Bump the rust group with 26 updates #719

dependabot · 2025-08-01T14:31:04Z

Bumps the rust group with 26 updates:

Package	From	To
anyhow	`1.0.95`	`1.0.98`
apple-sdk	`0.5.2`	`0.6.0`
bytes	`1.10.0`	`1.10.1`
clap	`4.5.28`	`4.5.41`
duct	`0.13.7`	`1.0.0`
flate2	`1.0.35`	`1.1.2`
goblin	`0.8.2`	`0.10.0`
http	`1.2.0`	`1.3.1`
http-body-util	`0.1.2`	`0.1.3`
hyper-util	`0.1.10`	`0.1.15`
once_cell	`1.20.2`	`1.21.3`
pep440_rs	`0.6.6`	`0.7.3`
reqwest	`0.12.12`	`0.12.22`
reqwest-middleware	`0.4.0`	`0.4.2`
scroll	`0.12.0`	`0.13.0`
semver	`1.0.25`	`1.0.26`
serde	`1.0.217`	`1.0.219`
serde_json	`1.0.138`	`1.0.140`
sha2	`0.10.8`	`0.10.9`
tar	`0.4.43`	`0.4.44`
tempfile	`3.16.0`	`3.20.0`
tokio	`1.43.1`	`1.46.1`
tokio-util	`0.7.13`	`0.7.15`
version-compare	`0.1.1`	`0.2.0`
zip	`0.6.6`	`4.3.0`
zstd	`0.13.2`	`0.13.3`

Updates anyhow from 1.0.95 to 1.0.98

Release notes

Sourced from anyhow's releases.

1.0.98

Add self.into_boxed_dyn_error() and self.reallocate_into_boxed_dyn_error_without_backtrace() methods for anyhow::Error (#415)

1.0.97

Documentation improvements

1.0.96

Documentation improvements

Commits

709fe86 Release 1.0.98
cbc1ad2 Merge pull request #415 from dtolnay/intodyn
e1a2017 Add 2 different conversions to Box<dyn Error + Send + Sync + 'static>
29f2edd Merge pull request #416 from dtolnay/oldnostd
2244db8 Omit unused object_boxed from vtable in old no-std rustc
213a9c2 Merge pull request #414 from dtolnay/nightly
02aa6b6 Make all nightly go through the module that was probed
bfb89ef Release 1.0.97
c7fca9b Ignore elidable_lifetime_names pedantic clippy lint
427c0bb Point standard library links to stable
Additional commits viewable in compare view

Updates apple-sdk from 0.5.2 to 0.6.0

Commits

1168eb2 workspace: perform releases
1cbcefc workspace: enable http2 reqwest feature
d5d09f0 apple-codesign: add release notes for Info.plist fix
0e88caf apple-codesign: print S3 error context
b7fab9b apple-codesign: honor verbose level to set logging level
cfb7529 apple-platform-rs: fix non-macOS Info.plist detection
100545d apple-xar: add id attribute for extended attribute struct
5fb3af6 apple-sdk: support reading path set by xcode-select --switch
9ba97e6 app-store-connect: add api to enable capability for a bundle ID
e09f979 app-store-connect: add IosDistribution certificate type
Additional commits viewable in compare view

Updates bytes from 1.10.0 to 1.10.1

Release notes

Sourced from bytes's releases.

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

Fix memory leak when using to_vec with Bytes::from_owner (#773)

#773: tokio-rs/bytes#773

Changelog

Sourced from bytes's changelog.

1.10.1 (March 5th, 2025)

Fixed

Fix memory leak when using to_vec with Bytes::from_owner (#773)

Commits

19d1427 chore: prepare bytes v1.10.1 (#774)
3667543 Fix memory leak in owned_to_vec (#773)
See full diff in compare view

Updates clap from 4.5.28 to 4.5.41

Release notes

Sourced from clap's releases.

v4.5.39

[4.5.39] - 2025-05-27

Fixes

(help) Show short flag aliases before long

(help) Merge the short and long flag alias lists

v4.5.38

[4.5.38] - 2025-05-11

Fixes

(help) When showing aliases, include leading -- or -

v4.5.37

[4.5.37] - 2025-04-18

Features

Added ArgMatches::try_clear_id()

v4.5.36

[4.5.36] - 2025-04-11

Fixes

(help) Revert 4.5.35's "Don't leave space for shorts if there are none" for now

v4.5.35

[4.5.35] - 2025-04-01

Fixes

(help) Align positionals and flags when put in the same help_heading

(help) Don't leave space for shorts if there are none

v4.5.34

[4.5.34] - 2025-03-27

Fixes

(help) Don't add extra blank lines with flatten_help(true) and subcommands without arguments

v4.5.33

[4.5.33] - 2025-03-26

Fixes

(error) When showing the usage of a suggestion for an unknown argument, don't show the group

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.41] - 2025-07-09

Features

Add Styles::context and Styles::context_value to customize the styling of [default: value] like notes in the --help

[4.5.40] - 2025-06-09

Features

Support quoted ids in arg!() macro (e.g. arg!("check-config": ...))

[4.5.39] - 2025-05-27

Fixes

(help) Show short flag aliases before long

(help) Merge the short and long flag alias lists

[4.5.38] - 2025-05-11

Fixes

(help) When showing aliases, include leading -- or -

[4.5.37] - 2025-04-18

Features

Added ArgMatches::try_clear_id()

[4.5.36] - 2025-04-11

Fixes

(help) Revert 4.5.35's "Don't leave space for shorts if there are none" for now

[4.5.35] - 2025-04-01

Fixes

(help) Align positionals and flags when put in the same help_heading

(help) Don't leave space for shorts if there are none

[4.5.34] - 2025-03-27

Fixes

(help) Don't add extra blank lines with flatten_help(true) and subcommands without arguments

... (truncated)

Commits

92fcd83 chore: Release
aca91b9 docs: Update changelog
8434510 Merge pull request #5869 from tw4452852/patch-1
33b1fc3 fix(complete): Fix env leakage in elvish dynamic completion
e5f1f48 chore: Release
9466a55 docs: Update changelog
d74b793 Merge pull request #5865 from gifnksm/nushell-completion-value-types
ecbc775 fix(nu): Set argument type based on ValueHint
6784054 Merge pull request #5857 from epage/empty
cca5f32 test(complete): Show empty option-value behavior
Additional commits viewable in compare view

Updates duct from 0.13.7 to 1.0.0

Commits

08e7ede version 1.0.0
81b247f comment tweaks
8d9b60c update duct_sh to edition 2021
1b6084e switch from thread spawning to the CPython strategy for leaked children
ebb5158 stop waiting in kill
771f5f5 add an assert to test_zombies_reaped
e0d7caa clean up imports
a65eb18 factor out the shared_thread module into its own crate
e3294c4 fix broken test with impl Drop for ChildHandle spawning a reaper thread on Unix
f295110 BROKEN TEST: assert that dropped Handles eventually reap the zombie child
Additional commits viewable in compare view

Updates flate2 from 1.0.35 to 1.1.2

Release notes

Sourced from flate2's releases.

1.1.2

What's Changed

feat: simplify manual bits extraction and an unneeded reref by @CosminPerRam in rust-lang/flate2-rs#484

chore: update deps by @CosminPerRam in rust-lang/flate2-rs#485

feat: solve remaining clippy warnings and add it to CI by @CosminPerRam in rust-lang/flate2-rs#487

ci: add audit check by @CosminPerRam in rust-lang/flate2-rs#488

feat: revert most recent deps updates by @CosminPerRam in rust-lang/flate2-rs#489

upgrade zlib-rs to version 0.5.1 by @folkertdev in rust-lang/flate2-rs#490

Full Changelog: rust-lang/flate2-rs@1.1.1...1.1.2

1.1.1

This release should be smaller and thus faster to download. Additionally, when using the zlib-rs backend, duplicate symbol issues shouldn't occur anymore.

What's Changed

docs: Update README to promote zlib-rs by @Xuanwo in rust-lang/flate2-rs#470

Update miniz_oxide to 0.8.5 by @oyvindln in rust-lang/flate2-rs#475

Remove stale CHANGELOG.md by @jayvdb in rust-lang/flate2-rs#476

More informative README on backends by @Shnatsel in rust-lang/flate2-rs#480

Rewrite outdated backend notes in lib.rs by @Shnatsel in rust-lang/flate2-rs#481

upgrade zlib-rs to version 0.5.0 by @folkertdev in rust-lang/flate2-rs#482

New Contributors

@Xuanwo made their first contribution in rust-lang/flate2-rs#470

@jayvdb made their first contribution in rust-lang/flate2-rs#476

Full Changelog: rust-lang/flate2-rs@1.1.0...1.1.1

1.1.0

What's Changed

Fix cfgs by @kornelski in rust-lang/flate2-rs#441

update CI to use new wasi target by @oyvindln in rust-lang/flate2-rs#444

Implement Clone for CompressError and DecompressError by @mkrasnitski in rust-lang/flate2-rs#445

Update LICENSE-MIT by @maximevtush in rust-lang/flate2-rs#448

feat: replace custom u16 le parser with existent rust method by @CosminPerRam in rust-lang/flate2-rs#450

Fix CI by @Byron in rust-lang/flate2-rs#449

Do not use cloudflare-zlib-sys 0.3.4 by @jongiddy in rust-lang/flate2-rs#451

Increase minimum compiler version to 1.67 by @jongiddy in rust-lang/flate2-rs#452

deps: bump miniz_oxide to 0.8.4 by @CosminPerRam in rust-lang/flate2-rs#459

deps(dev): update rand to 0.9 by @CosminPerRam in rust-lang/flate2-rs#458

docs: fix spelling mistake in flate2::zlib::write::ZlibDecoder by @CosminPerRam in rust-lang/flate2-rs#455

feat: remove explicit default impls by @CosminPerRam in rust-lang/flate2-rs#457

Change private bounds from R: Read to R: BufRead by @JonathanBrouwer in rust-lang/flate2-rs#453

feat: replace manual copy loop with rust-provided function by @CosminPerRam in rust-lang/flate2-rs#456

feat: reduce CrcReader::sum calls in GzEncoder::read_footer by @CosminPerRam in rust-lang/flate2-rs#454

feat: remove redundant if guard on option value match by @CosminPerRam in rust-lang/flate2-rs#464

feat: add Error associated type in zio::Ops to handle multiple errors by @CosminPerRam in rust-lang/flate2-rs#461

feat: remove explicit redundant lifetime by @CosminPerRam in rust-lang/flate2-rs#465

... (truncated)

Commits

ac4d950 Merge pull request #490 from folkertdev/update-zlib-rs-0.5.1
e38e16f upgrade zlib-rs to version 0.5.1
76cc0cc Merge pull request #489 from CosminPerRam/feat/revert_updates
8f52350 Revert "chore: update deps"
df11207 Merge pull request #488 from CosminPerRam/ci/audit
a8872d7 ci: rename audit job
190750c ci: add audit check
c2c78de solve remaining clippy warnings and add it to CI (#487)
306e909 Merge pull request #485 from CosminPerRam/chore/update_deps
29d8194 Merge pull request #484 from CosminPerRam/feat/simplify_manual_conversion
Additional commits viewable in compare view

Updates goblin from 0.8.2 to 0.10.0

Changelog

Sourced from goblin's changelog.

[0.10.0] - 2025-5-25

Breaking

build: use rust 2024 edition; bump MSRV to 1.85 pe: fix address size incompatibility on 32-bit builds, thanks @kkent030315: m4b/goblin#441 pe: fix fail on malformed certificate table parsing, thanks @ideeockus: m4b/goblin#417 pe: remove use of generics for is_32bit, thanks @kkent030315: m4b/goblin#435 pe: Support multiple debug directories and VCFeature, Repro, ExDllCharacteristics, POGO parsers, thanks @kkent030315: m4b/goblin#403

Added

elf: add Loongarch macros and name mapping, thanks @000lbh: m4b/goblin#446 pe: Add base relocation parser thanks @kkent030315: m4b/goblin#444

Fixed

pe.header: fix parse without rich header, thanks @ideeockus: m4b/goblin#451 pe.header: fix parse header with no dos stub, thanks @ideeockus: m4b/goblin#456 pe.imports: ignore malformed imports in ParseMode::Permissive, thanks @ideeockus: m4b/goblin#442 pe: Change Section Table Real Name Handling, thanks @prettyroseslover: m4b/goblin#438 pe.tls: tlsdata.parse_with_opts - integer overflow + out of bound, thanks @BinFlip: m4b/goblin#448 pe.debug: POGOInfo.parse_with_opts - integer overflow + out of bound, thanks @BinFlip: m4b/goblin#449 archive: fix subtract with overflow in archive parser, thanks @kkent030315: m4b/goblin#454 te: fix subtract with overflow in TE header parser, thanks @kkent030315: m4b/goblin#452 archive: fix size overflow in name index parser, thanks @kkent030315: m4b/goblin#455 coff: fix subtract with overflow in COFF header parser, thanks @kkent030315: m4b/goblin#453

[0.9.3] - 2025-1-5

Fixed

pe: fix import parser for non-well-formed import table, thanks @kkent030315: m4b/goblin#429 pe: fix empty import table parsing, thanks @kkent030315: m4b/goblin#430

Added

pe: Add tests for TLS parser and characteristics constants, thanks @kkent030315: m4b/goblin#426 elf: added new constants for 32-bit PowerPC, thanks @ivlzme m4b/goblin#439

[0.9.2] - 2024-10-26

Fixed

pe: fix PE with zero raw_data_size of section, thanks @ideeockus: m4b/goblin#396

Added

pe: allow parsing pe::Header without dos stubs, Header::parse_without_dos, thanks @ideeockus: m4b/goblin#396

[0.9.1] - 2024-10-24

(hot) Fix

pe: fix parsing of tls in certain cases (issue: m4b/goblin#424), thanks @kkent030315: m4b/goblin#425

[0.9.0] - 2024-10-20

Added, Breaking

pe: add TE (terse executable) support, big thanks @Javagedes: m4b/goblin#397 pe: add support for codeview PDB 2.0, thanks @joschock: m4b/goblin#409 pe: parse TLS in data directories, thanks @kkent030315: m4b/goblin#404

Commits

c077bc6 build: cargo fmt for 2024 edition
d04e589 build: bump version to 0.10.0; update changelog; update CI to use MSRV
8764abe pe.section_table: add explicit elided lifetime as 'a for Cow
accd94c build: update unsafe blocks to new 2024 requirements
2941655 pe.tests: add missing test annotation on test which 2024 edition caught
b83da6f build: bump version to 0.10.0; update to rust 2024 edition; set MSRV=1.85
097a174 docs: update CHANGELOG in prep for 0.10; update readme to add 3 new contribut...
bc33409 PE: Add base relocation parser (#444)
f06b768 COFF: fix subtract with overflow in COFF header parser (#453)
9c9ded7 archive: fix size overflow in name index parser (#455)
Additional commits viewable in compare view

Updates http from 1.2.0 to 1.3.1

Release notes

Sourced from http's releases.

v1.3.1

What's Changed

fix: validate path bytes are at least utf8 by @seanmonstar in hyperium/http#756

Full Changelog: hyperium/http@v1.3.0...v1.3.1

v1.3.0

What's Changed

Allow most UTF-8 characters in URI path and query. (hyperium/http#715)

This means paring Uris with previously illegal characters according the original RFC will now be accepted. They used to be rejected in the name of spec purity, but many operators were using a fork of http because reality is that most characters are seen in the real world.

Fix HeaderMap::reserve() to allocate sufficient capacity.

New Contributors

@joelwurtz made their first contribution in hyperium/http#715

@ADD-SP made their first contribution in hyperium/http#738

@kawaemon made their first contribution in hyperium/http#741

@DaniPopes made their first contribution in hyperium/http#748

@jpds made their first contribution in hyperium/http#695

Thanks!

@seanmonstar

@tottoto

Full Changelog: hyperium/http@v1.2.0...v1.3.0

Changelog

Sourced from http's changelog.

1.3.1 (March 11, 2025)

Fix validation that all characters are UTF-8 in URI path and query.

1.3.0 (March 11, 2025)

Allow most UTF-8 characters in URI path and query.

Fix HeaderMap::reserve() to allocate sufficient capacity.

Commits

8c1fb20 v1.3.1
6637a72 fix: validate path bytes are at least utf8 (#756)
d0dd91e v1.3.0
64bd92b docs: Fixed encryption/compression typo for 'accept-encoding: identity'. (#695)
b03ed6a chore: use range.contains in StatusCode methods (#748)
a463fb5 chore(ci): use yq to get rust-version in manifest (#746)
68845bd fix: HeaderMap::reserve allocates insufficient capacity (#741)
4e02046 refactor(header): remove BytesMut inline optimization when creating (#738)
091ee9a feat(uri): allow utf8 char, not rfc 3986 compliant, in path and query (#715)
See full diff in compare view

Updates http-body-util from 0.1.2 to 0.1.3

Release notes

Sourced from http-body-util's releases.

http-body-util v0.1.3

Features

Add Channel, a body type backed by an async channel.

Make Empty::new() to be const fn.

Thanks!

@cratelyn

@wgyt

@tottoto

@jplatte

@goto-bus-stop

@seanmonstar

Commits

ad4a9c9 http-body-util: v0.1.3
c86632e feat(util): introduce Sender::{capacity, max_capacity} (#147)
f904761 update copyright year (#148)
5d21ad1 feat(util): introduce channel::Sender::try_send() (#146)
1090bff docs: notes on poll_frame return values (#144)
261b2df docs: is_end_stream is a hint (#143)
86fdf00 util: add a channel body (#140)
7339aec chore(http-body): update msrv to 1.61 (#141)
98d0886 feat(util): allow Empty constructor in const context (#129)
fed1452 chore(util): update msrv to 1.61
Additional commits viewable in compare view

Updates hyper-util from 0.1.10 to 0.1.15

Release notes

Sourced from hyper-util's releases.

v0.1.15

tl;dr

Add header casing options to auto::Builder.

Fix proxy::Socksv5 to check for enough bytes before parsing ipv6 responses.

Fix including client-proxy in the full feature set.

What's Changed

ci: pin tracing-core in msrv job by @seanmonstar in hyperium/hyper-util#203

Cleanup deadcode in client by @howardjohn in hyperium/hyper-util#202

refactor(socks): deduplicate and reuse shared logic by @0x676e67 in hyperium/hyper-util#205

refactor: include client-proxy in full feature by @seanmonstar in hyperium/hyper-util#206

refactor(client): remove old body delay_eof code by @seanmonstar in hyperium/hyper-util#208

feat(builder): support header case methods by @AndreyErmilov in hyperium/hyper-util#207

fix(socks): check for right length before parsing ProxyRes by @seanmonstar in hyperium/hyper-util#210

Prepare v0.1.15 by @seanmonstar in hyperium/hyper-util#211

New Contributors

@AndreyErmilov made their first contribution in hyperium/hyper-util#207

Full Changelog: hyperium/hyper-util@v0.1.14...v0.1.15

v0.1.14

tl;dr

Fix HttpConnector to defer address family order to resolver sort order.

Fix proxy::Matcher to find HTTPS system proxies on Windows.

What's Changed

Update to windows-registry 0.5 by @kennykerr in hyperium/hyper-util#198

style(client): Fix some clippy lints by @0x676e67 in hyperium/hyper-util#199

fix(client): prefer resolver order always by @seanmonstar in hyperium/hyper-util#200

fix(proxy): set https system proxy on windows by @seanmonstar in hyperium/hyper-util#201

New Contributors

@kennykerr made their first contribution in hyperium/hyper-util#198

Full Changelog: hyperium/hyper-util@v0.1.13...v0.1.14

v0.1.13

tl;dr

Fix HttpConnector to always prefer IPv6 addresses first, if happy eyeballs is enabled.

Fix legacy::Client to return better errors if available on the connection.

What's Changed

fix(client): prefer IPv6 addresses before IPv4 even if resolver ordered differently by @seanmonstar in hyperium/hyper-util#194

chore(test): make proxy test robust wrt IPv4/v6 by @Fabian-Gruenbichler in hyperium/hyper-util#195

refactor: limit dependency futures-util to tests and client-legacy by @hanna-kruppe in hyperium/hyper-util#192

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.15 (2025-07-07)

Add header casing options to auto::Builder.

Fix proxy::Socksv5 to check for enough bytes before parsing ipv6 responses.

Fix including client-proxy in the full feature set.

0.1.14 (2025-06-04)

Fix HttpConnector to defer address family order to resolver sort order.

Fix proxy::Matcher to find HTTPS system proxies on Windows.

0.1.13 (2025-05-27)

Fix HttpConnector to always prefer IPv6 addresses first, if happy eyeballs is enabled.

Fix legacy::Client to return better errors if available on the connection.

0.1.12 (2025-05-19)

Add client::legacy::proxy::Tunnel connector that wraps another connector with HTTP tunneling.

Add client::legacy::proxy::{SocksV4, SocksV5} connectors that wraps another connector with SOCKS.

Add client::proxy::matcher::Matcher type that can use environment variables to match proxy rules.

Add server::graceful::Watcher type that can be sent to watch a connection in another task.

Add GracefulShutdown::count() method to get number of currently watched connections.

Fix missing must_use attributes on Connection futures.

Fix tracing span in GAI resolver that can cause panics.

0.1.11 (2025-03-31)

Add tracing crate feature with support in TokioExecutor.

Add HttpConnector::interface() support for macOS and Solarish systems.

Add rt::WithHyperIo and rt::WithTokioIo combinators.

Add auto_date_header() for auto server builder.

Add max_local_error_reset_streams() for auto server builder.

Add ignore_invalid_headers() for auto server builder.

Add methods to determine if auto server is configured for HTTP/1 or HTTP/2.

Implement Connection for UnixStream and NamedPipeClient.

Fix HTTP/2 websocket requests sent through legacy::Client.

Commits

9669ff1 v0.1.15
bfa1cf1 fix(socks): check for right length before parsing ProxyRes (#210)
0ea2613 feat(server): support header case methods on auto::Builder (#207)
d891931 refactor(client): remove old body delay_eof code (#208)
1f11a12 refactor: include client-proxy in full feature (#206)
57c26fa refactor(client): deduplicate and reuse shared socks logic (#205)
42bb42f refactor: cleanup deadcode in client (#202)
d9107d0 ci: pin tracing-core in msrv job (#203)
71360e4 v0.1.14
ce9248d fix(proxy): set https system proxy on windows (#201)
Additional commits viewable in compare view

Updates once_cell from 1.20.2 to 1.21.3

Changelog

Sourced from once_cell's changelog.

1.21.3

Outline more initialization in race: #284, #285.

1.21.2

Relax success ordering from AcqRel to Release in race: #278.

1.21.1

Reduce MSRV to 1.65: #277.

1.21.0

Outline initialization in race: #273.

Add OnceNonZereUsize::get_unchecked: #274.

Add OnceBox::clone and OnceBox::with_value: #275.

Increase MSRV to 1.70

Commits

29e3d93 Merge pull request #286 from briansmith/b/once-ref-dry
a206950 Prepare for 1.21.3 release.
17d4a9b DRY race::OnceRef::{get_or_try_init, set}.
01b1d56 Merge pull request #285 from briansmith/b/once-ref-cold
a851cc4 Mark initialization of OnceRef::get_or_try_init cold.
2447a93 Merge pull request #281 from briansmith/b/init-inner
c294d64 Merge pull request #280 from briansmith/b/self
5f0fdd4 Merge pull request #283 from briansmith/b/cast_mut
899e319 Merge pull request #284 from briansmith/b/dry-get
90da60b Mark initialization of OnceBox::get_or_try_init cold.
Additional commits viewable in compare view

Updates pep440_rs from 0.6.6 to 0.7.3

Changelog

Sourced from pep440_rs's changelog.

0.7.3

Use once_cell to lower MSRV

0.7.2

Add optional conversion to version-ranges.

0.7.1

Make rkyv optional

0.7.0

Sync from uv vendored version

Remove pyo3 bindings

Update rkyv to 0.8

Commits

f8b2449 cargo update
ee870af v0.7.3
274f1a3 Merge pull request #33 from messense/once-cell
6afdd61 Merge pull request #31 from konstin/dependabot/cargo/rkyv-0.8.9
cf2122f Merge pull request #32 from konstin/dependabot/cargo/version-ranges-0.1.1
baa330c Use once_cell to lower MSRV
a1f54a5 Bump version-ranges from 0.1.0 to 0.1.1
77d9a85 Bump rkyv from 0.8.8 to 0.8.9
b0fe902 Merge pull request #28 from InSyncWithFoo/main
5a2b23c Fix typo in doc comment
Additional commits viewable in compare view

Updates reqwest from 0.12.12 to 0.12.22

Release notes

Sourced from reqwest's releases.

v0.12.22

tl;dr

Fix socks proxies when resolving IPv6 destinations.

What's Changed

fix(socks): bracket IPv6 addresses when formatting destination host by @0x676e67 in seanmonstar/reqwest#2753

Prepare v0.12.22 by @seanmonstar in seanmonstar/reqwest#2754

Full Changelog: seanmonstar/reqwest@v0.12.21...v0.12.22

v0.12.21

tl;dr

Fix socks proxy to use socks4a:// instead of socks4h://.

Fix Error::is_timeout() to check for hyper and IO timeouts too.

Fix request Error to again include URLs when possible.

Fix socks connect error to include more context.

(wasm) implement Default for Body.

What's Changed

chore: remove unused slab dep by @seanmonstar in seanmonstar/reqwest#2729

docs: mention requiring Tokio by @seanmonstar in seanmonstar/reqwest#2731

Fix Typos in Comments for Multipart and Redirect Tests by @leopardracer in seanmonstar/reqwest#2738

fix: request errors should include url by @seanmonstar in seanmonstar/reqwest#2741

fix: consider timeout from hyper::Error by @flisky in seanmonstar/reqwest#2742

feat: add Default impl for wasm::Body by @jpopesculian in seanmonstar/reqwest#2746

fix: Fix SOCKS4a proxy protocol matching by @0x676e67 in seanmonstar/reqwest#2732

fix: add more context and description to SOCKS errors by @seanmonstar in seanmonstar/reqwest#2750

Prepare v0.12.21 by @seanmonstar in seanmonstar/reqwest#2751

New Contributors

@leopardracer made their first contribution in seanmonstar/reqwest#2738

@jpopesculian made their first contribution in seanmonstar/reqwest#2746

Full Changelog: seanmonstar/reqwest@v0.12.20...v0.12.21

v0.12.20

Highlights

Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.

Fix proxy headers only using the first matched proxy.

(wasm) Fix re-adding Error::is_status().

What's Changed

fix(client): apply authorization header to first matching proxy only by @0x676e67 in seanmonstar/reqwest#2714

wasm: re-add Error::is_status() by Description has been truncated

Bumps the rust group with 26 updates: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.95` | `1.0.98` | | [apple-sdk](https://github.com/indygreg/apple-platform-rs) | `0.5.2` | `0.6.0` | | [bytes](https://github.com/tokio-rs/bytes) | `1.10.0` | `1.10.1` | | [clap](https://github.com/clap-rs/clap) | `4.5.28` | `4.5.41` | | [duct](https://github.com/oconnor663/duct.rs) | `0.13.7` | `1.0.0` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.0.35` | `1.1.2` | | [goblin](https://github.com/m4b/goblin) | `0.8.2` | `0.10.0` | | [http](https://github.com/hyperium/http) | `1.2.0` | `1.3.1` | | [http-body-util](https://github.com/hyperium/http-body) | `0.1.2` | `0.1.3` | | [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.10` | `0.1.15` | | [once_cell](https://github.com/matklad/once_cell) | `1.20.2` | `1.21.3` | | [pep440_rs](https://github.com/konstin/pep440-rs) | `0.6.6` | `0.7.3` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.12` | `0.12.22` | | [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) | `0.4.0` | `0.4.2` | | [scroll](https://github.com/m4b/scroll) | `0.12.0` | `0.13.0` | | [semver](https://github.com/dtolnay/semver) | `1.0.25` | `1.0.26` | | [serde](https://github.com/serde-rs/serde) | `1.0.217` | `1.0.219` | | [serde_json](https://github.com/serde-rs/json) | `1.0.138` | `1.0.140` | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.8` | `0.10.9` | | [tar](https://github.com/alexcrichton/tar-rs) | `0.4.43` | `0.4.44` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.16.0` | `3.20.0` | | [tokio](https://github.com/tokio-rs/tokio) | `1.43.1` | `1.46.1` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.13` | `0.7.15` | | [version-compare](https://gitlab.com/timvisee/version-compare) | `0.1.1` | `0.2.0` | | [zip](https://github.com/zip-rs/zip2) | `0.6.6` | `4.3.0` | | [zstd](https://github.com/gyscos/zstd-rs) | `0.13.2` | `0.13.3` | Updates `anyhow` from 1.0.95 to 1.0.98 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.95...1.0.98) Updates `apple-sdk` from 0.5.2 to 0.6.0 - [Release notes](https://github.com/indygreg/apple-platform-rs/releases) - [Changelog](https://github.com/indygreg/apple-platform-rs/blob/main/release.toml) - [Commits](indygreg/apple-platform-rs@apple-sdk/0.5.2...apple-sdk/0.6.0) Updates `bytes` from 1.10.0 to 1.10.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.10.0...v1.10.1) Updates `clap` from 4.5.28 to 4.5.41 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.28...clap_complete-v4.5.41) Updates `duct` from 0.13.7 to 1.0.0 - [Commits](oconnor663/duct.rs@0.13.7...1.0.0) Updates `flate2` from 1.0.35 to 1.1.2 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.0.35...1.1.2) Updates `goblin` from 0.8.2 to 0.10.0 - [Changelog](https://github.com/m4b/goblin/blob/master/CHANGELOG.md) - [Commits](m4b/goblin@0.8.2...0.10.0) Updates `http` from 1.2.0 to 1.3.1 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.2.0...v1.3.1) Updates `http-body-util` from 0.1.2 to 0.1.3 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@http-body-util-v0.1.2...http-body-util-v0.1.3) Updates `hyper-util` from 0.1.10 to 0.1.15 - [Release notes](https://github.com/hyperium/hyper-util/releases) - [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper-util@v0.1.10...v0.1.15) Updates `once_cell` from 1.20.2 to 1.21.3 - [Changelog](https://github.com/matklad/once_cell/blob/master/CHANGELOG.md) - [Commits](matklad/once_cell@v1.20.2...v1.21.3) Updates `pep440_rs` from 0.6.6 to 0.7.3 - [Changelog](https://github.com/konstin/pep440-rs/blob/main/Changelog.md) - [Commits](konstin/pep440-rs@v0.6.6...v0.7.3) Updates `reqwest` from 0.12.12 to 0.12.22 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.12...v0.12.22) Updates `reqwest-middleware` from 0.4.0 to 0.4.2 - [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases) - [Commits](TrueLayer/reqwest-middleware@reqwest-middleware-v0.4.0...reqwest-middleware-v0.4.2) Updates `scroll` from 0.12.0 to 0.13.0 - [Changelog](https://github.com/m4b/scroll/blob/master/CHANGELOG.md) - [Commits](https://github.com/m4b/scroll/commits) Updates `semver` from 1.0.25 to 1.0.26 - [Release notes](https://github.com/dtolnay/semver/releases) - [Commits](dtolnay/semver@1.0.25...1.0.26) Updates `serde` from 1.0.217 to 1.0.219 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.217...v1.0.219) Updates `serde_json` from 1.0.138 to 1.0.140 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.138...v1.0.140) Updates `sha2` from 0.10.8 to 0.10.9 - [Commits](RustCrypto/hashes@sha2-v0.10.8...sha2-v0.10.9) Updates `tar` from 0.4.43 to 0.4.44 - [Commits](alexcrichton/tar-rs@0.4.43...0.4.44) Updates `tempfile` from 3.16.0 to 3.20.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.16.0...v3.20.0) Updates `tokio` from 1.43.1 to 1.46.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.43.1...tokio-1.46.1) Updates `tokio-util` from 0.7.13 to 0.7.15 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.13...tokio-util-0.7.15) Updates `version-compare` from 0.1.1 to 0.2.0 - [Changelog](https://gitlab.com/timvisee/version-compare/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/timvisee/version-compare/compare/v0.1.1...v0.2.0) Updates `zip` from 0.6.6 to 4.3.0 - [Release notes](https://github.com/zip-rs/zip2/releases) - [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zip-rs/zip2/commits/v4.3.0) Updates `zstd` from 0.13.2 to 0.13.3 - [Release notes](https://github.com/gyscos/zstd-rs/releases) - [Commits](gyscos/zstd-rs@v0.13.2...v0.13.3) --- updated-dependencies: - dependency-name: anyhow dependency-version: 1.0.98 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: apple-sdk dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: bytes dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: clap dependency-version: 4.5.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: duct dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust - dependency-name: flate2 dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: goblin dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: http dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: http-body-util dependency-version: 0.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: hyper-util dependency-version: 0.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: once_cell dependency-version: 1.21.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: pep440_rs dependency-version: 0.7.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: reqwest dependency-version: 0.12.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: reqwest-middleware dependency-version: 0.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: scroll dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: semver dependency-version: 1.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: serde dependency-version: 1.0.219 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: serde_json dependency-version: 1.0.140 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: sha2 dependency-version: 0.10.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: tar dependency-version: 0.4.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: tempfile dependency-version: 3.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: tokio dependency-version: 1.46.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: tokio-util dependency-version: 0.7.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: version-compare dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: zip dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust - dependency-name: zstd dependency-version: 0.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust ... Signed-off-by: dependabot[bot] <[email protected]>

reneleonhardt · 2025-08-15T08:12:00Z

When are updates going to be merged?
libedit is also outdated since this year: https://thrysoee.dk/editline/libedit-20250104-3.1.tar.gz

silamon · 2025-08-15T09:42:16Z

It should be able to get this merged, since I did the errors on the previous dependabot in #705.

reneleonhardt · 2025-08-15T09:55:32Z

Great to see that your fixes have been merged, but the checks here ran 2 weeks later.
Wouldn't it be easier to just push fixes to this dependabot branch?
Then you would see immediately if there would be more problems to solve.

dependabot · 2025-09-02T00:15:20Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 1, 2025

dependabot bot force-pushed the dependabot/cargo/rust-bccde8d4b8 branch from 5a477bc to abc56d9 Compare August 8, 2025 16:50

dependabot bot closed this Sep 2, 2025

dependabot bot deleted the dependabot/cargo/rust-bccde8d4b8 branch September 2, 2025 00:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the rust group with 26 updates #719

Bump the rust group with 26 updates #719

Uh oh!

dependabot bot commented on behalf of github Aug 1, 2025 •

edited

Loading

Uh oh!

reneleonhardt commented Aug 15, 2025

Uh oh!

silamon commented Aug 15, 2025

Uh oh!

reneleonhardt commented Aug 15, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 2, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Bump the rust group with 26 updates #719

Bump the rust group with 26 updates #719

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.0.98

1.0.97

1.0.96

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

1.10.1 (March 5th, 2025)

Fixed

v4.5.39

[4.5.39] - 2025-05-27

Fixes

v4.5.38

[4.5.38] - 2025-05-11

Fixes

v4.5.37

[4.5.37] - 2025-04-18

Features

v4.5.36

[4.5.36] - 2025-04-11

Fixes

v4.5.35

[4.5.35] - 2025-04-01

Fixes

v4.5.34

[4.5.34] - 2025-03-27

Fixes

v4.5.33

[4.5.33] - 2025-03-26

Fixes

[4.5.41] - 2025-07-09

Features

[4.5.40] - 2025-06-09

Features

[4.5.39] - 2025-05-27

Fixes

[4.5.38] - 2025-05-11

Fixes

[4.5.37] - 2025-04-18

Features

[4.5.36] - 2025-04-11

Fixes

[4.5.35] - 2025-04-01

Fixes

[4.5.34] - 2025-03-27

Fixes

1.1.2

What's Changed

1.1.1

What's Changed

New Contributors

1.1.0

What's Changed

[0.10.0] - 2025-5-25

Breaking

Added

Fixed

[0.9.3] - 2025-1-5

Fixed

Added

[0.9.2] - 2024-10-26

Fixed

Added

[0.9.1] - 2024-10-24

(hot) Fix

[0.9.0] - 2024-10-20

Added, Breaking

v1.3.1

What's Changed

v1.3.0

What's Changed

New Contributors

Thanks!

1.3.1 (March 11, 2025)

dependabot bot commented on behalf of github Aug 1, 2025 •

edited

Loading