github.com/camino-rs/camino) | `1.1.9` | `1.2.1` | | [clap](https://github.com/clap-rs/clap) | `4.5.27` | `4.5.50` | | [color-eyre](https://github.com/eyre-rs/eyre) | `0.6.3` | `0.6.5` | | [csv](https://github.com/BurntSushi/rust-csv) | `1.3.1` | `1.4.0` | | [needletail](https://github.com/onecodex/needletail) | `0.6.1` | `0.6.3` | | [niffler](https://github.com/luizirber/niffler) | `2.7.0` | `3.0.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.12` | `0.12.15` | | [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) | `0.4.0` | `0.4.2` | | [serde_json](https://github.com/serde-rs/json) | `1.0.138` | `1.0.145` | | [size](https://github.com/neosmart/prettysize-rs) | `0.4.1` | `0.5.0` | | [sourmash](https://github.com/sourmash-bio/sourmash) | `0.18.0` | `0.21.0` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.19` | `0.3.20` | | [axum](https://github.com/tokio-rs/axum) | `0.8.1` | `0.8.6` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.2` | `0.6.6` | | [sentry](https://github.com/getsentry/sentry-rust) | `0.36.0` | `0.39.0` | Updates `camino` from 1.1.9 to 1.2.1 - [Release notes](https://github.com/camino-rs/camino/releases) - [Changelog](https://github.com/camino-rs/camino/blob/main/CHANGELOG.md) - [Commits](camino-rs/camino@camino-1.1.9...camino-1.2.1) Updates `clap` from 4.5.27 to 4.5.50 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.27...clap_complete-v4.5.50) Updates `color-eyre` from 0.6.3 to 0.6.5 - [Commits](https://github.com/eyre-rs/eyre/compare/[email protected]) Updates `csv` from 1.3.1 to 1.4.0 - [Commits](BurntSushi/rust-csv@1.3.1...1.4.0) Updates `needletail` from 0.6.1 to 0.6.3 - [Release notes](https://github.com/onecodex/needletail/releases) - [Changelog](https://github.com/onecodex/needletail/blob/master/CHANGELOG.md) - [Commits](onecodex/needletail@v0.6.1...v0.6.3) Updates `niffler` from 2.7.0 to 3.0.0 - [Changelog](https://github.com/luizirber/niffler/blob/main/CHANGELOG.md) - [Commits](luizirber/niffler@v2.7.0...v3.0.0) Updates `reqwest` from 0.12.12 to 0.12.15 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.12...v0.12.15) Updates `reqwest-middleware` from 0.4.0 to 0.4.2 - [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases) - [Commits](TrueLayer/reqwest-middleware@reqwest-middleware-v0.4.0...reqwest-middleware-v0.4.2) Updates `serde` from 1.0.217 to 1.0.228 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.217...v1.0.228) Updates `serde_json` from 1.0.138 to 1.0.145 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.138...v1.0.145) Updates `size` from 0.4.1 to 0.5.0 - [Release notes](https://github.com/neosmart/prettysize-rs/releases) - [Commits](neosmart/prettysize-rs@0.4.1...0.5.0) Updates `sourmash` from 0.18.0 to 0.21.0 - [Release notes](https://github.com/sourmash-bio/sourmash/releases) - [Changelog](https://github.com/sourmash-bio/sourmash/blob/latest/doc/release.md) - [Commits](sourmash-bio/sourmash@r0.18.0...r0.21.0) Updates `tracing-subscriber` from 0.3.19 to 0.3.20 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.19...tracing-subscriber-0.3.20) Updates `axum` from 0.8.1 to 0.8.6 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](https://github.com/tokio-rs/axum/commits/axum-v0.8.6) Updates `tokio` from 1.43.0 to 1.48.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.43.0...tokio-1.48.0) Updates `tower-http` from 0.6.2 to 0.6.6 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.2...tower-http-0.6.6) Updates `sentry` from 0.36.0 to 0.39.0 - [Release notes](https://github.com/getsentry/sentry-rust/releases) - [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-rust@0.36.0...0.39.0) --- updated-dependencies: - dependency-name: camino dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: clap dependency-version: 4.5.50 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: color-eyre dependency-version: 0.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: csv dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: needletail dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: niffler dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: reqwest dependency-version: 0.12.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: reqwest-middleware dependency-version: 0.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: serde dependency-version: 1.0.228 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: serde_json dependency-version: 1.0.145 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: size dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sourmash dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tracing-subscriber dependency-version: 0.3.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: axum dependency-version: 0.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tokio dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tower-http dependency-version: 0.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: sentry dependency-version: 0.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 20, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 17 updates #93

chore(deps): bump the dependencies group across 1 directory with 17 updates #93

Uh oh!

dependabot bot commented on behalf of github Oct 20, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the dependencies group across 1 directory with 17 updates #93

Are you sure you want to change the base?

chore(deps): bump the dependencies group across 1 directory with 17 updates #93

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

camino 1.2.1

Fixed

camino 1.2.0

Changed

camino 1.1.12

Added

camino 1.1.11

Added

camino 1.1.10

Changed

[1.2.1] - 2025-09-29

Fixed

[1.2.0] - 2025-09-14

Changed

[1.1.12] - 2025-08-26

Added

[1.1.11] - 2025-08-17

Added

[1.1.10] - 2025-06-02

Changed

v4.5.50

[4.5.50] - 2025-10-20

Features

v4.5.48

[4.5.48] - 2025-09-19

Documentation

v4.5.47

[4.5.47] - 2025-09-02

Features

Fixes

v4.5.46

[4.5.46] - 2025-08-26

Features

v4.5.45

[4.5.45] - 2025-08-12

Fixes

v4.5.44

[4.5.44] - 2025-08-11

Features

[4.5.50] - 2025-10-20

Features

[4.5.49] - 2025-10-13

Fixes

[4.5.48] - 2025-09-19

Documentation

[4.5.47] - 2025-09-02

Features

Fixes

[4.5.46] - 2025-08-26

Features

[4.5.45] - 2025-08-12

Fixes

[4.5.44] - 2025-08-11

Features

v0.6.3

[3.0.0] - 2025-02-12

Changed

Added

Fixed

v0.12.15

What's Changed

New Contributors

v0.12.14

What's Changed

v0.12.13

What's Changed

New Contributors

Thanks!

v0.12.15

v0.12.14

v0.12.13

reqwest-middleware-v0.4.2

Added

dependabot bot commented on behalf of github Oct 20, 2025 •

edited

Loading