Skip to content

chore(deps): bump the prod-deps group across 1 directory with 14 updates#156

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prod-deps-99ce5b4601
Open

chore(deps): bump the prod-deps group across 1 directory with 14 updates#156
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prod-deps-99ce5b4601

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 13 updates in the / directory:

Package From To
serde-saphyr 0.0.27 0.0.29
rustls 0.23.40 0.23.42
which 8.0.4 8.0.5
turso 0.7.0-pre.8 0.7.0
rmcp 1.7.0 2.2.0
http-body-util 0.1.3 0.1.4
sse-stream 0.2.3 0.2.4
frankenstein 0.50.0 0.50.2
uuid 1.23.3 1.23.5
cron 0.16.0 0.17.0
rand 0.10.1 0.10.2
anyhow 1.0.102 1.0.103
arc-swap 1.9.1 1.9.2

Updates serde-saphyr from 0.0.27 to 0.0.29

Release notes

Sourced from serde-saphyr's releases.

0.0.28 Property interpolation extensions and even faster builds

Significant extension of property interpolation ( @​CommanderStorm)

  • Added support for default property interpolation in plain scalars: ${NAME:-default} now resolves to default when NAME is unset or explicitly empty.
  • ${VAR}: Values that must be configured (DB URLs, API keys). An unset var is a misconfiguration, not something to paper over -> a loud error at parse time
  • ${VAR-fallback}: Empty value is meaningful and distinct from "not configured". F.ex. PREFIX="" -> "no prefix".
  • ${VAR:-fallback}: The "regular" default, so f.ex. ${PORT:-8080}
  • ${VAR+text}: F.ex. ${DEBUG+--verbose} emits the flag whenever DEBUG exists in the environment, regardless of value.
  • ${VAR:+text}: Same as above, but differentiating empty <-> null

Also

  • Fix #120 LastWins not honored when deserializing struct. This was implemented and well tested, but only with maps.
  • Reduced owning of comment strings (parsing very heavily commented YAML while discarding comments should be lighter on resources).
  • Fixed indentation enforcement (@​CommanderStorm), making sure it also works for multiline scalars.
  • Fixed tuple serialization (@​CommanderStorm)
  • New SingleQuoted<..> and DoubleQuoted<..> wrappers to emit quoted strings. SingleQuoted may provide additional safety, as control characters will be rejected (with error), rather than written as YAML escape sequences. NullableTilde<T> is like Option and emits tilde ( ~ ) rather than null.

Faster compilation times with serde_core

serde-saphyr now avoids compiling serde_derive by default. The crate core uses serde_core instead that allows building serde-saphyr in parallel with serde_derive. However this also means that we needed to drop the previously built-in (de)serialization support for some serde-saphyr own configuration and reporting types like Options. (De)serialization support for these types can be re-enabled with the new feature serde_derived_types:

serde-saphyr = { version = "...", features = ["serde_derived_types"] }

This does not affect normal use of serde-saphyr for user data, you can still serialize and deserialize your own structs as before.

Commits
  • f23c28c Advance version number
  • fc36c3f Removed benchmarking section from README.md - this needs to be re-benchmarked...
  • 9a727e3 Fix Clippy warning.
  • 3bd9fde Rearrange and reasonably name the test suites
  • 436edfe Two divergent hand-rolled escape tables in the serializer
  • 6a30736 Remove over-engineered Divisible(0) macro handling
  • 87afba3 Dead code removals
  • c656d3f Remove unnecessary #[path ..] constructs
  • 27c3959 Remove unnecessary #[path ..] constructs
  • 6f74db4 Improve code quality of budget.rs
  • Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.42

Commits
  • 411fb02 Bump version to 0.23.42
  • aff9845 implement rfc 9149 ticket_request extension
  • 8bd3d1b server: add max_tls13_tickets configuration
  • 4cce222 Address new std_instead_of_core in nightly
  • d3ffdc1 Address new std_instead_of_core in nightly
  • 75d1b7a Take semver-compatible dependency updates
  • 642a103 ci: drop Taplo job
  • 752c144 Drop nightly clippy tests
  • 8d8611a Fix new clippy::useless-borrows-in-formatting
  • ebf3297 Fix new clippy::manual_clear
  • Additional commits viewable in compare view

Updates which from 8.0.4 to 8.0.5

Release notes

Sourced from which's releases.

8.0.5

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.4...8.0.5

Changelog

Sourced from which's changelog.

8.0.5

  • Bug fix: #126 Do not use current directory for search when provided path is absolute. Thanks @​weifanglab for your contribution to which!
Commits

Updates turso from 0.7.0-pre.8 to 0.7.0

Release notes

Sourced from turso's releases.

0.7.0 -- 2026-07-13

Release Notes

Added

  • core/mvcc: add passive checkpoint (Pere Diaz Bou)
  • dotnet: support NativeAOT static native linking (Marc-André Moreau)
  • core/alloc: add stable push_within_capacity helper (Pedro Muniz)
  • core/storage: add savepoint rollback consistency intent (Pekka Enberg)
  • Add some testing guidance for agents (Pekka Enberg)
  • Add Aristo WAL verification (Sushant Dinesh)
  • add artificial wait for sticky disk to have latest snapshot (Pedro Muniz)
  • sync/engine: add missing fsync() (Nikita Sivukhin)
  • Add Windows ARM64 CLI release support (Marc-André Moreau)
  • Add .NET remote transactions and batches (Marc-André Moreau)
  • Add .NET remote Hrana execution (Marc-André Moreau)
  • Add Turso EF Core SQLite provider (Marc-André Moreau)
  • mvcc: Add fallible MVCC row payload allocation sites (Pedro Muniz)
  • Add mobile NuGet native targets (Marc-André Moreau)
  • core: register additional virtual tables into the catalog (Glauber Costa)
  • alloc: add specialization in nightly for Vec (Pedro Muniz)
  • core/alloc: Add allocation site annotations and out-of-memory fault injector (Pedro Muniz)
  • mvcc: lazily resolve shadow in new IndexShadowFinger (Preston Thorpe)
  • mvcc: add allocator generic to mv store (Pedro Muniz)
  • Add SQL-standard scalar functions and PG-compatible aliases (Glauber Costa)
  • Add shared buffer views for serialization callbacks (Pedro Muniz)
  • Reject ALTER TABLE ADD COLUM when generated-columns flag is off (Vartan Babayan)
  • add win tests for db/sync on js (Nikita Sivukhin)
  • Add .NET NuGet package publishing workflow (Marc-André Moreau)
  • mvcc: add sequence_watermark function and track sequence allocations (Preston Thorpe)
  • Refactor memory benchmark into library + add CodSpeed CI tracking (Pedro Muniz)
  • core/skiplist: use TursoAllocator for node allocation and add fallible inserts (Pedro Muniz)
  • serverless/javascript: add option for custom request headers (Nikita Sivukhin)
  • add yielding IO back-end for turso-stress to test async re-entrancy (Preston Thorpe)
  • python: enable Tantivy FTS and add tests (Pekka Enberg)
  • feat: add PostgreSQL-style sequences and MVCC-safe AUTOINCREMENT (Glauber Costa)
  • core/storage: Only mark WAL initialized after a successful header sync (Pekka Enberg)
  • core/mvcc: avoid SeekingToLast with MVCC in newrowid (Pere Diaz Bou)
  • Window functions plumbing 1: add stubs for builtins, refactor row_number() to use VDBE aggregate machinery (Jussi Saurio)
  • core/translate: support FILTER in window clauses (Jussi Saurio)
  • Add mvcc recovery benchmark (Mikaël Francoeur)
  • core: Add WITHIN GROUP ordered-set aggregates (Glauber Costa)
  • Add recovery-heavy profile to Whopper (Mikaël Francoeur)
  • Introduce portable logical log metadata for turso sync (Preston Thorpe)
  • Add regression test for incorrect OR expression handling (Pavan Nambi)
  • core/io: add runtime-registrable Rust IO backend (Robert Sturla)
  • extensions: add macro for context-scalar functions (Preston Thorpe)
  • Add core custom collation support (Marc-André Moreau)
  • Add managed aggregate callback support (Marc-André Moreau)
  • core/mvcc: set read_set to Vec and add batch query read bench (Pere Diaz Bou)

... (truncated)

Changelog

Sourced from turso's changelog.

0.7.0 -- 2026-07-13

Added

  • core/mvcc: add passive checkpoint (Pere Diaz Bou)
  • dotnet: support NativeAOT static native linking (Marc-André Moreau)
  • core/alloc: add stable push_within_capacity helper (Pedro Muniz)
  • core/storage: add savepoint rollback consistency intent (Pekka Enberg)
  • Add some testing guidance for agents (Pekka Enberg)
  • Add Aristo WAL verification (Sushant Dinesh)
  • add artificial wait for sticky disk to have latest snapshot (Pedro Muniz)
  • sync/engine: add missing fsync() (Nikita Sivukhin)
  • Add Windows ARM64 CLI release support (Marc-André Moreau)
  • Add .NET remote transactions and batches (Marc-André Moreau)
  • Add .NET remote Hrana execution (Marc-André Moreau)
  • Add Turso EF Core SQLite provider (Marc-André Moreau)
  • mvcc: Add fallible MVCC row payload allocation sites (Pedro Muniz)
  • Add mobile NuGet native targets (Marc-André Moreau)
  • core: register additional virtual tables into the catalog (Glauber Costa)
  • alloc: add specialization in nightly for Vec (Pedro Muniz)
  • core/alloc: Add allocation site annotations and out-of-memory fault injector (Pedro Muniz)
  • mvcc: lazily resolve shadow in new IndexShadowFinger (Preston Thorpe)
  • mvcc: add allocator generic to mv store (Pedro Muniz)
  • Add SQL-standard scalar functions and PG-compatible aliases (Glauber Costa)
  • Add shared buffer views for serialization callbacks (Pedro Muniz)
  • Reject ALTER TABLE ADD COLUM when generated-columns flag is off (Vartan Babayan)
  • add win tests for db/sync on js (Nikita Sivukhin)
  • Add .NET NuGet package publishing workflow (Marc-André Moreau)
  • mvcc: add sequence_watermark function and track sequence allocations (Preston Thorpe)
  • Refactor memory benchmark into library + add CodSpeed CI tracking (Pedro Muniz)
  • core/skiplist: use TursoAllocator for node allocation and add fallible inserts (Pedro Muniz)
  • serverless/javascript: add option for custom request headers (Nikita Sivukhin)
  • add yielding IO back-end for turso-stress to test async re-entrancy (Preston Thorpe)
  • python: enable Tantivy FTS and add tests (Pekka Enberg)
  • feat: add PostgreSQL-style sequences and MVCC-safe AUTOINCREMENT (Glauber Costa)
  • core/storage: Only mark WAL initialized after a successful header sync (Pekka Enberg)
  • core/mvcc: avoid SeekingToLast with MVCC in newrowid (Pere Diaz Bou)
  • Window functions plumbing 1: add stubs for builtins, refactor row_number() to use VDBE aggregate machinery (Jussi Saurio)
  • core/translate: support FILTER in window clauses (Jussi Saurio)
  • Add mvcc recovery benchmark (Mikaël Francoeur)
  • core: Add WITHIN GROUP ordered-set aggregates (Glauber Costa)
  • Add recovery-heavy profile to Whopper (Mikaël Francoeur)
  • Introduce portable logical log metadata for turso sync (Preston Thorpe)
  • Add regression test for incorrect OR expression handling (Pavan Nambi)
  • core/io: add runtime-registrable Rust IO backend (Robert Sturla)
  • extensions: add macro for context-scalar functions (Preston Thorpe)
  • Add core custom collation support (Marc-André Moreau)
  • Add managed aggregate callback support (Marc-André Moreau)
  • core/mvcc: set read_set to Vec and add batch query read bench (Pere Diaz Bou)
  • Add managed scalar callback foundation (Marc-André Moreau)

... (truncated)

Commits
  • e7cb62a Turso 0.7.0
  • 5d45fc0 Update CHANGELOG.md
  • 4b18962 Turso 0.7.0-pre.22
  • 0999a98 Merge 'core: reject co-enablement of MVCC and multiprocess WAL' from Jussi Sa...
  • cb9414e core: reject co-enablement of MVCC and multiprocess WAL
  • 3e13012 Merge 'core/translate: use abort journal analysis for upsert DO UPDATE arms' ...
  • 4295339 Merge 'Fix unsafe concurrent BTreeMap use in memory IO backends' from Jussi S...
  • 385a019 core/translate: use abort journal analysis for upsert DO UPDATE arms
  • 709920c Merge 'build(deps): bump js-yaml from 4.1.0 to 4.3.0 in /bindings/javascript'...
  • 5ee49c0 build(deps): bump js-yaml from 4.1.0 to 4.3.0 in /bindings/javascript
  • Additional commits viewable in compare view

Updates turso_core from 0.7.0-pre.8 to 0.7.0

Release notes

Sourced from turso_core's releases.

0.7.0 -- 2026-07-13

Release Notes

Added

  • core/mvcc: add passive checkpoint (Pere Diaz Bou)
  • dotnet: support NativeAOT static native linking (Marc-André Moreau)
  • core/alloc: add stable push_within_capacity helper (Pedro Muniz)
  • core/storage: add savepoint rollback consistency intent (Pekka Enberg)
  • Add some testing guidance for agents (Pekka Enberg)
  • Add Aristo WAL verification (Sushant Dinesh)
  • add artificial wait for sticky disk to have latest snapshot (Pedro Muniz)
  • sync/engine: add missing fsync() (Nikita Sivukhin)
  • Add Windows ARM64 CLI release support (Marc-André Moreau)
  • Add .NET remote transactions and batches (Marc-André Moreau)
  • Add .NET remote Hrana execution (Marc-André Moreau)
  • Add Turso EF Core SQLite provider (Marc-André Moreau)
  • mvcc: Add fallible MVCC row payload allocation sites (Pedro Muniz)
  • Add mobile NuGet native targets (Marc-André Moreau)
  • core: register additional virtual tables into the catalog (Glauber Costa)
  • alloc: add specialization in nightly for Vec (Pedro Muniz)
  • core/alloc: Add allocation site annotations and out-of-memory fault injector (Pedro Muniz)
  • mvcc: lazily resolve shadow in new IndexShadowFinger (Preston Thorpe)
  • mvcc: add allocator generic to mv store (Pedro Muniz)
  • Add SQL-standard scalar functions and PG-compatible aliases (Glauber Costa)
  • Add shared buffer views for serialization callbacks (Pedro Muniz)
  • Reject ALTER TABLE ADD COLUM when generated-columns flag is off (Vartan Babayan)
  • add win tests for db/sync on js (Nikita Sivukhin)
  • Add .NET NuGet package publishing workflow (Marc-André Moreau)
  • mvcc: add sequence_watermark function and track sequence allocations (Preston Thorpe)
  • Refactor memory benchmark into library + add CodSpeed CI tracking (Pedro Muniz)
  • core/skiplist: use TursoAllocator for node allocation and add fallible inserts (Pedro Muniz)
  • serverless/javascript: add option for custom request headers (Nikita Sivukhin)
  • add yielding IO back-end for turso-stress to test async re-entrancy (Preston Thorpe)
  • python: enable Tantivy FTS and add tests (Pekka Enberg)
  • feat: add PostgreSQL-style sequences and MVCC-safe AUTOINCREMENT (Glauber Costa)
  • core/storage: Only mark WAL initialized after a successful header sync (Pekka Enberg)
  • core/mvcc: avoid SeekingToLast with MVCC in newrowid (Pere Diaz Bou)
  • Window functions plumbing 1: add stubs for builtins, refactor row_number() to use VDBE aggregate machinery (Jussi Saurio)
  • core/translate: support FILTER in window clauses (Jussi Saurio)
  • Add mvcc recovery benchmark (Mikaël Francoeur)
  • core: Add WITHIN GROUP ordered-set aggregates (Glauber Costa)
  • Add recovery-heavy profile to Whopper (Mikaël Francoeur)
  • Introduce portable logical log metadata for turso sync (Preston Thorpe)
  • Add regression test for incorrect OR expression handling (Pavan Nambi)
  • core/io: add runtime-registrable Rust IO backend (Robert Sturla)
  • extensions: add macro for context-scalar functions (Preston Thorpe)
  • Add core custom collation support (Marc-André Moreau)
  • Add managed aggregate callback support (Marc-André Moreau)
  • core/mvcc: set read_set to Vec and add batch query read bench (Pere Diaz Bou)

... (truncated)

Changelog

Sourced from turso_core's changelog.

0.7.0 -- 2026-07-13

Added

  • core/mvcc: add passive checkpoint (Pere Diaz Bou)
  • dotnet: support NativeAOT static native linking (Marc-André Moreau)
  • core/alloc: add stable push_within_capacity helper (Pedro Muniz)
  • core/storage: add savepoint rollback consistency intent (Pekka Enberg)
  • Add some testing guidance for agents (Pekka Enberg)
  • Add Aristo WAL verification (Sushant Dinesh)
  • add artificial wait for sticky disk to have latest snapshot (Pedro Muniz)
  • sync/engine: add missing fsync() (Nikita Sivukhin)
  • Add Windows ARM64 CLI release support (Marc-André Moreau)
  • Add .NET remote transactions and batches (Marc-André Moreau)
  • Add .NET remote Hrana execution (Marc-André Moreau)
  • Add Turso EF Core SQLite provider (Marc-André Moreau)
  • mvcc: Add fallible MVCC row payload allocation sites (Pedro Muniz)
  • Add mobile NuGet native targets (Marc-André Moreau)
  • core: register additional virtual tables into the catalog (Glauber Costa)
  • alloc: add specialization in nightly for Vec (Pedro Muniz)
  • core/alloc: Add allocation site annotations and out-of-memory fault injector (Pedro Muniz)
  • mvcc: lazily resolve shadow in new IndexShadowFinger (Preston Thorpe)
  • mvcc: add allocator generic to mv store (Pedro Muniz)
  • Add SQL-standard scalar functions and PG-compatible aliases (Glauber Costa)
  • Add shared buffer views for serialization callbacks (Pedro Muniz)
  • Reject ALTER TABLE ADD COLUM when generated-columns flag is off (Vartan Babayan)
  • add win tests for db/sync on js (Nikita Sivukhin)
  • Add .NET NuGet package publishing workflow (Marc-André Moreau)
  • mvcc: add sequence_watermark function and track sequence allocations (Preston Thorpe)
  • Refactor memory benchmark into library + add CodSpeed CI tracking (Pedro Muniz)
  • core/skiplist: use TursoAllocator for node allocation and add fallible inserts (Pedro Muniz)
  • serverless/javascript: add option for custom request headers (Nikita Sivukhin)
  • add yielding IO back-end for turso-stress to test async re-entrancy (Preston Thorpe)
  • python: enable Tantivy FTS and add tests (Pekka Enberg)
  • feat: add PostgreSQL-style sequences and MVCC-safe AUTOINCREMENT (Glauber Costa)
  • core/storage: Only mark WAL initialized after a successful header sync (Pekka Enberg)
  • core/mvcc: avoid SeekingToLast with MVCC in newrowid (Pere Diaz Bou)
  • Window functions plumbing 1: add stubs for builtins, refactor row_number() to use VDBE aggregate machinery (Jussi Saurio)
  • core/translate: support FILTER in window clauses (Jussi Saurio)
  • Add mvcc recovery benchmark (Mikaël Francoeur)
  • core: Add WITHIN GROUP ordered-set aggregates (Glauber Costa)
  • Add recovery-heavy profile to Whopper (Mikaël Francoeur)
  • Introduce portable logical log metadata for turso sync (Preston Thorpe)
  • Add regression test for incorrect OR expression handling (Pavan Nambi)
  • core/io: add runtime-registrable Rust IO backend (Robert Sturla)
  • extensions: add macro for context-scalar functions (Preston Thorpe)
  • Add core custom collation support (Marc-André Moreau)
  • Add managed aggregate callback support (Marc-André Moreau)
  • core/mvcc: set read_set to Vec and add batch query read bench (Pere Diaz Bou)
  • Add managed scalar callback foundation (Marc-André Moreau)

... (truncated)

Commits
  • e7cb62a Turso 0.7.0
  • 5d45fc0 Update CHANGELOG.md
  • 4b18962 Turso 0.7.0-pre.22
  • 0999a98 Merge 'core: reject co-enablement of MVCC and multiprocess WAL' from Jussi Sa...
  • cb9414e core: reject co-enablement of MVCC and multiprocess WAL
  • 3e13012 Merge 'core/translate: use abort journal analysis for upsert DO UPDATE arms' ...
  • 4295339 Merge 'Fix unsafe concurrent BTreeMap use in memory IO backends' from Jussi S...
  • 385a019 core/translate: use abort journal analysis for upsert DO UPDATE arms
  • 709920c Merge 'build(deps): bump js-yaml from 4.1.0 to 4.3.0 in /bindings/javascript'...
  • 5ee49c0 build(deps): bump js-yaml from 4.1.0 to 4.3.0 in /bindings/javascript
  • Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 2.2.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.2.0

Added

  • [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

  • fill missing fully qualified syntax in prompt_handler macros (#866)

Other

  • align README examples with v2 model API (#928)

rmcp-v2.2.0

Added

  • reject auth servers lacking S256 PKCE support (#955)

Fixed

  • pass client conformance suite (#960)
  • don't respond to cancelled requests (#957)
  • fail orphaned streamable HTTP responses on reinit (#914)
  • address 2025-11-25 conformance audit findings (#951)

rmcp-macros-v2.1.0

Added

  • [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

  • fill missing fully qualified syntax in prompt_handler macros (#866)

Other

  • align README examples with v2 model API (#928)

rmcp-v2.1.0

Added

  • add SEP-414 trace context meta accessors (#910)
  • add SEP-2575 meta helpers (#942)

Fixed

  • (transport) make AsyncRwTransport::receive cancel-safe (#941) (#947)
  • (auth) preserve refresh_token when refresh response omits it (#949)
  • block redirect header leaks (#936)
  • don't respond to unparsable messages (#940)

... (truncated)

Commits
  • 5195776 chore: release v2.2.0 (#953)
  • 6dd7b85 chore(deps): update p256 requirement from 0.13 to 0.14 (#959)
  • a037935 fix: pass client conformance suite (#960)
  • dbda50c fix: don't respond to cancelled requests (#957)
  • 45f2f72 fix: fail orphaned streamable HTTP responses on reinit (#914)
  • 95490fa feat: reject auth servers lacking S256 PKCE support (#955)
  • bdf0c32 fix: address 2025-11-25 conformance audit findings (#951)
  • 8e44af4 chore: release v2.1.0 (#950)
  • 4833ec7 fix(transport): make AsyncRwTransport::receive cancel-safe (#941) (#947)
  • 5837e22 fix(auth): preserve refresh_token when refresh response omits it (#949)
  • Additional commits viewable in compare view

Updates http-body-util from 0.1.3 to 0.1.4

Release notes

Sourced from http-body-util's releases.

http-body-util-v0.1.4

What's Changed

  • Add Fused body combinator that always returns None once completed.
  • Add BodyExt::into_stream() to convert a body into a Stream.
  • Add Full::into_inner() to get the full Buf.
  • Add InspectFrame and InspectErr combinators.
Commits

Updates sse-stream from 0.2.3 to 0.2.4

Release notes

Sourced from sse-stream's releases.

Release 0.2.4

What's Changed

New Contributors

Full Changelog: 4t145/sse-stream@release-0.2.3...release-0.2.4

Commits

Updates frankenstein from 0.50.0 to 0.50.2

Release notes

Sourced from frankenstein's releases.

0.50.2

What's Changed

New Contributors

Full Changelog: ayrat555/frankenstein@0.50.1...0.50.2

0.50.1

What's Changed

Full Changelog: ayrat555/frankenstein@0.50.0...0.50.1

Changelog

Sourced from frankenstein's changelog.

0.50.2 (2026-07-03)

  • fix: ChatBackground deserialization - #328

0.50.1 (2026-06-20)

  • feat: Bot API 10.1 - #325
Commits

Updates uuid from 1.23.3 to 1.23.5

Release notes

Sourced from uuid's releases.

v1.23.5

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

v1.23.4

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits
  • 5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
  • 5a7dfe5 prepare for 1.23.5 release
  • 9b4bfc8 Merge pull request #894 from geeknoid/main
  • 5acc5a5 perf: Optimize UUID hex parsing and formatting
  • 1e5d867 Merge pull request #891 from frostyplanet/doc
  • 49310f0 doc: Fix broken link
  • 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
  • cba53d0 prepare for 1.23.4 release
  • e347af4 Merge pull request #889 from frostyplanet/main
  • e9bf55c doc: Fix broken link warnings
  • Additional commits viewable in compare view

Updates cron from 0.16.0 to 0.17.0

Commits

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Updates arc-swap from 1.9.1 to 1.9.2

Changelog

Sourced from arc-swap's changelog.

1.9.2

  • Document RefCnt must not panic (#208).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the prod-deps group across 1 directory with 14 updates
0e6037d 
Bumps the prod-deps group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `0.0.27` | `0.0.29` |
| [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.42` |
| [which](https://github.com/harryfei/which-rs) | `8.0.4` | `8.0.5` |
| [turso](https://github.com/tursodatabase/turso) | `0.7.0-pre.8` | `0.7.0` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.7.0` | `2.2.0` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.3` | `0.1.4` |
| [sse-stream](https://github.com/4t145/sse-stream) | `0.2.3` | `0.2.4` |
| [frankenstein](https://github.com/ayrat555/frankenstein) | `0.50.0` | `0.50.2` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.23.5` |
| [cron](https://github.com/zslayton/cron) | `0.16.0` | `0.17.0` |
| [rand](https://github.com/rust-random/rand) | `0.10.1` | `0.10.2` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` |
| [arc-swap](https://github.com/vorner/arc-swap) | `1.9.1` | `1.9.2` |



Updates `serde-saphyr` from 0.0.27 to 0.0.29
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Commits](bourumir-wyngs/serde-saphyr@0.0.27...0.0.29)

Updates `rustls` from 0.23.40 to 0.23.42
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.40...v/0.23.42)

Updates `which` from 8.0.4 to 8.0.5
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.4...8.0.5)

Updates `turso` from 0.7.0-pre.8 to 0.7.0
- [Release notes](https://github.com/tursodatabase/turso/releases)
- [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md)
- [Commits](tursodatabase/turso@v0.7.0-pre.8...v0.7.0)

Updates `turso_core` from 0.7.0-pre.8 to 0.7.0
- [Release notes](https://github.com/tursodatabase/turso/releases)
- [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md)
- [Commits](tursodatabase/turso@v0.7.0-pre.8...v0.7.0)

Updates `rmcp` from 1.7.0 to 2.2.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v2.2.0)

Updates `http-body-util` from 0.1.3 to 0.1.4
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.3...http-body-util-v0.1.4)

Updates `sse-stream` from 0.2.3 to 0.2.4
- [Release notes](https://github.com/4t145/sse-stream/releases)
- [Commits](4t145/sse-stream@release-0.2.3...release-0.2.4)

Updates `frankenstein` from 0.50.0 to 0.50.2
- [Release notes](https://github.com/ayrat555/frankenstein/releases)
- [Changelog](https://github.com/ayrat555/frankenstein/blob/master/CHANGELOG.md)
- [Commits](ayrat555/frankenstein@0.50.0...0.50.2)

Updates `uuid` from 1.23.3 to 1.23.5
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.3...v1.23.5)

Updates `cron` from 0.16.0 to 0.17.0
- [Release notes](https://github.com/zslayton/cron/releases)
- [Commits](https://github.com/zslayton/cron/commits)

Updates `rand` from 0.10.1 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.1...0.10.2)

Updates `anyhow` from 1.0.102 to 1.0.103
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.103)

Updates `arc-swap` from 1.9.1 to 1.9.2
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/arc-swap/commits)

---
updated-dependencies:
- dependency-name: serde-saphyr
  dependency-version: 0.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: rustls
  dependency-version: 0.23.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: which
  dependency-version: 8.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: turso
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: turso_core
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: rmcp
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: http-body-util
  dependency-version: 0.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: sse-stream
  dependency-version: 0.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: frankenstein
  dependency-version: 0.50.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: uuid
  dependency-version: 1.23.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: cron
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: anyhow
  dependency-version: 1.0.103
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: arc-swap
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants