Skip to content

chore(deps): bump the rust-dependencies group across 1 directory with 8 updates#5388

Merged
jedel1043 merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-1c49d0a9a5
May 31, 2026
Merged

chore(deps): bump the rust-dependencies group across 1 directory with 8 updates#5388
jedel1043 merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-1c49d0a9a5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 30, 2026 •
edited
Loading

Bumps the rust-dependencies group with 8 updates in the / directory:

Package From To
http 1.4.0 1.4.1
mimalloc-safe 0.1.61 0.1.62
reqwest 0.13.3 0.13.4
serde_json 1.0.149 1.0.150
log 0.4.29 0.4.30
pastey 0.2.2 0.2.3
dashmap 6.1.0 6.2.1
either 1.15.0 1.16.0

Updates http from 1.4.0 to 1.4.1

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

  • Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
  • Fix Extend for HeaderMap to clamp max size hint and not overflow.
  • Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
  • Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

New Contributors

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.1 (May 25, 2026)

  • Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
  • Fix Extend for HeaderMap to clamp max size hint and not overflow.
  • Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
  • Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.
Commits
  • a24c968 v1.4.1
  • bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
  • 1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
  • 6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
  • 68e0abb docs: fix typo in request builder docs (#831)
  • 29dd307 docs(extensions): rephrase internal comment (#827)
  • ae48fb5 fix(uri): reject Path::from_shared/from_static if doesn't start with slash (#...
  • 1ad200e refactor(uri): consolidate PathAndQuery::from_shared and from_static (#825)
  • d59d939 refactor: Remove usage of float instruction (#823)
  • ed680c4 tests: update to rand 0.10 (#818)
  • Additional commits viewable in compare view

Updates mimalloc-safe from 0.1.61 to 0.1.62

Release notes

Sourced from mimalloc-safe's releases.

mimalloc-safe-v0.1.62

Bug Fixes

  • (sys) Vendor Apple THREAD_LOCAL patch in napi-rs/mimalloc fork (#71)

Chore

  • (deps) Update yarn to v4.15.0 (#70)
Changelog

Sourced from mimalloc-safe's changelog.

[0.1.62] - 2026-05-26

Bug Fixes

  • (sys) Vendor Apple THREAD_LOCAL patch in napi-rs/mimalloc fork (#71)

Chore

  • (deps) Update yarn to v4.15.0 (#70)
Commits

Updates reqwest from 0.13.3 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

  • Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
  • Add ClientBuilder::http2_keep_alive_* options for the blocking client.
  • Add TLS 1.3 support when using native-tls backend.
  • Fix redirect handling to strip sensitive headers when the scheme changes.
  • Fix HTTP/3 happy-eyeball connection creation.
  • Upgrade hickory-resolver to 0.26.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

Changelog

Sourced from reqwest's changelog.

v0.13.4

  • Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
  • Add ClientBuilder::http2_keep_alive_* options for the blocking client.
  • Add TLS 1.3 support when using native-tls backend.
  • Fix redirect handling to strip sensitive headers when the scheme changes.
  • Fix HTTP/3 happy-eyeball connection creation.
  • Upgrade hickory-resolver to 0.26.
Commits
  • 11489b3 v0.13.4
  • d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
  • 79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
  • fb7bf6a fix: remove unwrap in hickory initialization (#3041)
  • 3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
  • c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
  • 9cbb65b chore: clean up minimal-versions CI job (#3039)
  • 17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
  • 03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
  • 4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
  • Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Commits
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • dc8003a Raise required compiler for preserve_order feature to 1.85
  • a42fa98 Unpin CI miri toolchain
  • 684a60e Pin CI miri to nightly-2026-02-11
  • 7c7da33 Raise required compiler to Rust 1.71
  • acf4850 Simplify Number::is_f64
  • 6b8ceab Resolve unnecessary_map_or clippy lint
  • Additional commits viewable in compare view

Updates log from 0.4.29 to 0.4.30

Release notes

Sourced from log's releases.

0.4.30

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

Changelog

Sourced from log's changelog.

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

Commits
  • 9c55760 Merge pull request #725 from rust-lang/cargo/0.4.30
  • d1acb05 update docs on current MSRV and note latest bump in changelog
  • 5068293 prepare for 0.4.30 release
  • 7ccd873 Merge pull request #724 from rust-lang/feat/net-to-value
  • 923dfaa fix up test cfgs
  • ecb7de8 gate net value impls on std
  • 67bb4f6 run fmt
  • 25f49fe rework net type capturing
  • 7087dcb feat: impl ToValue for core::net types
  • 67bc7e3 Merge pull request #723 from woodruffw-forks/ww/ci
  • Additional commits viewable in compare view

Updates pastey from 0.2.2 to 0.2.3

Release notes

Sourced from pastey's releases.

v0.2.3

Improved

  • Improved Branch Coverage #34
  • Improved Line Coverage #32

Full Changelog: AS1100K/pastey@v0.2.2...v0.2.3

Changelog

Sourced from pastey's changelog.

[0.2.3] - 2026-05-20

Improved

  • Improved Branch Coverage #34
  • Improved Line Coverage #32
Commits

Updates dashmap from 6.1.0 to 6.2.1

Release notes

Sourced from dashmap's releases.

v6.2.1

This is an interim maintenance release for the existing v6 branch before v7 can be released. This bumps the MSRV to 1.85 and updates dependencies to their latest versions.

Commits

Updates either from 1.15.0 to 1.16.0

Commits
  • 8f4ecd9 Merge pull request #138 from cuviper/release-1.16.0
  • c35bb4e Release 1.16.0
  • 652486e Fix an unused import
  • c26e693 Merge pull request #137 from ronnodas/map-both
  • aa7f1d4 Add a single-ident version of map_both!
  • a706625 Format the map_both! example
  • 85b1b56 Merge pull request #128 from A4-Tacks/for-both-ident-pattern
  • 304e814 Merge pull request #127 from A4-Tacks/map-or
  • ff9e326 Apply formatting suggestions from code review
  • 71c9a91 Merge pull request #126 from A4-Tacks/is-and
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the C-Dependencies Pull requests that update a dependency file label May 30, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 30, 2026 08:07
@dependabot dependabot Bot added the C-Dependencies Pull requests that update a dependency file label May 30, 2026
@github-actions github-actions Bot added the Waiting On Review Waiting on reviews from the maintainers label May 30, 2026
@github-actions github-actions Bot added this to the v1.0.0 milestone May 30, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 30, 2026 •
edited
Loading

Test262 conformance changes

Test result main count PR count difference
Total 53,125 53,125 0
Passed 51,072 51,072 0
Ignored 1,482 1,482 0
Failed 571 571 0
Panics 0 0 0
Conformance 96.14% 96.14% 0.00%

Tested main commit: 7f2da65446d25cd17b7a07b0f85d1ea1bb17ce28
Tested PR commit: 4038720f21db9e6dd587c76b74e4bbd883660f75
Compare commits: 7f2da65...4038720

@jedel1043
Copy link
Copy Markdown
Member

jedel1043 commented May 31, 2026

@dependabot rebase

@jedel1043 jedel1043 added this pull request to the merge queue May 31, 2026
@jedel1043 jedel1043 removed this pull request from the merge queue due to a manual request May 31, 2026
@dependabot
chore(deps): bump the rust-dependencies group across 1 directory with…
4038720 
… 8 updates

Bumps the rust-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.1` |
| [mimalloc-safe](https://github.com/napi-rs/mimalloc-safe) | `0.1.61` | `0.1.62` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.3` | `0.13.4` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` |
| [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.30` |
| [pastey](https://github.com/as1100k/pastey) | `0.2.2` | `0.2.3` |
| [dashmap](https://github.com/xacrimon/dashmap) | `6.1.0` | `6.2.1` |
| [either](https://github.com/rayon-rs/either) | `1.15.0` | `1.16.0` |



Updates `http` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v1.4.0...v1.4.1)

Updates `mimalloc-safe` from 0.1.61 to 0.1.62
- [Release notes](https://github.com/napi-rs/mimalloc-safe/releases)
- [Changelog](https://github.com/napi-rs/mimalloc-safe/blob/main/CHANGELOG.md)
- [Commits](napi-rs/mimalloc-safe@mimalloc-safe-v0.1.61...mimalloc-safe-v0.1.62)

Updates `reqwest` from 0.13.3 to 0.13.4
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.3...v0.13.4)

Updates `serde_json` from 1.0.149 to 1.0.150
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.150)

Updates `log` from 0.4.29 to 0.4.30
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.29...0.4.30)

Updates `pastey` from 0.2.2 to 0.2.3
- [Release notes](https://github.com/as1100k/pastey/releases)
- [Changelog](https://github.com/AS1100K/pastey/blob/master/CHANGELOG.md)
- [Commits](AS1100K/pastey@v0.2.2...v0.2.3)

Updates `dashmap` from 6.1.0 to 6.2.1
- [Release notes](https://github.com/xacrimon/dashmap/releases)
- [Commits](xacrimon/dashmap@v6.1.0...v6.2.1)

Updates `either` from 1.15.0 to 1.16.0
- [Commits](rayon-rs/either@1.15.0...1.16.0)

---
updated-dependencies:
- dependency-name: dashmap
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: either
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: http
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: log
  dependency-version: 0.4.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: mimalloc-safe
  dependency-version: 0.1.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: pastey
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: reqwest
  dependency-version: 0.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/rust-dependencies-1c49d0a9a5 branch from 0236b28 to 4038720 Compare May 31, 2026 20:13
@jedel1043 jedel1043 enabled auto-merge May 31, 2026 20:13
@jedel1043 jedel1043 added this pull request to the merge queue May 31, 2026
Merged via the queue into main with commit 85272bf May 31, 2026
21 checks passed
@jedel1043 jedel1043 deleted the dependabot/cargo/rust-dependencies-1c49d0a9a5 branch May 31, 2026 21:05
@github-actions github-actions Bot removed the Waiting On Review Waiting on reviews from the maintainers label May 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jedel1043 jedel1043 jedel1043 approved these changes

Assignees

No one assigned

Labels

C-Dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

v1.0.0

Development

Successfully merging this pull request may close these issues.

1 participant

@jedel1043