Skip to content

deps(rust): bump the rust-dependencies group with 15 updates#34

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-dependencies-5ff8d8467f
Open

deps(rust): bump the rust-dependencies group with 15 updates#34
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-dependencies-5ff8d8467f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the rust-dependencies group with 15 updates:

Package From To
tokio 1.49.0 1.52.1
rmcp 0.17.0 1.5.0
tracing-subscriber 0.3.22 0.3.23
clap 4.5.60 4.6.1
scraper 0.25.0 0.26.0
html5ever 0.36.1 0.39.0
rand 0.10.0 0.10.1
axum 0.8.8 0.8.9
hyper 1.8.1 1.9.0
uuid 1.21.0 1.23.1
sysinfo 0.38.2 0.38.4
hmac 0.12.1 0.13.0
sha2 0.10.9 0.11.0
proptest 1.10.0 1.11.0
wasm-bindgen-test 0.3.64 0.3.68

Updates tokio from 1.49.0 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

  • runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

  • io: AioSource::register_borrowed for I/O safety support (#7992)
  • net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

  • runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)
  • taskdump: add trace_with() for customized task dumps (#8025)
  • taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)
  • fs: support io_uring in AsyncRead for File (#7907)

Changed

  • runtime: improve spawn_blocking scalability with sharded queue (#7757)
  • runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

  • runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

  • docs: fix typo in oneshot::Sender::send docs (#8026)
  • docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)
  • net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits
  • 905c146 chore: prepare to release v1.52.1 (#8059)
  • 56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
  • 57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
  • 812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
  • ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
  • 2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
  • a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
  • 5f7be0a chore: perpare 1.52.0 (#8045)
  • 36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
  • f943312 fs: support io-uring in AsyncRead for File (#7907)
  • Additional commits viewable in compare view

Updates rmcp from 0.17.0 to 1.5.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.5.0

Fixed

  • (macros) respect local feature in #[prompt] macro — omit + Send bound (#803)

rmcp-v1.5.0

Added

  • (transport) add constructors for non_exhaustive error types (#806)
  • add 2025-11-25 protocol version support (#802)

Fixed

  • treat resource metadata JSON parse failure as soft error (#810)
  • include http_request_id in request-wise priming event IDs (#799)
  • (http) drain SSE stream for connection reuse (#790)

Other

  • (deps) update which requirement from 7 to 8 (#807)

rmcp-macros-v1.4.0

Added

  • (macros) auto-generate get_info and default router (#785)

rmcp-v1.4.0

Added

  • add Default and constructors to ServerSseMessage (#794)
  • add meta to elicitation results (#792)
  • (macros) auto-generate get_info and default router (#785)
  • (transport) add which_command for cross-platform executable resolution (#774)
  • (auth) add StoredCredentials::new() constructor (#778)

Fixed

  • (server) remove initialized notification gate to support Streamable HTTP (#788)
  • default session keep_alive to 5 minutes (#780)
  • (http) add host check (#764)
  • exclude local feature from docs.rs build (#782)

Other

  • update Rust toolchain to 1.92 (#797)
  • unify IntoCallToolResult Result impls (#787)

rmcp-macros-v1.3.0

Added

... (truncated)

Commits
  • 020a38b chore: release v1.5.0 (#804)
  • 01a6666 fix: treat resource metadata JSON parse failure as soft error (#810)
  • 3e56d52 fix: include http_request_id in request-wise priming event IDs (#799)
  • 6603c1f fix(macros): respect local feature in #[prompt] macro — omit + Send bou...
  • c99903a fix(http): drain SSE stream for connection reuse (#790)
  • ad39972 feat(transport): add constructors for non_exhaustive error types (#806)
  • a743f15 chore(deps): update which requirement from 7 to 8 (#807)
  • a64be23 feat: add 2025-11-25 protocol version support (#802)
  • 4628720 chore: release v1.4.0 (#779)
  • 65d2b29 fix(server): remove initialized notification gate to support Streamable HTTP ...
  • Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates clap from 4.5.60 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits
  • 1420275 chore: Release
  • d2c817d docs: Update changelog
  • f88c94e Merge pull request #6341 from epage/sep
  • acbb822 fix(complete): Reduce risk of conflict with actual subcommands
  • a49fadb refactor(complete): Pull out subcommand separator
  • ddc008b Merge pull request #6332 from epage/update
  • 497dc50 chore: Update compatible dependencies
  • dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
  • 54bdaa3 chore(deps): Update j178/prek-action action to v2
  • f0d30d9 chore: Release
  • Additional commits viewable in compare view

Updates scraper from 0.25.0 to 0.26.0

Release notes

Sourced from scraper's releases.

v0.26.0

What's Changed

New Contributors

Full Changelog: rust-scraper/scraper@v0.25.0...v0.26.0

Commits
  • 170cdd3 Merge pull request #306 from rust-scraper/bump
  • bca1839 Bump html5ever from 0.38.0 to 0.39.0
  • d07444e Bump selectors from 0.35.0 to 0.36.0 (#307)
  • 637a8d3 Version 0.26.0
  • f3132d9 Bump html5ever from 0.37.1 to 0.38.0
  • ff2ea51 cargo fmt
  • 7d14577 Edition 2024
  • 60cd9e7 Merge pull request #300 from rust-scraper/upgrade-ego-tree-html5ever
  • ba8f3fc Upgrade ego-tree to 0.11.0 and html5ever to 0.37.1
  • a2cfbe4 Bump indexmap from 2.12.1 to 2.13.0
  • Additional commits viewable in compare view

Updates html5ever from 0.36.1 to 0.39.0

Commits

Updates rand from 0.10.0 to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

Commits

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

  • added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)
  • changed: Update minimum rust version to 1.80 (#3620)
  • fixed: Set connect endpoint on correct field in MethodRouter (#3656)
  • fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

Updates hyper from 1.8.1 to 1.9.0

Release notes

Sourced from hyper's releases.

v1.9.0

Features

  • client:
  • error: add 'Error::is_parse_version_h2' method (393c77c7)
  • http1: add UpgradeableConnection::into_parts (e21205cf)

Bug Fixes

  • ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
  • http1:
  • http2:
    • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
    • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Refactors and chores

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.9.0 (2026-03-31)

Bug Fixes

  • ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
  • http1:
  • http2:
    • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
    • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Features

  • client:
  • error: add 'Error::is_parse_version_h2' method (393c77c7)
  • http1: add UpgradeableConnection::into_parts (e21205cf)
Commits
  • 0d6c7d5 v1.9.0
  • e21205c feat(http1): add UpgradeableConnection::into_parts
  • 393c77c feat(error): add 'Error::is_parse_version_h2' method
  • 5b17a69 fix(http2): cancel sending client request body on response future drop (#4042)
  • 7211ec2 fix(http1): allow keep-alive for chunked requests with trailers (#4043)
  • d51cb71 feat(client): expose HTTP/2 current max stream count (#4026)
  • 28e73cc fix(ffi): validate null pointers before dereferencing in request/response fun...
  • e13e783 docs(client): fix HTTP/2 max concurrent stream link to spec (#4037)
  • 8ba9008 chore(dependencies): drop pin-utils dependency (#4023)
  • 5778745 feat(client): add HTTP/2 max_local_error_reset_streams option (#4021)
  • Additional commits viewable in compare view

Updates uuid from 1.21.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

v1.23.0

What's Changed

New Contributors

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

  • Context: Renamed to ContextV1
  • Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to Version::Max

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to Uuid::get_version for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

v1.22.0

What's Changed

... (truncated)

Commits
  • ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
  • b4db015 prepare for 1.23.1 release
  • 771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
  • 80994a2 fix: Timestamp::from_gregorian deprecation note
  • 90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
  • 8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
  • 00ab922 Merge pull request #876 from uuid-rs/cargo/v1.23.0
  • 726ba45 prepare for 1.23.0 release
  • 996dade Merge pull request #875 from uuid-rs/fix/context-ordering
  • e140479 simplify a use stmt
  • Additional commits viewable in compare view

Updates sysinfo from 0.38.2 to 0.38.4

Changelog

Sourced from sysinfo's changelog.

0.38.4

  • macOS: Unpin objc2-* crates version.
  • Linux: Fix computation of disk size.

0.38.3

  • macOS: Improve accuracy of System::available_memory and System::used_memory.
  • Documentation: add missing unit for CPU::frequency returned value.
Commits
  • 97c194d Merge pull request #1642 from GuillaumeGomez/update
  • 91b92f1 Update crate version to 0.38.4
  • 8e8f76c Update CHANGELOG for 0.38.4
  • 9e6f37c Merge pull request #1641 from madsmtm/macos-no-pin-deps
  • 73d545c Fix warnings introduced in new objc2-* versions
  • 5cc4bcb Don't pin objc2-* crates
  • 5d4c63b Merge pull request #1640 from patjakdev/patjakdev/fix-1639
  • a8ee05c Use fragment size instead of block size for disk stats
  • 61257e4 Merge pull request #1635 from GuillaumeGomez/update
  • 3cf4b65 Update crate version to 0.38.3
  • Additional commits viewable in compare view

Updates hmac from 0.12.1 to 0.13.0

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates proptest from 1.10.0 to 1.11.0

Commits

@dependabot
deps(rust): bump the rust-dependencies group with 15 updates
3e80a3e 
Bumps the rust-dependencies group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.52.1` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `0.17.0` | `1.5.0` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.1` |
| [scraper](https://github.com/rust-scraper/scraper) | `0.25.0` | `0.26.0` |
| [html5ever](https://github.com/servo/html5ever) | `0.36.1` | `0.39.0` |
| [rand](https://github.com/rust-random/rand) | `0.10.0` | `0.10.1` |
| [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` |
| [hyper](https://github.com/hyperium/hyper) | `1.8.1` | `1.9.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.23.1` |
| [sysinfo](https://github.com/GuillaumeGomez/sysinfo) | `0.38.2` | `0.38.4` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.10.0` | `1.11.0` |
| [wasm-bindgen-test](https://github.com/wasm-bindgen/wasm-bindgen) | `0.3.64` | `0.3.68` |


Updates `tokio` from 1.49.0 to 1.52.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.52.1)

Updates `rmcp` from 0.17.0 to 1.5.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v0.17.0...rmcp-v1.5.0)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `clap` from 4.5.60 to 4.6.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.1)

Updates `scraper` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/rust-scraper/scraper/releases)
- [Commits](rust-scraper/scraper@v0.25.0...v0.26.0)

Updates `html5ever` from 0.36.1 to 0.39.0
- [Release notes](https://github.com/servo/html5ever/releases)
- [Commits](https://github.com/servo/html5ever/commits)

Updates `rand` from 0.10.0 to 0.10.1
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.0...0.10.1)

Updates `axum` from 0.8.8 to 0.8.9
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9)

Updates `hyper` from 1.8.1 to 1.9.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.8.1...v1.9.0)

Updates `uuid` from 1.21.0 to 1.23.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.21.0...v1.23.1)

Updates `sysinfo` from 0.38.2 to 0.38.4
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.38.2...v0.38.4)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `proptest` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.10.0...v1.11.0)

Updates `wasm-bindgen-test` from 0.3.64 to 0.3.68
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wasm-bindgen/wasm-bindgen/commits)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rmcp
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: scraper
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: html5ever
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rand
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: axum
  dependency-version: 0.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: hyper
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: uuid
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: sysinfo
  dependency-version: 0.38.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: proptest
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wasm-bindgen-test
  dependency-version: 0.3.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from Lenvanderhof as a code owner April 27, 2026 05:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Lenvanderhof Lenvanderhof Awaiting requested review from Lenvanderhof Lenvanderhof is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants