Skip to content

chore(deps): bump the cargo group across 1 directory with 2 updates - #298

Merged
pinodeca merged 1 commit into
mainfrom
dependabot/cargo/cargo-1eab809044
Jul 27, 2026
Merged

chore(deps): bump the cargo group across 1 directory with 2 updates#298
pinodeca merged 1 commit into
mainfrom
dependabot/cargo/cargo-1eab809044

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 2 updates in the / directory: serde_json and tokio.

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates tokio from 1.52.4 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits
  • 75fef53 chore: prepare Tokio v1.53.1 (#8303)
  • ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
  • eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
  • 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
  • a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
  • be689a3 chore: prepare Tokio v1.53.0 (#8294)
  • 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
  • f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
  • 5e16ee0 task: avoid replacing the JoinQueue waker in try_join_next (#8279)
  • 88212ab sync: document memory ordering guarantees for Semaphore (#8119)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 27, 2026
pinodeca added a commit that referenced this pull request Jul 27, 2026
The project doesn't use any nightly-only features (no #![feature(...)]
attributes, no unstable rustfmt options), yet CI and the release Docker
builds pulled an unpinned latest nightly via rustlang/rust:nightly-bookworm.
This inherited every upstream nightly regression, including a codegen ICE
in rustc 1.99.0-nightly (2026-07-25) that crashed release builds of
tokio 1.53.1 (breaking dependabot PR #298).

- Add rust-toolchain.toml pinning stable + rustfmt/clippy for reproducibility
- CI format/test jobs install and default to stable
- Dockerfile and package-release.yml build on rust:bookworm (stable)
- README prerequisite updated to Rust (stable)

Validated on stable 1.95.0: release package build, clippy, and fmt all
pass, and tokio 1.53.1 + serde_json 1.0.151 compile cleanly in release
mode with no ICE.
@pinodeca

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps the cargo group with 2 updates in the / directory: [serde_json](https://github.com/serde-rs/json) and [tokio](https://github.com/tokio-rs/tokio).


Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `tokio` from 1.52.4 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.4...tokio-1.53.1)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the cargo group with 2 updates chore(deps): bump the cargo group across 1 directory with 2 updates Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-1eab809044 branch from d9584fe to c3e8d07 Compare July 27, 2026 17:00
@pinodeca
pinodeca merged commit c28b1a1 into main Jul 27, 2026
13 checks passed
@pinodeca
pinodeca deleted the dependabot/cargo/cargo-1eab809044 branch July 27, 2026 17:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant