chore(deps): bump the cargo-deps group across 1 directory with 13 updates by dependabot[bot] · Pull Request #4156 · yewstack/yew

dependabot · 2026-05-08T20:38:08Z

Bumps the cargo-deps group with 13 updates in the / directory:

Package	From	To
tokio	`1.51.0`	`1.52.3`
clap	`4.6.0`	`4.6.1`
reqwest	`0.13.2`	`0.13.3`
axum	`0.8.8`	`0.8.9`
indexmap	`2.13.1`	`2.14.0`
gloo-net	`0.6.0`	`0.7.0`
lru	`0.16.3`	`0.18.0`
matchit	`0.9.1`	`0.9.2`
average	`0.16.0`	`0.17.0`
libc	`0.2.184`	`0.2.186`
tower-http	`0.6.8`	`0.6.10`
zxcvbn	`3.1.0`	`3.1.1`
uuid	`1.23.0`	`1.23.1`

Updates tokio from 1.51.0 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)

sync: notify receivers in mpsc OwnedPermit::release() method (#8075)

sync: require that an RwLock has max_readers != 0 (#8076)

sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)

net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)

taskdump: add trace_with() for customized task dumps (#8025)

taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)

fs: support io_uring in AsyncRead for File (#7907)

... (truncated)

Commits

d875691 chore: prepare Tokio v1.52.3 (#8130)
e1aebb0 Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)
fd63094 chore: prepare Tokio v1.51.3 (#8127)
8c600d0 Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)
11bfc13 chore: prepare Tokio v1.47.5 (#8122)
f085b62 sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
30d25cc sync: require that an RwLock has max_readers != 0 (#8076)
9fccf53 sync: return Empty from try_recv() when mpsc is closed with outstanding p...
ebf61b4 sync: fix underflow in mpsc channel len() (#8062)
4abe9d7 chore: prepare Tokio v1.52.2 (#8115)
Additional commits viewable in compare view

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Commits

1420275 chore: Release
d2c817d docs: Update changelog
f88c94e Merge pull request #6341 from epage/sep
acbb822 fix(complete): Reduce risk of conflict with actual subcommands
a49fadb refactor(complete): Pull out subcommand separator
ddc008b Merge pull request #6332 from epage/update
497dc50 chore: Update compatible dependencies
dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
54bdaa3 chore(deps): Update j178/prek-action action to v2
f0d30d9 chore: Release
Additional commits viewable in compare view

Updates reqwest from 0.13.2 to 0.13.3

Release notes

Sourced from reqwest's releases.

v0.13.3

tl;dr

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

Update docs.rs Features by @JamesWiresmith in seanmonstar/reqwest#2961

fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @monosans in seanmonstar/reqwest#2797

fix: remove timeout con by @cuiweixie in seanmonstar/reqwest#2967

http3: handle stop_sending without error by @anuraaga in seanmonstar/reqwest#2978

resolve: debug log to change only host by @lms0806 in seanmonstar/reqwest#2992

Edit reference link by @lms0806 in seanmonstar/reqwest#2996

docs: more accurate about default HTTP2 window sizes by @seanmonstar in seanmonstar/reqwest#3007

[HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 by @lyuzichong in seanmonstar/reqwest#3006

Upgrade rustls-platform-verifier by @jplatte in seanmonstar/reqwest#3010

use wasm-bindgen ecosystem only for wasm32-unknown-* target by @Ludea in seanmonstar/reqwest#3000

fix rustls crl pem parsing by @Threated in seanmonstar/reqwest#3013

docs(retry): include ReqRep in docsrs by @seanmonstar in seanmonstar/reqwest#3020

New Contributors

@JamesWiresmith made their first contribution in seanmonstar/reqwest#2961

@monosans made their first contribution in seanmonstar/reqwest#2797

@cuiweixie made their first contribution in seanmonstar/reqwest#2967

@anuraaga made their first contribution in seanmonstar/reqwest#2978

@lms0806 made their first contribution in seanmonstar/reqwest#2992

@lyuzichong made their first contribution in seanmonstar/reqwest#3006

@Ludea made their first contribution in seanmonstar/reqwest#3000

Full Changelog: seanmonstar/reqwest@v0.13.2...v0.13.3

Changelog

Sourced from reqwest's changelog.

v0.13.3

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

Commits

a9a88c4 v0.13.3
f3f6d9d docs(retry): include ReqRep in docsrs (#3020)
5f9c231 fix rustls CRL PEM parsing (#3013)
11d835d use wasm-bindgen ecosystem only for wasm32-unknown-* target (#3000)
1f72916 Upgrade rustls-platform-verifier (#3010)
5d5bf35 [HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 (#3006)
93dc1b2 docs: more accurate about default HTTP2 window sizes (#3007)
c5e50f0 docs: update outdated link in comments
b25611f resolve: debug log to change only host (#2992)
ca1f479 http3: handle stop_sending without error (#2978)
Additional commits viewable in compare view

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)

changed: Update minimum rust version to 1.80 (#3620)

fixed: Set connect endpoint on correct field in MethodRouter (#3656)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates indexmap from 2.13.1 to 2.14.0

Changelog

Sourced from indexmap's changelog.

2.14.0 (2026-04-09)

MSRV: Rust 1.85.0 or later is now required.

Updated the hashbrown dependency to 0.17.

Made more map::Slice methods const: new_mut, first_mut, last_mut, split_at_mut, split_at_mut_checked, split_first_mut, split_last_mut

Commits

bcd165b Merge pull request #439 from cuviper/release-2.14.0
4ef06a7 Release 2.14.0
d21826c Merge pull request #438 from cuviper/hashbrown-0.17
2566bec Upgrade to hashbrown v0.17
4b62776 Merge pull request #437 from cuviper/disjoint-panic
478fba2 Normalize the panic doc of get_disjoint_mut
fb6dafd Merge pull request #436 from cuviper/const-slice-mut
5c237a2 Make Slice::{first,last,split_*}_mut methods const
48ff9ce Merge pull request #435 from cuviper/edition-2024
648be98 cargo fmt with edition 2024
Additional commits viewable in compare view

Updates gloo-net from 0.6.0 to 0.7.0

Release notes

Sourced from gloo-net's releases.

gloo-net 0.7.0

MSRV updated to 1.82

Breaking

Remove Clone implementation for EventSource (#417) by @vpochapuis Cloning had a bug where dropping any clone would disconnect all instances.

New Features

Add EventSourceBuilder for configuring EventSource with credentials (#530) by @zn3x

Add WebSocket::buffered_amount (#510) by @vi

Add PartialEq, Eq, Hash derives to CloseEvent (#504) by @Alexi24601

Fixes

Fix RequestBuilder::build producing a URL with an extra & (#497) by @hmacias-avaya

Fix WebSocket binary send panicking when SharedArrayBuffer is enabled (#502) by @Fedeparma74

Maintenance

Bump pin-project to 1.1 and http to 1.4 (#536) by @Madoshakalaka

Changelog

Sourced from gloo-net's changelog.

Version 0.7.0

Remove Clone implementation for EventSource (#417) by @vpochapuis Cloning had a bug where dropping any clone would disconnect all instances.

Add EventSourceBuilder for configuring EventSource with credentials (#530) by @zn3x

Add WebSocket::buffered_amount (#510) by @vi

Add PartialEq, Eq, Hash derives to CloseEvent (#504) by @Alexi24601

Fix RequestBuilder::build producing a URL with an extra & (#497) by @hmacias-avaya

Fix WebSocket binary send panicking when SharedArrayBuffer is enabled (#502) by @Fedeparma74

Update MSRV to 1.82 (#505) by @martinfrances107

Bump pin-project to 1.1 and http to 1.4 (#536) by @Madoshakalaka

Commits

d69fcff chore: release gloo-net 0.7.0
7a57df3 chore: release gloo-file 0.4.0
2685476 fix: correct gloo-history category slugs
b1d5129 fix: correct gloo-storage category slugs
8316f33 fix: correct gloo-render category slugs
0734551 chore: release gloo-console 0.4.0, gloo-dialogs 0.3.0, gloo-events 0.3.0, glo...
e6280d4 chore: release gloo-utils 0.3.0
cca8089 chore: release gloo-worker-macros 0.2.0 and gloo-worker 0.6.0
a8af99c chore: update rust dependencies (#536)
0de5865 fix(net)!: remove EventSource Clone implementation (#417)
Additional commits viewable in compare view

Updates lru from 0.16.3 to 0.18.0

Changelog

Sourced from lru's changelog.

v0.18.0 - 2026-04-27

Fix unconstrained lifetime in get_or_insert_mut_ref.

v0.17.0 - 2026-04-14

Upgrade hashbrown to 0.17.0 and update MSRV to 1.85.0.

v0.16.4 - 2026-04-13

Add get_or_insert_with_key and variants.

Commits

dac07e3 Merge pull request #234 from jeromefroe/jerome/prepare-0-18-0-release
0335315 Prepare 0.18.0 release
e40bbdc Merge pull request #233 from paolobarbolini/get_or_insert_mut_ref-unconstrain...
a615a5b Fix unconstrained lifetime in LruCache::get_or_insert_mut_ref
13321a9 Merge pull request #232 from jeromefroe/jerome/prepare-0-17-0-release
f7d0ece Prepare 0.17.0 release
2d3d6d5 Merge pull request #231 from xtqqczze/deps/hashbrown
346e2fe Bump hashbrown to 0.17.0
1302b4e Update MSRV to 1.85.0
d8c7f5c Merge pull request #230 from jeromefroe/jerome/prepare-0-16-4-release
Additional commits viewable in compare view

Updates matchit from 0.9.1 to 0.9.2

Release notes

Sourced from matchit's releases.

0.9.2

Fixed a couple false positive route conflicts (ibraheemdev/matchit#89, ibraheemdev/matchit#91).

Commits

4b5a2c3 release 0.9.2
bc1ac7a fix prefix-suffix conflict due to insertion order of trailing slashes
500698f fix false conflict
See full diff in compare view

Updates average from 0.16.0 to 0.17.0

Commits

See full diff in compare view

Updates libc from 0.2.184 to 0.2.186

Release notes

Sourced from libc's releases.

0.2.186

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185

Added

EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)

Hexagon: add missing constants and fix types for linux-musl (#5042)

Redox: Add semaphore functions (#5051)

Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

Hexagon: Decouple time64 types from musl symbol redirects (#5040)

Horizon: Change POLL constants from c_short to c_int (#5045)

Changelog

Sourced from libc's changelog.

0.2.186 - 2026-04-24

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185 - 2026-04-13

Added

EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)

Hexagon: add missing constants and fix types for linux-musl (#5042)

Redox: Add semaphore functions (#5051)

Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

Hexagon: Decouple time64 types from musl symbol redirects (#5040)

Horizon: Change POLL constants from c_short to c_int (#5045)

Commits

42620ff [0.2] libc: Release 0.2.186
9db2eaa apple: add KEVENT_FLAG_* constants
3840939 Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE for linux
f697deb chore: migrate from Cirrus CI to GHA
71d5bfc libc: Release 0.2.185
1027d1c Revert "ci: Pin nightly to 2026-04-01"
0e9c6e5 redox: Add semaphore functions
24ef457 feat: add back support for gnu windows x86 in ci
aa75caf horizon: Change POLL constants from c_short to c_int
b7eda5a hexagon: add missing constants and fix types for linux-musl
Additional commits viewable in compare view

Updates tower-http from 0.6.8 to 0.6.10

Release notes

Sourced from tower-http's releases.

tower-http-0.6.10

Added

follow-redirect: expose Attempt::method() and Attempt::previous_method() so redirect policies can react to method changes across redirects (e.g. POST to GET on 301/303) (#559)

Fixed

Restore tokio and async-compression as no-op features. These will be removed next breaking release (#667)

#559: tower-rs/tower-http#559 #667: tower-rs/tower-http#667

What's Changed

fix: restore tokio and async-compression as no-op features by @jlizen in tower-rs/tower-http#667

fix gate-ing of atomic64 in tests by @alexanderkjall in tower-rs/tower-http#607

follow_redirect: expose previous and next request methods by @lucab in tower-rs/tower-http#559

chore: release tower-http 0.6.10 by @jlizen in tower-rs/tower-http#669

New Contributors

@lucab made their first contribution in tower-rs/tower-http#559

Full Changelog: tower-rs/tower-http@tower-http-0.6.9...tower-http-0.6.10

tower-http-0.6.9

Added:
on-early-drop: middleware that detects when a response future or response body is dropped before completion (#636)

Two events get hooks: the response future being dropped before the inner service produces a response, and the response body being dropped before reaching end-of-stream.

Install custom callbacks with OnEarlyDropLayer::builder():
use http::Request;
use tower_http::on_early_drop::{OnBodyDropFn, OnEarlyDropLayer};
let layer = OnEarlyDropLayer::builder()
.on_future_drop(|req: &Request<()>| {
let uri = req.uri().clone();
move || eprintln!("future dropped for {}", uri)
})
.on_body_drop(OnBodyDropFn::new(|req: &Request<()>| {

... (truncated)

Commits

4532fc2 v0.6.10
8508cb2 follow_redirect: expose previous and next request methods (#559)
890f66a fix gate-ing of atomic64 in tests (#607)
578c2b2 fix: restore tokio and async-compression as no-op features (#667)
eab7cbf v0.6.9
9c64770 feat(on-early-drop): Add middleware for client early drop detection (#636)
67786ff ci: Remove unnecessary protoc setup (#665)
e442e2b examples: Use axum::body::to_bytes (#650)
218fe6b Make AsyncReadBody::with_capacity public (#415)
ffd4d7c trace: adds back call to classify_eos on trailers (#483)
Additional commits viewable in compare view

Updates zxcvbn from 3.1.0 to 3.1.1

Changelog

Sourced from zxcvbn's changelog.

Version 3.1.1

Bump all dependencies

Add Deserialize implementation to ser feature

Version 3.1.0

Add Display to Feedback

Add support for WASM targets running in a custom runtime

Version 3.0.1

Fix a bug in 3.0.0 where the Score enum was private

Fix a bug where some structs that were intended to implement Serialize when the ser feature was enabled did not implement it

Version 3.0.0

[Breaking] Avoid the possibility for zxcvbn to error

[Breaking] Refactor the score into an exhaustive enum

[Breaking] Change feedback to return Option<&Feedback>

Bump itertools dependency to 0.13

Version 2.2.2

Fix a possible panic in spatial pattern checker (shssoichiro/zxcvbn-rs#70)

Update several dependencies

Fix several new clippy lints

Officially specify minimum Rust version requirement

The version has not changed, but the requirement has now been added to Cargo.toml

Version 2.2.1

Fixes for building on WASM targets

Version 2.2.0

Fix an issue where a less specific feedback would be given when a more specific feedback was available. (shssoichiro/zxcvbn-rs#54)

Migrate to Rust edition 2021

Migrate from chrono crate to time crate

Update fancy-regex to 0.8

Version 2.1.1

Do not download and build wasm dependencies if not building for wasm

Version 2.1.0

[Feature] Add support for wasm

Deprecate the usage of builders (it will still work for now, but will be removed in the next major release)

... (truncated)

Commits

e794323 Version 3.1.1
0bd01c1 fix: resolve test clippy lints
468ddc3 chore: fix tests that depended on the current year
75471f1 chore: update all dependencies
38410db Add Deserialize implementation to the ser feature.
See full diff in compare view

Updates uuid from 1.23.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in uuid-rs/uuid#877

fix: Timestamp::from_gregorian deprecation note by @aznashwan in uuid-rs/uuid#878

Prepare for 1.23.1 release by @KodrAus in uuid-rs/uuid#879

New Contributors

@guybedford made their first contribution in uuid-rs/uuid#877

@aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

Commits

ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
b4db015 prepare for 1.23.1 release
771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
80994a2 fix: Timestamp::from_gregorian deprecation note
90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
tower-http	[>= 0.4.a, < 0.5]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the cargo-deps group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.51.0` | `1.52.3` | | [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.2` | `0.13.3` | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | [indexmap](https://github.com/indexmap-rs/indexmap) | `2.13.1` | `2.14.0` | | [gloo-net](https://github.com/rustwasm/gloo) | `0.6.0` | `0.7.0` | | [lru](https://github.com/jeromefroe/lru-rs) | `0.16.3` | `0.18.0` | | [matchit](https://github.com/ibraheemdev/matchit) | `0.9.1` | `0.9.2` | | [average](https://github.com/vks/average) | `0.16.0` | `0.17.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.184` | `0.2.186` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.10` | | [zxcvbn](https://github.com/shssoichiro/zxcvbn-rs) | `3.1.0` | `3.1.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.23.1` | Updates `tokio` from 1.51.0 to 1.52.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.51.0...tokio-1.52.3) Updates `clap` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1) Updates `reqwest` from 0.13.2 to 0.13.3 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.2...v0.13.3) Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `indexmap` from 2.13.1 to 2.14.0 - [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.13.1...2.14.0) Updates `gloo-net` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/rustwasm/gloo/releases) - [Changelog](https://github.com/ranile/gloo/blob/master/CHANGELOG.md) - [Commits](ranile/gloo@0.6.0...gloo-net-v0.7.0) Updates `lru` from 0.16.3 to 0.18.0 - [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md) - [Commits](jeromefroe/lru-rs@0.16.3...0.18.0) Updates `matchit` from 0.9.1 to 0.9.2 - [Release notes](https://github.com/ibraheemdev/matchit/releases) - [Commits](ibraheemdev/matchit@v0.9.1...v0.9.2) Updates `average` from 0.16.0 to 0.17.0 - [Commits](https://github.com/vks/average/commits) Updates `libc` from 0.2.184 to 0.2.186 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.184...0.2.186) Updates `tower-http` from 0.6.8 to 0.6.10 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.10) Updates `zxcvbn` from 3.1.0 to 3.1.1 - [Changelog](https://github.com/shssoichiro/zxcvbn-rs/blob/master/CHANGELOG.md) - [Commits](shssoichiro/zxcvbn-rs@v3.1.0...v3.1.1) Updates `uuid` from 1.23.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.0...v1.23.1) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.52.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: reqwest dependency-version: 0.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: indexmap dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: gloo-net dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: lru dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: matchit dependency-version: 0.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: average dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: libc dependency-version: 0.2.186 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: tower-http dependency-version: 0.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: zxcvbn dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: uuid dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-08T20:40:56Z

Benchmark - core

Yew Master

vnode           fastest       │ slowest       │ median        │ mean          │ samples │ iters
╰─ vnode_clone  4.02 ns       │ 4.265 ns      │ 4.025 ns      │ 4.031 ns      │ 100     │ 1000000000

Pull Request

vnode           fastest       │ slowest       │ median        │ mean          │ samples │ iters
╰─ vnode_clone  2.716 ns      │ 3.963 ns      │ 2.72 ns       │ 2.737 ns      │ 100     │ 1000000000

github-actions · 2026-05-08T20:41:03Z

Visit the preview URL for this PR (updated for commit ef9ac76):

https://yew-rs-api--pr4156-dependabot-cargo-car-1ocfobfz.web.app

_{(expires Fri, 15 May 2026 20:40:56 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

github-actions · 2026-05-08T20:45:04Z

Size Comparison

Details

examples	master (KB)	pull request (KB)	diff (KB)	diff (%)
async_clock	99.889	99.916	+0.027	+0.027%
boids	163.629	163.662	+0.033	+0.020%
communication_child_to_parent	93.346	93.370	+0.024	+0.026%
communication_grandchild_with_grandparent	105.359	105.387	+0.027	+0.026%
communication_grandparent_to_grandchild	101.709	101.741	+0.032	+0.032%
communication_parent_to_child	90.775	90.805	+0.029	+0.032%
contexts	105.638	105.667	+0.029	+0.028%
counter	85.605	85.633	+0.027	+0.032%
counter_functional	87.624	87.653	+0.029	+0.033%
dyn_create_destroy_apps	89.490	89.517	+0.026	+0.029%
file_upload	98.630	98.480	-0.149	-0.151%
function_delayed_input	94.218	94.249	+0.031	+0.033%
function_memory_game	167.131	167.169	+0.038	+0.023%
function_router	398.165	398.741	+0.576	+0.145%
function_todomvc	163.946	163.984	+0.038	+0.023%
futures	234.703	234.923	+0.220	+0.094%
game_of_life	100.275	100.319	+0.044	+0.044%
immutable	257.790	257.057	-0.733	-0.284%
inner_html	80.473	80.500	+0.027	+0.034%
js_callback	109.451	109.479	+0.027	+0.025%
keyed_list	175.760	175.791	+0.031	+0.018%
mount_point	83.829	83.858	+0.029	+0.035%
nested_list	112.566	112.612	+0.046	+0.041%
node_refs	91.364	91.391	+0.026	+0.029%
password_strength	1719.002	1767.885	+48.883	+2.844%
portals	93.007	93.038	+0.031	+0.034%
router	364.940	365.507	+0.566	+0.155%
suspense	113.352	113.385	+0.033	+0.029%
timer	88.181	88.208	+0.027	+0.031%
timer_functional	99.020	99.050	+0.030	+0.031%
todomvc	140.999	141.043	+0.044	+0.031%
two_apps	85.801	85.828	+0.027	+0.032%
web_worker_fib	135.983	135.835	-0.148	-0.109%
web_worker_prime	184.403	184.248	-0.155	-0.084%
webgl	82.615	82.646	+0.031	+0.038%

⚠️ The following example has changed its size significantly:

examples	master (KB)	pull request (KB)	diff (KB)	diff (%)
password_strength	1719.002	1767.885	+48.883	+2.844%

github-actions · 2026-05-08T21:00:03Z

Benchmark - SSR

Yew Master

Details

Benchmark	Round	Min (ms)	Max (ms)	Mean (ms)	Standard Deviation
Baseline	10	311.126	313.401	311.531	0.671
Hello World	10	509.984	518.638	512.750	3.140
Function Router	10	44210.551	45503.013	45082.511	441.815
Concurrent Task	10	1006.098	1007.546	1006.904	0.516
Many Providers	10	1056.933	1105.652	1078.172	14.603

Pull Request

Details

Benchmark	Round	Min (ms)	Max (ms)	Mean (ms)	Standard Deviation
Baseline	10	311.037	312.391	311.365	0.403
Hello World	10	459.488	469.261	462.730	2.751
Function Router	10	32982.265	45219.169	38949.030	3575.683
Concurrent Task	10	1005.522	1007.617	1006.836	0.682
Many Providers	10	1015.411	1104.072	1043.872	28.265

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 8, 2026

github-actions Bot approved these changes May 8, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the cargo-deps group across 1 directory with 13 updates#4156

chore(deps): bump the cargo-deps group across 1 directory with 13 updates#4156
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/cargo-deps-43a7179d5d

dependabot Bot commented on behalf of github May 8, 2026

Uh oh!

github-actions Bot commented May 8, 2026

Uh oh!

github-actions Bot commented May 8, 2026

Uh oh!

github-actions Bot commented May 8, 2026

Uh oh!

github-actions Bot commented May 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 8, 2026

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

Tokio v1.52.2

1.52.2 (May 4th, 2026)

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.1] - 2026-04-15

Fixes

v0.13.3

tl;dr

What's Changed

New Contributors

v0.13.3

axum-v0.8.9

2.14.0 (2026-04-09)

gloo-net 0.7.0

Breaking

New Features

Fixes

Maintenance

Version 0.7.0

v0.18.0 - 2026-04-27

v0.17.0 - 2026-04-14

v0.16.4 - 2026-04-13

0.9.2

0.2.186

Added

Changed

0.2.185

Added

Fixed

0.2.186 - 2026-04-24

Added

Changed

0.2.185 - 2026-04-13

Added

Fixed

tower-http-0.6.10

Added

Fixed

What's Changed

New Contributors

tower-http-0.6.9

Added:

v1.23.1

What's Changed

New Contributors

Uh oh!

github-actions Bot commented May 8, 2026

Benchmark - core

Yew Master

Pull Request

Uh oh!

github-actions Bot commented May 8, 2026

Uh oh!

github-actions Bot commented May 8, 2026

Size Comparison

Uh oh!

github-actions Bot commented May 8, 2026

Benchmark - SSR

Yew Master

Pull Request

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone