Skip to content

Bump the rust group across 1 directory with 15 updates#965

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-97eefa631e
Closed

Bump the rust group across 1 directory with 15 updates#965
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-97eefa631e

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026 •
edited
Loading

Bumps the rust group with 15 updates in the / directory:

Package From To
clap 4.5.52 4.5.54
flate2 1.1.5 1.1.8
goblin 0.10.3 0.10.4
http 1.3.1 1.4.0
hyper-util 0.1.18 0.1.19
object 0.37.3 0.38.1
octocrab 0.47.1 0.49.5
reqwest-middleware 0.4.2 0.5.0
reqwest-retry 0.7.0 0.9.0
serde_json 1.0.145 1.0.149
tempfile 3.23.0 3.24.0
tokio 1.48.0 1.49.0
tokio-util 0.7.17 0.7.18
url 2.5.7 2.5.8
zip 6.0.0 7.1.0

Updates clap from 4.5.52 to 4.5.54

Release notes

Sourced from clap's releases.

v4.5.54

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

v4.5.53

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs
Changelog

Sourced from clap's changelog.

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs
Commits
  • 194c676 chore: Release
  • 44838f6 docs: Update changelog
  • 0f59d55 Merge pull request #6027 from Alpha1337k/master
  • 3716f9f chore: Release
  • 613b69a docs: Update changelog
  • d117f7a Merge pull request #6028 from epage/arg
  • cb8255d feat(builder): Allow quoted id's for arg macro
  • e2aa2f0 Feat: Add catch-all on external subcommands for zsh
  • b9c0aee Feat: Add external subcommands test to suite
  • 1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
  • Additional commits viewable in compare view

Updates flate2 from 1.1.5 to 1.1.8

Release notes

Sourced from flate2's releases.

1.1.8

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.7...1.1.8

1.1.7 - depend on zlib-rs directly and remove libz-rs-sys

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.5...1.1.6

1.1.6 - YANKED

It caused rust-lang/flate2-rs#515.

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.5...1.1.6

Commits
  • 8b66c27 Merge pull request #525 from Byron/test-zlib-API
  • 5e752c9 Address PR review
  • 3196dd0 refactor internal feature toggles to better represent the status quo
  • 106cbcc Bump patch level in preparation for release
  • af7a0b3 Add capabilties test for functions reserved to zlib-implementations.
  • 22c77ee Describe unreachable!("...") branch in Deflate::set_level() of zlib-rs
  • b9e2979 Remove C-binding specific restriction from CI for zlib-rs test.
  • 71eb5c5 Merge pull request #524 from Byron/complete-zlib-rs
  • fec67eb zlib-rs: support set_dictionary and set_level
  • ecfdc2d update zlib-rs to 0.5.5
  • Additional commits viewable in compare view

Updates goblin from 0.10.3 to 0.10.4

Changelog

Sourced from goblin's changelog.

[0.10.4] - 2025-11-30

Added

elf.reloc: add some missing PowerPC 32-bit relocation type constants, thanks @​ivlzme: m4b/goblin#495

Fixed

pe: Fix potential out-of-bounds read in unwind/POGO info parser, thanks @​kkent030315: m4b/goblin#498 pe: Reject cyclic resource trees, thanks @​Mrmaxmeier: m4b/goblin#499 pe: Handle unpadded resource values in .NET assemblies compiled with Mono, thanks @​BinFlip: m4b/goblin#501

Commits

Updates http from 1.3.1 to 1.4.0

Release notes

Sourced from http's releases.

v1.4.0

Highlights

  • Add StatusCode::EARLY_HINTS constant for 103 Early Hints.
  • Make StatusCode::from_u16 now a const fn.
  • Make Authority::from_static now a const fn.
  • Make PathAndQuery::from_static now a const fn.
  • MSRV increased to 1.57 (allows legible const fn panic messages).

What's Changed

New Contributors

Full Changelog: hyperium/http@v1.3.1...v1.4.0

Changelog

Sourced from http's changelog.

1.4.0 (November 24, 2025)

  • Add StatusCode::EARLY_HINTS constant for 103 Early Hints.
  • Make StatusCode::from_u16 now a const fn.
  • Make Authority::from_static now a const fn.
  • Make PathAndQuery::from_static now a const fn.
  • MSRV increased to 1.57 (allows legible const fn panic messages).
Commits
  • b9625d8 v1.4.0
  • 50b009c refactor(header): inline FNV hasher to reduce dependencies (#796)
  • b370d36 feat(uri): make Authority/PathAndQuery::from_static const (#786)
  • 0d74251 chore(ci): update to actions/checkout@v5 (#800)
  • a760767 docs: remove unnecessary extern crate sentence (#799)
  • fb1d457 refactor(header): use better panic message in const HeaderName and HeaderValu...
  • 20dbd6e feat(status): Add 103 EARLY_HINTS status code (#758)
  • e7a7337 chore: bump MSRV to 1.57
  • 1888e28 tests: downgrade rand back to 0.8 for now
  • 918bbc3 chore: minor improvement for docs (#790)
  • Additional commits viewable in compare view

Updates hyper-util from 0.1.18 to 0.1.19

Release notes

Sourced from hyper-util's releases.

v0.1.19

See the related blog post.

Highlights

  • Add client::pool module for composable pools. Enable with the client-pool feature.
  • Add pool::singleton for sharing a single cloneable connection.
  • Add pool::cache for caching a list of connections.
  • Add pool::negotiate for combining two pools with upgrade and fallback negotiation.
  • Add pool::map for customizable mapping of keys and connections.

What's Changed

Full Changelog: hyperium/hyper-util@v0.1.18...v0.1.19

Changelog

Sourced from hyper-util's changelog.

0.1.19 (2025-12-03)

  • Add client::pool module for composable pools. Enable with the client-pool feature.
  • Add pool::singleton for sharing a single cloneable connection.
  • Add pool::cache for caching a list of connections.
  • Add pool::negotiate for combining two pools with upgrade and fallback negotiation.
  • Add pool::map for customizable mapping of keys and connections.
Commits
  • d574011 v0.1.19
  • 818748f docs(pool): add module level docs for pools (#248)
  • 765bc98 feat(pool): add a Map pool service type (#247)
  • 567db01 feat(pool): add a Negotiate pooling service (#228)
  • c4cf24d feat(pool): add a Cache pooling service (#227)
  • 9b1008d feat(pool): add a Singleton pool type (#226)
  • 71ef2fc docs: fix spelling mistakes. improve RFC non-compliant behaviour with user/au...
  • eed21e7 chore(ci): check docs links with full features (#245)
  • See full diff in compare view

Updates object from 0.37.3 to 0.38.1

Changelog

Sourced from object's changelog.

0.38.1

Released 2026/01/02.

Changed

  • Updated wasmparser dependency.

Added

  • Added basic PowerPC relocation support for Mach-O. #825

  • Added more ELF relocations for LoongArch. #826 #827

  • Added RelocationKind::None. #828

  • Added write::StreamingBuffer::flush. #829

0.38.0

Released 2025/11/21.

Breaking changes

  • Changed the type of macho::EXPORT_SYMBOL_FLAGS constants to u8. #817

  • Fixed the type of the StringTable parameter for read::elf::Dyn::string. #812

Changed

  • Updated hashbrown and wasmparser dependencies. #806

  • The minimum supported rust version with all features enabled has changed to 1.87.0. Changes to the minimum supported rust version are not considered breaking changes.

Added

  • Added more RISC-V constants for ELF. #809

... (truncated)

Commits

Updates octocrab from 0.47.1 to 0.49.5

Release notes

Sourced from octocrab's releases.

v0.49.5

Fixed

  • resolve docs.rs build failure (#848)

v0.49.4

Added

  • Add squash_merge_commit_title, squash_merge_commit_title to repo model (#845)

v0.49.3

Added

  • Http caching & Conditional requests (#831)

v0.49.2

Added

  • Add body_text and body_html to Comment model (#832)

v0.49.1

Added

  • provide expiration-aware installation token APIs (#837)

Fixed

  • Send body for retried requests (#842)

v0.49.0

Fixed

  • [breaking] add a cfg to make the crypto backend for jwt configurable (#834)
  • incorrect path for followers and followees (#829)

Other

  • fix various warnings in CI and deny warnings being reintroduced (#839)
  • [breaking] mark more structs as #[non_exhaustive] (#840)
  • Partial implementation of Organization CoPilot APIs (#747)
  • [codes-of-conduct] #527 (#833)

v0.48.1

Fixed

  • (build) don't fetch dependencies (#828)

v0.48.0

Added

... (truncated)

Changelog

Sourced from octocrab's changelog.

0.49.5 - 2025-12-30

Fixed

  • resolve docs.rs build failure (#848)

0.49.4 - 2025-12-25

Added

  • Add squash_merge_commit_title, squash_merge_commit_title to repo model (#845)

0.49.3 - 2025-12-21

Added

  • Http caching & Conditional requests (#831)

0.49.2 - 2025-12-20

Added

  • Add body_text and body_html to Comment model (#832)

0.49.1 - 2025-12-20

Added

  • provide expiration-aware installation token APIs (#837)

Fixed

  • Send body for retried requests (#842)

0.49.0 - 2025-12-19

Fixed

  • [breaking] add a cfg to make the crypto backend for jwt configurable (#834)
  • incorrect path for followers and followees (#829)

Other

  • fix various warnings in CI and deny warnings being reintroduced (#839)
  • [breaking] mark more structs as #[non_exhaustive] (#840)
  • Partial implementation of Organization CoPilot APIs (#747)
  • [codes-of-conduct] #527 (#833)

0.48.1 - 2025-12-02

... (truncated)

Commits

Updates reqwest-middleware from 0.4.2 to 0.5.0

Release notes

Sourced from reqwest-middleware's releases.

reqwest-middleware-v0.5.0

Added

  • Deprecated fetch_mode_no_cors as it's been deprecated in reqwest.
Commits

Updates reqwest-retry from 0.7.0 to 0.9.0

Release notes

Sourced from reqwest-retry's releases.

reqwest-retry-v0.9.0

Breaking Changes

  • Updated retry-policies (re-exported as reqwest_retry::policies) to 0.5.

Changed

  • Updated thiserror to 2.0
Commits

Updates serde_json from 1.0.145 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Updates tempfile from 3.23.0 to 3.24.0

Changelog

Sourced from tempfile's changelog.

3.24.0

  • Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.
  • Exclude CI scripts from the published crate.
Commits

Updates tokio from 1.48.0 to 1.49.0

Release notes

Sourced from tokio's releases.

Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

  • net: add support for TCLASS option on IPv6 (#7781)
  • runtime: stabilize runtime::id::Id (#7125)
  • task: implement Extend for JoinSet (#7195)
  • task: stabilize the LocalSet::id() (#7776)

Changed

  • net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

  • macros: fix the hygiene issue of join! and try_join! (#7766)
  • runtime: revert "replace manual vtable definitions with Wake" (#7699)
  • sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)
  • task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

  • fs: handle EINTR in fs::write for io-uring (#7786)
  • fs: support io-uring with tokio::fs::read (#7696)
  • runtime: disable io-uring on EPERM (#7724)
  • time: add alternative timer for better multicore scalability (#7467)

Documented

  • docs: fix a typos in bounded.rs and park.rs (#7817)
  • io: add SyncIoBridge cross-references to copy and copy_buf (#7798)
  • io: doc that AsyncWrite does not inherit from std::io::Write (#7705)
  • metrics: clarify that num_alive_tasks is not strongly consistent (#7614)
  • net: clarify the cancellation safety of the TcpStream::peek (#7305)
  • net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)
  • net: clarify the platform-dependent backlog in TcpSocket docs (#7738)
  • runtime: mention LocalRuntime in new_current_thread docs (#7820)
  • sync: add missing period to mpsc::Sender::try_send docs (#7721)
  • sync: clarify the cancellation safety of oneshot::Receiver (#7780)
  • sync: improve the docs for the errors of mpsc (#7722)
  • task: add example for spawn_local usage on local runtime (#7689)

#7125: tokio-rs/tokio#7125 #7195: tokio-rs/tokio#7195 #7305: tokio-rs/tokio#7305 #7467: tokio-rs/tokio#7467 #7614: tokio-rs/tokio#7614 #7686: tokio-rs/tokio#7686 #7689: tokio-rs/tokio#7689

... (truncated)

Commits

Updates tokio-util from 0.7.17 to 0.7.18

Commits

Updates url from 2.5.7 to 2.5.8

Commits

Updates zip from 6.0.0 to 7.1.0

Release notes

Sourced from zip's releases.

v7.1.0

🚀 Features

  • display the underlying error in Display impl for ZipError::Display (#483)
  • Enable creation of ZipArchive without reparsing (#485)

🐛 Bug Fixes

  • Return InvalidPassword rather than panic when AES key is the wrong length (#457)
  • bench with auto zip64 comment (#505)
  • add condition for getrandom dependency (#504)
  • (zipcrypto) Support streaming ZipCrypto encryption, don't store entire file in memory (#462)

🚜 Refactor

  • Clean up imports and move types (#461)
  • Replace handwritten Ord and PartialOrd for DateTime (#484)

⚙️ Miscellaneous Tasks

  • Lock lzma-rust2 to at least 0.15.5 (#491)

v7.0.0

⚠️ Breaking Changes

  • Removed the following features: getrandom, hmac, pbkdf2, sh...

    Description has been truncated

@dependabot
Bump the rust group across 1 directory with 15 updates
0b26b3a 
Bumps the rust group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.52` | `4.5.54` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.5` | `1.1.8` |
| [goblin](https://github.com/m4b/goblin) | `0.10.3` | `0.10.4` |
| [http](https://github.com/hyperium/http) | `1.3.1` | `1.4.0` |
| [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.18` | `0.1.19` |
| [object](https://github.com/gimli-rs/object) | `0.37.3` | `0.38.1` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.47.1` | `0.49.5` |
| [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) | `0.4.2` | `0.5.0` |
| [reqwest-retry](https://github.com/TrueLayer/reqwest-middleware) | `0.7.0` | `0.9.0` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.149` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.24.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.49.0` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.17` | `0.7.18` |
| [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` |
| [zip](https://github.com/zip-rs/zip2) | `6.0.0` | `7.1.0` |



Updates `clap` from 4.5.52 to 4.5.54
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.52...clap_complete-v4.5.54)

Updates `flate2` from 1.1.5 to 1.1.8
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.5...1.1.8)

Updates `goblin` from 0.10.3 to 0.10.4
- [Changelog](https://github.com/m4b/goblin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/m4b/goblin/commits)

Updates `http` from 1.3.1 to 1.4.0
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v1.3.1...v1.4.0)

Updates `hyper-util` from 0.1.18 to 0.1.19
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.18...v0.1.19)

Updates `object` from 0.37.3 to 0.38.1
- [Changelog](https://github.com/gimli-rs/object/blob/master/CHANGELOG.md)
- [Commits](gimli-rs/object@0.37.3...0.38.1)

Updates `octocrab` from 0.47.1 to 0.49.5
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.47.1...v0.49.5)

Updates `reqwest-middleware` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases)
- [Commits](TrueLayer/reqwest-middleware@reqwest-middleware-v0.4.2...reqwest-middleware-v0.5.0)

Updates `reqwest-retry` from 0.7.0 to 0.9.0
- [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases)
- [Commits](TrueLayer/reqwest-middleware@reqwest-retry-v0.7.0...reqwest-retry-v0.9.0)

Updates `serde_json` from 1.0.145 to 1.0.149
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.149)

Updates `tempfile` from 3.23.0 to 3.24.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.23.0...v3.24.0)

Updates `tokio` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.49.0)

Updates `tokio-util` from 0.7.17 to 0.7.18
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.17...tokio-util-0.7.18)

Updates `url` from 2.5.7 to 2.5.8
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](servo/rust-url@v2.5.7...v2.5.8)

Updates `zip` from 6.0.0 to 7.1.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v6.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: flate2
  dependency-version: 1.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: goblin
  dependency-version: 0.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: http
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: hyper-util
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: object
  dependency-version: 0.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: octocrab
  dependency-version: 0.49.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: reqwest-middleware
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: reqwest-retry
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: serde_json
  dependency-version: 1.0.149
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: tempfile
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: tokio
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: tokio-util
  dependency-version: 0.7.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: url
  dependency-version: 2.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: zip
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Feb 1, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 1, 2026
@dependabot dependabot bot deleted the dependabot/cargo/rust-97eefa631e branch March 1, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants