Bump the rust-dependencies group across 1 directory with 12 updates

Open

Number: #3752
Type: Pull Request
State: Open

Author:

dependabot[bot]
Association: Contributor
Comments: 0

Created: September 30, 2025 at 06:11 PM UTC
(9 months ago)

Updated: September 30, 2025 at 06:11 PM UTC
(9 months ago)

Labels:
rust dependencies

Description:

Bumps the rust-dependencies group with 12 updates in the / directory:

Package	From	To
axum	`0.8.5`	`0.8.6`
aws-sdk-bedrockruntime	`1.106.0`	`1.107.0`
jsonwebtoken	`9.3.1`	`10.0.0`
opentelemetry_sdk	`0.30.0`	`0.31.0`
opentelemetry	`0.30.0`	`0.31.0`
opentelemetry-otlp	`0.30.0`	`0.31.0`
opentelemetry-semantic-conventions	`0.30.0`	`0.31.0`
init-tracing-opentelemetry	`0.30.1`	`0.31.0`
google-cloud-auth	`0.23.0`	`1.0.0`
tonic	`0.13.1`	`0.14.2`
tree-sitter-python	`0.23.6`	`0.25.0`
tree-sitter-md	`0.3.2`	`0.5.1`

Updates axum from 0.8.5 to 0.8.6

Commits

c1bb9c3 Release axum 0.8.6 and related crates
4a50581 Update changelogs
5c76cfd Remove usage of the doc_auto_cfg feature (#3505)
c720f56 Release axum-core v0.5.4
0c96ead Remove unused rustversion dependency of axum-core (#3502)
See full diff in compare view

Updates aws-sdk-bedrockruntime from 1.106.0 to 1.107.0

Commits

See full diff in compare view

Updates jsonwebtoken from 9.3.1 to 10.0.0

Changelog

Sourced from jsonwebtoken's changelog.

10.0.0 (2025-09-29)

BREAKING: now using traits for crypto backends, you have to choose between aws_lc_rs and rust_crypto

Add Clone bound to decode

Support decoding byte slices

Support JWS

Commits

See full diff in compare view

Updates opentelemetry_sdk from 0.30.0 to 0.31.0

Commits

285dc92 chore: Prepare for release v0.31.0 (#3179)
9cde968 chore: Prepare for release otel-http v0.30.1, Revert part of multi-value key ...
5250df2 fix: Suppress telemetry emitted inside of BatchLogProcessor::emit (#3172)
9bd2c1b fix: use instrumentation schema URL on scope spans (#3171)
159135c feat: Add is_remote flag in exporter for spans and span links (#3153)
b7ff11b fix: Use path+version dependencies for publishing to crates.io otel-http (#3...
24da5c9 fix: Use path+version dependencies for publishing to crates.io (#3167)
6f75c58 fix: Add std feature to serde to fix CI linting issues (#3165)
80b5dcb chore: Bump opentelemetry-proto to v0.30.1 and opentelemetry-otlp to v0.30.1 ...
b70771a chore: bump otel-proto to v1.8.0 (#3156)
Additional commits viewable in compare view

Updates opentelemetry from 0.30.0 to 0.31.0

Commits

285dc92 chore: Prepare for release v0.31.0 (#3179)
9cde968 chore: Prepare for release otel-http v0.30.1, Revert part of multi-value key ...
5250df2 fix: Suppress telemetry emitted inside of BatchLogProcessor::emit (#3172)
9bd2c1b fix: use instrumentation schema URL on scope spans (#3171)
159135c feat: Add is_remote flag in exporter for spans and span links (#3153)
b7ff11b fix: Use path+version dependencies for publishing to crates.io otel-http (#3...
24da5c9 fix: Use path+version dependencies for publishing to crates.io (#3167)
6f75c58 fix: Add std feature to serde to fix CI linting issues (#3165)
80b5dcb chore: Bump opentelemetry-proto to v0.30.1 and opentelemetry-otlp to v0.30.1 ...
b70771a chore: bump otel-proto to v1.8.0 (#3156)
Additional commits viewable in compare view

Updates opentelemetry-otlp from 0.30.0 to 0.31.0

Release notes

Sourced from opentelemetry-otlp's releases.

v0.31.0

See changelog for individual crates to know the exact set of changes. All crates in this repo follows same version (0.31.0 for this release).

Commits

285dc92 chore: Prepare for release v0.31.0 (#3179)
9cde968 chore: Prepare for release otel-http v0.30.1, Revert part of multi-value key ...
5250df2 fix: Suppress telemetry emitted inside of BatchLogProcessor::emit (#3172)
9bd2c1b fix: use instrumentation schema URL on scope spans (#3171)
159135c feat: Add is_remote flag in exporter for spans and span links (#3153)
b7ff11b fix: Use path+version dependencies for publishing to crates.io otel-http (#3...
24da5c9 fix: Use path+version dependencies for publishing to crates.io (#3167)
6f75c58 fix: Add std feature to serde to fix CI linting issues (#3165)
80b5dcb chore: Bump opentelemetry-proto to v0.30.1 and opentelemetry-otlp to v0.30.1 ...
b70771a chore: bump otel-proto to v1.8.0 (#3156)
Additional commits viewable in compare view

Updates opentelemetry-semantic-conventions from 0.30.0 to 0.31.0

Release notes

Sourced from opentelemetry-semantic-conventions's releases.

v0.31.0

See changelog for individual crates to know the exact set of changes. All crates in this repo follows same version (0.31.0 for this release).

Commits

285dc92 chore: Prepare for release v0.31.0 (#3179)
9cde968 chore: Prepare for release otel-http v0.30.1, Revert part of multi-value key ...
5250df2 fix: Suppress telemetry emitted inside of BatchLogProcessor::emit (#3172)
9bd2c1b fix: use instrumentation schema URL on scope spans (#3171)
159135c feat: Add is_remote flag in exporter for spans and span links (#3153)
b7ff11b fix: Use path+version dependencies for publishing to crates.io otel-http (#3...
24da5c9 fix: Use path+version dependencies for publishing to crates.io (#3167)
6f75c58 fix: Add std feature to serde to fix CI linting issues (#3165)
80b5dcb chore: Bump opentelemetry-proto to v0.30.1 and opentelemetry-otlp to v0.30.1 ...
b70771a chore: bump otel-proto to v1.8.0 (#3156)
Additional commits viewable in compare view

Updates init-tracing-opentelemetry from 0.30.1 to 0.31.0

Commits

2ede006 chore: release
c126cb6 feat!: Guard struct allow future evolution, init_subscriber can be used for n...
68fd718 feat: a more configurable tracing configuration with TracingConfig
8838894 build: ignore update on rust (try to be compatible with oldest version)
a21b3c4 docs: add a CONTRIBUTING.md with build instruction
fbd819e chore: migrate task from just to mise`
c363da8 feat!: export grpc utils from http::grpc module
b8b3c3b chore(deps): revert change, depends of rust 1.82
9c3b3db chore(deps): update dependency rust to v1.90.0
204ac4e chore(deps): update oxsecurity/megalinter action to v9
Additional commits viewable in compare view

Updates google-cloud-auth from 0.23.0 to 1.0.0

Release notes

Sourced from google-cloud-auth's releases.

v1.0.0

First GA release

We are proud to announce the 1.0 release of the Google Cloud client libraries for Rust. This is the first GA version of the client libraries.

What's Included

Fully asynchronous clients for over 140 services, including Cloud Storage, Vertex AI, Secret Manager, and Key Management Service.

Fully asynchronous auth library, with support for application default credentials, service account credentials, user credentials, compute engine metadata service, and OIDC-based external credentials[^1].

Idiomatic abstractions for long-running operations and pagination APIs.

Automatic retries for requests that fail due to transient errors.

Automatic demarshalling of error details into idiomatic types.

Automatic resumes for uploads to and downloads from Cloud Storage.

Support for streaming uploads to Cloud Storage, with retries on errors.

Automatic checksumming of data uploaded to or downloaded from Cloud Storage.

What's changed

Compared to the previous release (v0.12.0) this release bumps the version numbers to 1.0.0 and updates README files.

feat(storage): support object contexts by @coryan in googleapis/google-cloud-rust#3266

docs: declare all libraries as GA by @coryan in googleapis/google-cloud-rust#3186

docs: remove caveats from top-level README by @coryan in googleapis/google-cloud-rust#3293

Full Changelog: https://github.com/googleapis/google-cloud-rust/compare/v0.12.0...v1.0.0

Footnotes

[^1]: Also known as workload identify federation or "bring your own id".

Commits

See full diff in compare view

Updates tonic from 0.13.1 to 0.14.2

Release notes

Sourced from tonic's releases.

v0.14.2

What's Changed

Improve Status formatting by @emilk in hyperium/tonic#2403

Separate out Tls ConnectInfo trait support into separate tls feature by @xumaple in hyperium/tonic#2402

New Contributors

@Shaun1 made their first contribution in hyperium/tonic#2385

@emilk made their first contribution in hyperium/tonic#2403

@xumaple made their first contribution in hyperium/tonic#2402

Full Changelog: https://github.com/hyperium/tonic/compare/v0.14.1...v0.14.2

v0.14.1

Notable change is to relax the accidental MSRV bump in the last release.

What's Changed

Add service_generator method to Builder by @koesie10 in hyperium/tonic#2364

Improve connection accept error message @stepancheg in hyperium/tonic#2366

Remove unconditional enable of tonic-build transport feature by @tottoto in hyperium/tonic#2357

chore: relax msrv for most crates by @acrrd in hyperium/tonic#2378

New Contributors

@koesie10 made their first contribution in hyperium/tonic#2364

@stepancheg made their first contribution in hyperium/tonic#2366

@acrrd made their first contribution in hyperium/tonic#2378

Full Changelog: https://github.com/hyperium/tonic/compare/v0.14.0...v0.14.1

v0.14.0

This release marks an important milestone for tonic, "hopefully" this will be the last major breaking release of Tonic before we start to transition work into bringing the community a joint-effort grpc-rust implementation. For the moment, any new features for the core of tonic that are not related to the work towards grpc-rust will not be accepted (I believe tonic to be in quite a good spot, security features of course will be handled with the upmost importance). Stay tuned there will be more information the coming months on what is going on with the new project but you can already see some of the code in the grpc crate within the tonic repository.

You can always watch this video for more info on grpc-rust.

Breaking Changes

Prost updated to v0.14

Prost has been extracted to their own crates

Migration guide

To migrate between <=v0.13.1 to v0.14 anything that used prost has now been moved into either tonic-prost or tonic-prost-build. All the previous types are still available but under these two new crates.

What's Changed

add support for tower's load-shed layer by @joeroback in hyperium/tonic#2189

Box Status contents to reduce enum size (#2253) by @tustvold in hyperium/tonic#2282

Update to prost 0.14 by @tottoto in hyperium/tonic#2300

Update generated code to error_details.proto a56cbf3b by @kriswuollett in hyperium/tonic#2306

feat(transport): Allow setting TCP_KEEPINTVL and TCP_KEEPCNT by @xmakro in hyperium/tonic#2299

fix(tonic): make Streaming Sync again by @Twey in hyperium/tonic#2293

... (truncated)

Commits

03894a2 chore: prepare v0.14.2 release (#2408)
d02ee2d Separate out Tls ConnectInfo trait support into separate tls feature (#2402)
52f9de8 feat(tonic): Improve Status formatting (#2403)
efd69a2 LucioFranco
e3f018f chore(grpc): Update to socket2 0.6 (#2390)
8ce9ae6 feat(grpc): server codegen using protobuf rust (#2359)
c1b2396 chore(build): fix protoc binary name (#2400)
407c0d1 chore(ci): Update to actions/checkout@v5 (#2398)
a84984a chore(build): convert from bazel to cmake (#2393)
736a815 feat(grpc): add aggregate_states in child_manager (#2363)
Additional commits viewable in compare view

Updates tree-sitter-python from 0.23.6 to 0.25.0

Release notes

Sourced from tree-sitter-python's releases.

v0.25.0

NOTE: Download tree-sitter-python.tar.gz for the complete source code.

Commits

293fdc0 0.25.0
34a91a2 chore: generate
8ad8a51 ci: update failing files
a0b84ed test: update tests
1b1ca93 fix: give a higher lexical precedence to the * in except*
a4c106f feat: allow multiple exception expressions without parenthesis
29e3bc2 refactor!: simplify exceptions
d8f9e69 feat: add PEP 750 template string support
7ff26da feat: simplify try statement by accepting missing else/except/finally blocks
afdba00 build: update bindings
Additional commits viewable in compare view

Updates tree-sitter-md from 0.3.2 to 0.5.1

Release notes

Sourced from tree-sitter-md's releases.

v0.5.1

What's Changed

release v0.5.0 by @clason in tree-sitter-grammars/tree-sitter-markdown#198

fix: removed unnecessary char casting by @Anaritus in tree-sitter-grammars/tree-sitter-markdown#200

build: install pkgconfig file to libdir by @jpalus in tree-sitter-grammars/tree-sitter-markdown#191

ci: update workflows by @clason in tree-sitter-grammars/tree-sitter-markdown#203

release v0.5.1 by @clason in tree-sitter-grammars/tree-sitter-markdown#204

New Contributors

@Anaritus made their first contribution in tree-sitter-grammars/tree-sitter-markdown#200

@jpalus made their first contribution in tree-sitter-grammars/tree-sitter-markdown#191

Full Changelog: https://github.com/tree-sitter-grammars/tree-sitter-markdown/compare/v0.5.0...v0.5.1

v0.5.0

NOTE: Download tree-sitter-markdown.tar.gz for the complete source code.

Breaking Changes

Regenerate parsers with ABI 15

What's Changed

Require tree-sitter.json for Successful Tree-Sitter Build by @linw1995 in tree-sitter-grammars/tree-sitter-markdown#187

New Contributors

@linw1995 made their first contribution in tree-sitter-grammars/tree-sitter-markdown#187

Full Changelog: https://github.com/tree-sitter-grammars/tree-sitter-markdown/compare/v0.4.1...v0.5.0

v0.4.1

What's Changed

chore: regenerate with tree-sitter 0.25.3 by @clason in tree-sitter-grammars/tree-sitter-markdown#190

New Contributors

@clason made their first contribution in tree-sitter-grammars/tree-sitter-markdown#190

Full Changelog: https://github.com/tree-sitter-grammars/tree-sitter-markdown/compare/v0.4.0...v0.4.1

v0.4.0

What's Changed

Fix filename of common/common.js in package.json that breaks the node package after rename. by @Greenscreener in tree-sitter-grammars/tree-sitter-markdown#161

fix: recognize escaped "$" in latex blocks by @ribru17 in tree-sitter-grammars/tree-sitter-markdown#165

fix: allow whitespace after closing code block fence by @ribru17 in tree-sitter-grammars/tree-sitter-markdown#163

feat: update to tree-sitter 0.24 by @ObserverOfTime in tree-sitter-grammars/tree-sitter-markdown#166

fix: highlights & injections query paths in tree-sitter.json by @topi314 in tree-sitter-grammars/tree-sitter-markdown#178

injections.scm: TOML +++ metadata frontmatter support by @notpeter in tree-sitter-grammars/tree-sitter-markdown#181

New Contributors

@Greenscreener made their first contribution in tree-sitter-grammars/tree-sitter-markdown#161

@ribru17 made their first contribution in tree-sitter-grammars/tree-sitter-markdown#165

... (truncated)

Commits

2dfd57f release v0.5.1
52a3ef9 ci: update workflows
5b95c5a chore: mark parsers as generated by v0.25.9
7462bb6 build: install pkgconfig file to libdir
9dca2b6 fix(scanner): remove unnecessary char casting (#200)
efb075c fixup
afaa413 release v0.5.0
31c557e ci(release): add workflow
2c1006f ci(test): update workflow
071b3b7 fix(npm): include tree-sitter config file (#187)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Pull Request Statistics

Commits:
1

Files Changed:
3

Additions:
+105

Deletions:
-70

Package Dependencies

Package:
tonic

Ecosystem:
cargo

Version Change:
0.13.1 → 0.14.2

Update Type:
Minor

Package:
axum

Ecosystem:
cargo

Version Change:
0.8.5 → 0.8.6

Update Type:
Patch

Package:
opentelemetry

Ecosystem:
cargo

Version Change:
0.30.0 → 0.31.0

Update Type:
Minor

Package:
opentelemetry_sdk

Ecosystem:
cargo

Version Change:
0.30.0 → 0.31.0

Update Type:
Minor

Package:
aws-sdk-bedrockruntime

Ecosystem:
cargo

Version Change:
1.106.0 → 1.107.0

Update Type:
Minor

Package:
opentelemetry-semantic-conventions

Ecosystem:
cargo

Version Change:
0.30.0 → 0.31.0

Update Type:
Minor

Package:
opentelemetry-otlp

Ecosystem:
cargo

Version Change:
0.30.0 → 0.31.0

Update Type:
Minor

Package:
jsonwebtoken

Ecosystem:
cargo

Version Change:
9.3.1 → 10.0.0

Update Type:
Major

Package:
init-tracing-opentelemetry

Ecosystem:
cargo

Version Change:
0.30.1 → 0.31.0

Update Type:
Minor

Package:
google-cloud-auth

Ecosystem:
cargo

Version Change:
0.23.0 → 1.0.0

Update Type:
Major

Package:
tree-sitter-python

Ecosystem:
cargo

Version Change:
0.23.6 → 0.25.0

Update Type:
Minor

Package:
tree-sitter-md

Ecosystem:
cargo

Version Change:
0.3.2 → 0.5.1

Update Type:
Minor

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`10167194`
UUID:	`2875535523`
Node ID:	`PR_kwDOMXNO-86rZTCj`
Host:	GitHub
Repository:	tensorzero/tensorzero
Merge State:	Unknown