chore(deps): bump reqwest, axum, rand, strum, metrics-exporter, derive_more#74
Merged
Conversation
…e_more
Final dependency modernisation batch.
- reqwest 0.12 -> 0.13: the rustls-tls feature was renamed to rustls (workspace feature set updated). No source changes; the Client/builder/header/send/text surface is unchanged.
- axum 0.7 -> 0.8: path-capture syntax :hash -> {hash} in orderbook-mock's live and test routers (the known 0.8 break).
- rand 0.8 -> 0.10: orderbook-mock only; thread_rng -> rng, gen -> random, Rng -> RngExt. Resolved cleanly with no forced downgrade elsewhere.
- strum 0.27 -> 0.28, metrics-exporter-prometheus 0.17 -> 0.18: no source changes (derive-only / builder API unchanged). twap-monitor's express strum aligned to 0.28.
- derive_more 1 -> 2: no member consumes it; version-only.
Behaviour note: reqwest 0.13 defaults to the platform trust store (rustls-platform-verifier) rather than bundled Mozilla roots. This validates api.cow.fi identically in any normal environment.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Final batch of the dependency-modernisation series (after #68, #69, #70, #71, #72, #73).
What
rustls-tlsfeature renamed torustls; no source change:hash->{hash}in orderbook-mock routersthread_rng/gen/Rng->rng/random/RngExtrandbumped cleanly (no resolver conflict or forced downgrade).Behaviour note
reqwest 0.13 defaults to the platform trust store (
rustls-platform-verifier) rather than bundled Mozilla roots. For the engine's HTTPS calls toapi.cow.fithis validates identically in any normal environment; flagging for the changelog.Testing
Verified under nix (stable-1.94-equivalent nightly):
clippy --workspace --all-targets --all-features -- -D warningsclean,cargo test --workspace --all-featuresgreen (nexum-engine 105, orderbook-mock 3, sdk + doctests), and thewasm32-wasip2module builds compile.cargo fmtclean.Note: a
cargo build --workspace --all-targetsoutput-filename collision exists betweenethflow-watcher's cdylib and rlib artefacts. It is pre-existing, unrelated to these bumps, and not run by CI (which builds per-module and runscargo test);cargo build -p shepherd-backtestsucceeds in isolation.AI Assistance
Claude Code (Opus 4.8) used for the multi-dependency API-migration analysis and verification.