deps: bump the minor-and-patch group with 8 updates by dependabot[bot] · Pull Request #25 · w3tech/verifiable-rpc-sidecar

dependabot · 2026-07-13T16:45:18Z

Bumps the minor-and-patch group with 8 updates:

Package	From	To
anyhow	`1.0.102`	`1.0.103`
bytes	`1.11.1`	`1.12.1`
http	`1.4.0`	`1.4.2`
hyper	`1.9.0`	`1.10.1`
rustls	`0.23.40`	`0.23.42`
serde_json	`1.0.149`	`1.0.150`
zeroize	`1.8.2`	`1.9.0`
serial_test	`3.4.0`	`3.5.0`

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

76c0fbb Release bytes v1.12.1 (#838)
924c82b Handle unwinding from Box::new (#837)
91402ce Release bytes v1.12.0 (#831)
2256e6d chore: add safety comments on unsafe blocks (#827)
245adff Pass vtable data by value (#826)
00cc5ff Implement BytesMut::extend_from_within (#818)
5b79d31 Merge tag 'v1.11.1'
804ee6d Make try_unsplit method public (#746)
fd426ca Exclude development scripts from published package (#810)
b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
Additional commits viewable in compare view

Updates http from 1.4.0 to 1.4.2

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

chore(header): fix clippy::assign_op_pattern by @rxc-amzn in hyperium/http#806

ci: pin itoa in msrv job by @seanmonstar in hyperium/http#813

Remove unnecessary explicit lifetimes by @jplatte in hyperium/http#815

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/http#819

tests: update to rand 0.10 by @tottoto in hyperium/http#818

refactor: Remove usage of float instruction by @AurelienFT in hyperium/http#823

refactor(uri): consolidate PathAndQuery::from_shared and from_static by @seanmonstar in hyperium/http#825

fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @seanmonstar in hyperium/http#826

Rephrase comment by @daalfox in hyperium/http#827

Fix typo in request builder docs by @vleksis in hyperium/http#831

fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @SAY-5 in hyperium/http#833

fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @seanmonstar in hyperium/http#837

fix(header): use a set_len guard in IntoIter drop by @seanmonstar in hyperium/http#838

New Contributors

@rxc-amzn made their first contribution in hyperium/http#806

@AurelienFT made their first contribution in hyperium/http#823

@daalfox made their first contribution in hyperium/http#827

@vleksis made their first contribution in hyperium/http#831

@SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.

Fix Uri to properly reject DEL characters.

1.4.1 (May 25, 2026)

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

82db5b8 v1.4.2
a9cdbf8 fix(uri): reject DEL character (#842)
df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
ec3f8ce feat(method): impl PartialOrd + Ord (#840)
a24c968 v1.4.1
bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
68e0abb docs: fix typo in request builder docs (#831)
29dd307 docs(extensions): rephrase internal comment (#827)
Additional commits viewable in compare view

Updates hyper from 1.9.0 to 1.10.1

Release notes

Sourced from hyper's releases.

v1.10.1

What's Changed

fix(http1): fix busy loop when peer half-closes and open body by @seanmonstar in hyperium/hyper#4086

Full Changelog: hyperium/hyper@v1.10.0...v1.10.1

v1.10.0

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Refactors, chores, et al

fix(http1): fix rare missed write wakeup on connections v2 by @lthiery in hyperium/hyper#3988

fix(client): reading trailers shouldn't propagate NO_ERROR from early response by @ulyssa in hyperium/hyper#3998

fix(http1): fix reading large bodies on 32-bit systems by @seanmonstar in hyperium/hyper#4056

fix(http2): do not reserve capacity before body data is available by @seanmonstar in hyperium/hyper#4061

Fix two clippy lints by @jplatte in hyperium/hyper#4063

docs(client): document Drop behavior for Connection types by @lihan3238 in hyperium/hyper#4064

Add header_table_size method to server builder by @ArniDagur in hyperium/hyper#4062

feat(http2/client): expose reset_stream_duration option by @kimjune01 in hyperium/hyper#4068

fix(http1): send error when dispatcher is dropped mid-body by @seanmonstar in hyperium/hyper#4069

docs: document cancel safety for client send_request futures by @lihan3238 in hyperium/hyper#4070

docs(error): add detailed doc comments to Error query methods by @kimjune01 in hyperium/hyper#4065

refactor(lib): use a panic_if_poisoned() helper for mutexes by @seanmonstar in hyperium/hyper#4072

refactor(lib): replace unwraps with expects by @seanmonstar in hyperium/hyper#4073

docs(lib): fixup markdown and grammar in doc comments by @seanmonstar in hyperium/hyper#4074

chore(ci): fix security-audit job by @seanmonstar in hyperium/hyper#4076

chore(lib): start a strict clippy config by @seanmonstar in hyperium/hyper#4075

tests(client): fix misuse of path_and_query in CONNECT test by @seanmonstar in hyperium/hyper#4078

Removing wildcard_imports lint allowance by @Lori-Shu in hyperium/hyper#4080

Fix manual_assert lint by @xd009642 in hyperium/hyper#4079

New Contributors

@ulyssa made their first contribution in hyperium/hyper#3998

@lihan3238 made their first contribution in hyperium/hyper#4064

@ArniDagur made their first contribution in hyperium/hyper#4062

@kimjune01 made their first contribution in hyperium/hyper#4068

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.10.1 (2026-05-29)

Bug Fixes

http1: fix busy loop when peer half-closes and open body (#4086) (c6cb906f, closes #4085)

v1.10.0 (2026-05-27)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Commits

e3bcd37 v1.10.1
c6cb906 fix(http1): fix busy loop when peer half-closes and open body (#4086)
54e8511 v1.10.0
79dbab6 style(ext): fix manual_assert lint (#4079)
cca6bf1 style(client): removing wildcard_imports lint allowance (#4080)
3cc1158 test(client): fix misuse of path_and_query in CONNECT test (#4078)
cad38b7 chore(lib): start a strict clippy config (#4075)
7bb1d03 chore(ci): fix security-audit job (#4076)
5dbcae7 docs(lib): fixup markdown and grammar in doc comments (#4074)
08ef365 refactor(lib): replace unwraps with expects (#4073)
Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.42

Commits

411fb02 Bump version to 0.23.42
aff9845 implement rfc 9149 ticket_request extension
8bd3d1b server: add max_tls13_tickets configuration
4cce222 Address new std_instead_of_core in nightly
d3ffdc1 Address new std_instead_of_core in nightly
75d1b7a Take semver-compatible dependency updates
642a103 ci: drop Taplo job
752c144 Drop nightly clippy tests
8d8611a Fix new clippy::useless-borrows-in-formatting
ebf3297 Fix new clippy::manual_clear
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates zeroize from 1.8.2 to 1.9.0

Commits

0b71573 zeroize v1.9.0 (#1494)
3e3f18c zeroize: always enable AVX-512 support (#1493)
1ea42bb zeroize_derive v1.5.0 (#1492)
8d785d1 zeroize: rustdoc improvements (#1491)
d844f36 zeroize: incorporate README.md into rustdoc (#1490)
c65c09d ctutils: use reason instead of comment in forbid attribute (#1489)
cbd0963 Release block-buffer v0.12.1 (#1488)
9aa541d block-buffer: fix exception safety (#1487)
5c7e4f9 cmov v0.5.4 (#1485)
87cadbc cmov: fix clippy (#1484)
Additional commits viewable in compare view

Updates serial_test from 3.4.0 to 3.5.0

Release notes

Sourced from serial_test's releases.

v3.5.0

What's Changed

Replace scc/sdd with std::sync::Mutex for Miri strict provenance compatibility by @justanotheranonymoususer in palfrey/serial_test#157

New Contributors

@justanotheranonymoususer made their first contribution in palfrey/serial_test#157

Full Changelog: palfrey/serial_test@v3.4.0...v3.5.0

Commits

6181f64 3.5.0
480bead Merge pull request #157 from justanotheranonymoususer/remove-scc-dep
e03019e Update ci.yml
820c0f3 Update ci.yml
62a89b0 Only skip file_lock with filesystem access
5ff5501 Update ci.yml
0bd996d Let's try --all-features
338e4ed Fix formatting
a55cde5 Cleanup code_lock.rs
9ad7a8f Remove unnecessary test leftover changes
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 8 updates: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` | | [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.2` | | [hyper](https://github.com/hyperium/hyper) | `1.9.0` | `1.10.1` | | [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.42` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` | | [serial_test](https://github.com/palfrey/serial_test) | `3.4.0` | `3.5.0` | Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `bytes` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.1) Updates `http` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.0...v1.4.2) Updates `hyper` from 1.9.0 to 1.10.1 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.9.0...v1.10.1) Updates `rustls` from 0.23.40 to 0.23.42 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.40...v/0.23.42) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `zeroize` from 1.8.2 to 1.9.0 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0) Updates `serial_test` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/palfrey/serial_test/releases) - [Commits](palfrey/serial_test@v3.4.0...v3.5.0) --- updated-dependencies: - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: bytes dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: http dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: hyper dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: rustls dependency-version: 0.23.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: zeroize dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: serial_test dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

codacy-production · 2026-07-13T16:46:23Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

dependabot · 2026-07-20T16:39:24Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot assigned askolesov and Balevka Jul 13, 2026

dependabot Bot requested review from askolesov and fasashen as code owners July 13, 2026 16:45

dependabot Bot assigned fasashen Jul 13, 2026

dependabot Bot requested review from Balevka and memekas as code owners July 13, 2026 16:45

dependabot Bot assigned memekas Jul 13, 2026

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 13, 2026

dependabot Bot closed this Jul 20, 2026

dependabot Bot deleted the dependabot/cargo/main/minor-and-patch-c43f0f9956 branch July 20, 2026 16:39

Navigation Menu

Uh oh!

deps: bump the minor-and-patch group with 8 updates - #25

deps: bump the minor-and-patch group with 8 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/main/minor-and-patch-c43f0f9956

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

Uh oh!

codacy-production Bot commented Jul 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.0.103

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

1.12.1 (July 8th, 2026)

Fixed

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

v1.4.1

tl;dr

What's Changed

New Contributors

1.4.2 (June 8, 2026)

1.4.1 (May 25, 2026)

v1.10.1

What's Changed

v1.10.0

Features

Bug Fixes

Refactors, chores, et al

New Contributors

v1.10.1 (2026-05-29)

Bug Fixes

v1.10.0 (2026-05-27)

Bug Fixes

Features

v1.0.150

v3.5.0

What's Changed

New Contributors

Uh oh!

codacy-production Bot commented Jul 13, 2026

Up to standards ✅

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading