chore(deps): update all non-major packages >= 1.0 by renovate[bot] · Pull Request #8882 · apollographql/router

renovate · 2026-02-11T17:40:12Z

This PR contains the following updates:

Package	Type	Update	Change
anyhow	dependencies	patch	`1.0.100` → `1.0.102`
anyhow	dev-dependencies	patch	`1.0.100` → `1.0.102`
async-graphql	dependencies	minor	`7.0.17` → `7.2.1`
async-graphql-axum	dependencies	minor	`7.0.17` → `7.2.1`
aws-config	dependencies	patch	`1.8.12` → `1.8.14`
aws-credential-types	dependencies	patch	`1.2.11` → `1.2.13`
aws-sigv4	dependencies	minor	`1.3.7` → `1.4.1`
aws-smithy-async	dependencies	patch	`1.2.7` → `1.2.13`
aws-smithy-http-client	dependencies	patch	`1.1.5` → `1.1.11`
aws-smithy-runtime-api	dependencies	minor	`1.9.3` → `1.11.5`
aws-types	dependencies	patch	`1.3.11` → `1.3.13`
blake3	dependencies	patch	`1.8.2` → `1.8.3`
clap	dependencies	patch	`4.5.53` → `4.5.60`
flate2	dependencies	patch	`1.1.7` → `1.1.9`
indexmap	dependencies	minor	`2.12.1` → `2.13.0`
insta (source)	dev-dependencies	minor	`1.45.1` → `1.46.3`
insta (source)	workspace.dependencies	minor	`1.45.1` → `1.46.3`
memchr	dev-dependencies	minor	`2.7.6` → `2.8.0`
memchr	dependencies	minor	`2.7.6` → `2.8.0`
regex	dependencies	patch	`1.12.2` → `1.12.3`
rhai (source)	dev-dependencies	minor	`1.23.6` → `1.24.0`
rhai (source)	dependencies	minor	`1.23.6` → `1.24.0`
rust-embed	dependencies	minor	`8.9.0` → `8.11.0`
ryu	dependencies	patch	`1.0.22` → `1.0.23`
schemars (source)	workspace.dependencies	patch	`1.2.0` → `1.2.1`
serde_json	dependencies	patch	`1.0.148` → `1.0.149`
serde_json	workspace.dependencies	patch	`1.0.148` → `1.0.149`
shellexpand	dependencies	patch	`3.1.1` → `3.1.2`
tempfile (source)	dependencies	minor	`3.24.0` → `3.26.0`
tempfile (source)	workspace.dependencies	minor	`3.24.0` → `3.26.0`
thiserror	dependencies	patch	`2.0.17` → `2.0.18`
tokio (source)	dependencies	minor	`1.48.0` → `1.49.0`
tokio (source)	workspace.dependencies	minor	`1.48.0` → `1.49.0`
url	dependencies	patch	`2.5.7` → `2.5.8`
uuid	dependencies	minor	`1.19.0` → `1.21.0`

⚠️ make sure to add a feature changeset to alert users of the upgrade!

Release Notes

dtolnay/anyhow (anyhow)

`v1.0.102`

Compare Source

Remove backtrace dependency (#438, #439, #440, #441, #442)

`v1.0.101`

Compare Source

Add #[inline] to anyhow::Ok helper (#437, thanks @Ibitier)

async-graphql/async-graphql (async-graphql)

`v7.2.0`

fix: Use runtime timers when available #1780
Fix validation failure with variables in multiple operations #1669
Add trace_scalars option to Tracing and OpenTelemetry extensions #1781
Macro hygiene #1782
Add jiff support #1778

`v7.1.0`

Replace async-stream in favour of asynk-strim
Add From<Option<T>> for ConstValue #1739
Don't bail early on first error when resolving containers #1746
Allow accessing data on schema level #1727
Mark generated interface methods as allowing missing docs #1730
Tracing support for subscriptions of the axum integration #1667

`v7.0.19`

Revert heck migration (breaks current schemas)

`v7.0.18`

update MSRV to 1.89.0
Fix DataLoader with tracing #1749
Fix clippy lints #1770
Upgrade hashbrown to 0.16 #1771
Upgrade zxcvbn to 3.1 #1771
Upgrade lru to 0.16 #1771
Upgrade handlebars to 6.3 #1771
Upgrade schemars to 1.2 #1771
Upgrade darling to 0.23
Upgrade strum to 0.27
Upgrade criterion to 0.8
Move from Inflector to heck (since Inflector is archived) #1732
Remove double boxing from subscription streams #1736
Fix unblock feature without tempfile #1718
Upgrade thiserror to 2.0

BLAKE3-team/BLAKE3 (blake3)

`v1.8.3`

Compare Source

version 1.8.3

Changes since 1.8.2:

Add Hash::as_slice.
Update to the 2024 Edition and bump the MSRV to 1.85.
Fix a set of Miri failures in the intrinsics implementations. We were
computing (though not dereferencing) an out-of-bounds pointer using
add rather than wrapping_add. I'm not aware of any observable
consequences of this bug. See #507.
CPU feature detection on x86/x86-64 no longer requires the std Cargo
feature in the blake3 crate.
Build fixes in the C implementation for macOS and Cygwin, and various
improvements to the CMake build.

clap-rs/clap (clap)

`v4.5.60`

Compare Source

Fixes

(help) Quote empty default values, possible values

`v4.5.59`

Compare Source

Fixes

Command::ignore_errors no longer masks help/version on subcommands

`v4.5.58`

Compare Source

`v4.5.57`

Compare Source

Fixes

Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

`v4.5.56`

Compare Source

Fixes

On conflict error, don't show conflicting arguments in the usage

`v4.5.55`

Compare Source

Fixes

Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

`v4.5.54`

Compare Source

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

rust-lang/flate2-rs (flate2)

`v1.1.9`: - upgrade zlib-rs to version `0.6.0`

Compare Source

What's Changed

use zlib-rs for crc32 (when available) by @folkertdev in #526
Add tests to check data CRC by @jongiddy in #527
update LICENSE-MIT by @wgyt in #528
upgrade zlib-rs to version 0.6.0 by @folkertdev in #529

New Contributors

@wgyt made their first contribution in #528

Full Changelog: rust-lang/flate2-rs@1.1.8...1.1.9

`v1.1.8`

Compare Source

What's Changed

Document feature flags using document-features crate by @Copilot in #519
Complete the zlib-rs support without the need for C-bindings by @Byron in #524
test zlib API for all compatible backends by @Byron in #525

New Contributors

@Copilot made their first contribution in #519

Full Changelog: rust-lang/flate2-rs@1.1.7...1.1.8

indexmap-rs/indexmap (indexmap)

`v2.13.0`

Compare Source

Implemented Clone for IntoKeys and IntoValues.
Added map::Slice::split_at_checked and split_at_mut_checked.
Added set::Slice::split_at_checked.

mitsuhiko/insta (insta)

`v1.46.3`

Compare Source

Fix inline escaped snapshots incorrectly stripping leading newlines when content contains control characters like carriage returns. The escaped format (used for snapshots with control chars) now correctly preserves the original content without stripping a non-existent formatting newline. #865

`v1.46.2`

Compare Source

Fix inline snapshot corruption with carriage returns. The leading_space() function incorrectly treated \r as indentation, causing carriage returns to be stripped from snapshot content. #866
Remove < 0.4.17 upper bound on globset dependency. #864

`v1.46.1`

Compare Source

Fix inline snapshot corruption when multiple snapshots appear inside with_settings! macro. #858

`v1.46.0`

Compare Source

Add INSTA_PENDING_DIR environment variable for Bazel and other hermetic build systems. When set, pending snapshots are written to a separate directory while keeping the source tree read-only. We are very open to feedback on this feature. #852
Fix documentation for test.runner_fallback config key. #853

BurntSushi/memchr (memchr)

`v2.8.0`

Compare Source

rust-lang/regex (regex)

`v1.12.3`

Compare Source

===================
This release excludes some unnecessary things from the archive published to
crates.io. Specifically, fuzzing data and various shell scripts are now
excluded. If you run into problems, please file an issue.

Improvements:

#1319:
Switch from a Cargo exclude list to an include list, and exclude some
unnecessary stuff.

rhaiscript/rhai (rhai)

`v1.24.0`

==============

Breaking Changes

stdweb support is removed. The feature flag stdweb is also removed. Use wasm-bindgen instead.
web-time is used for WASM targets instead of instant, which is no longer maintained #1063.

Bug fixes

(Fuzzing) Fixed panic when using sort on an array with a comparer function that does not implement a total order #1058.

Enhancements

The optimizer now optimizes constant object map property accesses (thanks @phsym #1050).
Optimization is added to turn if cond1 { if cond2 { ... } } into if cond1 && cond2 { ... }.
The method sort for arrays is also aliased to sort_by.
The methods sort_desc, order, order_by and order_desc are added to arrays.
An exception is now thrown when attempting to use sort on an array containing unsupported element types.

New features

AST::new_from_module is added to create an AST from a shared Module.

dtolnay/ryu (ryu)

`v1.0.23`

Compare Source

Update rand dev dependency to 0.10

GREsau/schemars (schemars)

`v1.2.1`

Compare Source

Fixed

transform attributes are now applied after the schema is otherwise fully constructed. In particular, they're now applied after all other attributes are processed. (#505)

serde-rs/json (serde_json)

`v1.0.149`

Compare Source

Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @b41sh)

ijackson/rust-shellexpand (shellexpand)

`v3.1.2`

Compare Source

Stebalien/tempfile (tempfile)

`v3.26.0`

Support NamedTempFile::persist on RedoxOS (#393) (thanks to @Andy-Python-Programmer).

`v3.25.0`

Allow getrandom 0.4.x while retaining support for getrandom 0.3.x.

dtolnay/thiserror (thiserror)

`v2.0.18`

Compare Source

Make compatible with project-level needless_lifetimes = "forbid" (#443, thanks @LucaCappelletti94)

tokio-rs/tokio (tokio)

`v1.49.0`: Tokio v1.49.0

Compare Source

1.49.0 (January 3rd, 2026)

Added

net: add support for TCLASS option on IPv6 (#7781)
runtime: stabilize runtime::id::Id (#7125)
task: implement Extend for JoinSet (#7195)
task: stabilize the LocalSet::id() (#7776)

Changed

net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

macros: fix the hygiene issue of join! and try_join! (#7766)
runtime: revert "replace manual vtable definitions with Wake" (#7699)
sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)
task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

fs: handle EINTR in fs::write for io-uring (#7786)
fs: support io-uring with tokio::fs::read (#7696)
runtime: disable io-uring on EPERM (#7724)
time: add alternative timer for better multicore scalability (#7467)

Documented

docs: fix a typos in bounded.rs and park.rs (#7817)
io: add SyncIoBridge cross-references to copy and copy_buf (#7798)
io: doc that AsyncWrite does not inherit from std::io::Write (#7705)
metrics: clarify that num_alive_tasks is not strongly consistent (#7614)
net: clarify the cancellation safety of the TcpStream::peek (#7305)
net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)
net: clarify the platform-dependent backlog in TcpSocket docs (#7738)
runtime: mention LocalRuntime in new_current_thread docs (#7820)
sync: add missing period to mpsc::Sender::try_send docs (#7721)
sync: clarify the cancellation safety of oneshot::Receiver (#7780)
sync: improve the docs for the errors of mpsc (#7722)
task: add example for spawn_local usage on local runtime (#7689)

servo/rust-url (url)

`v2.5.8`

Compare Source

uuid-rs/uuid (uuid)

`v1.21.0`

Compare Source

What's Changed

Update getrandom to 0.4 by @KodrAus in #858
feat: impl core::error::Error for Error by @XAMPPRocky in #852
Prepare for 1.21.0 release by @KodrAus in #859

New Contributors

@XAMPPRocky made their first contribution in #852

Full Changelog: uuid-rs/uuid@v1.20.0...v1.21.0

`v1.20.0`

Compare Source

What's Changed

Derive Ord and PartialOrd for NonNilUuid by @mivort in #854
Implement Deserialize on adapter types by @KodrAus in #855
Deprecate macro-diagnostics by @KodrAus in #856
Prepare for 1.20.0 release by @KodrAus in #857

New Contributors

@mivort made their first contribution in #854

Full Changelog: uuid-rs/uuid@v1.19.0...v1.20.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-02-11T17:40:13Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path fuzz/subgraph/Cargo.toml --package async-graphql@7.0.17 --precise 7.2.1
    Updating crates.io index
error: failed to select a version for `async-io`.
    ... required by package `async-std v1.13.2`
    ... which satisfies dependency `async-std = "^1.10"` (locked to 1.13.2) of package `opentelemetry_sdk v0.24.1`
    ... which satisfies dependency `opentelemetry_sdk = "^0.24.1"` (locked to 0.24.1) of package `apollo-router v2.11.0 (/tmp/renovate/repos/github/apollographql/router/apollo-router)`
    ... which satisfies path dependency `apollo-router` (locked to 2.11.0) of package `add-timestamp-header v0.1.0 (/tmp/renovate/repos/github/apollographql/router/examples/add-timestamp-header/rhai)`
versions that meet the requirements `^2.2.0` (locked to 2.5.0) are: 2.5.0

all possible versions conflict with previously selected packages.

  previously selected package `async-io v2.6.0`
    ... which satisfies dependency `async-io = "^2.6.0"` of package `async-graphql v7.2.1`
    ... which satisfies dependency `async-graphql = "^7"` of package `everything-subgraph v0.1.0 (/tmp/renovate/repos/github/apollographql/router/fuzz/subgraph)`

failed to select a version for `async-io` which could resolve this conflict

apollo-librarian · 2026-02-11T17:40:20Z

✅ Docs preview has no changes

The preview was not built because there were no changes.

Build ID: 4ad290bc735d36cc0db3cb13
Build Logs: View logs

✅ AI Style Review — No Changes Detected

No MDX files were changed in this pull request.

Review Log: View detailed log

This review is AI-generated. Please use common sense when accepting these suggestions, as they may not always be accurate or appropriate for your specific context.

github-actions · 2026-02-11T17:40:24Z

@renovate[bot], please consider creating a changeset entry in /.changesets/. These instructions describe the process and tooling.

renovate bot force-pushed the renovate/all-non-major-gte-1.0 branch 6 times, most recently from 8956cbe to 73760e3 Compare February 17, 2026 21:31

renovate bot force-pushed the renovate/all-non-major-gte-1.0 branch 3 times, most recently from 5fc5d1a to 873881e Compare February 23, 2026 18:42

chore(deps): update all non-major packages >= 1.0

2740d74

renovate bot force-pushed the renovate/all-non-major-gte-1.0 branch from 873881e to 2740d74 Compare February 24, 2026 10:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

chore(deps): update all non-major packages >= 1.0#8882

chore(deps): update all non-major packages >= 1.0#8882
renovate[bot] wants to merge 1 commit intodevfrom
renovate/all-non-major-gte-1.0

renovate bot commented Feb 11, 2026 •

edited

Loading

Uh oh!

renovate bot commented Feb 11, 2026

Uh oh!

apollo-librarian bot commented Feb 11, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

renovate bot commented Feb 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixes

Fixes

Fixes

Fixes

Fixes

Fixes

v1.1.9: - upgrade zlib-rs to version 0.6.0

What's Changed

New Contributors

What's Changed

New Contributors

Breaking Changes

Bug fixes

Enhancements

New features

Fixed

v1.49.0: Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

Changed

Fixed

Unstable

Documented

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

renovate bot commented Feb 11, 2026

⚠️ Artifact update problem

File name: Cargo.lock

Uh oh!

apollo-librarian bot commented Feb 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Docs preview has no changes

✅ AI Style Review — No Changes Detected

Uh oh!

github-actions bot commented Feb 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Feb 11, 2026 •

edited

Loading

`v1.1.9`: - upgrade zlib-rs to version `0.6.0`

`v1.49.0`: Tokio v1.49.0

apollo-librarian bot commented Feb 11, 2026 •

edited

Loading