Skip to content

build(deps): bump the rust-minor-and-patch group across 1 directory with 9 updates - #157

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-and-patch-d51e4e91c6
Open

build(deps): bump the rust-minor-and-patch group across 1 directory with 9 updates#157
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-and-patch-d51e4e91c6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-minor-and-patch group with 9 updates in the / directory:

Package From To
globset 0.4.20 0.4.21
ureq 3.4.2 3.5.1
webpki-roots 1.0.10 1.0.11
tonic 0.14.6 0.14.9
tonic-prost 0.14.6 0.14.9
tonic-prost-build 0.14.6 0.14.9
tokio 1.53.3 1.54.1
toml 1.1.8+spec-1.1.0 1.2.0+spec-1.1.0
rustix 1.1.5 1.1.6

Updates globset from 0.4.20 to 0.4.21

Commits
  • 55f2f69 globset-0.4.21
  • 65e072f ignore: respect linked worktree excludes without requiring Git
  • d19650f globset: match filename-only regexes against basenames
  • 9d07a92 ignore: reuse incremental matchers for directories without rules
  • 6892bc2 ignore: use byte keys for incremental parent lookups
  • 1752fb7 globset: reject impossible literal lengths before hashing
  • 2d4fa85 ignore: skip empty absolute parent matchers (#3557)
  • b5611fc ignore: reuse parent repository detection
  • c5e744c ignore: avoid scratch pools for empty matchers
  • fada8f9 ignore: benchmark Python workspace discovery and matching (#3554)
  • Additional commits viewable in compare view

Updates ureq from 3.4.2 to 3.5.1

Changelog

Sourced from ureq's changelog.

3.5.1

  • Bump ureq-proto to 0.7.1 (fixes to connection reuse and transfer encoding) #1224
  • Send only cookie names and values in request Cookie headers #1222
  • Preserve readable responses after macOS rejects timeout changes on closed sockets #1220

3.5.0

  • Prepare 3.5.0 and fix dependency advisories and warnings - #1217
  • Add Agent::shutdown() to interrupt requests in flight and close all connections #1211
  • Preserve validated request header casing with RequestBuilder::header_raw #1214
  • Decode proxy URL credentials once; literal percent signs must be escaped as %25 #1215
  • Encode ProxyBuilder credentials and preserve colons in proxy passwords #1215
  • Apply remaining timeout budgets to SOCKS setup and drop the socks dependency #1209
  • Check NO_PROXY before resolving a SOCKS proxy, so excluded hosts connect directly #1209
  • Clarify timeout budgets, phase boundaries, and proxy DNS #1213
  • Bound TLS handshake I/O by the remaining connect/global timeout #1208
  • Retry socket reads interrupted by EINTR when timeout (technically breaking) #1205
  • Fix native-tls-no-default enabling dependencies without enabling the TLS connector
  • Add timeout_per_read and timeout_per_write independently of total phase budgets

3.4.3

  • Update TLS dependencies for security fixes #1218
Commits
  • 33ca9d3 3.5.1
  • d1b194c Bump ureq-proto to 0.7.1
  • 81d1b40 Bump ureq-proto to 0.7.0
  • 0cbee9a docs: clarify body read limit defaults (#1223)
  • f92baae Send only cookie names and values in the Cookie header
  • f60896d Preserve readable responses after macOS timeout setter failures
  • 1bd534e Fix changelog
  • fee0ad2 Prepare 3.5.0 and fix dependency advisories and warnings
  • 7de0ab7 Remove realtime dependencies from tests
  • 3f18f90 Add Agent::shutdown() for active and pooled connections
  • Additional commits viewable in compare view

Updates webpki-roots from 1.0.10 to 1.0.11

Release notes

Sourced from webpki-roots's releases.

1.0.11

Track CCADB removal of further eMudhra CAs: "emSign Root CA - C1" and "emSign ECC Root CA - C3": https://bugzilla.mozilla.org/show_bug.cgi?id=2083709

What's Changed

New Contributors

Full Changelog: rustls/webpki-roots@v/1.0.10...v/1.0.11

Commits

Updates tonic from 0.14.6 to 0.14.9

Release notes

Sourced from tonic's releases.

tonic-build-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-health-v0.14.9

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-build-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • relax codec Default bounds (#2681)
  • License update (#2749)

tonic-reflection-v0.14.9

Fixed

  • (reflection) preserve custom options in served descriptors (#2730)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • enable missing feature for test build (#2820)
  • License update (#2749)

tonic-types-v0.14.9

Fixed

... (truncated)

Commits
  • 4c0f455 chore: release v0.14.9 (#2979)
  • 4ee0483 fix(server): set a timer on HTTP/1 connections so hyper's header read timeout...
  • a47b608 feat(transport): expose h2 reset stream settings on Endpoint (#2972)
  • 349166e grpc/load_balancing: Add address-checked subchannel helpers to TestEnv. (#2938)
  • 78a8f2d feat(tonic-xds): expose ADS keepalive knob in config (#2973)
  • 954d6d7 xds-client: align ADS keepalive defaults with other gRPC languages (#2970)
  • 4b61ef9 xds-client: add grpc crate transport implementation (#2920)
  • 5413799 chore: release v0.14.8 (#2966)
  • b8282b9 fix(tonic-web): fix dropped trailers in combined streaming call. (#2474)
  • 818532d chore: release v0.14.7 (#2800)
  • Additional commits viewable in compare view

Updates tonic-prost from 0.14.6 to 0.14.9

Release notes

Sourced from tonic-prost's releases.

tonic-prost-build-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • relax codec Default bounds (#2681)
  • License update (#2749)

tonic-prost-build-v0.14.8

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-v0.14.8

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • relax codec Default bounds (#2681)
  • License update (#2749)

tonic-prost-build-v0.14.7

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)

... (truncated)

Commits
  • 4c0f455 chore: release v0.14.9 (#2979)
  • 4ee0483 fix(server): set a timer on HTTP/1 connections so hyper's header read timeout...
  • a47b608 feat(transport): expose h2 reset stream settings on Endpoint (#2972)
  • 349166e grpc/load_balancing: Add address-checked subchannel helpers to TestEnv. (#2938)
  • 78a8f2d feat(tonic-xds): expose ADS keepalive knob in config (#2973)
  • 954d6d7 xds-client: align ADS keepalive defaults with other gRPC languages (#2970)
  • 4b61ef9 xds-client: add grpc crate transport implementation (#2920)
  • 5413799 chore: release v0.14.8 (#2966)
  • b8282b9 fix(tonic-web): fix dropped trailers in combined streaming call. (#2474)
  • 818532d chore: release v0.14.7 (#2800)
  • Additional commits viewable in compare view

Updates tonic-prost-build from 0.14.6 to 0.14.9

Release notes

Sourced from tonic-prost-build's releases.

tonic-prost-build-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-build-v0.14.8

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-build-v0.14.7

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)
Commits
  • 4c0f455 chore: release v0.14.9 (#2979)
  • 4ee0483 fix(server): set a timer on HTTP/1 connections so hyper's header read timeout...
  • a47b608 feat(transport): expose h2 reset stream settings on Endpoint (#2972)
  • 349166e grpc/load_balancing: Add address-checked subchannel helpers to TestEnv. (#2938)
  • 78a8f2d feat(tonic-xds): expose ADS keepalive knob in config (#2973)
  • 954d6d7 xds-client: align ADS keepalive defaults with other gRPC languages (#2970)
  • 4b61ef9 xds-client: add grpc crate transport implementation (#2920)
  • 5413799 chore: release v0.14.8 (#2966)
  • b8282b9 fix(tonic-web): fix dropped trailers in combined streaming call. (#2474)
  • 818532d chore: release v0.14.7 (#2800)
  • Additional commits viewable in compare view

Updates tokio from 1.53.3 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

  • time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

  • fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
  • net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
  • runtime: add Builder::max_io_events_per_busy_tick (#8410)
  • runtime: stabilize tokio::runtime::worker_index() (#8431)
  • sync: add SemaphorePermit::semaphore() (#8482)
  • sync: add blocking_acquire methods to Semaphore (#8269)
  • sync: add watch::Receiver::is_closed (#8481)
  • wasm: support JSPI for Emscripten target (#8285, #8627)
  • wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

  • fs: reject zero in File::set_max_buf_size (#8449)
  • io: make copy_buf cooperative (#8459)
  • io: panic when BufReader or BufStream is created with zero capacity (#8494)
  • io: panic when in-memory pipe is created with zero capacity (#8397)
  • io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
  • io: support vectored writes in Sink (#8663)
  • net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
  • net: start accepted sockets as readable and writable (#8435)
  • net: support UCred on Fuchsia (#8257)
  • process: use mio::unix::pipe for Unix child stdio (#8603)
  • runtime: cache-pad the shared injection queue and idle state (#8622)
  • runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
  • runtime: make enable_io available whenever rt is enabled (#8387)
  • runtime: move block_in_place setup into a non-generic function (#8315)
  • runtime: move the multi-thread inject queue to its own mutex (#8382)
  • runtime: panic when max_io_events_per_tick is zero (#8476)
  • runtime: suggest .await in nested block_on panic message (#8501)
  • sync: avoid atomic reader count in broadcast slots (#8357)
  • sync: use acquire/release orderings in Notify (#8325)
  • time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

Updates toml from 1.1.8+spec-1.1.0 to 1.2.0+spec-1.1.0

Commits
  • 8ffe3c5 chore: Release
  • fa51878 docs: Update changelog
  • f8ad91e perf(serde): Reuse key allocations (#1261)
  • fe51467 perf(serde): Reuse key allocations
  • 7024319 perf(writer): Expand coverage of the fast path (#1259)
  • be196a8 perf(writer): Expand coverage of the fast path
  • 932704c perf(serde): Pre-allocate serialization buffers (#1258)
  • 52b563d perf(serde): Pre-allocate serialization buffers
  • e346a79 perff(writer): Add key and string fast paths (#1257)
  • ab695e6 perf(writer): Add a fast path for writing string types
  • Additional commits viewable in compare view

Updates rustix from 1.1.5 to 1.1.6

Commits
  • 4a563ad chore: Release rustix version 1.1.6
  • 8e6aaa6 Merge commit from fork
  • 4686873 fix: expose additional termios output mode flags (#1709)
  • c9ad9d3 fix(net): don't trust cmsg_len past the end of a truncated control buffer (...
  • 98358af Avoid constructing a zero Pid in tcgetpgrp on non-Linux targets (#1710)
  • 664aeae fix(net): use IPPROTO_IPV6 for IPV6_MULTICAST_HOPS (#1692)
  • bf78ee6 freebsd: Fix cfg gates for FreeBSD 12 (#1707)
  • b3d81bd Fix fallocate on Apple platforms. (#1708)
  • 915ab6f fix(fs): Set proper inotify WatchFlags values on libc backend (#1714)
  • 52d5db7 Use 32-bit UID/GID syscalls on arm, sparc, and x86 (#1716)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the rust-minor-and-patch group across 1 directory w…
12023c8 
…ith 9 updates

Bumps the rust-minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [globset](https://github.com/BurntSushi/ripgrep) | `0.4.20` | `0.4.21` |
| [ureq](https://github.com/algesten/ureq) | `3.4.2` | `3.5.1` |
| [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.10` | `1.0.11` |
| [tonic](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [tonic-prost](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [tonic-prost-build](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.3` | `1.54.1` |
| [toml](https://github.com/toml-rs/toml) | `1.1.8+spec-1.1.0` | `1.2.0+spec-1.1.0` |
| [rustix](https://github.com/bytecodealliance/rustix) | `1.1.5` | `1.1.6` |



Updates `globset` from 0.4.20 to 0.4.21
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@globset-0.4.20...globset-0.4.21)

Updates `ureq` from 3.4.2 to 3.5.1
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@3.4.2...3.5.1)

Updates `webpki-roots` from 1.0.10 to 1.0.11
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/1.0.10...v/1.0.11)

Updates `tonic` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-v0.14.6...tonic-v0.14.9)

Updates `tonic-prost` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-prost-v0.14.6...tonic-prost-v0.14.9)

Updates `tonic-prost-build` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-prost-build-v0.14.6...tonic-prost-build-v0.14.9)

Updates `tokio` from 1.53.3 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.3...tokio-1.54.1)

Updates `toml` from 1.1.8+spec-1.1.0 to 1.2.0+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.8...toml-v1.2.0)

Updates `rustix` from 1.1.5 to 1.1.6
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.1.5...v1.1.6)

---
updated-dependencies:
- dependency-name: globset
  dependency-version: 0.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: ureq
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-and-patch
- dependency-name: webpki-roots
  dependency-version: 1.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: tonic
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: tonic-prost
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: tonic-prost-build
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-and-patch
- dependency-name: toml
  dependency-version: 1.2.0+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-and-patch
- dependency-name: rustix
  dependency-version: 1.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Paffin as a code owner November 7, 2026 12:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 7, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Paffin Paffin Awaiting requested review from Paffin Paffin is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants