chore(deps): bump the cargo-minor-and-patch group across 1 directory with 10 updates by dependabot[bot] · Pull Request #30 · jamiehdev/shadowstep

dependabot · 2026-10-25T00:33:53Z

Bumps the cargo-minor-and-patch group with 10 updates in the / directory:

Package	From	To
actix-web	`4.15.0`	`4.17.0`
tokio	`1.53.1`	`1.53.3`
clap	`4.5.60`	`4.6.7`
hyper	`1.11.1`	`1.12.0`
rustls	`0.23.45`	`0.23.46`
sha2	`0.11.0`	`0.11.1`
serde_json	`1.0.151`	`1.0.154`
parking_lot	`0.12.3`	`0.12.5`
actix-http	`3.18.12`	`3.19.0`
tokio-rustls	`0.26.5`	`0.26.6`

Updates actix-web from 4.15.0 to 4.17.0

Release notes

Sourced from actix-web's releases.

actix-web: v4.17.0

Fix Accept parsing and preference selection for quality parameters before media type parameters and for quoted parameter values containing semicolons.

Update zstd dependency to 0.14.

Update brotli dependency to 9.

actix-web: v4.16.0

The TLS crate features no longer enable the http2 crate feature.

Prevent TestRequest app data retention by disabling its request pooling.

Commits

15fd3ff chore(actix-web): prepare release 4.17.0
1a351ea chore(awc): prepare release 3.10.0
4ef4b2d chore(actix-http): prepare release 3.19.0
1d6eeb7 fix(actix-http): reject out-of-range WebSocket payload lengths (#4323)
b47afd6 fix(actix-http): parse header quality values as exact decimals (#4314)
1f0c38b fix(actix-http): round float quality values to the nearest thousandth (#4315)
5492b7a chore: tweak q item comments
19d672e Fix quality parameter ordering and quoted values (#4301)
8b6a22b chore(deps): update zstd to 0.14 (#4320)
efa9c21 chore(deps): update brotli to 9 (#4319)
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

io: wake and drop DuplexStream wakers outside the lock (#8618)

macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)

runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)

sync: wake waiters outside the lock when closing a semaphore (#8529)

test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits

a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
482eadd runtime: record time wake when unparking tasks on current thread (#8595)
55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
0448618 sync: make tracing_sync tests synchronous (#8427)
2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
Additional commits viewable in compare view

Updates clap from 4.5.60 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

Update to syn v3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

Update MSRV to 1.85

[4.5.61] - 2026-03-12

... (truncated)

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates hyper from 1.11.1 to 1.12.0

Release notes

Sourced from hyper's releases.

v1.12.0

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Everything

docs: fix typo responsibile -> responsible by @vaibhav8a in hyperium/hyper#4177

style: replace single-character lifetime names with descriptive names by @dox4 in hyperium/hyper#4173

refactor(http1): resolve collapsible_match lint by @nakaryo716 in hyperium/hyper#4178

hyper Improvement Proposals by @seanmonstar in hyperium/hyper#4131

perf(body): simpler custom Incoming channel by @seanmonstar in hyperium/hyper#4168

docs(maintainers): add 0x676e67 as a collaborator by @seanmonstar in hyperium/hyper#4184

fix(ext): remove broken OriginalHeaderOrder doctest by @cratelyn in hyperium/hyper#4188

build(deps): remove unused futures-channel from http1 feature by @0x676e67 in hyperium/hyper#4185

chore(ci): update to cargo-check-external-types 0.5.0 by @tottoto in hyperium/hyper#4189

style(lib): address ignored_unit_patterns lint by @nakaryo716 in hyperium/hyper#4193

Preserve hop-by-hop when setting close or keep-alive by @dtolnay in hyperium/hyper#4196

fix(http2): do not reserve capacity for idle Upgraded streams by @Dev-next-gen in hyperium/hyper#4198

style(lib): Address clippy panics and missing_panics_doc lints by @Siech0 in hyperium/hyper#4191

docs: fix typos in capi README, MSRV and governance docs by @toyeshhm in hyperium/hyper#4204

style(lib): Address trivial, low quantity clippy lints. by @Siech0 in hyperium/hyper#4190

chore(clippy): allow clippy lints following 1.99.0 release by @dswij in hyperium/hyper#4219

style: remove useless_borrows_in_formatting from the clippy allowlist by @ump45nose in hyperium/hyper#4220

style(h1): mark partial Debug impls as non-exhaustive by @badimalex in hyperium/hyper#4218

style(lib): Address cast-possible-truncation clippy findings. by @Siech0 in hyperium/hyper#4192

feat(http1): add max_header_size limit for server and client by @Aditya-9-6 in hyperium/hyper#4183

fix(http1): let a Connection close token win over a later keep-alive by @shoemoney in hyperium/hyper#4201

fix(http1): always remove content-length if transfer-encoding is sent by @seanmonstar in hyperium/hyper#4223

fix(http1): remove invalid content-length if transfer-encoding is auto-added by @seanmonstar in hyperium/hyper#4224

fix(http1): withdraw a stale want when the client dispatcher takes a request by @shodoco in hyperium/hyper#4208

perf(body): skip waking a closed peer when a channel end drops by @0x676e67 in hyperium/hyper#4225

Prepare v1.12.0 by @seanmonstar in hyperium/hyper#4226

New Contributors

@vaibhav8a made their first contribution in hyperium/hyper#4177

@dox4 made their first contribution in hyperium/hyper#4173

@dtolnay made their first contribution in hyperium/hyper#4196

@Dev-next-gen made their first contribution in hyperium/hyper#4198

@Siech0 made their first contribution in hyperium/hyper#4191

@toyeshhm made their first contribution in hyperium/hyper#4204

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.12.0 (2026-10-06)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Commits

7f67699 v1.12.0
254bf12 perf(body): skip waking a closed peer when a channel end drops (#4225)
c44f1cc fix(http1): withdraw a stale want when the client dispatcher takes a request ...
69396fd fix(http1): remove content-length if transfer-encoding is auto-added (#4224)
a5d7fd7 fix(http1): always remove content-length if transfer-encoding is sent (#4223)
5dadff7 fix(http1): let a Connection close token win over a later keep-alive (#4201)
d1cd14e feat(http1): add max_header_size limit for server and client (#4183)
714c7cf style(lib): address cast-possible-truncation clippy findings (#4192)
0d47440 style(lib): mark partial Debug impls as non-exhaustive (#4218)
da3b1b1 style(lib): remove useless_borrows_in_formatting from the clippy allowlist (#...
Additional commits viewable in compare view

Updates rustls from 0.23.45 to 0.23.46

Commits

f04804f Delay saving KX hint until handshake confirmation
049d39b Bump version to 0.23.46
6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
795eea7 Advance the HPKE sequence only after seal succeeds
d67cb71 stream: provide backpressure while buffering received plaintext
7a69ade util: fuse flushes from connections with errors
493d089 conn: fuse writes for connections with errors
db00e01 util: keep flushing after short writes
Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates parking_lot from 0.12.3 to 0.12.5

Changelog

Sourced from parking_lot's changelog.

parking_lot - 0.12.5 - 2025-09-30

Bumped MSRV to 1.71

Fixed Miri when the hardware-lock-elision feature is enabled (#491)

Added missing into_arc(_fair) methods (#472)

Fixed RawRwLock::bump_*() not releasing lock when there are multiple readers (#471)

parking_lot_core - 0.9.12 - 2025-09-30

Bumped MSRV to 1.71

Switched from windows-targets to windows-link. (#493)

Replaced thread-id dependency with std::thread::ThreadId (#483)

Added SGX implementation for ThreadParker.park_until (#481)

lock_api - 0.4.14 - 2025-09-30

Fixed use of doc_cfg when building on docs.rs.

Bumped MSRV to 1.71

Added #[track_caller] where locking implementations could feasibly need to panic

Added try_map_or_err to various mutex guards (#480)

Removed unnecessary build script and autocfg dependency (#474)

Added missing into_arc(_fair) methods (#472)

parking_lot - 0.12.4 - 2025-05-29

Fix parked upgraders potentially not being woken up after a write lock

Fix clearing PARKED_WRITER_BIT after a timeout

parking_lot_core - 0.9.11 - 2025-05-29

Use Release/Acquire ordering in thread_parker::windows::Backend::create

Remove warnings due to new lint on unknown cfgs

lock_api - 0.4.13 - 2025-05-29

Remove warnings due to new lint on unknown cfgs

Commits

d7828ff chore: release
73365ad Merge pull request #495 from mbrobbel/doc_auto_cfg
0b5585a Replace doc_auto_cfg with doc_cfg
c7b7dc7 Merge pull request #493 from a1phyr/windows_link
07c2d40 Update MSRV to 1.71
345cf7a Switch from windows-targets to windows-link
eeb186c Merge pull request #491 from AaronKutch/fix_assembly_on_miri
a7d328e do not use elision on Miri even if feature is enabled
739d370 Merge pull request #487 from sola-contrib/replace-winapi
ed4ae93 Replace winapi with windows-sys in benchmark crate
Additional commits viewable in compare view

Updates actix-http from 3.18.12 to 3.19.0

Release notes

Sourced from actix-http's releases.

actix-http: v3.19.0

Fix QualityItem parsing to recognize quality parameters before other parameters and ignore semicolons inside quoted values.

Parse header quality values as exact decimals and reject invalid numeric syntax.

Round float quality conversions to the nearest thousandth to preserve all three decimal places.

Reject WebSocket frames whose 64-bit payload length has the most significant bit set, or whose length does not fit in usize on 32-bit targets, using ws::ProtocolError::Overflow.

Update zstd dependency to 0.14.

Update brotli dependency to 9.

actix-http: v3.18.13

Emit required Connection options for HTTP/1 response upgrade advertisements without changing connection state.

Parse all HTTP/1 Connection header options consistently.

Only treat Expect: 100-continue as a continue expectation in HTTP/1.1 requests.

Reject WebSocket handshakes with a Sec-WebSocket-Key value that is not valid Base64 or does not decode to 16 bytes.

Reject WebSocket Close frames with payloads larger than 125 bytes.

Return a 426 Upgrade Required response when an unsupported WebSocket version is requested.

Commits

15fd3ff chore(actix-web): prepare release 4.17.0
1a351ea chore(awc): prepare release 3.10.0
4ef4b2d chore(actix-http): prepare release 3.19.0
1d6eeb7 fix(actix-http): reject out-of-range WebSocket payload lengths (#4323)
b47afd6 fix(actix-http): parse header quality values as exact decimals (#4314)
1f0c38b fix(actix-http): round float quality values to the nearest thousandth (#4315)
5492b7a chore: tweak q item comments
19d672e Fix quality parameter ordering and quoted values (#4301)
8b6a22b chore(deps): update zstd to 0.14 (#4320)
efa9c21 chore(deps): update brotli to 9 (#4319)
Additional commits viewable in compare view

Updates tokio-rustls from 0.26.5 to 0.26.6

Release notes

Sourced from tokio-rustls's releases.

0.26.6

0.26.5 added an optimization to batch multiple reads which could swallow some errors. Buffer errors so that they propagate to the caller as soon as the caller next reads from the stream.

What's Changed

Buffer and propagate errors from transport by @dtolnay in rustls/tokio-rustls#205

Prepare 0.26.6 by @djc in rustls/tokio-rustls#206

Commits

8aebb7c Bump version to 0.26.6
6f8509a Rename buffered_err to error
bd0494d Buffer and propagate errors from transport
a781340 Add regression test for issue 204
9d0dae6 build(deps): bump rustls from 0.23.44 to 0.23.45
0ad049e build(deps): bump rustls from 0.23.43 to 0.23.44
4f913c7 build(deps): bump rcgen from 0.14.9 to 0.14.10
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 10 updates Bumps the cargo-minor-and-patch group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actix-web](https://github.com/actix/actix-web) | `4.15.0` | `4.17.0` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.3` | | [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.7` | | [hyper](https://github.com/hyperium/hyper) | `1.11.1` | `1.12.0` | | [rustls](https://github.com/rustls/rustls) | `0.23.45` | `0.23.46` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.3` | `0.12.5` | | [actix-http](https://github.com/actix/actix-web) | `3.18.12` | `3.19.0` | | [tokio-rustls](https://github.com/rustls/tokio-rustls) | `0.26.5` | `0.26.6` | Updates `actix-web` from 4.15.0 to 4.17.0 - [Release notes](https://github.com/actix/actix-web/releases) - [Changelog](https://github.com/actix/actix-web/blob/main/CHANGES.md) - [Commits](actix/actix-web@web-v4.15.0...actix-web-v4.17.0) Updates `tokio` from 1.53.1 to 1.53.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.3) Updates `clap` from 4.5.60 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.7) Updates `hyper` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.11.1...v1.12.0) Updates `rustls` from 0.23.45 to 0.23.46 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.45...v/0.23.46) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `parking_lot` from 0.12.3 to 0.12.5 - [Release notes](https://github.com/Amanieu/parking_lot/releases) - [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md) - [Commits](Amanieu/parking_lot@0.12.3...parking_lot-v0.12.5) Updates `actix-http` from 3.18.12 to 3.19.0 - [Release notes](https://github.com/actix/actix-web/releases) - [Changelog](https://github.com/actix/actix-web/blob/main/CHANGES.md) - [Commits](actix/actix-web@http-v3.18.12...actix-http-v3.19.0) Updates `tokio-rustls` from 0.26.5 to 0.26.6 - [Release notes](https://github.com/rustls/tokio-rustls/releases) - [Commits](rustls/tokio-rustls@v/0.26.5...v/0.26.6) --- updated-dependencies: - dependency-name: actix-web dependency-version: 4.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tokio dependency-version: 1.53.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: hyper dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: rustls dependency-version: 0.23.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: parking_lot dependency-version: 0.12.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: actix-http dependency-version: 3.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tokio-rustls dependency-version: 0.26.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 25, 2026

Navigation Menu

Repository navigation

chore(deps): bump the cargo-minor-and-patch group across 1 directory with 10 updates - #30

chore(deps): bump the cargo-minor-and-patch group across 1 directory with 10 updates#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-6de83f4961

dependabot Bot commented on behalf of github Oct 25, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 25, 2026

actix-web: v4.17.0

actix-web: v4.16.0

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

Changed

Fixed

Fixed (unstable)

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

v4.6.7

[4.6.7] - 2026-09-14

Features

v4.6.6

[4.6.6] - 2026-08-06

Features

v4.6.5

[4.6.5] - 2026-07-31

Fixes

v4.6.4

[4.6.4] - 2026-07-21

Internal

v4.6.3

[4.6.3] - 2026-07-20

Fixes

v4.6.2

[4.6.2] - 2026-07-15

Fixes

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.7] - 2026-09-14

Features

[4.6.6] - 2026-08-06

Features

[4.6.5] - 2026-07-31

Fixes

[4.6.4] - 2026-07-21

Internal

[4.6.3] - 2026-07-20

Fixes

[4.6.2] - 2026-07-15

Fixes

[4.6.1] - 2026-04-15

Fixes

[4.6.0] - 2026-03-12

Compatibility

[4.5.61] - 2026-03-12

v1.12.0

Features

Bug Fixes

Everything

New Contributors

v1.12.0 (2026-10-06)

Bug Fixes

Features

v1.0.154

v1.0.153

v1.0.152

parking_lot - 0.12.5 - 2025-09-30

parking_lot_core - 0.9.12 - 2025-09-30

lock_api - 0.4.14 - 2025-09-30

parking_lot - 0.12.4 - 2025-05-29

parking_lot_core - 0.9.11 - 2025-05-29

lock_api - 0.4.13 - 2025-05-29

actix-http: v3.19.0

actix-http: v3.18.13

0.26.6

What's Changed

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

`parking_lot` - 0.12.5 - 2025-09-30

`parking_lot_core` - 0.9.12 - 2025-09-30

`lock_api` - 0.4.14 - 2025-09-30

`parking_lot` - 0.12.4 - 2025-05-29

`parking_lot_core` - 0.9.11 - 2025-05-29

`lock_api` - 0.4.13 - 2025-05-29