Skip to content

chore: bump the dependencies group with 4 updates - #72

Merged
github-actions[bot] merged 1 commit into
developfrom
dependabot/cargo/develop/dependencies-804b8da9ce
Sep 10, 2026
Merged

chore: bump the dependencies group with 4 updates#72
github-actions[bot] merged 1 commit into
developfrom
dependabot/cargo/develop/dependencies-804b8da9ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates: tower-http, lru, indexmap and wreq.

Updates tower-http from 0.7.0 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

  • fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)
  • fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)
  • request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

  • fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

  • behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)
  • decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)
  • decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)
  • fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)
  • fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)
  • set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

... (truncated)

Commits
  • c941451 chore(release): prepare 0.7.1 (#729)
  • 9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
  • e2582e2 Allow ignoring multi-range requests (#727)
  • 888f7fe feat(services): configure directory redirects (#728)
  • 5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
  • d154adb fix: reject multipart ranges before validation (#661)
  • d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
  • 90c072b Propagate ServeDir::try_call I/O errors (#718)
  • 860922e fix(decompression): don't end the body on an empty data frame (#722)
  • 8532252 docs(example)/custom future with multiple bodies (#711)
  • Additional commits viewable in compare view

Updates lru from 0.18.2 to 0.18.3

Changelog

Sourced from lru's changelog.

v0.18.3 - 2026-08-27

  • Add sparse constructor.
Commits

Updates indexmap from 2.14.0 to 2.14.1

Changelog

Sourced from indexmap's changelog.

2.14.1 (2026-08-28)

  • Simplify comparisons where Equivalent isn't needed (Q = K).
  • Unify index assertions for bounds checks.
  • Fix (or expect) clippy lints.
Commits
  • fdf7e17 Merge pull request #449 from cuviper/release-2.14.1
  • ada540e Release 2.14.1
  • af93b43 expect clippy::redundant_slicing in tests
  • c95da18 fix clippy::derivable_impls
  • 2196365 fix clippy::useless_vec (and more) in tests
  • 1c2be7b use inherent usize::MAX
  • 64f4a06 fix clippy::int_plus_one
  • 41760c5 fix clippy::map_entry
  • be7ffd0 expect clippy::unnecessary_get_then_check in benches
  • bb35663 expect clippy::reversed_empty_ranges in tests
  • Additional commits viewable in compare view

Updates wreq from 6.0.0-rc.29 to 6.0.0-rc.31

Release notes

Sourced from wreq's releases.

v6.0.0-rc.31

What's Changed

New Contributors

Full Changelog: 0x676e67/wreq@v6.0.0-rc.29...v6.0.0-rc.31

Changelog

Sourced from wreq's changelog.

6.0.0-rc.31 - 2026-08-18

Added

  • (socket) tcp SO_LINGER option (#1217)
  • (cookie) expand cookie jar APIs (#1216)
  • (dns) implement Error::is_dns() to detect DNS resolve failures (#1201)

Fixed

  • (release) restore changelog parsing (#1244)
  • (error) classify read timeout as body error (#1233)
  • (proxy) handle WinINET IP wildcards (#1226)
  • (socket) prefer ready connection at timeout boundary
  • (socket) race resolved addresses within connect timeout
  • (cookie) enforce max-age expiration (#1214)
  • (cookie) correct domain matching (#1211)

Other

  • (redirect) cover sensitive headers on scheme changes (#1236)
  • (request) document JSON content type (#1235)
  • add pull request template for human-written content (#1232)
  • (body) use absolute read timeout deadline (#1231)
  • (deps) bump taiki-e/install-action from 2.85.5 to 2.85.10 (#1229)
  • (body) reuse read timeout timer (#1230)
  • restore doc_cfg feature gate (#1228)
  • (client) centralize IPv6 bracket parsing (#1227)
  • Merge pull request #1203 from 0x676e67/dependabot/github_actions/actions/checkout-7
  • Merge pull request #1224 from 0x676e67/fix/multi-ip-connect-timeout-157-1
  • update
  • move release-plz config to .github
  • (redirect) simplify internal abstractions for redirect handling (#1200)
  • (deps) update package dependency versions
  • update examples
  • fix clippy lints for Rust 1.97.0 (#1213)
  • Update .gitignore
  • (badssl) retry on badssl.com connection reset errors (#1207)
  • update package description
  • (badssl) add test case for wrong host on BadSSL (#1202)
  • add single-threaded benchmark for cyper HTTP Client (#1195)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: bump the dependencies group with 4 updates
c112ac7 
Bumps the dependencies group with 4 updates: [tower-http](https://github.com/tower-rs/tower-http), [lru](https://github.com/jeromefroe/lru-rs), [indexmap](https://github.com/indexmap-rs/indexmap) and [wreq](https://github.com/0x676e67/wreq).


Updates `tower-http` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1)

Updates `lru` from 0.18.2 to 0.18.3
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.18.2...0.18.3)

Updates `indexmap` from 2.14.0 to 2.14.1
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.14.0...2.14.1)

Updates `wreq` from 6.0.0-rc.29 to 6.0.0-rc.31
- [Release notes](https://github.com/0x676e67/wreq/releases)
- [Changelog](https://github.com/0x676e67/wreq/blob/main/RELEASE.md)
- [Commits](0x676e67/wreq@v6.0.0-rc.29...v6.0.0-rc.31)

---
updated-dependencies:
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: lru
  dependency-version: 0.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: indexmap
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wreq
  dependency-version: 6.0.0-rc.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 7, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) September 7, 2026 18:41
@github-actions
github-actions Bot merged commit 5c6f712 into develop Sep 10, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/cargo/develop/dependencies-804b8da9ce branch September 10, 2026 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lucashuy lucashuy lucashuy approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lucashuy