Skip to content

Bump the cargo group across 1 directory with 21 updates - #5537

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-d88c027b40
Closed

Bump the cargo group across 1 directory with 21 updates#5537
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-d88c027b40

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 21 updates in the / directory:

Package From To
arbitrary 1.4.2 1.5.0
arc-swap 1.9.2 1.9.3
clap 4.6.3 4.6.7
crossbeam-epoch 0.9.20 0.9.21
fe2o3-amqp 0.18.3 0.18.4
flate2 1.1.9 1.1.10
h2 0.4.19 0.4.20
rand 0.10.2 0.10.3
reqwest 0.13.4 0.13.5
rust_decimal 1.42.1 1.43.0
rustls 0.23.42 0.23.46
rustls-platform-verifier 0.7.0 0.7.1
serde_json 1.0.151 1.0.154
thiserror 2.0.20 2.0.21
time 0.3.54 0.3.55
tokio 1.53.1 1.54.1
tokio-rustls 0.26.4 0.26.6
tokio-stream 0.1.18 0.1.19
tokio-util 0.7.18 0.7.20
uuid 1.24.1 1.28.0
ureq 3.3.0 3.5.0

Updates arbitrary from 1.4.2 to 1.5.0

Changelog

Sourced from arbitrary's changelog.

1.5.0

Released 2026-10-05.

Added

  • Added support for deriving Arbitrary for types with raw identifiers.

Changed

  • Updated derive_arbitrary to syn 3. This raises the MSRV from 1.63.0 to 1.71.0, which is the MSRV of syn 3.

Fixed

  • Fixed soundness when generating arrays.
  • Fixed nonzero integer generation to always produce a nonzero value.
  • Updated derive_arbitrary to include fixes for fully qualified paths.
Commits
  • 9807b59 Merge pull request #243 from fitzgen/bump-to-1.5.0
  • 7a49e61 Bump to version 1.5.0
  • aa2802b Merge pull request #242 from drakeo338/claude/241-fix
  • a9f7ca5 Update derive_arbitrary to syn 3 and raise MSRV to 1.71
  • cd35bd2 Merge pull request #239 from Manishearth/fix-soundness
  • 53a651d agent-driven: Fix soundness in try_create_array
  • df8afe9 Merge pull request #238 from baloo/baloo/push-lopsmyosqnpv
  • 15f5c08 Bring fix for fully qualified path
  • 341a8fd Merge pull request #237 from ngildenhuys/downgrading_msrv_deps
  • 9b68ef4 ci: adding update commands to downgrade dependencies to fix MSRV test
  • Additional commits viewable in compare view

Updates arc-swap from 1.9.2 to 1.9.3

Changelog

Sourced from arc-swap's changelog.

1.9.3

  • rwlock-strategy feature: RwLock<()> as an explicit, opt-in strategy (ArcSwapAny<Arc<T>, RwLock<()>>). DefaultStrategy is unchanged (#210, #211).
Commits

Updates clap from 4.6.3 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates crossbeam-epoch from 0.9.20 to 0.9.21

Release notes

Sourced from crossbeam-epoch's releases.

crossbeam-epoch 0.9.21

  • Make Shared::null const. (#1227)
  • Improve compatibility with ThreadSanitizer. (#1306, #1308)
  • Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)
Commits
  • 2920c98 Prepare for the next release
  • 808b75a ci: Update codegen job
  • 46774e0 channel: Document that send_timeout sends an available message even if the ti...
  • 89a3fe4 epoch: Make Shared::null const
  • 383d74a Use *::MAX associated constants
  • a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
  • a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
  • 94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
  • 30e5963 epoch: Add missing fence emulation for tsan
  • 708a6bd Handle overflow in bounded channel/queue initialization (#1301)
  • Additional commits viewable in compare view

Updates fe2o3-amqp from 0.18.3 to 0.18.4

Release notes

Sourced from fe2o3-amqp's releases.

0.18.4

  • Transactional acquisition now includes the flow properties, so the txn-id reaches the resource (#419).
  • Delivery-ids are allocated once per delivery instead of per transfer frame, fixing the delivery-id gaps that Proton-based peers (ActiveMQ Artemis, Qpid Broker-J) reject after a split message (#423).
Commits

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates h2 from 0.4.19 to 0.4.20

Release notes

Sourced from h2's releases.

v0.4.20

What's Changed

New Contributors

Full Changelog: hyperium/h2@v0.4.19...v0.4.20

Changelog

Sourced from h2's changelog.

0.4.20 (October 6, 2026)

  • Fix counting reserved push promises against stream concurrency limits.
  • Fix automatic small DATA frame budget to update when the connection window changes at runtime.
  • Fix rejecting duplicate content-length headers with different values.
  • Fix counting refused streams towards the local reset limit.
  • Fix client to reject responses without a :status pseudo header.
  • Fix rare race condition during shutdown.
  • Fix rejecting GOAWAY frames with a non-zero stream identifier.
  • Optimize HPACK Huffman encoding and decoding.
  • Reduce size of HPACK Huffman encoding tables.
  • Optimize receive performance by reducing send buffer locking.
Commits
  • b0e8908 v0.4.20
  • 5b17a0e perf: remove need to lock for pending_refusal for every recv call (#969)
  • a26b427 fix: count reserved push promises against stream concurrency (#968)
  • 96c15eb fix: update automatic DATA frame budget at runtime (#965)
  • d96d347 fix: reject duplicate content-lengths that differ (#967)
  • 8e9655f fix: count refused streams on local reset abuse counter (#966)
  • 3c5f61c fix(client): reject responses without :status (#959)
  • e43124b fix: rare race during shutdown (#956)
  • 20cfc37 style: apply clippy (#955)
  • d785c5f chore: make CI have a single required job (#954)
  • Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.
Commits
  • de55373 v0.13.5
  • 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
  • 9f06fd2 docs: improve description of JSON method (#3082)
  • 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
  • ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
  • 4e9a3c7 chore: add pull request template for human-written content
  • 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
  • 221abe9 chore: Remove unnecessary clones and a cast (#3071)
  • 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
  • fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
  • Additional commits viewable in compare view

Updates rust_decimal from 1.42.1 to 1.43.0

Release notes

Sourced from rust_decimal's releases.

1.43.0

What's Changed

New Contributors

Full Changelog: paupino/rust-decimal@1.42.1...1.43.0

Commits
  • 8592462 version 1.43.0
  • 9be5917 Remove rkyv 0.7 from feature bridge and update rand 0.8 support (#819)
  • f017c8b Merge pull request #823 from flisky/v1
  • 93bd26f fix: add negative sign for array_string
  • 5c3bf3b Merge pull request #814 from momomuchu/fix/rust-decimal-macros-minimal-versio...
  • fe55209 fix: require rust_decimal_macros >=1.37 to avoid circular dependency
  • 551be15 General clippy cleanup (#813)
  • f7272b5 Various performance improvements (#809)
  • b363729 Accumulated fixes backported from master (#808)
  • See full diff in compare view

Updates rustls from 0.23.42 to 0.23.46

Commits
  • f04804f Delay saving KX hint until handshake confirmation
  • 049d39b Bump version to 0.23.46
  • 6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
  • 2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
  • 74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
  • 795eea7 Advance the HPKE sequence only after seal succeeds
  • d67cb71 stream: provide backpressure while buffering received plaintext
  • 7a69ade util: fuse flushes from connections with errors
  • 493d089 conn: fuse writes for connections with errors
  • db00e01 util: keep flushing after short writes
  • Additional commits viewable in compare view

Updates rustls-platform-verifier from 0.7.0 to 0.7.1

Release notes

Sourced from rustls-platform-verifier's releases.

0.7.1

About

This version contains Windows and Android bugfixes, but its headline feature is a migration to an improved distribution strategy for the Android component of the crate, which must be included by Gradle for Android application/library builds. If you don't build for Android, no need to worry these changes don't affect you. But if you do, please continue reading to understand the required migration steps and benefits. 0.7.1 requires the Android migration to be performed once manually.

Android Revocation

The biggest improvement to functionality in this release is proper support for revocation on Android. As OCSP moves to deprecation, more CAs are exclusively using CRLs to distribute revocation data. Previously this failed to work on Android without workarounds since by default the network fetches for this were blocked. As of 0.2.0 of rustls-platform-verifier-android, this works again as expected. We now bundle an Android App manifest with the library, which Android Studio merges into the main manifest of the app being built.

Android Distribution

As of this release, we have stopped bundling pre-compiled .aar artifacts and a local Maven repository inside each release of rustls-platform-verifier-android. Instead, all future (and past!) Maven artifacts are now hosted on GitHub under the maven-archive branch. The branch's structure creates a remote Maven repository that Gradle can download and synchronize with just like any other. Importantly, this now means that the Android library can be downloaded and resolved independently of cargo's own downloads.

0.2.0 of the Android component is exclusively distributed through this new mechanism, but the 0.1.0 and 0.1.1 releases were also backported to the new repository. This means that no matter what version of rustls-platform-verifier you are using, its possible to migrate your Gradle build configuration to the more modern approach. Once again we have included out-of-the-box Gradle and Kotlin script snippets to configure the repository. See our README guide for more info.

What's Changed

New Contributors

Full Changelog: rustls/rustls-platform-verifier@v/0.7.0...v/0.7.1

Commits
  • 252e251 Release 0.7.1
  • 18f5c53 Bump Maven release to 0.2.0
  • 2885f2f Bump android-release-support to 0.2.0
  • 0e76b93 Update Android documentation and release process for GitHub-published artifacts
  • c87abb8 Remove Cargo-bundled Maven repository to setup for GitHub-published artifacts
  • 7c3e664 Bundle generated CRL networkSecurityConfig into release manifest
  • f4d7c89 Update Android build tooling and associated versions
  • f48a4b9 Fix groupId in POM template
  • 027c029 Update Android network security config
  • a8aa23d Take semver-compatible dependency updates
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

  • Avoid underflow in DateIter::nth, ensuring correct behavior.
  • Avoid overflow when deserializing timestamps.
  • Handle out-of-bounds data when deserializing.
  • Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
  • No longer silence errors when deserializing UtcOffset.
  • OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
  • OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 29, 2026
Copilot AI balanced review requested due to automatic review settings October 29, 2026 05:30
@dependabot dependabot Bot added the rust Pull requests that update Rust code label Oct 29, 2026
Copilot AI reviewed Oct 29, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@azure-pipelines

azure-pipelines Bot commented Oct 29, 2026

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
2 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-d88c027b40 branch from ca5bc21 to e137b45 Compare October 29, 2026 23:12
@dependabot
Bump the cargo group across 1 directory with 21 updates
1c4aaac 
Bumps the cargo group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [arbitrary](https://github.com/rust-fuzz/arbitrary) | `1.4.2` | `1.5.0` |
| [arc-swap](https://github.com/vorner/arc-swap) | `1.9.2` | `1.9.3` |
| [clap](https://github.com/clap-rs/clap) | `4.6.3` | `4.6.7` |
| [crossbeam-epoch](https://github.com/crossbeam-rs/crossbeam) | `0.9.20` | `0.9.21` |
| [fe2o3-amqp](https://github.com/minghuaw/fe2o3-amqp) | `0.18.3` | `0.18.4` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |
| [h2](https://github.com/hyperium/h2) | `0.4.19` | `0.4.20` |
| [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` |
| [rust_decimal](https://github.com/paupino/rust-decimal) | `1.42.1` | `1.43.0` |
| [rustls](https://github.com/rustls/rustls) | `0.23.42` | `0.23.46` |
| [rustls-platform-verifier](https://github.com/rustls/rustls-platform-verifier) | `0.7.0` | `0.7.1` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [time](https://github.com/time-rs/time) | `0.3.54` | `0.3.55` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` |
| [tokio-rustls](https://github.com/rustls/tokio-rustls) | `0.26.4` | `0.26.6` |
| [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.18` | `0.1.19` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.18` | `0.7.20` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.1` | `1.28.0` |
| [ureq](https://github.com/algesten/ureq) | `3.3.0` | `3.5.0` |



Updates `arbitrary` from 1.4.2 to 1.5.0
- [Changelog](https://github.com/rust-fuzz/arbitrary/blob/main/CHANGELOG.md)
- [Commits](rust-fuzz/arbitrary@v1.4.2...v1.5.0)

Updates `arc-swap` from 1.9.2 to 1.9.3
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/arc-swap/commits/v1.9.3)

Updates `clap` from 4.6.3 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.3...clap_complete-v4.6.7)

Updates `crossbeam-epoch` from 0.9.20 to 0.9.21
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-epoch-0.9.20...crossbeam-epoch-0.9.21)

Updates `fe2o3-amqp` from 0.18.3 to 0.18.4
- [Release notes](https://github.com/minghuaw/fe2o3-amqp/releases)
- [Commits](minghuaw/fe2o3-amqp@v0.18.3...v0.18.4)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

Updates `h2` from 0.4.19 to 0.4.20
- [Release notes](https://github.com/hyperium/h2/releases)
- [Changelog](https://github.com/hyperium/h2/blob/master/CHANGELOG.md)
- [Commits](hyperium/h2@v0.4.19...v0.4.20)

Updates `rand` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.2...0.10.3)

Updates `reqwest` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5)

Updates `rust_decimal` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/paupino/rust-decimal/releases)
- [Changelog](https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md)
- [Commits](paupino/rust-decimal@1.42.1...1.43.0)

Updates `rustls` from 0.23.42 to 0.23.46
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.42...v/0.23.46)

Updates `rustls-platform-verifier` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/rustls/rustls-platform-verifier/releases)
- [Changelog](https://github.com/rustls/rustls-platform-verifier/blob/main/CHANGELOG)
- [Commits](rustls/rustls-platform-verifier@v/0.7.0...v/0.7.1)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `thiserror` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `time` from 0.3.54 to 0.3.55
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.54...v0.3.55)

Updates `tokio` from 1.53.1 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1)

Updates `tokio-rustls` from 0.26.4 to 0.26.6
- [Release notes](https://github.com/rustls/tokio-rustls/releases)
- [Commits](rustls/tokio-rustls@v/0.26.4...v/0.26.6)

Updates `tokio-stream` from 0.1.18 to 0.1.19
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-stream-0.1.18...tokio-stream-0.1.19)

Updates `tokio-util` from 0.7.18 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.18...tokio-util-0.7.20)

Updates `uuid` from 1.24.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.1...v1.28.0)

Updates `ureq` from 3.3.0 to 3.5.0
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@3.3.0...3.5.0)

---
updated-dependencies:
- dependency-name: arbitrary
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: arc-swap
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: crossbeam-epoch
  dependency-version: 0.9.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: fe2o3-amqp
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: h2
  dependency-version: 0.4.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rustls
  dependency-version: 0.23.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rustls-platform-verifier
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rust_decimal
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: time
  dependency-version: 0.3.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tokio-rustls
  dependency-version: 0.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio-stream
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: ureq
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-d88c027b40 branch from e137b45 to 1c4aaac Compare October 30, 2026 05:31
@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 30, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-d88c027b40 branch October 30, 2026 21:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant