Skip to content

chore(deps): bump the cargo group across 1 directory with 4 updates - #4

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-91ba019797
Closed

chore(deps): bump the cargo group across 1 directory with 4 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-91ba019797

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the cargo group with 4 updates in the / directory: rtc-shared, bon, tokio and uuid.

Updates rtc-shared from 0.21.0-beta.2 to 0.21.0

Release notes

Sourced from rtc-shared's releases.

v0.21.0

What's Changed

... (truncated)

Commits
  • f24423b bump version to v0.21.0
  • 4239564 feat(dtls): allow a server config to hold both a PSK callback and certificate...
  • a562faf fix(sctp): refresh timed reliability before retransmission (#241)
  • 0978819 Merge pull request #240 from rogers677/fix/turn-refresh-lifetime-reschedule
  • 85ba30f Merge pull request #235 from webrtc-rs/v0.21.x
  • 809c4af Merge pull request #233 from realzoberg/fix/sctp-timed-reliability-pending-queue
  • 0694d95 fix(sctp): address review on maxPacketLifeTime pending-queue expiry
  • 6f3e398 fix(sctp): measure maxPacketLifeTime from when a message is queued
  • 9147388 Merge pull request #234 from webrtc-rs/v0.21.x
  • b1905e4 add now: Instant for sctp write/outbound direction's public APIs
  • Additional commits viewable in compare view

Updates bon from 3.10.1 to 3.10.2

Release notes

Sourced from bon's releases.

v3.10.2

Changed

  • Improve the compile time of the builder macros and the code they generate by ~30% (#405)

Fixed

  • Fix clippy::missing_docs_in_private_items triggering for field members (#407)

Internal

Commits
  • 19844ca chore: release v3.10.2 (#409)
  • 5cd0135 chore: attribute the old macro bottleneck to the syn parse (#408)
  • e26222c I asked Claude to research and optimize bon compile times, and it f*cking did...
  • 61fb924 chore(benchmarks): measure builder usage in compilation benchmarks (#406)
  • 8545ded fix: clippy::missing_docs_in_private_items triggering for field members (#407)
  • 42b71f5 Bump miri (#404)
  • See full diff in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view

Updates uuid from 1.26.1 to 1.27.0

Release notes

Sourced from uuid's releases.

v1.27.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits
  • b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
  • ffd8ec5 prepare for 1.27.0 release
  • 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
  • a1aa126 Merge pull request #912 from jaideeppyne/fix/urn-prefix-case-insensitive
  • 4639d67 fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos
  • 2723703 bump MSRV to 1.89.0
  • a3e64fa refactor: simplify URN prefix parsing
  • 5055fd4 refactor: inline case-insensitive URN prefix checks
  • cb8b1d5 refactor: simplify case-insensitive URN parsing
  • 285967d Accept case-insensitive urn:uuid: prefixes when parsing
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith with what you need. Autofix is disabled.

@dependabot
chore(deps): bump the cargo group across 1 directory with 4 updates
cf5dda0 
Bumps the cargo group with 4 updates in the / directory: [rtc-shared](https://github.com/webrtc-rs/rtc), [bon](https://github.com/elastio/bon), [tokio](https://github.com/tokio-rs/tokio) and [uuid](https://github.com/uuid-rs/uuid).


Updates `rtc-shared` from 0.21.0-beta.2 to 0.21.0
- [Release notes](https://github.com/webrtc-rs/rtc/releases)
- [Changelog](https://github.com/webrtc-rs/rtc/blob/master/CHANGELOG.md)
- [Commits](webrtc-rs/rtc@v0.21.0-beta.2...v0.21.0)

Updates `bon` from 3.10.1 to 3.10.2
- [Release notes](https://github.com/elastio/bon/releases)
- [Changelog](https://github.com/elastio/bon/blob/master/release-plz.toml)
- [Commits](elastio/bon@v3.10.1...v3.10.2)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `uuid` from 1.26.1 to 1.27.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.27.0)

---
updated-dependencies:
- dependency-name: rtc-shared
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: bon
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 8, 2026
@coderabbitai

coderabbitai Bot commented Oct 8, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Free
  • Run ID: 6eab958f-5b35-46f6-9b2e-7809c81fad96

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown

📦 Binary size report

Metric main PR Δ
bin size (stripped) 11.00 MiB 11.00 MiB -1.41 KiB (-0.01%) 🔽
bin .text 8.87 MiB 8.87 MiB -1.69 KiB (-0.02%) 🔽
bin allocated (text+data+bss) 11.00 MiB 11.00 MiB -4 B (-0.00%) 🔽
deps crates (Cargo.lock) 612 612 0

Heavy diagnostics were omitted from this gate-only measurement. The size gate uses the linked binary measurements above.

Baseline: edaa64b68 · Head: 6bf831803 · Graphs

@purpshell

purpshell commented Oct 10, 2026

Copy link
Copy Markdown
Member

@codex review

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-10T01:10:03.065010Z cf5dda0 Manual request
🔒 Security Review ✅ Completed 2026-10-10T01:12:19.321483Z cf5dda0 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 10, 2026

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: cf5dda0a0a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 10, 2026

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: cf5dda0a0a

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 13, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-91ba019797 branch October 13, 2026 01:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@purpshell