An open index of dependabot pull requests across open source projects.

Bump the rust-dependencies group across 1 directory with 33 updates

Open
Number: #3722
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 3
Created: September 29, 2025 at 01:44 AM UTC
(9 months ago)
Updated: September 29, 2025 at 05:28 PM UTC
(9 months ago)
Labels:
rust dependencies
Description:

Bumps the rust-dependencies group with 32 updates in the / directory:

Package From To
serde 1.0.219 1.0.228
serde_path_to_error 0.1.17 0.1.20
serde_json 1.0.143 1.0.145
toml 0.9.5 0.9.6
axum 0.8.4 0.8.5
anyhow 1.0.99 1.0.100
clap 4.5.47 4.5.48
serde-untagged 0.1.8 0.1.9
object_store 0.12.3 0.12.4
chrono 0.4.41 0.4.42
aws-sdk-bedrockruntime 1.105.0 1.106.0
aws-sdk-sagemakerruntime 1.85.0 1.86.0
opentelemetry_sdk 0.30.0 0.31.0
opentelemetry 0.30.0 0.31.0
opentelemetry-otlp 0.30.0 0.31.0
opentelemetry-semantic-conventions 0.30.0 0.31.0
init-tracing-opentelemetry 0.30.1 0.31.0
google-cloud-auth 0.23.0 1.0.0
thiserror 2.0.16 2.0.17
tempfile 3.21.0 3.23.0
moka 0.12.10 0.12.11
tonic 0.13.1 0.14.2
hyper-util 0.1.16 0.1.17
rcgen 0.14.3 0.14.5
rustls 0.23.31 0.23.32
tokio-rustls 0.26.2 0.26.4
quote 1.0.40 1.0.41
trybuild 1.0.110 1.0.111
tree-sitter 0.25.9 0.25.10
tree-sitter-python 0.23.6 0.25.0
tree-sitter-md 0.3.2 0.5.1
regex 1.11.2 1.11.3

Updates serde from 1.0.219 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

  • Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

  • Documentation improvements (#2991)

v1.0.226

  • Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @​Mingun)

v1.0.225

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @​rcrisanti)

v1.0.224

  • Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

  • Fix serde_core documentation links (#2978)

v1.0.222

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @​aytey)

v1.0.221

  • Documentation improvements (#2973)
  • Deprecate serde_if_integer128! macro (#2975)

v1.0.220

Commits
  • a866b33 Release 1.0.228
  • 5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
  • ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
  • 415d9fc Release 1.0.227
  • 7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
  • 9d3410e Merge pull request #2992 from dtolnay/inplaceseed
  • 2fb6748 Remove InPlaceSeed public re-export
  • f8137c7 Inline serde_core into serde in docsrs mode
  • b7dbf7e Merge pull request #2990 from dtolnay/integer128
  • 7c83691 No longer macro_use integer128 module
  • Additional commits viewable in compare view

Updates serde_path_to_error from 0.1.17 to 0.1.20

Release notes

Sourced from serde_path_to_error's releases.

0.1.20

  • Support no-std (#37)

0.1.19

  • Raise serde version requirement to >=1.0.220

0.1.18

  • Switch serde dependency to serde_core (#35)
Commits

Updates serde_json from 1.0.143 to 1.0.145

Release notes

Sourced from serde_json's releases.

v1.0.145

  • Raise serde version requirement to >=1.0.220

v1.0.144

  • Switch serde dependency to serde_core (#1285)
Commits

Updates toml from 0.9.5 to 0.9.6

Commits

Updates axum from 0.8.4 to 0.8.5

Release notes

Sourced from axum's releases.

axum v0.8.5

  • fixed: Reject JSON request bodies with trailing characters after the JSON document (#3453)
  • added: Implement OptionalFromRequest for Multipart (#3220)
  • added: Getter methods Location::{status_code, location}
  • added: Support for writing arbitrary binary data into server-sent events (#3425)]
  • added: middleware::ResponseAxumBodyLayer for mapping response body to axum::body::Body (#3469)
  • added: impl FusedStream for WebSocket (#3443)
  • changed: The sse module and Sse type no longer depend on the tokio feature (#3154)
  • changed: If the location given to one of Redirects constructors is not a valid header value, instead of panicking on construction, the IntoResponse impl now returns an HTTP 500, just like Json does when serialization fails (#3377)
  • changed: Update minimum rust version to 1.78 (#3412)

#3154: tokio-rs/axum#3154 #3220: tokio-rs/axum#3220 #3377: tokio-rs/axum#3377 #3412: tokio-rs/axum#3412 #3425: tokio-rs/axum#3425 #3443: tokio-rs/axum#3443 #3453: tokio-rs/axum#3453 #3469: tokio-rs/axum#3469

Commits

Updates anyhow from 1.0.99 to 1.0.100

Release notes

Sourced from anyhow's releases.

1.0.100

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)
Commits
  • 18c2598 Release 1.0.100
  • f271988 Merge pull request #426 from dtolnay/clippyfmt
  • 52f2115 Mark macros with clippy::format_args
  • da5fd9d Raise minimum tested compiler to rust 1.76
  • 211e409 Opt in to generate-macro-expansion when building on docs.rs
  • b48fc02 Enforce trybuild >= 1.0.108
  • d5f59fb Update ui test suite to nightly-2025-09-07
  • 238415d Update ui test suite to nightly-2025-08-24
  • 3bab070 Update actions/checkout@v4 -> v5
  • 4249254 Order cap-lints flag in the same order as thiserror build script
  • See full diff in compare view

Updates clap from 4.5.47 to 4.5.48

Release notes

Sourced from clap's releases.

v4.5.48

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry
Changelog

Sourced from clap's changelog.

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry
Commits
  • c3a1ddc chore: Release
  • 4460ff4 docs: Update changelog
  • 54947a1 Merge pull request #5981 from mernen/fix-bash-clap-complete-space
  • fd3f6d2 fix(complete): Restore nospace in bash
  • 2f6a108 test(complete): Demonstrate current behavior
  • f88be57 style: Ensure consistent newlines
  • f209bce chore: Release
  • f33ff7f docs: Update changelog
  • bf06e6f Merge pull request #5974 from kryvashek/support-clearing-args-matches
  • 5d357ad feat(parser): Added ArgMatches::try_clear_id()
  • Additional commits viewable in compare view

Updates serde-untagged from 0.1.8 to 0.1.9

Release notes

Sourced from serde-untagged's releases.

0.1.9

  • Switch serde dependency to serde_core (#11)
Commits

Updates object_store from 0.12.3 to 0.12.4

Changelog

Sourced from object_store's changelog.

Historical Changelog

Commits
  • 9dc8d7d Update version to 0.12.4 and add changelog (#491)
  • cac4bac Revert "refactor: remove AWS dynamo integration (#407)" (#493)
  • ebfd02f AWS S3: Support STS endpoint, WebIdentity, RoleArn, RoleSession configuration...
  • f1dd075 Fix for clippy 1.90 (#492)
  • ed17e12 Add version 0.12.4 release plan to README (#490)
  • da88a75 Add storage class for aws, gcp, and azure (#456)
  • f73c457 aws: downgrade credential provider info! log messages to debug! (#436)
  • 59e5545 chore(client/retry): include error info in logs when retry occurs (#487)
  • c0e241e build(deps): bump actions/github-script from 7 to 8 (#478)
  • 49ce872 build(deps): bump actions/setup-node from 4 to 5 (#477)
  • Additional commits viewable in compare view

Updates chrono from 0.4.41 to 0.4.42

Release notes

Sourced from chrono's releases.

0.4.42

What's Changed

Commits
  • f3fd15f Bump version to 0.4.42
  • 5cf5603 strftime: add regression test case
  • a623170 strftime: simplify error handling
  • 36fbfb1 strftime: move specifier handling out of match to reduce rightward drift
  • 7f413c3 strftime: yield None early
  • 9d5dfe1 strftime: outline constants
  • e5f6be7 strftime: move error() method below caller
  • d516c27 strftime: merge impl blocks
  • 0ee2172 strftime: re-order items to keep impls together
  • 757a8b0 Upgrade to windows-bindgen 0.63
  • Additional commits viewable in compare view

Updates aws-sdk-bedrockruntime from 1.105.0 to 1.106.0

Commits

Updates aws-sdk-sagemakerruntime from 1.85.0 to 1.86.0

Commits

Updates opentelemetry_sdk from 0.30.0 to 0.31.0

Commits
  • 285dc92 chore: Prepare for release v0.31.0 (#3179)
  • 9cde968 chore: Prepare for release otel-http v0.30.1, Revert part of multi-value key ...
  • 5250df2 fix: Suppress telemetry emitted inside of BatchLogProcessor::emit (#3172)
  • 9bd2c1b fix: use instrumentation schema URL on scope spans (#3171)
  • 159135c feat: Add is_remote flag in exporter for spans and span links (#3153)
  • b7ff11b fix: Use path+version dependencies for publishing to crates.io otel-http (#3...
  • 24da5c9 fix: Use path+version dependencies for publishing to crates.io (#3167)
  • 6f75c58 fix: Add std feature to serde to fix CI linting issues (#3165)
  • 80b5dcb chore: Bump opentelemetry-proto to v0.30.1 and opentelemetry-otlp to v0.30.1 ...
  • b70771a chore: bump otel-proto to v1.8.0 (#3156)
  • Additional commits viewable in compare view

Updates opentelemetry from 0.30.0 to 0.31.0

Commits
  • 285dc92 chore: Prepare for release v0.31.0 (#3179)
  • 9cde968 chore: Prepare for release otel-http v0.30.1, Revert part of multi-value key ...
  • 5250df2 fix: Suppress telemetry emitted inside of BatchLogProcessor::emit (#3172)
  • 9bd2c1b fix: use instrumentation schema URL on scope spans (#3171)
  • 159135c feat: Add is_remote flag in exporter for spans and span links (#3153)
  • b7ff11b fix: Use path+version dependencies for publishing to crates.io otel-http (#3...
  • 24da5c9 fix: Use path+version dependencies for publishing to crates.io (#3167)
  • 6f75c58 fix: Add std feature to serde to fix CI linting issues (#3165)
  • 80b5dcb chore: Bump opentelemetry-proto to v0.30.1 and opentelemetry-otlp to v0.30.1 ...
  • b70771a chore: bump otel-proto to v1.8.0 (#3156)
  • Additional commits viewable in compare view

Updates opentelemetry-otlp from 0.30.0 to 0.31.0

Release notes

Sourced from opentelemetry-otlp's releases.

v0.31.0

See changelog for individual crates to know the exact set of changes. All crates in this repo follows same version (0.31.0 for this release).

Commits
  • 285dc92 chore: Prepare for release v0.31.0 (#3179)
  • 9cde968 chore: Prepare for release otel-http v0.30.1, Revert part of multi-value key ...
  • 5250df2 fix: Suppress telemetry emitted inside of BatchLogProcessor::emit (#3172)
  • 9bd2c1b fix: use instrumentation schema URL on scope spans (#3171)
  • 159135c feat: Add is_remote flag in exporter for spans and span links (#3153)
  • b7ff11b fix: Use path+version dependencies for publishing to crates.io otel-http (#3...
  • 24da5c9 fix: Use path+version dependencies for publishing to crates.io (#3167)
  • 6f75c58 fix: Add std feature to serde to fix CI linting issues (#3165)
  • 80b5dcb chore: Bump opentelemetry-proto to v0.30.1 and opentelemetry-otlp to v0.30.1 ...
  • b70771a chore: bump otel-proto to v1.8.0 (#3156)
  • Additional commits viewable in compare view

Updates opentelemetry-semantic-conventions from 0.30.0 to 0.31.0

Release notes

Sourced from opentelemetry-semantic-conventions's releases.

v0.31.0

See changelog for individual crates to know the exact set of changes. All crates in this repo follows same version (0.31.0 for this release).

Commits
  • 285dc92 chore: Prepare for release v0.31.0 (#3179)
  • 9cde968 chore: Prepare for release otel-http v0.30.1, Revert part of multi-value key ...
  • 5250df2 fix: Suppress telemetry emitted inside of BatchLogProcessor::emit (#3172)
  • 9bd2c1b fix: use instrumentation schema URL on scope spans (#3171)
  • 159135c feat: Add is_remote flag in exporter for spans and span links (#3153)
  • b7ff11b fix: Use path+version dependencies for publishing to crates.io otel-http (#3...
  • 24da5c9 fix: Use path+version dependencies for publishing to crates.io (#3167)
  • 6f75c58 fix: Add std feature to serde to fix CI linting issues (#3165)
  • 80b5dcb chore: Bump opentelemetry-proto to v0.30.1 and opentelemetry-otlp to v0.30.1 ...
  • b70771a chore: bump otel-proto to v1.8.0 (#3156)
  • Additional commits viewable in compare view

Updates init-tracing-opentelemetry from 0.30.1 to 0.31.0

Commits
  • 2ede006 chore: release
  • c126cb6 feat!: Guard struct allow future evolution, init_subscriber can be used for n...
  • 68fd718 feat: a more configurable tracing configuration with TracingConfig
  • 8838894 build: ignore update on rust (try to be compatible with oldest version)
  • a21b3c4 docs: add a CONTRIBUTING.md with build instruction
  • fbd819e chore: migrate task from just to mise`
  • c363da8 feat!: export grpc utils from http::grpc module
  • b8b3c3b chore(deps): revert change, depends of rust 1.82
  • 9c3b3db chore(deps): update dependency rust to v1.90.0
  • 204ac4e chore(deps): update oxsecurity/megalinter action to v9
  • Additional commits viewable in compare view

Updates google-cloud-auth from 0.23.0 to 1.0.0

Release notes

Sourced from google-cloud-auth's releases.

v1.0.0

First GA release

We are proud to announce the 1.0 release of the Google Cloud client libraries for Rust. This is the first GA version of the client libraries.

What's Included

  • Fully asynchronous clients for over 140 services, including Cloud Storage, Vertex AI, Secret Manager, and Key Management Service.
  • Fully asynchronous auth library, with support for application default credentials, service account credentials, user credentials, compute engine metadata service, and OIDC-based external credentials[^1].
  • Idiomatic abstractions for long-running operations and pagination APIs.
  • Automatic retries for requests that fail due to transient errors.
  • Automatic demarshalling of error details into idiomatic types.
  • Automatic resumes for uploads to and downloads from Cloud Storage.
  • Support for streaming uploads to Cloud Storage, with retries on errors.
  • Automatic checksumming of data uploaded to or downloaded from Cloud Storage.

What's changed

Compared to the previous release (v0.12.0) this release bumps the version numbers to 1.0.0 and updates README files.

Full Changelog: https://github.com/googleapis/google-cloud-rust/compare/v0.12.0...v1.0.0

Footnotes

[^1]: Also known as workload identify federation or "bring your own id".

Commits

Updates indexmap from 2.11.0 to 2.11.4

Changelog

Sourced from indexmap's changelog.

2.11.4 (2025-09-18)

  • Updated the hashbrown dependency to a range allowing 0.15 or 0.16.

2.11.3 (2025-09-15)

  • Make the minimum serde version only apply when "serde" is enabled.

2.11.2 (2025-09-15)

  • Switched the "serde" feature to depend on serde_core, improving build parallelism in cases where other dependents have enabled "serde/derive".

2.11.1 (2025-09-08)

  • Added a get_key_value_mut method to IndexMap.
  • Removed the unnecessary Ord bound on insert_sorted_by methods.
Commits

Updates thiserror from 2.0.16 to 2.0.17

Release notes

Sourced from thiserror's releases.

2.0.17

  • Use differently named __private module per patch release (#434)
Commits
  • 72ae716 Release 2.0.17
  • 599fdce Merge pull request #434 from dtolnay/private
  • 9ec05f6 Use differently named __private module per patch release
  • d2c492b Raise minimum tested compiler to rust 1.76
  • fc3ab95 Opt in to generate-macro-expansion when building on docs.rs
  • 819fe29 Update ui test suite to nightly-2025-09-12
  • 259f48c Enforce trybuild >= 1.0.108
  • 470e6a6 Update ui test suite to nightly-2025-08-24
  • 544e191 Update actions/checkout@v4 -> v5
  • cbc1eba Delete duplicate cap-lints flag from build script
  • See full diff in compare view

Updates tempfile from 3.21.0 to 3.23.0

Changelog

Sourced from tempfile's changelog.

3.23.0

  • Remove need for the "nightly" feature to compile with "wasip2".

3.22.0

  • Updated windows-sys requirement to allow version 0.61.x
  • Remove unstable-windows-keep-open-tempfile feature.
Commits
  • fe9f4a3 chore: release v3.23.0 (#381)
  • 006c3fd fix: use std::os::fd instead of std::os::wasi (#380)
  • b0e6309 doc: Update COPYRIGHT link (#377)
  • 2d6fc3f Fix formatting in Builder::disable_cleanup documentation (#375)
  • f720dbe chore: release 3.22.0
  • 55d742c chore: remove deprecated unstable feature flag
  • bc41a0b build(deps): update windows-sys requirement from >=0.52, <0.61 to >=0.52, <0....
  • 3c55387 test: make sure we don't drop tempdirs early (#373)
  • 17bf644 doc(builder): clarify permissions (#372)
  • c7423f1 doc(env): document the alternative to setting the tempdir (#371)
  • Additional commits viewable in compare view

Updates moka from 0.12.10 to 0.12.11

Changelog

Sourced from moka's changelog.

Version 0.12.11

Added

  • Support Equivalent trait for the key type K of the caches. (#492[gh-pull-0492])
  • Added the jittered_expiry_policy example (#489[gh-pull-0489]).

Changed

  • Adjusted license expression: some code is Apache-2.0 only (#529[gh-pull-0529], by [@​musicinmybrain][gh-musicinmybrain]).
    • The license expression in Cargo.toml was changed from MIT OR Apache-2.0 to (MIT OR Apache-2.0) AND Apache-2.0.
    • See the license section of the README for details.
  • Upgrading a crate in the dependencies:
    • Raised the minimum version of crossbeam-channel crate from v0.5.5 to v0.5.15 to avoid the following issue (#514[gh-pull-0514], by [karankurbur][gh-karankurbur]).
      • [RUSTSEC-2025-0024] crossbeam-channel: double free on Drop
  • Moving a crate from the dependencies to the dev-dependencies:
    • Switched loom crate to a dev-dependency (#509[gh-pull-0509], by [thomaseizinger][gh-thomaseizinger]).
  • Updating a crate in the dev-dependencies:
    • Upgraded reqwest crate in the dev-dependencies from v0.11 to v0.12 (#531[gh-pull-0531], by [musicinmybrain][gh-musicinmybrain]).

Removed

  • Removing a crate from the dependencies:
    • Removed thiserror crate by manually implementing std::error::Error for moka::PredicateError (#512[gh-pull-0512], by [@​brownjohnf][gh-brownjohnf]).
  • Removing crates from the dev-dependencies:
    • Removed unmaintained paste crate from the dev-dependencies (#504[gh-pull-0504]).
      • [RUSTSEC-2024-0436] paste - no longer maintained
    • Removed discontinued async-std crate from the dev-dependencies (#534[gh-pull-0534]).
      • [RUSTSEC-2025-0052] async-std has been discontinued
  • Removed clippy ignore non_send_fields_in_send_ty that no longer applies (#505[gh-pull-0505], by [@​qti3e][gh-qti3e]).

Fixed

  • Remove redundant word in source code comment (#532[gh-pull-0532], by [@​quantpoet][gh-quantpoet]).
Commits
  • Ellipsis for 6bae51d9a8cd4a667744ca05b535815ce48b47ce. You can customize this summary. It will automatically update as commits are pushed.

Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Package:
clap
Ecosystem:
cargo
Version Change:
4.5.47 → 4.5.48
Update Type:
Patch
Package:
hyper-util
Ecosystem:
cargo
Version Change:
0.1.16 → 0.1.17
Update Type:
Patch
Package:
tree-sitter
Ecosystem:
cargo
Version Change:
0.25.9 → 0.25.10
Update Type:
Patch
Package:
thiserror
Ecosystem:
cargo
Version Change:
2.0.16 → 2.0.17
Update Type:
Patch
Package:
tempfile
Ecosystem:
cargo
Version Change:
3.21.0 → 3.23.0
Update Type:
Minor
Package:
toml
Ecosystem:
cargo
Version Change:
0.9.5 → 0.9.6
Update Type:
Patch
Package:
anyhow
Ecosystem:
cargo
Version Change:
1.0.99 → 1.0.100
Update Type:
Patch
Package:
chrono
Ecosystem:
cargo
Version Change:
0.4.41 → 0.4.42
Update Type:
Patch
Package:
rustls
Ecosystem:
cargo
Version Change:
0.23.31 → 0.23.32
Update Type:
Patch
Package:
serde
Ecosystem:
cargo
Version Change:
1.0.219 → 1.0.228
Update Type:
Patch
Package:
serde_json
Ecosystem:
cargo
Version Change:
1.0.143 → 1.0.145
Update Type:
Patch
Package:
quote
Ecosystem:
cargo
Version Change:
1.0.40 → 1.0.41
Update Type:
Patch
Package:
tonic
Ecosystem:
cargo
Version Change:
0.13.1 → 0.14.2
Update Type:
Minor
Package:
axum
Ecosystem:
cargo
Version Change:
0.8.4 → 0.8.5
Update Type:
Patch
Ecosystem:
cargo
Version Change:
0.30.0 → 0.31.0
Update Type:
Minor
Ecosystem:
cargo
Version Change:
0.30.0 → 0.31.0
Update Type:
Minor
Ecosystem:
cargo
Version Change:
0.26.2 → 0.26.4
Update Type:
Patch
Package:
trybuild
Ecosystem:
cargo
Version Change:
1.0.110 → 1.0.111
Update Type:
Patch
Package:
regex
Ecosystem:
cargo
Version Change:
1.11.2 → 1.11.3
Update Type:
Patch
Ecosystem:
cargo
Version Change:
1.105.0 → 1.106.0
Update Type:
Minor
Ecosystem:
cargo
Version Change:
0.30.0 → 0.31.0
Update Type:
Minor
Ecosystem:
cargo
Version Change:
0.30.0 → 0.31.0
Update Type:
Minor
Package:
rcgen
Ecosystem:
cargo
Version Change:
0.14.3 → 0.14.5
Update Type:
Patch
Ecosystem:
cargo
Version Change:
0.12.3 → 0.12.4
Update Type:
Patch
Ecosystem:
cargo
Version Change:
1.85.0 → 1.86.0
Update Type:
Minor
Ecosystem:
cargo
Version Change:
0.30.1 → 0.31.0
Update Type:
Minor
Ecosystem:
cargo
Version Change:
0.1.17 → 0.1.20
Update Type:
Patch
Ecosystem:
cargo
Version Change:
0.23.0 → 1.0.0
Update Type:
Major
Package:
moka
Ecosystem:
cargo
Version Change:
0.12.10 → 0.12.11
Update Type:
Patch
Ecosystem:
cargo
Version Change:
0.1.8 → 0.1.9
Update Type:
Patch
Ecosystem:
cargo
Version Change:
0.23.6 → 0.25.0
Update Type:
Minor
Ecosystem:
cargo
Version Change:
0.3.2 → 0.5.1
Update Type:
Minor
Technical Details
ID: 8717966
UUID: 3462912134
Node ID: PR_kwDOMXNO-86q_awg
Host: GitHub
Repository: tensorzero/tensorzero