Skip to content

Bump the cargo group across 1 directory with 4 updates#146

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-2f67c96b9f
Closed

Bump the cargo group across 1 directory with 4 updates#146
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-2f67c96b9f

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 2, 2025 •
edited
Loading

Bumps the cargo group with 4 updates in the / directory: clap, openssl, reqwest and tokio.

Updates clap from 4.5.38 to 4.5.39

Release notes

Sourced from clap's releases.

v4.5.39

[4.5.39] - 2025-05-27

Fixes

  • (help) Show short flag aliases before long
  • (help) Merge the short and long flag alias lists
Changelog

Sourced from clap's changelog.

[4.5.39] - 2025-05-27

Fixes

  • (help) Show short flag aliases before long
  • (help) Merge the short and long flag alias lists
Commits

Updates openssl from 0.10.72 to 0.10.73

Release notes

Sourced from openssl's releases.

openssl-v0.10.73

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.72...openssl-v0.10.73

Commits

Updates reqwest from 0.12.15 to 0.12.19

Release notes

Sourced from reqwest's releases.

v0.12.19

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.18...v0.12.19

v0.12.18

What's Changed

  • Fix compilation when socks enabled without TLS.

v0.12.17

What's Changed

v0.12.16

Highlights

  • Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
  • Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
  • Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
  • Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
  • Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
  • Add Proxy::headers() to add extra headers that should be sent to a proxy.
  • Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
  • Fix HTTP/3 to support streaming request bodies.
  • (wasm) Fix null bodies when calling Response::bytes_stream().

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.19

  • Fix redirect that changes the method to GET should remove payload headers.
  • Fix redirect to only check the next scheme if the policy action is to follow.
  • (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

  • Fix compilation when socks enabled without TLS.

v0.12.17

  • Fix compilation on macOS.

v0.12.16

  • Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
  • Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
  • Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
  • Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
  • Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
  • Add Proxy::headers() to add extra headers that should be sent to a proxy.
  • Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
  • Fix HTTP/3 to support streaming request bodies.
  • (wasm) Fix null bodies when calling Response::bytes_stream().
Commits
  • 8cf142b v0.12.19
  • 35b6c83 fix(redirect): Using tower-http patch to fix invalid content-length heade...
  • a54c4cf disable util::add_cookie_header on wasm targets
  • a7a2db1 ci: check cookies feature on wasm target
  • 522638d fix: only check scheme after redirect Policy return follow (#2710)
  • 2fde244 ci: apparently dependabot doesn't understand increase-if-necessary
  • 35a6601 refactor: report custom reason phrase in error message (#2697)
  • 5e03d04 chore(ci): make dependabot tell us of breaking changes we could upgrade to (#...
  • 595c80b v0.12.18
  • f279ad1 fix compilation if socks is enabled without tls
  • Additional commits viewable in compare view

Updates tokio from 1.45.0 to 1.45.1

Release notes

Sourced from tokio's releases.

Tokio v1.45.1

1.45.1 (May 24th, 2025)

This fixes a regression on the wasm32-unknown-unknown target, where code that previously did not panic due to calls to Instant::now() started failing. This is due to the stabilization of the first time-based metric.

Fixed

  • Disable time-based metrics on wasm32-unknown-unknown (#7322)

#7322: tokio-rs/tokio#7322

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the cargo group across 1 directory with 4 updates
4e9a5a6 
Bumps the cargo group with 4 updates in the / directory: [clap](https://github.com/clap-rs/clap), [openssl](https://github.com/sfackler/rust-openssl), [reqwest](https://github.com/seanmonstar/reqwest) and [tokio](https://github.com/tokio-rs/tokio).


Updates `clap` from 4.5.38 to 4.5.39
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.38...clap_complete-v4.5.39)

Updates `openssl` from 0.10.72 to 0.10.73
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.72...openssl-v0.10.73)

Updates `reqwest` from 0.12.15 to 0.12.19
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.15...v0.12.19)

Updates `tokio` from 1.45.0 to 1.45.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.45.0...tokio-1.45.1)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: openssl
  dependency-version: 0.10.73
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: reqwest
  dependency-version: 0.12.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jun 2, 2025
@codecov
Copy link

codecov bot commented Jun 2, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.50%. Comparing base (851a435) to head (4e9a5a6).
⚠️ Report is 16 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main     #146      +/-   ##
==========================================
- Coverage   97.53%   97.50%   -0.03%     
==========================================
  Files          14       14              
  Lines        3406     3406              
==========================================
- Hits         3322     3321       -1     
- Misses         84       85       +1

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@codspeed-hq
Copy link

codspeed-hq bot commented Jun 3, 2025

CodSpeed Performance Report

Merging #146 will not alter performance

Comparing dependabot/cargo/cargo-2f67c96b9f (4e9a5a6) with main (49a7c8d)

Summary

✅ 1 untouched benchmarks

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 9, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 9, 2025
@dependabot dependabot bot deleted the dependabot/cargo/cargo-2f67c96b9f branch June 9, 2025 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants