chore(deps): Bump the rust-dependencies group with 5 updates #12000

dependabot · 2026-01-05T03:09:50Z

Bumps the rust-dependencies group with 5 updates:

Package	From	To
clap	`4.5.53`	`4.5.54`
libc	`0.2.178`	`0.2.179`
reqwest	`0.12.28`	`0.13.1`
syn	`2.0.111`	`2.0.113`
tokio	`1.48.0`	`1.49.0`

Updates clap from 4.5.53 to 4.5.54

Release notes

Sourced from clap's releases.

v4.5.54

[4.5.54] - 2026-01-02

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

Changelog

Sourced from clap's changelog.

[4.5.54] - 2026-01-02

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

Commits

194c676 chore: Release
44838f6 docs: Update changelog
0f59d55 Merge pull request #6027 from Alpha1337k/master
e2aa2f0 Feat: Add catch-all on external subcommands for zsh
b9c0aee Feat: Add external subcommands test to suite
See full diff in compare view

Updates libc from 0.2.178 to 0.2.179

Release notes

Sourced from libc's releases.

0.2.179

With this release, we now have unstable support for 64-bit time_t on 32-bit platforms with both Musl and Glibc. Testing is appreciated!

For now, these can be enabled by setting environment variables during build:
RUST_LIBC_UNSTABLE_MUSL_V1_2_3=1
RUST_LIBC_UNSTABLE_GNU_TIME_BITS=64
Note that the exact configuration will change in the future. Setting the MUSL_V1_2_3 variable also enables some newer API unrelated to time_t.

Added

L4Re: Add uclibc aarch64 support (#4479)

Linux, Android: Add a generic definition for XCASE (#4847)

Linux-like: Add NAME_MAX (#4888)

Linux: Add AT_EXECVE_CHECK (#4422)

Linux: Add the SUN_LEN macro (#4269)

Linux: add getitimer and setitimer (#4890)

Linux: add pthread_tryjoin_n and pthread_timedjoin_np (#4887)

Musl: Add unstable support for 64-bit time_t on 32-bit platforms (#4463)

NetBSD, OpenBSD: Add interface LINK_STATE_* definitions from sys/net/if.h (#4751)

QuRT: Add support for Qualcomm QuRT (#4845)

Types: Add Padding::uninit() (#4862)

Fixed

Glibc: Link old version of cf{g,s}et{i,o}speed (#4882)

L4Re: Fixes for pthread (#4479)

L4re: Fix a wide variety of incorrect definitions (#4479)

Musl: Fix the value of CPU_SETSIZE on musl 1.2+ (#4865)

Musl: RISC-V: fix public padding fields in stat/stat64 (#4463)

Musl: s390x: Fix definition of SIGSTKSZ/MINSIGSTKSZ (#4884)

NetBSD: Arm: Fix PT_{GET,SET}FPREGS, _REG_TIPDR, and _REG_{LR,SP} (#4899)

NetBSD: Fix if_msghdr alignment (#4902)

NetBSD: Fix siginfo_t layout on 32-bit platforms (#4904)

NetBSD: change definition of pthread_spin_t to allow arch redefinition. (#4899)

Newlib: Fix ambiguous glob exports and other warnings for Vita and 3DS (#4875)

QNX: Fix build error (#4879)

Changed

CI: Update CI images to FreeBSD 15.0-release (#4857)

L4Re: Make pthread struct fields private (#4876)

Linux, Fuchsia: Mark mq_attr padding area as such (#4858)

Types: Wrap a number of private fields in the Padding type (#4862)

... (truncated)

Commits

4c61c9c chore: release libc 0.2.179
a4237c0 adding pthread_tryjoin_n/pthread_timedjoin_np to Linux.
d4c9bb8 netbsd/arm.rs: make typo corrections which make the libc-test pass.
c2b4b3d netbsd/mod.rs: change definition of pthread_spin_t to allow arch redefinition.
bd4a7c5 links old version of cf{g,s}et{i,o}speed for glibc
80a05fd netbsd/mod.rs: fix so that self-tests pass on both ilp32 and lp64.
3918b91 src/new/netbsd/net/if_.rs: make if_msghdr self-tests succeed on ilp32 hosts:
85aa379 build(deps): bump vmactions/solaris-vm from 1.1.8 to 1.2.3
ad6c4a1 qurt: Add support for Qualcomm QuRT
184a558 Fix QNX build error
Additional commits viewable in compare view

Updates reqwest from 0.12.28 to 0.13.1

Release notes

Sourced from reqwest's releases.

v0.13.1

What's Changed

http3: depend on quinn/rustls-aws-lc-rs to avoid ring dependency by @djc in seanmonstar/reqwest#2917

fix rustls on android by @seanmonstar in seanmonstar/reqwest#2918

Full Changelog: seanmonstar/reqwest@v0.13.0...v0.13.1

v0.13.0

Breaking changes

rustls is now the default TLS backend, instead of native-tls.

rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)

rustls-tls has been renamed to rustls.

rustls roots features removed, rustls-platform-verifier is used by default.

To use different roots, call tls_certs_only(your_roots).

native-tls now includes ALPN. To disable, use native-tls-no-alpn.

query and form are now crate features, disabled by default.

Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).

Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)

For example, prefer tls_backend_rustls() over use_rustls_tls().

Pull Requests in General

start 0.13 dev by @seanmonstar in seanmonstar/reqwest#2894

Make serde optional by introducing query, form features, and re-working WASM header parsing by @CathalMullan in seanmonstar/reqwest#2858

replace ClientBuilder::dns_resolver with dns_resolver2 by @seanmonstar in seanmonstar/reqwest#2898

feat: make Rustls the default TLS provider by @calavera in seanmonstar/reqwest#2897

feat: consolidate TLS options with rustls-platform-verifier by @seanmonstar in seanmonstar/reqwest#2891

remove long-deprecated methods: trust-dns and non-wasm-cors by @seanmonstar in seanmonstar/reqwest#2899

rename rustls-tls feature to just rustls by @seanmonstar in seanmonstar/reqwest#2900

remove deprecated features trust-dns and macos-system-configuration by @seanmonstar in seanmonstar/reqwest#2901

chore: separate rustls and rustls-no-provider features by @seanmonstar in seanmonstar/reqwest#2903

rustls: allow windows to use extra roots by @seanmonstar in seanmonstar/reqwest#2904

v0.13.0-rc.1 by @seanmonstar in seanmonstar/reqwest#2905

Enable ALPN by default in native-tls by @ducaale in seanmonstar/reqwest#2907

v0.13.0 by @seanmonstar in seanmonstar/reqwest#2915

New Contributors

@CathalMullan made their first contribution in seanmonstar/reqwest#2858

Full Changelog: seanmonstar/reqwest@v0.12.28...v0.13.0

v0.13.0-rc.1

👀 Discussion here if you give it try, thanks!

Main breaking changes

rustls is now default instead of native-tls

rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you want to enable a different one)

rustls-tls renamed to rustls

rustls roots features removed, platform-verifier is used instead

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.1

Fixes compiling with rustls on Android targets.

v0.13.0

Breaking changes:

rustls is now the default TLS backend, instead of native-tls.

rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)

rustls-tls has been renamed to rustls.

rustls roots features removed, rustls-platform-verifier is used by default.

To use different roots, call tls_certs_only(your_roots).

native-tls now includes ALPN. To disable, use native-tls-no-alpn.

query and form are now crate features, disabled by default.

Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).

Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)

For example, prefer tls_backend_rustls() over use_rustls_tls().

Commits

10fb98c v0.13.1
438098a chore: refer to h2 as dep:h2 (#2919)
43aac91 chore(ci): bump actions/checkout from 5 to 6 (#2864)
175f5b2 fix rustls on android (#2918)
1afe88e Depend on quinn/rustls-aws-lc-rs to avoid ring dependency (#2917)
62a80af v0.13.0
e8d89f4 enable ALPN by default in native-tls (#2907)
9a9daa7 v0.13.0-rc.1
d518e45 rustls: allow windows to use extra roots (#2904)
934bc84 chore: separate rustls and rustls-no-provider features (#2903)
Additional commits viewable in compare view

Updates syn from 2.0.111 to 2.0.113

Release notes

Sourced from syn's releases.

2.0.113

Allow parsing TypeParam with colon not followed by any type param bounds (#1953, thanks @wyfo)

2.0.112

Fix panic in LitByte::new().value() (#1951, thanks @VictorArcium)

Commits

8cfa32a Release 2.0.113
d5e19ff Do PR 1953 also for LifetimeParam
3fe4dc6 Merge pull request #1953 from wyfo/fix/type-param-colon-no-bounds
31508f3 Fix TypeParam expecting identifier after colon
1534d3a Update reqwest dev-dependency to 0.13
f8f2a42 Release 2.0.112
ca22ce0 Merge pull request #1951 from VictorArcium/vt/fix-lit-byte
0c4bea1 Fix LitByte::new().
7e38d5d Disable test_parse_buffer.test_unwind_safe under Miri
f987b14 Update actions/upload-artifact@v5 -> v6
Additional commits viewable in compare view

Updates tokio from 1.48.0 to 1.49.0

Release notes

Sourced from tokio's releases.

Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

net: add support for TCLASS option on IPv6 (#7781)

runtime: stabilize runtime::id::Id (#7125)

task: implement Extend for JoinSet (#7195)

task: stabilize the LocalSet::id() (#7776)

Changed

net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

macros: fix the hygiene issue of join! and try_join! (#7766)

runtime: revert "replace manual vtable definitions with Wake" (#7699)

sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)

task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

fs: handle EINTR in fs::write for io-uring (#7786)

fs: support io-uring with tokio::fs::read (#7696)

runtime: disable io-uring on EPERM (#7724)

time: add alternative timer for better multicore scalability (#7467)

Documented

docs: fix a typos in bounded.rs and park.rs (#7817)

io: add SyncIoBridge cross-references to copy and copy_buf (#7798)

io: doc that AsyncWrite does not inherit from std::io::Write (#7705)

metrics: clarify that num_alive_tasks is not strongly consistent (#7614)

net: clarify the cancellation safety of the TcpStream::peek (#7305)

net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)

net: clarify the platform-dependent backlog in TcpSocket docs (#7738)

runtime: mention LocalRuntime in new_current_thread docs (#7820)

sync: add missing period to mpsc::Sender::try_send docs (#7721)

sync: clarify the cancellation safety of oneshot::Receiver (#7780)

sync: improve the docs for the errors of mpsc (#7722)

task: add example for spawn_local usage on local runtime (#7689)

#7125: tokio-rs/tokio#7125 #7195: tokio-rs/tokio#7195 #7305: tokio-rs/tokio#7305 #7467: tokio-rs/tokio#7467 #7614: tokio-rs/tokio#7614 #7686: tokio-rs/tokio#7686 #7689: tokio-rs/tokio#7689

... (truncated)

Commits

e3b89bb chore: prepare Tokio v1.49.0 (#7824)
4f577b8 Merge 'tokio-1.47.3' into 'master'
f320197 chore: prepare Tokio v1.47.3 (#7823)
ea6b144 ci: freeze rustc on nightly-2025-01-25 in netlify.toml (#7652)
264e703 Merge tokio-1.43.4 into tokio-1.47.x (#7822)
dfb0f00 chore: prepare Tokio v1.43.4 (#7821)
4a91f19 ci: fix wasm32-wasip1 tests (#7788)
601c383 ci: upgrade FreeBSD from 14.2 to 14.3 (#7758)
484cb52 sync: return TryRecvError::Disconnected from Receiver::try_recv after `Re...
16f20c3 rt: mention LocalRuntime in new_current_thread docs (#7820)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.53` | `4.5.54` | | [libc](https://github.com/rust-lang/libc) | `0.2.178` | `0.2.179` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.28` | `0.13.1` | | [syn](https://github.com/dtolnay/syn) | `2.0.111` | `2.0.113` | | [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.49.0` | Updates `clap` from 4.5.53 to 4.5.54 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.53...clap_complete-v4.5.54) Updates `libc` from 0.2.178 to 0.2.179 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/main/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.178...0.2.179) Updates `reqwest` from 0.12.28 to 0.13.1 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.28...v0.13.1) Updates `syn` from 2.0.111 to 2.0.113 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.111...2.0.113) Updates `tokio` from 1.48.0 to 1.49.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.49.0) --- updated-dependencies: - dependency-name: clap dependency-version: 4.5.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: libc dependency-version: 0.2.179 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: reqwest dependency-version: 0.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: syn dependency-version: 2.0.113 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tokio dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added I-Dependency Impact: related to an dependency I-Rust Impact: Rust-related stuff labels Jan 5, 2026

dependabot bot requested a review from a team as a code owner January 5, 2026 03:09

dependabot bot added I-Dependency Impact: related to an dependency I-Rust Impact: Rust-related stuff labels Jan 5, 2026

FirelightFlagboy force-pushed the dependabot-cargo-rust-dependencies-ca00c2f644 branch from 873602e to 2df9f38 Compare January 5, 2026 09:09

FirelightFlagboy approved these changes Jan 5, 2026

View reviewed changes

FirelightFlagboy enabled auto-merge January 5, 2026 09:09

FirelightFlagboy force-pushed the dependabot-cargo-rust-dependencies-ca00c2f644 branch from 2df9f38 to 3388489 Compare January 5, 2026 11:05

docs(rust): Allow OpenSSL & CDLA-Permissive-2.0 license

460c835

FirelightFlagboy approved these changes Jan 6, 2026

View reviewed changes

FirelightFlagboy added this pull request to the merge queue Jan 6, 2026

Merged via the queue into master with commit 8d9f42a Jan 6, 2026
14 checks passed

FirelightFlagboy deleted the dependabot-cargo-rust-dependencies-ca00c2f644 branch January 6, 2026 14:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the rust-dependencies group with 5 updates #12000

chore(deps): Bump the rust-dependencies group with 5 updates #12000

Uh oh!

dependabot bot commented on behalf of github Jan 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): Bump the rust-dependencies group with 5 updates #12000

chore(deps): Bump the rust-dependencies group with 5 updates #12000

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 5, 2026

v4.5.54

[4.5.54] - 2026-01-02

Fixes

[4.5.54] - 2026-01-02

Fixes

0.2.179

Added

Fixed

Changed

v0.13.1

What's Changed

v0.13.0

Breaking changes

Pull Requests in General

New Contributors

v0.13.0-rc.1

Main breaking changes

v0.13.1

v0.13.0

2.0.113

2.0.112

Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

Changed

Fixed

Unstable

Documented

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants