Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 3 updates - #906

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-dependencies-7e9f8e0902
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-dependencies-7e9f8e0902

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 3 updates in the / directory: cached, uuid and tokio.

Updates cached from 4.0.0 to 4.0.1

Changelog

Sourced from cached's changelog.

[4.0.1] - 2026-10-01

Changed

  • Replace the unmaintained smartstring dev-dependency with compact_str. The macro tests still cover a third-party small-string key and value type. No change to the published crates.
Commits

Updates uuid from 1.26.1 to 1.27.0

Release notes

Sourced from uuid's releases.

v1.27.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits
  • b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
  • ffd8ec5 prepare for 1.27.0 release
  • 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
  • a1aa126 Merge pull request #912 from jaideeppyne/fix/urn-prefix-case-insensitive
  • 4639d67 fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos
  • 2723703 bump MSRV to 1.89.0
  • a3e64fa refactor: simplify URN prefix parsing
  • 5055fd4 refactor: inline case-insensitive URN prefix checks
  • cb8b1d5 refactor: simplify case-insensitive URN parsing
  • 285967d Accept case-insensitive urn:uuid: prefixes when parsing
  • See full diff in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view


Note

Low Risk
Lockfile-only patch bumps with no app code changes; tokio and uuid fixes are low-risk but touch async runtime and v7 UUID behavior used by the workspace.

Overview
Updates Cargo.lock to pull newer patch releases for workspace dependencies: cached 4.0.0 → 4.0.2, tokio 1.53.1 → 1.53.3, and uuid 1.26.1 → 1.28.0. Root Cargo.toml constraints are unchanged; this only refreshes resolved crate versions.

tokio picks up runtime/sync/fs/process fixes (e.g. mpsc reclamation, semaphore validation, timer shutdown). uuid adds case-insensitive urn:uuid: parsing and corrects v7 ordering when subsecond nanos cross second boundaries—relevant because the workspace enables the v7 feature. cached moves to a newer 4.0.x line (4.0.1+ is dev/test dependency housekeeping upstream).

The lockfile also shifts winapi-util’s transitive windows-sys pin (0.61.2 → 0.48.0), a resolution-side effect with no direct manifest edits in this diff.

Reviewed by Cursor Bugbot for commit ddd9095. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 15, 2026
@github-actions

github-actions Bot commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

📊 Performance Report

Commit: ddd9095
Updated: 2026-10-16 08:18:59 UTC

Cala Performance Benchmark Results (non-representative)

Criterion Benchmark Results (single-threaded)

Benchmark Time per Run Throughput % vs Baseline
post_simple_transaction 2.854ms 350 tx/s 0 (baseline)
post_backdated_transaction_with_effective_balances_365_days 13.529ms 73 tx/s -373.0%
post_multi_layer_transaction 3.084ms 324 tx/s -8.0%
post_simple_transaction_with_effective_balances 2.920ms 342 tx/s -2.0%
post_simple_transaction_with_skipped_velocity 2.309ms 432 tx/s +19.0%
post_simple_transaction_with_velocity 2.927ms 341 tx/s -2.0%
post_simple_transaction_with_hit_velocity 1.503ms 665 tx/s +47.0%
post_simple_transaction_with_one_account_set 2.499ms 400 tx/s +12.0%
post_simple_transaction_with_five_account_sets 3.197ms 312 tx/s -11.0%
post_simple_transaction_with_ec_account_set 3.393ms 294 tx/s -18.0%

Load Testing Results (parallel-execution)

Scenario tx/s
1 parallel 240.78
2 parallel 392.49
5 parallel 536.54
10 parallel 530.63
20 parallel 512.08
2 contention 278.21
5 contention 295.25
2 acct_sets 198.01
5 acct_sets 226.56

Note: Performance results may vary based on system resources and database state.

Last updated by commit ddd9095

@dependabot dependabot Bot changed the title chore(deps): bump the all-dependencies group with 3 updates chore(deps): bump the all-dependencies group across 1 directory with 3 updates Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/all-dependencies-7e9f8e0902 branch 2 times, most recently from 57df4f4 to ca46710 Compare October 15, 2026 14:33
…3 updates

Bumps the all-dependencies group with 3 updates in the / directory: [cached](https://github.com/jaemk/cached), [uuid](https://github.com/uuid-rs/uuid) and [tokio](https://github.com/tokio-rs/tokio).


Updates `cached` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/jaemk/cached/releases)
- [Changelog](https://github.com/jaemk/cached/blob/master/CHANGELOG.md)
- [Commits](jaemk/cached@v4.0.0...v4.0.1)

Updates `uuid` from 1.26.1 to 1.27.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.27.0)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

---
updated-dependencies:
- dependency-name: cached
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: uuid
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/all-dependencies-7e9f8e0902 branch from ca46710 to ddd9095 Compare October 16, 2026 08:03

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants