Skip to content

build(deps): bump the deps group across 1 directory with 3 updates#104

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/deps-940facea68
Closed

build(deps): bump the deps group across 1 directory with 3 updates#104
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/deps-940facea68

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 24, 2026

Bumps the deps group with 3 updates in the / directory: axum-test, diesel-async and pulldown-cmark.

Updates axum-test from 18.7.0 to 19.1.1

Release notes

Sourced from axum-test's releases.

19.1.0

  • Remove TestServer::scheme, as it never actually worked with http requests only mocked requests.
  • Remove TestRequest::scheme, as it never actually worked with http requests only mocked requests.
  • Mocked transport no longer provides the scheme and authority to the service, which matches the behaviour with Tokio / Hyper based services.
  • Mocked now provides the HOST header, which matches the behaviour with Hyper based HTTP services.

19.0.0

  • Simplified constructors for TestServer, TestServerBuilder, and TestServerConfig.
    • new() constructor no longer returns a Result, and instead panics on failure.
    • Added try_new() to allow people to continue to catch the Result if needed.
  • TestResponse assertion functions now return &self, allowing calls to be chained!
  • Requests using Reqwest will now share cookies with regular Axum Test requests.
    • Cookies saved by one are saved to the other, and both adhere to TestServer::save_cookies() and TestServer::do_not_save_cookies() commands.
  • Improved error messages across the API.
    • JSON and Yaml assertions now output the body of the request when they fail.
  • Removed deprecated feature old-json-diff.
Commits

Updates diesel-async from 0.7.4 to 0.8.0

Release notes

Sourced from diesel-async's releases.

v0.8.0

What's Changed

  • Added support for UpdateAndFetchResults for SyncConnectionWrapper, allowing to use save_changes
  • Bumped supported deadpool version to 0.13
  • Fixed a bug with postgres query pipelining that can cause panics
  • Fixed a bug with the SyncConnectionWrapper that can cause panics if the future is dropped before completion

You can support the development of Diesel by:

  • Contributing Code, Documentation or Guides. Checkout the planing for Diesel 2.4 for open tasks.
  • Providing knowledge and help to maintain the MySQL/MariaDB backend. This is currently the only in-tree backend that is not used by any maintainers, so having someone around that actually uses this backend would be very helpful for the Diesel project.
  • Answering questions in our discussion forum
  • Reporting bugs in our issue tracker
  • Helping triaging issues in our issue tracker
  • Sponsoring the maintainers.

New Contributors

Full Changelog: diesel-rs/diesel_async@v0.7.4...v0.8.0

Changelog

Sourced from diesel-async's changelog.

[0.8.0] - 2026-03-20

  • Added support for UpdateAndFetchResults for SyncConnectionWrapper, allowing to use save_changes
  • Bumped supported deadpool version to 0.13
  • Fixed a bug with postgres query pipelining that can cause panics
  • Fixed a bug with the SyncConnectionWrapper that can cause panics if the future is dropped before completion
Commits
  • 237ac09 Prepare 0.8.0
  • 67e3e3f Merge pull request #282 from dav-wolff/fix-sync-connection-wrapper-panic
  • 03caa1e Replace timeout based tests with more robust channel usage
  • 7df84d8 Merge pull request #283 from dav-wolff/remove-unsafe-pin-projection
  • b426870 Use pin_project_lite instead of manually pin-projecting
  • 7dacba2 Remove pin-project dependency
  • 2f7874e Fix early cancellation of future causing a panic in SyncConnectionWrapper
  • b3fb5ba Merge pull request #279 from TheNeikos/feature/add-sqlite-update-and-fetch
  • bbf1a38 Implement UpdateAndFetchResults for SyncConnectionWrapper
  • 6a89bb8 Merge pull request #275 from 766974616c79/main
  • Additional commits viewable in compare view

Updates pulldown-cmark from 0.13.1 to 0.13.3

Release notes

Sourced from pulldown-cmark's releases.

0.13.3

Bug Fixes

  • Fix Wikilink offset.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.2...v0.13.3

0.13.2

Security

  • Bump tar to 0.4.45.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.1...v0.13.2

Commits
  • b0e6f65 chore: bump pulldown-cmark version in Cargo.lock
  • ed2ee59 chore: bump pulldown-cmark version
  • 676afd2 fix: wrong wikilink end-offset
  • bad7926 chore: bump pulldown-cmark in Cargo.lock
  • f67922d fix: bump tar to 0.4.45 for security purposes
  • See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
axum-test [>= 18.a, < 19]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Mar 24, 2026
Bumps the deps group with 3 updates in the / directory: [axum-test](https://github.com/JosephLenton/axum-test), [diesel-async](https://github.com/weiznich/diesel_async) and [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark).


Updates `axum-test` from 18.7.0 to 19.1.1
- [Release notes](https://github.com/JosephLenton/axum-test/releases)
- [Commits](https://github.com/JosephLenton/axum-test/commits)

Updates `diesel-async` from 0.7.4 to 0.8.0
- [Release notes](https://github.com/weiznich/diesel_async/releases)
- [Changelog](https://github.com/weiznich/diesel_async/blob/main/CHANGELOG.md)
- [Commits](diesel-rs/diesel_async@v0.7.4...v0.8.0)

Updates `pulldown-cmark` from 0.13.1 to 0.13.3
- [Release notes](https://github.com/raphlinus/pulldown-cmark/releases)
- [Commits](pulldown-cmark/pulldown-cmark@v0.13.1...v0.13.3)

---
updated-dependencies:
- dependency-name: axum-test
  dependency-version: 19.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: deps
- dependency-name: diesel-async
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: pulldown-cmark
  dependency-version: 0.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/deps-940facea68 branch from e188d78 to f0925b2 Compare March 25, 2026 09:55
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 31, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 31, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/deps-940facea68 branch March 31, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants