chore(deps): update rust deps

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	workspace.dependencies	patch	1 → 1.0.104
arc-swap	workspace.dependencies	patch	1 → 1.9.2
async-stream	workspace.dependencies	patch	0.3 → 0.3.6
async-trait	dependencies	patch	0.1 → 0.1.92
aws-credential-types	workspace.dependencies	patch	1 → 1.3.0
aws-sigv4	workspace.dependencies	patch	1 → 1.6.0
axum	workspace.dependencies	patch	0.8 → 0.8.9
bytes	dependencies	patch	1 → 1.12.1
bytes	workspace.dependencies	patch	1 → 1.12.1
chrono	workspace.dependencies	patch	0.4 → 0.4.45
clickhouse (source)	workspace.dependencies	patch	0.15 → 0.15.3
data-encoding	workspace.dependencies	patch	2 → 2.11.1
dotenvy	workspace.dependencies	patch	0.15 → 0.15.7
fred	workspace.dependencies	patch	10 → 10.1.0
futures (source)	workspace.dependencies	patch	0.3 → 0.3.34
hex	workspace.dependencies	patch	0.4 → 0.4.3
http-body-util	workspace.dependencies	patch	0.1 → 0.1.5
http_1x	dev-dependencies	patch	1 → 1.5.0
http_1x	dependencies	patch	1 → 1.5.0
hyper (source)	workspace.dependencies	minor	1 → 1.12.0
hyper-util (source)	workspace.dependencies	patch	0.1 → 0.1.21
metrics	workspace.dependencies	patch	0.24 → 0.24.6
metrics-exporter-prometheus	workspace.dependencies	patch	0.18 → 0.18.3
once_cell	dependencies	patch	1 → 1.21.4
openidconnect	workspace.dependencies	patch	4 → 4.0.1
rand (source)	workspace.dependencies	patch	0.10 → 0.10.3
regex	dependencies	patch	1 → 1.13.1
reqwest	workspace.dependencies	patch	0.13 → 0.13.5
rust_decimal	workspace.dependencies	patch	1 → 1.43.0
rustls	workspace.dependencies	patch	0.23 → 0.23.45
rustls-platform-verifier	workspace.dependencies	patch	0.7 → 0.7.1
serde (source)	workspace.dependencies	patch	1 → 1.0.229
serde_json	workspace.dependencies	patch	1 → 1.0.154
serde_urlencoded	dependencies	patch	0.7 → 0.7.1
thiserror	workspace.dependencies	patch	2 → 2.0.21
tokio (source)	workspace.dependencies	patch	1 → 1.53.3
tokio-stream (source)	workspace.dependencies	patch	0.1 → 0.1.19
tower	workspace.dependencies	patch	0.5 → 0.5.3
tower-http	workspace.dependencies	patch	0.7 → 0.7.1
tracing (source)	workspace.dependencies	patch	0.1 → 0.1.44
tracing-subscriber (source)	workspace.dependencies	patch	0.3 → 0.3.23
url	workspace.dependencies	patch	2 → 2.5.8
utoipa-swagger-ui	workspace.dependencies	patch	10 → 10.0.1
uuid	workspace.dependencies	minor	1 → 1.28.0
wiremock	dependencies	patch	0.6 → 0.6.5
wiremock	dev-dependencies	patch	0.6 → 0.6.5
xxhash-rust	workspace.dependencies	patch	0.8 → 0.8.19

---

Release Notes

ClickHouse/clickhouse-rs (clickhouse)

v0.15.3

Compare Source

Changed

• Changed query parameters to be sent through a multipart/form-data body to avoid issues with URL length limits. (#​455)
  • If the Content-Type, Content-Length or Transfer-Encoding headers are already set, they will be overridden.
    This is not considered a breaking behavior change because user code should never be setting these headers.
• enable_http_compression and http_zlib_compression_level are no longer sent because they may trigger an error
  in readonly mode. (release PR #​487)
  • Only affects Query.
  • See added documentation on Client::with_compression() for details.

Fixed

• Fixed JSON type hints parsing to properly handle parenthesized types. (#​478)
• Switched internal schema fetch query issued by Client::insert() to not use the user-set query ID. (#​481)
  • If a query ID is already set, a derived query ID is used instead ({query_id}-describe).
• Switched Lz4 compression to use HTTP standard Accept-Encoding negotiation, fixing a regression in ClickHouse 26.9. (#​482)
• Fixed handling of JSON type hints starting with SKIP. (#​485)

hyperium/hyper (hyper)

v1.12.0

Compare Source

Bug Fixes

• http1:
  • withdraw a stale want when the client dispatcher takes a request (#​4208) (c44f1cc5)
  • remove content-length if transfer-encoding is auto-added (#​4224) (69396fdd)
  • always remove content-length if transfer-encoding is sent (#​4223) (a5d7fd78)
  • let a Connection close token win over a later keep-alive (#​4201) (5dadff76)
  • preserve hop-by-hop when setting close or keep-alive (#​4196) (74a39081)
• http2: do not reserve capacity for idle Upgraded streams (#​4198) (e89d0d93)

Features

• http1: add max_header_size limit for server and client (#​4183) (d1cd14ef, closes #​3832)

v1.11.1 (2026-08-27)

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#​4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#​4147) (3534d75c, closes #​4145)
  • flush bytes buffered by the write re-check before yielding (#​4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#​4110) (da19be08)

serde-rs/json (serde_json)

v1.0.154

Compare Source

• Support preserve_order in no_std builds (#​1333, thanks @​razmser)

v1.0.153

Compare Source

• Report invalid UTF-8 at the first bad byte (#​1345, thanks @​00200200)

v1.0.152

Compare Source

• Preserve sign of -0 in arbitrary_precision mode (#​1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#​1347, thanks @​yuxi-liu-wired)

tokio-rs/tokio (tokio)

v1.53.3: Tokio v1.53.3

Compare Source

1.53.3 (October 13th, 2026)

Added

• io: add AsyncFd::register and AsyncFd::register_with_interest (#​8587)

Changed

• io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#​8587)

Fixed

• io: wake and drop DuplexStream wakers outside the lock (#​8618)
• macros: avoid unreachable_code in join! and try_join! for Infallible (#​8518)
• runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#​8595)
• sync: wake waiters outside the lock when closing a semaphore (#​8529)
• test: fix several flaky tests (#​8196, #​8427, #​8609)

Fixed (unstable)

• rt: keep io_uring op alive when submission fails after push (#​8185)

uuid-rs/uuid (uuid)

v1.28.0

Compare Source

What's Changed

• Add optional serde format adapters by @​RanaPriyansh in #​916
• Prepare for 1.28.0 release by @​KodrAus in #​918

New Contributors

• @​RanaPriyansh made their first contribution in #​916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 6am on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.