build(deps): bump the semver-compatible group across 1 directory with 28 updates by dependabot[bot] · Pull Request #29 · ScopeCreep-zip/Springtale

dependabot · 2026-07-23T07:39:01Z

Bumps the semver-compatible group with 27 updates in the / directory:

Package	From	To
tokio	`1.50.0`	`1.53.1`
arc-swap	`1.9.0`	`1.9.2`
tokio-util	`0.7.18`	`0.7.19`
tokio-stream	`0.1.18`	`0.1.19`
async-trait	`0.1.89`	`0.1.91`
anyhow	`1.0.102`	`1.0.104`
thiserror	`2.0.18`	`2.0.19`
serde	`1.0.228`	`1.0.229`
serde_json	`1.0.149`	`1.0.151`
zeroize	`1.8.2`	`1.9.0`
libc	`0.2.183`	`0.2.189`
uuid	`1.23.0`	`1.24.0`
axum	`0.8.8`	`0.8.9`
rust-embed	`8.11.0`	`8.12.0`
reqwest	`0.13.2`	`0.13.4`
wat	`1.250.0`	`1.254.0`
chrono	`0.4.44`	`0.4.45`
feed-rs	`2.3.1`	`2.4.0`
icalendar	`0.17.10`	`0.17.12`
ammonia	`4.1.2`	`4.1.4`
clap	`4.6.0`	`4.6.4`
futures-core	`0.3.32`	`0.3.33`
rustls-pki-types	`1.14.0`	`1.15.0`
crossbeam-deque	`0.8.6`	`0.8.7`
dashmap	`6.1.0`	`6.2.1`
bytes	`1.11.1`	`1.12.1`
http-body-util	`0.1.3`	`0.1.4`

Updates tokio from 1.50.0 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
Additional commits viewable in compare view

Updates arc-swap from 1.9.0 to 1.9.2

Changelog

Sourced from arc-swap's changelog.

1.9.2

Document RefCnt must not panic (#208).

1.9.1

One more SeqCst :-| (#204).

Commits

See full diff in compare view

Updates tokio-util from 0.7.18 to 0.7.19

Commits

f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
Additional commits viewable in compare view

Updates tokio-stream from 0.1.18 to 0.1.19

Commits

bc0933c chore: prepare tokio-stream v0.1.19 (#8310)
e3786d0 readme: remove obsolete TokioConf notices (#8311)
f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
Additional commits viewable in compare view

Updates async-trait from 0.1.89 to 0.1.91

Release notes

Sourced from async-trait's releases.

0.1.90

Update to syn 3

Commits

d049ee0 Release 0.1.91
7a0961f Merge pull request #301 from dtolnay/mutability
740f86f Ignore mut_mut pedantic clippy lint in test
4699cd3 Fix mutability for by-reference receivers
6dd3573 Add regression test for issue 300
2371797 Release 0.1.90
d03f075 Merge pull request #299 from dtolnay/syn3
6cf42c1 Update to syn 3
b9daaba Ignore match_same_arms pedantic clippy lint
aa706d1 Update actions/upload-artifact@v6 -> v7
Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

Update syn dev-dependency to version 3

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

1dbe186 Release 1.0.104
f6479f8 Update to syn 3
5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

Update to syn 3

Commits

e13a785 Release 2.0.19
0a0e76c Update to syn 3
ec42ea7 Update actions/upload-artifact@v6 -> v7
4178c4a Update actions/checkout@v6 -> v7
7214e0e Ignore items_after_statements pedantic clippy lint in test
febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
c50e387 chore: improve thiserror maintenance path
d4a2507 Raise minimum tested compiler to rust 1.85
99e8a6c Unpin CI miri toolchain
9ac165c Pin CI miri to nightly-2026-02-11
Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

de85007 Release 1.0.151
3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
cf16f75 Add RawValue::from_string_unchecked
827a315 Update actions/upload-artifact@v6 -> v7
cea36a5 Update actions/checkout@v6 -> v7
a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
Additional commits viewable in compare view

Updates zeroize from 1.8.2 to 1.9.0

Commits

0b71573 zeroize v1.9.0 (#1494)
3e3f18c zeroize: always enable AVX-512 support (#1493)
1ea42bb zeroize_derive v1.5.0 (#1492)
8d785d1 zeroize: rustdoc improvements (#1491)
d844f36 zeroize: incorporate README.md into rustdoc (#1490)
c65c09d ctutils: use reason instead of comment in forbid attribute (#1489)
cbd0963 Release block-buffer v0.12.1 (#1488)
9aa541d block-buffer: fix exception safety (#1487)
5c7e4f9 cmov v0.5.4 (#1485)
87cadbc cmov: fix clippy (#1484)
Additional commits viewable in compare view

Updates libc from 0.2.183 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:
The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
uClibc now supports a similar configuration option:
RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

uClibc now supports a similar configuration option:

... (truncated)

Commits

ef0906e libc: Release 0.2.189
5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
3e51062 psp: Fix overflowing_literals warnings
e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
63221b3 macros: Require safe in safe_f! invocations
707ab52 macros: Require unsafe in f! invocations
8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
8427909 windows: Add back link names for time-related symbols
b4863fa nuttx: fix wchar_t definition under arm
41c683d nuttx: mirror type definitions
Additional commits viewable in compare view

Updates uuid from 1.23.0 to 1.24.0

Release notes

Sourced from uuid's releases.

v1.24.0

What's Changed

feat(fmt): support encoding into MaybeUninit buffers by @weifanglab in uuid-rs/uuid#892

Prepare for 1.24.0 release by @KodrAus in uuid-rs/uuid#896

New Contributors

@weifanglab made their first contribution in uuid-rs/uuid#892

Full Changelog: uuid-rs/uuid@v1.23.5...v1.24.0

v1.23.5

What's Changed

doc: Fix broken link by @frostyplanet in uuid-rs/uuid#891

perf: Optimize UUID hex parsing and formatting by @geeknoid in uuid-rs/uuid#894

Prepare for 1.23.5 release by @KodrAus in uuid-rs/uuid#895

New Contributors

@geeknoid made their first contribution in uuid-rs/uuid#894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

Improve error messages for ambiguous formats by @KodrAus in uuid-rs/uuid#882

Prepare for 1.23.2 release by @KodrAus in uuid-rs/uuid#883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

v1.23.1

What's Changed

... (truncated)

Commits

6a8aeab Merge pull request #896 from uuid-rs/cargo/v1.24.0
e6db8ec prepare for 1.24.0 release
606f236 Merge pull request #892 from weifanglab/main
ab848db feat(fmt): support encoding into MaybeUninit buffers
5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
5a7dfe5 prepare for 1.23.5 release
9b4bfc8 Merge pull request #894 from geeknoid/main
5acc5a5 perf: Optimize UUID hex parsing and formatting
6fa1a1e feat(fmt): support encoding into MaybeUninit buffers
1e5d867 Merge pull request #891 from frostyplanet/doc
Additional commits viewable in compare view

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)

changed: Update minimum rust version to 1.80 (#3620)

fixed: Set connect endpoint on correct field in MethodRouter (#3656)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates rust-embed from 8.11.0 to 8.12.0

Updates reqwest from 0.13.2 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.

Add ClientBuilder::http2_keep_alive_* options for the blocking client.

Add TLS 1.3 support when using native-tls backend.

Fix redirect handling to strip sensitive headers when the scheme changes.

Fix HTTP/3 happy-eyeball connection creation.

Upgrade hickory-resolver to 0.26.

What's Changed

fix(tls): improve rustls-no-provider panic message and add module docs by @smythg4 in seanmonstar/reqwest#3021

fix: do not lose the url in error when decoding json by @Dushistov in seanmonstar/reqwest#3026

Add tls_sslkeylogfile builder method by @passcod in seanmonstar/reqwest#2923

fix(redirect): strip sensitive headers on scheme change across redirects by @SAY-5 in seanmonstar/reqwest#3034

chore: upgrade MSRV to 1.85 by @seanmonstar in seanmonstar/reqwest#3038

chore: clean up minimal-versions CI job by @seanmonstar in seanmonstar/reqwest#3039

fix(http3): use happy eyeballs for h3 connect by @lyuzichong in seanmonstar/reqwest#3030

fix: update hickory-resolver to 0.26 and adjust code accordingly by @seanmonstar in seanmonstar/reqwest#3040

fix: remove unwrap in hickory initialization by @mat813 in seanmonstar/reqwest#3041

feat(https): support TLS 1.3 as min version under native-tls 🎉 by @AverageHelper in seanmonstar/reqwest#2975

Expose keep alive configurations in blocking client by @aeb-dev in seanmonstar/reqwest#3043

Prepare v0.13.4 by @seanmonstar in seanmonstar/reqwest#3046

New Contributors

@smythg4 made their first contribution in seanmonstar/reqwest#3021

@Dushistov made their first contribution in seanmonstar/reqwest#3026

@SAY-5 made their first contribution in seanmonstar/reqwest#3034

@mat813 made their first contribution in seanmonstar/reqwest#3041

@AverageHelper made their first contribution in seanmonstar/reqwest#2975

@aeb-dev made their first contribution in seanmonstar/reqwest#3043

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

v0.13.3

tl;dr

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

Update docs.rs Features by @JamesWiresmith in seanmonstar/reqwest#2961

fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @monosans in seanmonstar/reqwest#2797

fix: remove timeout con by @cuiweixie in seanmonstar/reqwest#2967

http3: handle stop_sending without error by @anuraaga in seanmonstar/reqwest#2978

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.4

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.

Add ClientBuilder::http2_keep_alive_* options for the blocking client.

Add TLS 1.3 support when using native-tls backend.

Fix redirect handling to strip sensitive headers when the scheme changes.

Fix HTTP/3 happy-eyeball connection creation.

Upgrade hickory-resolver to 0.26.

v0.13.3

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

Commits

11489b3 v0.13.4
d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
fb7bf6a fix: remove unwrap in hickory initialization (#3041)
3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
9cbb65b chore: clean up minimal-versions CI job (#3039)
17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
Additional commits viewable in compare view

Updates wat from 1.250.0 to 1.254.0

Release notes

Sourced from wat's releases.

v1.254.0

What's Changed

Reject out-of-range NaN payloads and bare type-index value types by @vouillon in bytecodealliance/wasm-tools#2563

Implement upstream spec changes for component text syntax by @alexcrichton in bytecodealliance/wasm-tools#2562

wasmparser: require result equivalence for (on $t switch) handler by @vouillon in bytecodealliance/wasm-tools#2564

Prevent unbounded recursion when parsing WITs by @alexcrichton in bytecodealliance/wasm-tools#2565

Add a parse recurse limit to wasm-wave by @alexcrichton in bytecodealliance/wasm-tools#2566

wasm-metadata: Place a limit on decompression size by @alexcrichton in bytecodealliance/wasm-tools#2567

Fix limiting 32-bit tables with wasm-smith by @alexcrichton in bytecodealliance/wasm-tools#2569

Validate component model type depth by @alexcrichton in bytecodealliance/wasm-tools#2570

Fix requiring realloc for async-lowered results-with-pointers by @alexcrichton in bytecodealliance/wasm-tools#2572

Call __wasm_init_task for _initialize hook by @alexcrichton in bytecodealliance/wasm-tools#2574

Release wasm-tools 1.254.0 by @github-actions[bot] in bytecodealliance/wasm-tools#2575

New Contributors

@vouillon made their first contribution in bytecodealliance/wasm-tools#2563

Full Changelog: bytecodealliance/wasm-tools@v1.253.0...v1.254.0

v1.253.0

What's Changed

Limit the element count of fixed-length lists by @eyupcanakman in bytecodealliance/wasm-tools#2537

wasmparser: Rename BinaryReaderError to Error by @lann in bytecodealliance/wasm-tools#2546

fix: signature lowering for strings and lists on modules with 64bit memory by @christoph-dfinity in bytecodealliance/wasm-tools#2544

json-from-wast: name emitted files after the output stem by @eyupcanakman in bytecodealliance/wasm-tools#2542

Refactor KebabStr to not require unsafe code by @alexcrichton in bytecodealliance/wasm-tools#2548

Add CustomSectionReader -> BinaryReader conversion by @WorldSEnder in bytecodealliance/wasm-tools#2550

wasmparser: Add Error::missing_wasm_feature by @lann in bytecodealliance/wasm-tools#2549

fix: use ptr-sized type when returning via ptr indirection under memory64 by @christoph-dfinity in bytecodealliance/wasm-tools#2553

Synchronize threading intrinsics with specification by @alexcrichton in bytecodealliance/wasm-tools#2554

Remove resource.drop async by @alexcrichton in

… 28 updates Bumps the semver-compatible group with 27 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.50.0` | `1.53.1` | | [arc-swap](https://github.com/vorner/arc-swap) | `1.9.0` | `1.9.2` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.18` | `0.7.19` | | [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.18` | `0.1.19` | | [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.91` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.183` | `0.2.189` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.24.0` | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | rust-embed | `8.11.0` | `8.12.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.2` | `0.13.4` | | [wat](https://github.com/bytecodealliance/wasm-tools) | `1.250.0` | `1.254.0` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [feed-rs](https://github.com/feed-rs/feed-rs) | `2.3.1` | `2.4.0` | | [icalendar](https://github.com/hoodie/icalendar) | `0.17.10` | `0.17.12` | | [ammonia](https://github.com/rust-ammonia/ammonia) | `4.1.2` | `4.1.4` | | [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.4` | | [futures-core](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` | | [rustls-pki-types](https://github.com/rustls/pki-types) | `1.14.0` | `1.15.0` | | [crossbeam-deque](https://github.com/crossbeam-rs/crossbeam) | `0.8.6` | `0.8.7` | | [dashmap](https://github.com/xacrimon/dashmap) | `6.1.0` | `6.2.1` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` | | [http-body-util](https://github.com/hyperium/http-body) | `0.1.3` | `0.1.4` | Updates `tokio` from 1.50.0 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.50.0...tokio-1.53.1) Updates `arc-swap` from 1.9.0 to 1.9.2 - [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md) - [Commits](https://github.com/vorner/arc-swap/commits) Updates `tokio-util` from 0.7.18 to 0.7.19 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.18...tokio-util-0.7.19) Updates `tokio-stream` from 0.1.18 to 0.1.19 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-stream-0.1.18...tokio-stream-0.1.19) Updates `async-trait` from 0.1.89 to 0.1.91 - [Release notes](https://github.com/dtolnay/async-trait/releases) - [Commits](dtolnay/async-trait@0.1.89...0.1.91) Updates `anyhow` from 1.0.102 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.104) Updates `thiserror` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.19) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `zeroize` from 1.8.2 to 1.9.0 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0) Updates `libc` from 0.2.183 to 0.2.189 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.183...0.2.189) Updates `uuid` from 1.23.0 to 1.24.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.0...v1.24.0) Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `rust-embed` from 8.11.0 to 8.12.0 Updates `reqwest` from 0.13.2 to 0.13.4 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.2...v0.13.4) Updates `wat` from 1.250.0 to 1.254.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](bytecodealliance/wasm-tools@v1.250.0...v1.254.0) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `feed-rs` from 2.3.1 to 2.4.0 - [Release notes](https://github.com/feed-rs/feed-rs/releases) - [Commits](feed-rs/feed-rs@v2.3.1...v2.4.0) Updates `icalendar` from 0.17.10 to 0.17.12 - [Release notes](https://github.com/hoodie/icalendar/releases) - [Changelog](https://github.com/hoodie/icalendar/blob/main/CHANGELOG.md) - [Commits](hoodie/icalendar@v0.17.10...v0.17.12) Updates `ammonia` from 4.1.2 to 4.1.4 - [Release notes](https://github.com/rust-ammonia/ammonia/releases) - [Changelog](https://github.com/rust-ammonia/ammonia/blob/master/CHANGELOG.md) - [Commits](rust-ammonia/ammonia@v4.1.2...v4.1.4) Updates `clap` from 4.6.0 to 4.6.4 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.4) Updates `futures-core` from 0.3.32 to 0.3.33 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.33) Updates `regex` from 1.12.3 to 1.13.1 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.3...1.13.1) Updates `rustls-pki-types` from 1.14.0 to 1.15.0 - [Release notes](https://github.com/rustls/pki-types/releases) - [Commits](rustls/pki-types@v/1.14.0...v/1.15.0) Updates `crossbeam-deque` from 0.8.6 to 0.8.7 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-deque-0.8.6...crossbeam-deque-0.8.7) Updates `dashmap` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/xacrimon/dashmap/releases) - [Commits](xacrimon/dashmap@v6.1.0...v6.2.1) Updates `bytes` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.1) Updates `http-body-util` from 0.1.3 to 0.1.4 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@http-body-util-v0.1.3...http-body-util-v0.1.4) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: arc-swap dependency-version: 1.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: tokio-util dependency-version: 0.7.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: tokio-stream dependency-version: 0.1.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: async-trait dependency-version: 0.1.91 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: thiserror dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: zeroize dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: libc dependency-version: 0.2.189 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: uuid dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: rust-embed dependency-version: 8.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: reqwest dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: wat dependency-version: 1.254.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: feed-rs dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: icalendar dependency-version: 0.17.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: ammonia dependency-version: 4.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: clap dependency-version: 4.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: futures-core dependency-version: 0.3.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: regex dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: rustls-pki-types dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: crossbeam-deque dependency-version: 0.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible - dependency-name: dashmap dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: bytes dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semver-compatible - dependency-name: http-body-util dependency-version: 0.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: semver-compatible ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-23T07:39:01Z

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from radicalkjax as a code owner July 23, 2026 07:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the semver-compatible group across 1 directory with 28 updates#29

build(deps): bump the semver-compatible group across 1 directory with 28 updates#29
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/semver-compatible-fcb3df69c2

dependabot Bot commented on behalf of github Jul 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

Fixed (unstable)

Documented

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

1.9.2

1.9.1

0.1.90

1.0.104

1.0.103

2.0.19

v1.0.229

v1.0.151

v1.0.150

0.2.189

Added

Deprecated

Fixed

0.2.188

Changed

0.2.187

0.2.189 - 2026-07-21

Added

Deprecated

Fixed

0.2.188 - 2026-07-21

Changed

0.2.187 - 2026-07-20

v1.24.0

What's Changed

New Contributors

v1.23.5

What's Changed

New Contributors

v1.23.4

What's Changed

New Contributors

v1.23.3

What's Changed

v1.23.2

What's Changed

v1.23.1

What's Changed

axum-v0.8.9

v0.13.4

tl;dr

What's Changed

New Contributors

v0.13.3

tl;dr

What's Changed

v0.13.4

v0.13.3

v1.254.0

What's Changed

New Contributors

v1.253.0

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Jul 23, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants