Bump tokio-tungstenite from 0.24.0 to 0.28.0

[dependabot]

Bumps tokio-tungstenite from 0.24.0 to 0.28.0.

Changelog

Sourced from tokio-tungstenite's changelog.

0.28.0

• Update tungstenite to 0.18.0. See tungstenite release.

0.27.0

• See performance updates in tungstenite-rs.

0.26.2

• Update tungstenite, see changes here.

0.26.1

• Update tungstenite to address an issue that might cause UB in certain cases.

0.26.0

• Update tungstenite to 0.26.0 (breaking changes).

0.25.0

• Update tungstenite to 0.25.0 (important updates!).

Commits

• 35d110c Implement into_inner to get the underlying stream (#367)
• f3ae75d Update tungstenite version and fix bugs
• 25b544e Allow getting a reference to the shared inner stream (#363)
• e855f9e Fix errors in the examples caused by Utf8Error
• 21c5d19 Bump version
• fbd1471 Update performance notes in README
• a8d9f19 Bump version
• aafb2f9 Bump version
• 0eefa27 Bump version
• 2d23077 Update to new tungstenite and bump version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[graphite-app]

Dependency Downgrade Issue: Upgrading tokio-tungstenite from 0.24.0 to 0.28.0 is causing multiple transitive dependencies to be downgraded:

• windows-sys: 0.61.1 → 0.59.0 (downgrade)
• socket2: 0.6.1 → 0.5.9 (downgrade)

This is highly unusual for a forward version upgrade and suggests a dependency resolution problem. Downgrading dependencies can:

1. Reintroduce fixed bugs or security vulnerabilities
2. Remove features that other parts of the codebase may rely on
3. Cause runtime incompatibilities

Fix: The Cargo.lock file should be regenerated properly:

cargo clean
cargo update -p tokio-tungstenite
cargo build

If the downgrades persist, investigate dependency conflicts by running:

cargo tree -i windows-sys
cargo tree -i socket2

This will show which packages are forcing the older versions and may indicate incompatibilities that need to be resolved.

Spotted by Graphite Agent



Is this helpful? React 👍 or 👎 to let us know.

[jtran]

@dependabot recreate

[codecov]

Codecov Report

❌ Patch coverage is 0% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 69.27%. Comparing base (50dc2b7) to head (6e584d5).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
src/ml/copilot/run.rs	0.00%	2 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1438   +/-   ##
=======================================
  Coverage   69.27%   69.27%           
=======================================
  Files          41       41           
  Lines        6769     6769           
=======================================
  Hits         4689     4689           
  Misses       2080     2080           

Flag	Coverage Δ
unittests	69.27% <0.00%> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.