Bump the "backend" group with 1 update across multiple ecosystems by dependabot[bot] · Pull Request #762 · cncf/open-community-groups

dependabot · 2026-11-01T17:09:15Z

Bumps the backend group with 10 updates:

Package	From	To
aws-sdk-s3	`1.154.0`	`1.155.0`
cached	`2.0.2`	`4.0.3`
icalendar	`0.17.15`	`0.17.16`
iref	`3.2.2`	`5.0.0`
quick-xml	`0.41.0`	`0.42.0`
rkyv	`0.7.46`	`0.8.18`
tower-sessions	`0.14.0`	`0.15.0`
uuid	`1.28.0`	`1.29.0`
webpki-root-certs	`1.0.10`	`1.0.11`
webpki-roots	`1.0.10`	`1.0.11`

Updates aws-sdk-s3 from 1.154.0 to 1.155.0

Commits

See full diff in compare view

Updates cached from 2.0.2 to 4.0.3

Release notes

Sourced from cached's releases.

cached_proc_macro-v3.0.1

What's Changed

Pin the cargo-readme version CI installs by @jaemk in jaemk/cached#321

Correct the extreme-ttl doc claims about the sharded stores by @jaemk in jaemk/cached#322

Add ClaimRegistry: a single-flight guard for background refreshes by @jaemk in jaemk/cached#323

Capability traits, and borrowed keys on the sharded lookups by @jaemk in jaemk/cached#324

keep the generated clone inside the macro expansion so nightly clippy's clone_on_copy stays quiet by @raimannma in jaemk/cached#325

guard the generated clone's syntax context on nightly by @jaemk in jaemk/cached#326

release 4.0.0 / cached_proc_macro 3.0.1 by @jaemk in jaemk/cached#327

Full Changelog: jaemk/cached@v3.1.1...cached_proc_macro-v3.0.1

cached_proc_macro-v3.0.0

What's Changed

feat: remove CacheSetError, rename TtlSortedCache insert* to set*, wrap order-method values in CacheValue by @jaemk in jaemk/cached#293

feat: sharded peek, builder new(), ext alias parity, concurrent cache_try_get_or_set_with, retain on map stores by @jaemk in jaemk/cached#294

docs: fix cache_contains implementor listing and docsrs gate, note Arc<T> return pattern, add peek recency test by @jaemk in jaemk/cached#295

fix: clear Clone error for #[cached] return types, async_core docsrs badges, doc and spec corrections by @jaemk in jaemk/cached#296

feat: TtlSortedCache::set_with builder, ConcurrentCachePeek, ConcurrentCachedExt::try_get_or_set_with by @jaemk in jaemk/cached#297

feat: retain on TtlSortedCache and the six sharded stores by @jaemk in jaemk/cached#298

perf: in-memory and sharded store speedups; promote on cache_set overwrite by @jaemk in jaemk/cached#299

feat: derive default shard count from max_size, make cache_contains dyn-callable by @jaemk in jaemk/cached#300

feat: count evictions before on_evict, clear Clone error for #[once], no-callback retain fast path by @jaemk in jaemk/cached#301

3.0.0-rc.10: retain returns removed count, ConcurrentCachePeekAsync, MSRV 1.92 by @jaemk in jaemk/cached#302

ci: trigger the release on an unpublished version, fail on partial publish by @jaemk in jaemk/cached#303

docs: correct the backfill claim in tag-release.sh by @jaemk in jaemk/cached#304

Collapse sharded *Base types, split refresh-on-hit traits, fix redis key collisions by @jaemk in jaemk/cached#305

Hasher in builder slot 3, drop the serde feature, fix stale docs by @jaemk in jaemk/cached#306

Panic-safe sweeps, result_fallback lost update, redis/redb correctness by @jaemk in jaemk/cached#307

Sharded overwrite on_evict key, migration guide corrections, proc_macro alias by @jaemk in jaemk/cached#308

Release 3.0.0 by @jaemk in jaemk/cached#309

Full Changelog: jaemk/cached@v3.0.0-rc.9...cached_proc_macro-v3.0.0

cached_proc_macro_types-v3.0.0

What's Changed

feat: remove CacheSetError, rename TtlSortedCache insert* to set*, wrap order-method values in CacheValue by @jaemk in jaemk/cached#293

feat: sharded peek, builder new(), ext alias parity, concurrent cache_try_get_or_set_with, retain on map stores by @jaemk in jaemk/cached#294

docs: fix cache_contains implementor listing and docsrs gate, note Arc<T> return pattern, add peek recency test by @jaemk in jaemk/cached#295

fix: clear Clone error for #[cached] return types, async_core docsrs badges, doc and spec corrections by @jaemk in jaemk/cached#296

feat: TtlSortedCache::set_with builder, ConcurrentCachePeek, ConcurrentCachedExt::try_get_or_set_with by @jaemk in jaemk/cached#297

feat: retain on TtlSortedCache and the six sharded stores by @jaemk in jaemk/cached#298

perf: in-memory and sharded store speedups; promote on cache_set overwrite by @jaemk in jaemk/cached#299

feat: derive default shard count from max_size, make cache_contains dyn-callable by @jaemk in jaemk/cached#300

feat: count evictions before on_evict, clear Clone error for #[once], no-callback retain fast path by @jaemk in jaemk/cached#301

3.0.0-rc.10: retain returns removed count, ConcurrentCachePeekAsync, MSRV 1.92 by @jaemk in jaemk/cached#302

ci: trigger the release on an unpublished version, fail on partial publish by @jaemk in jaemk/cached#303

docs: correct the backfill claim in tag-release.sh by @jaemk in jaemk/cached#304

... (truncated)

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layout test checks field types instead of comparing size_of against UnboundCache, and the LruCache::pop_raw_with_hash wrong-hash test asserts only that the cache stays consistent. No change to the published crates' behavior.

Added

make tests/32bit runs the test suite on i686-unknown-linux-gnu, and CI runs it. make tests/32bit/docker runs the same target in a container, with no local 32-bit toolchain needed.

[4.0.1] - 2026-10-01

Changed

Replace the unmaintained smartstring dev-dependency with compact_str. The macro tests still cover a third-party small-string key and value type. No change to the published crates.

[4.0.0 / cached_proc_macro 3.0.1] - 2026-09-05

Breaking Changes

Argument-inference breakage on the six sharded stores' inherent lookup methods (ShardedUnboundCache, ShardedLruCache, ShardedTtlCache, ShardedLruTtlCache, ShardedExpiringCache, ShardedExpiringLruCache): get, remove, remove_entry, delete, contains, and peek are all generic over the looked-up key form Q. cache.get(&k) where k: &K (for example, for k in &keys { cache.get(&k) }) previously compiled through deref coercion. It no longer does: Q unifies to &K first, and the call fails with the trait bound `String: Borrow<&String>` is not satisfied; same for k: &Box<K> and k: &Arc<K>, and the same shape applies to remove, remove_entry, delete, contains, and peek. Migration: drop the extra & (cache.get(k)), or deref explicitly (cache.get(&**boxed)). Single-owner Cached methods (e.g. LruCache::cache_get) are unchanged.

ShardHasher<K>'s key parameter is relaxed to ShardHasher<K: ?Sized>. Existing impls compile

... (truncated)

Commits

c97b333 raise redis floor to 1.2.3, add cargo audit ci job, release 4.0.3 (#333)
aa020a3 release 4.0.2 (#332)
a8b893c fix unit tests on 32-bit targets, add make tests/32bit and i686 ci job (#331)
9da0ec2 replace smartstring dev-dependency with compact_str, release 4.0.1 (#329)
de90246 release 4.0.0 / cached_proc_macro 3.0.1 (#327)
72b74e5 ci: guard the generated clone's syntax context on nightly (#326)
39ac4db keep the generated clone inside the macro expansion so nightly clippy's clone...
9a556d8 Capability traits, and borrowed keys on the sharded lookups (#324)
23ecae4 add ClaimRegistry: a single-flight guard for background refreshes (#323)
d0c26a9 correct the extreme-ttl doc claims about the sharded stores (#322)
Additional commits viewable in compare view

Updates icalendar from 0.17.15 to 0.17.16

Release notes

Sourced from icalendar's releases.

v0.17.16

What's Changed

fix: keep the separate values of CATEGORIES and RESOURCES by @wleeaf in hoodie/icalendar#183

New Contributors

@wleeaf made their first contribution in hoodie/icalendar#183

Full Changelog: hoodie/icalendar@v0.17.15...v0.17.16

Changelog

Sourced from icalendar's changelog.

v0.17.16 (2026-10-26)

Fixes

keep the separate values of CATEGORIES and RESOURCES (62a134c)

Commits

424acbe chore: bump version
baa1372 Merge pull request #183 from wleeaf/categories-resources-lists
62a134c fix: keep the separate values of CATEGORIES and RESOURCES
a237798 test: quoted parameters roundtrip
a012cdf chore: changelog
See full diff in compare view

Updates iref from 3.2.2 to 5.0.0

Commits

904cb8c chore(release): Version 5.0.0
fc8763e feat(uri): generalize *_try methods to accept any T: AsRef\<str>
87cb61d chore(release): Version 4.4.0
0b9cf1d ci: add a job to build iref for a genuine no_std target
c4fddff fix: don't pull in std via thiserror when the std feature is disabled
d0f378b chore(release): Version 4.3.0
52c46c0 fix: don't add a spurious / when set_authority leaves an empty path
74fb0b2 feat: add authority! macro for compile-time authority parsing
dc5fb59 feat: implement Default for Authority and AuthorityBuf
e4ca8c7 feat: implement Default for Host and HostBuf
Additional commits viewable in compare view

Updates quick-xml from 0.41.0 to 0.42.0

Release notes

Sourced from quick-xml's releases.

v0.42.0 - String Ergonomics

What's Changed

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

#963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.

#963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.

#963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.

#963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].

#963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.

#963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.

#963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.

#963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.

#963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).

#980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has

... (truncated)

Changelog

Sourced from quick-xml's changelog.

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

#963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.

#963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.

#963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.

#963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].

#963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.

#963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.

#963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.

#963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.

#963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).

#980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has changed slightly. The default maximum has also been reduced from 256 to 128.

#1000: DeError::UnexpectedStart renamed to DeError::MixedContent. That error is emitted when you try to deserialize boolean, number or string field from something like <field>text <tag/> another text</field>.

... (truncated)

Commits

36a2c52 Release 0.42.0
a4b9fca cargo fmt
22c99f5 Update Rust Edition to 2024
83351fb Add rename = $value to a table in serde example comments
f4db767 Clarify documentation about lifetimes of the events and attributes
9f4c66a Fix formatting for correct assertions in read_nodes_serde
6950ef7 Add GHA job to execute examples
dbf9e3f Show XML Decl tracking in examples
aab9452 Add writing a Decl event to the writer example
1573e05 Avoid trim_text(true) in the in-depth examples
Additional commits viewable in compare view

Updates rkyv from 0.7.46 to 0.8.18

Release notes

Sourced from rkyv's releases.

0.8.8

Fixes auto copy optimization referring to generated types with as = ...

Full Changelog: rkyv/rkyv@0.8.7...0.8.8

0.8.7

Removes an unused lifetime from the high- and low-level API serializer types.

Full Changelog: rkyv/rkyv@0.8.6...0.8.7

0.8.6

What's Changed

Derive Default, Eq, Hash, Ord, PartialEq, and PartialOrd for ArchivedTuple* by @evie-calico in rkyv/rkyv#556

New Contributors

@evie-calico made their first contribution in rkyv/rkyv#556

Full Changelog: rkyv/rkyv@0.8.5...0.8.6

0.8.5

This bugfix release only includes performance optimizations.

Full Changelog: rkyv/rkyv@0.8.4...0.8.5

0.8.4

What's Changed

Support missing enum variants on remote derives by @MaxOhn in rkyv/rkyv#553

Removed a stale reference to ArchivedAlignedVec

Fixed a panic caused by serializing hashmaps of large elements

Reduced branching when writing inline strings (~15% ser improvement on log benchmark)

Full Changelog: rkyv/rkyv@0.8.3...0.8.4

0.8.3

What's Changed

fix: minimum syn version by @xJonathanLEI in rkyv/rkyv#550

New Contributors

@xJonathanLEI made their first contribution in rkyv/rkyv#550

Full Changelog: rkyv/rkyv@0.8.2...0.8.3

0.8.2

This bugfix release addresses the following issues:

#548 Makes the AsVec wrapper compatible with any choice of hasher

#549 Access pointer validation fails for nested HashMaps

0.8.1

This bugfix release corrects an infinite loop in hash map probing.

... (truncated)

Commits

See full diff in compare view

Updates tower-sessions from 0.14.0 to 0.15.0

Release notes

Sourced from tower-sessions's releases.

v0.15.0

What's Changed

Update rand to v0.9. #238

Fix memory ordering race. #254

New Contributors

@Sycration made their first contribution in maxcountryman/tower-sessions#238

@jalil-salame made their first contribution in maxcountryman/tower-sessions#247

@benwilber made their first contribution in maxcountryman/tower-sessions#250

@jonasmalacofilho made their first contribution in maxcountryman/tower-sessions#254

Full Changelog: maxcountryman/tower-sessions@v0.14.0...v0.15.0

Changelog

Sourced from tower-sessions's changelog.

0.15.0

Update rand to v0.9. #238

Fix memory ordering race. #254

Commits

92ad026 mark v0.15.0
3cd7a25 Insert/remove session data before release-update to is_modified
7800836 Add tower-sessions-cookie-store to the README
5ea8112 Update mockall requirement from 0.13.0 to 0.14.0
9acb2d1 fix: clippy lints
9ad9533 fix(tower-sessions-core): disable parking_lot serde feature
81105af Update rand
See full diff in compare view

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Add versioned constructors to NonNilUuid by @RanaPriyansh in uuid-rs/uuid#919

Prepare for 1.29.0 release by @KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits

4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
a3631fd prepare for 1.29.0 release
304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
d49f963 Reuse existing version tests for NonNilUuid constructors
2f02404 Add versioned constructors to NonNilUuid
See full diff in compare view

Updates webpki-root-certs from 1.0.10 to 1.0.11

Release notes

Sourced from webpki-root-certs's releases.

1.0.11

Track CCADB removal of further eMudhra CAs: "emSign Root CA - C1" and "emSign ECC Root CA - C3": https://bugzilla.mozilla.org/show_bug.cgi?id=2083709

What's Changed

Remove 2 more eMudhra CAs (C1 and C3) by @kpcyrd in rustls/webpki-roots#136

Prepare 1.0.11 by @ctz in rustls/webpki-roots#137

New Contributors

@kpcyrd made their first contribution in rustls/webpki-roots#136

Full Changelog: rustls/webpki-roots@v/1.0.10...v/1.0.11

Commits

7ebfa0b Prepare 1.0.11
4c905cb Take semver-compatible updates
f75f3cb Remove 2 more eMudhra CAs (C1 and C3)
See full diff in compare view

Updates webpki-roots from 1.0.10 to 1.0.11

Release notes

Sourced from webpki-roots's releases.

1.0.11

Track CCADB removal of further eMudhra CAs: "emSign Root CA - C1" and "emSign ECC Root CA - C3": https://bugzilla.mozilla.org/show_bug.cgi?id=2083709

What's Changed

Remove 2 more eMudhra CAs (C1 and C3) by @kpcyrd in rustls/webpki-roots#136

Prepare 1.0.11 by @ctz in rustls/webpki-roots#137

New Contributors

@kpcyrd made their first contribution in rustls/webpki-roots#136

Full Changelog: rustls/webpki-roots@v/1.0.10...v/1.0.11

Commits

7ebfa0b Prepare 1.0.11
4c905cb Take semver-compatible updates
f75f3cb Remove 2 more eMudhra CAs (C1 and C3)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backend group with 10 updates: | Package | From | To | | --- | --- | --- | | [aws-sdk-s3](https://github.com/awslabs/aws-sdk-rust) | `1.154.0` | `1.155.0` | | [cached](https://github.com/jaemk/cached) | `2.0.2` | `4.0.3` | | [icalendar](https://github.com/hoodie/icalendar) | `0.17.15` | `0.17.16` | | [iref](https://github.com/timothee-haudebourg/iref) | `3.2.2` | `5.0.0` | | [quick-xml](https://github.com/tafia/quick-xml) | `0.41.0` | `0.42.0` | | [rkyv](https://github.com/rkyv/rkyv) | `0.7.46` | `0.8.18` | | [tower-sessions](https://github.com/maxcountryman/tower-sessions) | `0.14.0` | `0.15.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.0` | | [webpki-root-certs](https://github.com/rustls/webpki-roots) | `1.0.10` | `1.0.11` | | [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.10` | `1.0.11` | Updates `aws-sdk-s3` from 1.154.0 to 1.155.0 - [Release notes](https://github.com/awslabs/aws-sdk-rust/releases) - [Commits](https://github.com/awslabs/aws-sdk-rust/commits) Updates `cached` from 2.0.2 to 4.0.3 - [Release notes](https://github.com/jaemk/cached/releases) - [Changelog](https://github.com/jaemk/cached/blob/master/CHANGELOG.md) - [Commits](jaemk/cached@v2.0.2...v4.0.3) Updates `icalendar` from 0.17.15 to 0.17.16 - [Release notes](https://github.com/hoodie/icalendar/releases) - [Changelog](https://github.com/hoodie/icalendar/blob/main/CHANGELOG.md) - [Commits](hoodie/icalendar@v0.17.15...v0.17.16) Updates `iref` from 3.2.2 to 5.0.0 - [Changelog](https://github.com/timothee-haudebourg/iref/blob/main/CHANGELOG.md) - [Commits](timothee-haudebourg/iref@v3.2.2...v5.0.0) Updates `quick-xml` from 0.41.0 to 0.42.0 - [Release notes](https://github.com/tafia/quick-xml/releases) - [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md) - [Commits](tafia/quick-xml@v0.41.0...v0.42.0) Updates `rkyv` from 0.7.46 to 0.8.18 - [Release notes](https://github.com/rkyv/rkyv/releases) - [Commits](https://github.com/rkyv/rkyv/commits/0.8.18) Updates `tower-sessions` from 0.14.0 to 0.15.0 - [Release notes](https://github.com/maxcountryman/tower-sessions/releases) - [Changelog](https://github.com/maxcountryman/tower-sessions/blob/main/CHANGELOG.md) - [Commits](maxcountryman/tower-sessions@v0.14.0...v0.15.0) Updates `uuid` from 1.28.0 to 1.29.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.28.0...v1.29.0) Updates `webpki-root-certs` from 1.0.10 to 1.0.11 - [Release notes](https://github.com/rustls/webpki-roots/releases) - [Commits](rustls/webpki-roots@v/1.0.10...v/1.0.11) Updates `webpki-roots` from 1.0.10 to 1.0.11 - [Release notes](https://github.com/rustls/webpki-roots/releases) - [Commits](rustls/webpki-roots@v/1.0.10...v/1.0.11) --- updated-dependencies: - dependency-name: aws-sdk-s3 dependency-version: 1.155.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: cached dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend - dependency-name: icalendar dependency-version: 0.17.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: iref dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend - dependency-name: quick-xml dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: rkyv dependency-version: 0.8.18 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: tower-sessions dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: uuid dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: webpki-root-certs dependency-version: 1.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: webpki-roots dependency-version: 1.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 1, 2026

Navigation Menu

Repository navigation

Bump the "backend" group with 1 update across multiple ecosystems - #762

Bump the "backend" group with 1 update across multiple ecosystems#762
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/backend-87551e2b62

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

cached_proc_macro-v3.0.1

What's Changed

cached_proc_macro-v3.0.0

What's Changed

cached_proc_macro_types-v3.0.0

What's Changed

[4.0.3] - 2026-10-18

Changed

Added

[4.0.2] - 2026-10-12

Fixed

Added

[4.0.1] - 2026-10-01

Changed

[4.0.0 / cached_proc_macro 3.0.1] - 2026-09-05

Breaking Changes

v0.17.16

What's Changed

New Contributors

v0.17.16 (2026-10-26)

Fixes

v0.42.0 - String Ergonomics

What's Changed

0.42.0 -- 2026-08-22

Breaking Changes

0.42.0 -- 2026-08-22

Breaking Changes

0.8.8

0.8.7

0.8.6

What's Changed

New Contributors

0.8.5

0.8.4

What's Changed

0.8.3

What's Changed

New Contributors

0.8.2

0.8.1

v0.15.0

What's Changed

New Contributors

0.15.0

v1.29.0

What's Changed

1.0.11

What's Changed

New Contributors

1.0.11

What's Changed

New Contributors

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants