Skip to content

Bump the cargo group across 1 directory with 24 updates - #178

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-de8085b2ca
Open

Bump the cargo group across 1 directory with 24 updates#178
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-de8085b2ca

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 20 updates in the / directory:

Package From To
axum-prometheus 0.10.0 0.10.1
clap 4.6.4 4.6.6
either 1.17.0 1.18.0
futures 0.3.33 0.3.34
libsqlite3-sys 0.30.1 0.37.0
moka 0.12.15 0.12.16
opentelemetry-resource-detectors 0.11.0 0.12.0
sentry 0.48.5 0.49.2
sentry-tracing 0.48.5 0.49.2
thiserror 2.0.19 2.0.20
tower-http 0.6.11 0.7.0
uuid 1.24.0 1.26.0
base64 0.22.1 0.23.1
hyper 1.11.0 1.11.1
log 0.4.33 0.4.34
regex-automata 0.4.16 0.4.18
sha2 0.10.9 0.11.0
zerocopy 0.8.55 0.8.56
syn 3.0.3 3.0.4
cc 1.4.0 1.4.4

Updates axum-prometheus from 0.10.0 to 0.10.1

Release notes

Sourced from axum-prometheus's releases.

0.10.1

What's Changed

New Contributors

Full Changelog: Ptrskay3/axum-prometheus@0.10.0...0.10.1

Changelog

Sourced from axum-prometheus's changelog.

[0.10.1] - 2026-07-31

Fixed

Changed

  • Bump various dependencies to latest versions.
Commits
  • 7a638ad revert accidental port change
  • 48f1862 chores for release/0.10.1
  • 1b2725a Merge pull request #91 from yacir/fix_with_prefix
  • aaf8d0e fix: apply with_prefix on the layer-only build() path
  • fedcede Merge pull request #90 from Ptrskay3/release/0.10.0
  • See full diff in compare view

Updates clap from 4.6.4 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • Additional commits viewable in compare view

Updates either from 1.17.0 to 1.18.0

Changelog

Sourced from either's changelog.

  • 1.18.0 - 2026-08-20
    • Add trait impls akin to Itertools::partition_map, by @​cuviper (#144)
      • Extend<Either<L, R>> for (A, B)
      • FromIterator<Either<L, R>> for (A, B)
Commits

Updates futures from 0.3.33 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates libsqlite3-sys from 0.30.1 to 0.37.0

Release notes

Sourced from libsqlite3-sys's releases.

0.37.0

What's Changed

  • Add FromSqlError::other convenience conversion #1703
  • Fix warnings #1705
  • Update bindgen requirement from 0.71 to 0.72 #1707
  • Fix for vtab::parameter parsing #1712
  • Fix clippy warning #1713
  • Bump bundled SQLite version to 3.50.2 #1714
  • Fix issue with prettyplease #1717

Full Changelog: rusqlite/rusqlite@v0.36.0...v0.37.0

0.36.0

What's Changed

  • Introduce Name trait to support both &str and &CStr as name #1659
  • Use doc_auto_cfg #1683
  • Feature loadable_extension is incompatible with some other features #1686
  • Add missing wrappers for sqlite3_vtab_nochange and sqlite3_value_nochange #1688
  • Update bindings list #1689
  • Homogenize code related to hooks #1690
  • Try to increase code coverage #1610
  • Bump bundled SQLite version to 3.49.2 #1691
  • Add bindings to sqlite3_table_column_metadata #1692
  • Add bindings to sqlite3_vtab_distinct #1695
  • Fix clippy warning #1697
  • Add query_one #1699
  • Refactor one_column test method #1700

Full Changelog: rusqlite/rusqlite@v0.35.0...v0.36.0

0.35.0

What's Changed

  • Document 'rusqlite-macros' and 'jiff' features #1663
  • access column metadata from prepared statement #1672 / #1666
  • add support for Jiff's Timestamp #1676
  • Breaking change: Check that Connection::execute has no tail #1679 / #397
  • Breaking change: Check for multiple statements in prepare #1680 / #1147

Full Changelog: rusqlite/rusqlite@v0.34.0...v0.35.0

0.34.0

What's Changed

  • Find the system library with minimum version 3.14.0 #1628
  • Update error type for ValueRef methods #1629
  • Use decrement_strong_count directly for Array #1633
  • Dedup free_boxed_value #1635
  • Bump jiff version #1645
  • Deserialize impls #1646
  • Introduce BindIndex trait #1649
  • Use BindIndex in bind_parameters_named #1651

... (truncated)

Commits

Updates moka from 0.12.15 to 0.12.16

Release notes

Sourced from moka's releases.

v0.12.16

Version 0.12.16

Fixed

  • Fixed a bug where cache eviction could stall permanently when the cache was configured with the non-default LRU eviction policy (EvictionPolicy::lru()) by a race between insert and remove operations on the same key (#592gh-pull-0592 by @​kim-jhyeon, reported in #590gh-issue-0590):
    • This bug was introduced in v0.12.0 and affected sync::Cache, sync::SegmentedCache and future::Cache.
    • A race between applying a write recording for an entry and concurrently removing that entry from the internal concurrent hash table could leave an orphaned node at the front of the LRU queue. Once present, no entry was ever evicted again and the cache grew unboundedly past max_capacity.
    • The same race also affected the default TinyLFU eviction policy, but with a milder symptom: each occurrence permanently leaked one phantom entry slot, causing entry_count and weighted_size to over-report and the usable capacity to shrink by one entry per occurrence. Fixed by the same change.

Changed

  • Worked around a ThreadSanitizer false positive (#602gh-pull-0602):
    • Replaced the standalone fence(Acquire) in the internal MiniArc's drop path with an Acquire load of the reference count, so that downstream projects can now run ThreadSanitizer on code using Moka without hitting this false positive.
    • std::sync::Arc has a similar workaround.
  • Raised the minimum version of the crossbeam-epoch crate from v0.9.18 to v0.9.20 to avoid the following advisory (#603gh-pull-0603):
    • [RUSTSEC-2026-0204] crossbeam-epoch: invalid pointer dereference in fmt::Pointer for Atomic and Shared
    • Moka is not affected by this advisory because it never formats these pointer types. However, raising the minimum version prevents downstream lockfiles from resolving to an affected crossbeam-epoch version via Moka.
Changelog

Sourced from moka's changelog.

Version 0.12.16

Fixed

  • Fixed a bug where cache eviction could stall permanently when the cache was configured with the non-default LRU eviction policy (EvictionPolicy::lru()) by a race between insert and remove operations on the same key (#592[gh-pull-0592] by [@​kim-jhyeon][gh-kim-jhyeon], reported in #590[gh-issue-0590]):
    • This bug was introduced in v0.12.0 and affected sync::Cache, sync::SegmentedCache and future::Cache.
    • A race between applying a write recording for an entry and concurrently removing that entry from the internal concurrent hash table could leave an orphaned node at the front of the LRU queue. Once present, no entry was ever evicted again and the cache grew unboundedly past max_capacity.
    • The same race also affected the default TinyLFU eviction policy, but with a milder symptom: each occurrence permanently leaked one phantom entry slot, causing entry_count and weighted_size to over-report and the usable capacity to shrink by one entry per occurrence. Fixed by the same change.

Changed

  • Worked around a ThreadSanitizer false positive (#602[gh-pull-0602]):
    • Replaced the standalone fence(Acquire) in the internal MiniArc's drop path with an Acquire load of the reference count, so that downstream projects can now run ThreadSanitizer on code using Moka without hitting this false positive.
    • std::sync::Arc has a similar workaround.
  • Raised the minimum version of the crossbeam-epoch crate from v0.9.18 to v0.9.20 to avoid the following advisory (#603[gh-pull-0603]):
    • [RUSTSEC-2026-0204] crossbeam-epoch: invalid pointer dereference in fmt::Pointer for Atomic and Shared
    • Moka is not affected by this advisory because it never formats these pointer types. However, raising the minimum version prevents downstream lockfiles from resolving to an affected crossbeam-epoch version via Moka.
Commits
  • a616ec1 Merge pull request #604 from moka-rs/chore/bump-v0.12.16
  • 3b140a6 Bump the version to v0.12.16
  • 51b802d Merge pull request #603 from moka-rs/bump-crossbeam-epoch-floor
  • 4f90716 Raise the minimum crossbeam-epoch version to 0.9.20
  • 08d0e04 Merge pull request #602 from moka-rs/gh600-tsan-workaround
  • 14447a7 Restructure the v0.12.16 TSan workaround CHANGELOG entry
  • 7b14c37 Avoid a TSan false positive by replacing the fence in MiniArc::drop
  • 05b37c6 Merge pull request #599 from moka-rs/gh590-deterministic-tests
  • fc31858 Replace private doc references in gh590 test comments
  • 5743592 Improve the v0.12.16 CHANGELOG entry
  • Additional commits viewable in compare view

Updates opentelemetry-resource-detectors from 0.11.0 to 0.12.0

Release notes

Sourced from opentelemetry-resource-detectors's releases.

opentelemetry-resource-detectors-0.12.0

Added

  • Add ContainerResourceDetector to detect container.id from /proc/self/cgroup, with fallback to /proc/self/mountinfo.
  • Add host.name attribute to HostResourceDetector.
  • Add ServiceInstanceIdResourceDetector to generate a random UUIDv7 service.instance.id.

Changed

  • Depend on opentelemetry with default-features = false, so its default features are no longer pulled into downstream builds.

See CHANGELOG for full history.

Commits
  • 317be23 chore(resource-detectors): prepare 0.12.0 release (#764)
  • 69d12da fix(resource-detectors): disable opentelemetry default features (#736)
  • ddecfa6 chore(ci): pin the Rust toolchain (#753)
  • a63e359 fix(config): update OpenTelemetry SDK dependency (#760)
  • 43bd04b docs(tower): add PR links to CHANGELOG entries (#756)
  • e075a6c feat(tower): add with_tracing/with_metrics to disable signals per layer (#679)
  • 363bbb1 refactor(tower): namespace the HTTP server middleware under http::server (#717)
  • e0d0286 fix: address Rust 1.98 clippy lints (#752)
  • 9fd3abe chore: Stop duplicating Geneva OBO metadata into the Bond payload (#743)
  • fb4867f chore: unblock cargo-deny h2 advisory (#749)
  • Additional commits viewable in compare view

Updates sentry from 0.48.5 to 0.49.2

Release notes

Sourced from sentry's releases.

0.49.2

Fixes

  • Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#1279).

Deprecations

  • Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#1299).
  • Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#1300).

0.49.1

Fixes

  • Preserve floating-point fields in tracing logs as numeric attributes (#1278).

0.49.0

Breaking Changes

  • ClientOptions is now #[non_exhaustive] (#1230). The struct must now be constructed with the builder-style setters:

    // Before
let options = sentry::ClientOptions {
    dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
    debug: true,
    release: Some("my-app@1.0.0".into()),
    ..Default::default()
};
// After
let options = sentry::ClientOptions::new()
.dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
.debug(true)
.release("my-app@1.0.0");

  • Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#1262).

  • The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#1251).

  • Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

  • Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#1228).

  • Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#1227).

  • EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#1255).

  • The sentry_log::RecordMapping enum's Event now stores the event in a Box (#1269).

  • sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#1270)

  • The sentry_tracing::EventMapping enum's Event variant is now stored in a Box (#1272)

New Features

... (truncated)

Changelog

Sourced from sentry's changelog.

0.49.2

Fixes

  • Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#1279).

Deprecations

  • Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#1299).
  • Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#1300).

Fixes

  • Corrected disabled tracing semantics: transactions and spans created while tracing is disabled are ignored without generating client reports, while sampling decisions received from upstream traces continue to be propagated in outgoing trace headers. An explicit 0.0 trace sample rate remains distinct from disabled tracing and continues to generate client reports for locally unsampled transactions (#1286).

0.49.1

Fixes

  • Preserve floating-point fields in tracing logs as numeric attributes (#1278).

0.49.0

Breaking Changes

  • ClientOptions is now #[non_exhaustive] (#1230). The struct must now be constructed with the builder-style setters:

    // Before
let options = sentry::ClientOptions {
    dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
    debug: true,
    release: Some("my-app@1.0.0".into()),
    ..Default::default()
};
// After
let options = sentry::ClientOptions::new()
.dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
.debug(true)
.release("my-app@1.0.0");

  • Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#1262).

  • The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#1251).

  • Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

  • Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#1228).

  • Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#1227).

  • EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#1255).

  • The sentry_log::RecordMapping enum's Event now stores the event in a Box (#1269).

  • sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#1270)

... (truncated)

Commits

Updates sentry-tracing from 0.48.5 to 0.49.2

Release notes

Sourced from sentry-tracing's releases.

0.49.2

Fixes

  • Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#1279).

Deprecations

  • Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#1299).
  • Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#1300).

0.49.1

Fixes

  • Preserve floating-point fields in tracing logs as numeric attributes (#1278).

0.49.0

Breaking Changes

  • ClientOptions is now #[non_exhaustive] (#1230). The struct must now be constructed with the builder-style setters:

    // Before
let options = sentry::ClientOptions {
    dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
    debug: true,
    release: Some("my-app@1.0.0".into()),
    ..Default::default()
};
// After
let options = sentry::ClientOptions::new()
.dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
.debug(true)
.release("my-app@1.0.0");

  • Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#1262).

  • The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#1251).

  • Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

  • Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#1228).

  • Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#1227).

  • EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#1255).

  • The sentry_log::RecordMapping enum's Event now stores the event in a Box (#1269).

  • sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#1270)

  • The sentry_tracing::EventMapping enum's Event variant is now stored in a Box (#1272)

New Features

... (truncated)

Changelog

Sourced from sentry-tracing's changelog.

0.49.2

Fixes

  • Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#1279).

Deprecations

  • Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#1299).
  • Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#1300).

Fixes

  • Corrected disabled tracing semantics: transactions and spans created while tracing is disabled are ignored without generating client reports, while sampling decisions received from upstream traces continue to be propagated in outgoing trace headers. An explicit 0.0 trace sample rate remains distinct from disabled tracing and continues to generate client reports for locally unsampled transactions (#1286).

0.49.1

Fixes

  • Preserve floating-point fields in tracing logs as numeric attributes (#1278).

0.49.0

Breaking Changes

  • ClientOptions is now #[non_exhaustive] (#1230). The struct must now be constructed with the builder-style setters:

    // Before
let options = sentry::ClientOptions {
    dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
    debug: true,
    release: Some("my-app@1.0.0".into()),
    ..Default::default()
};
// After
let options = sentry::ClientOptions::new()
.dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
.debug(true)
.release("my-app@1.0.0");

  • Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#1262).

  • The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#1251).

  • Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

  • Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#1228).

  • Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#1227).

  • EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#1255).

  • The sentry_log::RecordMapping enum's Event now stores the event in a Box (#1269).

  • sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#1270)

... (truncated)

Commits

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)
Commits

Updates tower-http from 0.6.11 to 0.7.0

Release notes

Sourced from tower-http's releases.

tower-http-0.7.0

Changes since 0.6.11

Added

  • csrf: add cross-site request forgery (CSRF) protection middleware, porting the cross-origin protection scheme introduced in Go 1.25 (#699)

    use tower::ServiceBuilder;
use tower_http::csrf::CsrfLayer;
// Rejects cross-origin state-changing requests using Sec-Fetch-Site,
// an Origin allow-list, and an Origin/Host fallback. No per-request
// token state required.
let layer = CsrfLayer::new().add_trusted_origin("https://example.com")?;
let service = ServiceBuilder::new().layer(layer).service_fn(handler);

  • timeout: add DeadlineBody for non-resetting body timeouts, applied via the new RequestBodyDeadlineLayer and ResponseBodyDeadlineLayer (#688)

    Unlike TimeoutBody, which resets its deadline on every frame, DeadlineBody caps the total time of a body transfer. A slow client trickling one byte at a time never trips an idle timeout but will trip a deadline.

    use std::time::Duration;
use ...
Description has been truncated

@dependabot
Bump the cargo group across 1 directory with 24 updates
f4a2fd3 
Bumps the cargo group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [axum-prometheus](https://github.com/Ptrskay3/axum-prometheus) | `0.10.0` | `0.10.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.6` |
| [either](https://github.com/rayon-rs/either) | `1.17.0` | `1.18.0` |
| [futures](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
| [libsqlite3-sys](https://github.com/rusqlite/rusqlite) | `0.30.1` | `0.37.0` |
| [moka](https://github.com/moka-rs/moka) | `0.12.15` | `0.12.16` |
| [opentelemetry-resource-detectors](https://github.com/open-telemetry/opentelemetry-rust-contrib) | `0.11.0` | `0.12.0` |
| [sentry](https://github.com/getsentry/sentry-rust) | `0.48.5` | `0.49.2` |
| [sentry-tracing](https://github.com/getsentry/sentry-rust) | `0.48.5` | `0.49.2` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.11` | `0.7.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.0` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [hyper](https://github.com/hyperium/hyper) | `1.11.0` | `1.11.1` |
| [log](https://github.com/rust-lang/log) | `0.4.33` | `0.4.34` |
| [regex-automata](https://github.com/rust-lang/regex) | `0.4.16` | `0.4.18` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.55` | `0.8.56` |
| [syn](https://github.com/dtolnay/syn) | `3.0.3` | `3.0.4` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.4.0` | `1.4.4` |



Updates `axum-prometheus` from 0.10.0 to 0.10.1
- [Release notes](https://github.com/Ptrskay3/axum-prometheus/releases)
- [Changelog](https://github.com/Ptrskay3/axum-prometheus/blob/master/CHANGELOG.md)
- [Commits](Ptrskay3/axum-prometheus@0.10.0...0.10.1)

Updates `clap` from 4.6.4 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.6)

Updates `either` from 1.17.0 to 1.18.0
- [Changelog](https://github.com/rayon-rs/either/blob/main/RELEASES.md)
- [Commits](rayon-rs/either@1.17.0...1.18.0)

Updates `futures` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `libsqlite3-sys` from 0.30.1 to 0.37.0
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](https://github.com/rusqlite/rusqlite/commits/v0.37.0)

Updates `moka` from 0.12.15 to 0.12.16
- [Release notes](https://github.com/moka-rs/moka/releases)
- [Changelog](https://github.com/moka-rs/moka/blob/main/CHANGELOG.md)
- [Commits](moka-rs/moka@v0.12.15...v0.12.16)

Updates `opentelemetry-resource-detectors` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust-contrib/releases)
- [Commits](open-telemetry/opentelemetry-rust-contrib@opentelemetry-resource-detectors-0.11.0...opentelemetry-resource-detectors-0.12.0)

Updates `sentry` from 0.48.5 to 0.49.2
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-rust@0.48.5...0.49.2)

Updates `sentry-tracing` from 0.48.5 to 0.49.2
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-rust@0.48.5...0.49.2)

Updates `thiserror` from 2.0.19 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.19...2.0.20)

Updates `tower-http` from 0.6.11 to 0.7.0
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.11...tower-http-0.7.0)

Updates `uuid` from 1.24.0 to 1.26.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...v1.26.0)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `futures-channel` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `futures-io` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `futures-sink` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `futures-util` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `hyper` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.11.0...v1.11.1)

Updates `log` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)

Updates `regex-automata` from 0.4.16 to 0.4.18
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@regex-automata-0.4.16...regex-automata-0.4.18)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `zerocopy` from 0.8.55 to 0.8.56
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.55...v0.8.56)

Updates `syn` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.3...3.0.4)

Updates `cc` from 1.4.0 to 1.4.4
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.4.0...cc-v1.4.4)

---
updated-dependencies:
- dependency-name: axum-prometheus
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: either
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: futures
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: libsqlite3-sys
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: moka
  dependency-version: 0.12.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: opentelemetry-resource-detectors
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: sentry
  dependency-version: 0.49.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: sentry-tracing
  dependency-version: 0.49.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tower-http
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: futures-channel
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: futures-io
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: futures-sink
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: hyper
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: regex-automata
  dependency-version: 0.4.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: zerocopy
  dependency-version: 0.8.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: syn
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: cc
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants