deps: bump the rust-minor group across 1 directory with 8 updates by dependabot[bot] · Pull Request #118 · osodevops/kafka-backup

dependabot · 2026-06-22T12:37:37Z

Bumps the rust-minor group with 8 updates in the / directory:

Package	From	To
serde_json	`1.0.149`	`1.0.150`
bytes	`1.11.1`	`1.12.0`
indexmap	`2.13.1`	`2.14.0`
chrono	`0.4.44`	`0.4.45`
rustls	`0.23.37`	`0.23.40`
webpki-roots	`1.0.6`	`1.0.8`
hyper	`1.9.0`	`1.10.1`
uuid	`1.23.0`	`1.23.3`

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

91402ce Release bytes v1.12.0 (#831)
2256e6d chore: add safety comments on unsafe blocks (#827)
245adff Pass vtable data by value (#826)
00cc5ff Implement BytesMut::extend_from_within (#818)
5b79d31 Merge tag 'v1.11.1'
804ee6d Make try_unsplit method public (#746)
fd426ca Exclude development scripts from published package (#810)
b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
94e4291 Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capac...
acd1e0f Fix get_int if nbytes is zero (#806)
See full diff in compare view

Updates indexmap from 2.13.1 to 2.14.0

Changelog

Sourced from indexmap's changelog.

2.14.0 (2026-04-09)

MSRV: Rust 1.85.0 or later is now required.

Updated the hashbrown dependency to 0.17.

Made more map::Slice methods const: new_mut, first_mut, last_mut, split_at_mut, split_at_mut_checked, split_first_mut, split_last_mut

Commits

bcd165b Merge pull request #439 from cuviper/release-2.14.0
4ef06a7 Release 2.14.0
d21826c Merge pull request #438 from cuviper/hashbrown-0.17
2566bec Upgrade to hashbrown v0.17
4b62776 Merge pull request #437 from cuviper/disjoint-panic
478fba2 Normalize the panic doc of get_disjoint_mut
fb6dafd Merge pull request #436 from cuviper/const-slice-mut
5c237a2 Make Slice::{first,last,split_*}_mut methods const
48ff9ce Merge pull request #435 from cuviper/edition-2024
648be98 cargo fmt with edition 2024
Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in chronotope/chrono#1787

tz_data: fix tzdata locations on Android by @caruschalalamove in chronotope/chrono#1789

Commits

1703382 Prepare 0.4.45 release
881f9ab tz_data: fix tzdata locations on Android
f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
120686c Bump codecov/codecov-action from 5 to 6
See full diff in compare view

Updates rustls from 0.23.37 to 0.23.40

Commits

b44c09f Prepare 0.23.40
e7a555f Prefer Ord::max to core::cmp
c0005be ech: base inner name padding on actual extension
4e49529 ech: test inner name padding
3e06ef1 ech: add both name and "gross" padding
c574ffd ech: avoid short-lived allocation for padding
8bf935c ech: pop comment from match arm
9088004 ech: expand maximum_name_length to usize ASAP
a612901 Default require_ems based on CryptoProvider FIPS status
0541605 Cargo: version 0.23.38 -> 0.23.39
Additional commits viewable in compare view

Updates webpki-roots from 1.0.6 to 1.0.8

Release notes

Sourced from webpki-roots's releases.

1.0.8

Remove SecureSign Root CA12 root; see https://bugzilla.mozilla.org/show_bug.cgi?id=2031105

What's Changed

Test MSRV with 1.70 by @ctz in rustls/webpki-roots#122

Take semver-compatible dependency updates by @djc in rustls/webpki-roots#123

1.0.8: remove SecureSign Root CA12 root by @ctz in rustls/webpki-roots#124

Full Changelog: rustls/webpki-roots@v/1.0.7...v/1.0.8

1.0.7

For their April 2026 root store changes, Mozilla has made more changes than usual:

These changes are part of Mozilla’s ongoing root store maintenance under the Mozilla Root Store Policy (MRSP), including §7.4 (Root CA Lifecycles) and §7.5.3 (Transition Plans). They reflect a combination of lifecycle-based transitions, CA operator requests, and alignment with intended certificate usage, including retiring older or less suitable root certificates, enforcing clear separation of trust purposes (e.g., TLS vs. S/MIME), and reducing unnecessary trust surface in the Web PKI ecosystem. Collectively, these actions help to ensure that root certificates are relied upon only for their intended and actively maintained use cases, or are retired in accordance with established distrust timelines.

This removes:

CN=Certigna O=Dhimyotis

CN=COMODO Certification Authority O=COMODO CA Limited

CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com

CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com

CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com

CN=FIRMAPROFESIONAL CA ROOT-A WEB O=Firmaprofesional SA

CN=GTS Root R2 O=Google Trust Services LLC

CN=QuoVadis Root CA 2 O=QuoVadis Limited

CN=QuoVadis Root CA 3 O=QuoVadis Limited

CN=Secure Global CA O=SecureTrust Corporation

CN=SecureTrust CA O=SecureTrust Corporation

CN=SwissSign Gold CA - G2 O=SwissSign AG

CN=TeliaSonera Root CA v1 O=TeliaSonera

CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc.

CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc.

CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc.

O=certSIGN OU=certSIGN ROOT CA

See their announcement for more details.

What's Changed

Take semver-compatible dependency updates by @djc in rustls/webpki-roots#116

Take semver-compatible dependency updates by @djc in rustls/webpki-roots#117

Take semver-compatible updates by @ctz in rustls/webpki-roots#118

Prepare 1.0.7 by @djc in rustls/webpki-roots#120

Update dependencies by @djc in rustls/webpki-roots#119

Full Changelog: rustls/webpki-roots@v/1.0.6...v/1.0.7

Commits

50729cd 1.0.8: remove SecureSign Root CA12 root (#124)
c965c54 Take semver-compatible dependency updates (#123)
a83a3c9 Move MSRV to 1.70 (#122)
be94846 Update dependencies (#119)
76476f9 Prepare 1.0.7 (#120)
ed392f4 Take semver-compatible updates (#118)
ec8b744 Take semver-compatible dependency updates (#117)
84a0c23 Take semver-compatible dependency updates (#116)
See full diff in compare view

Updates hyper from 1.9.0 to 1.10.1

Release notes

Sourced from hyper's releases.

v1.10.1

What's Changed

fix(http1): fix busy loop when peer half-closes and open body by @seanmonstar in hyperium/hyper#4086

Full Changelog: hyperium/hyper@v1.10.0...v1.10.1

v1.10.0

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Refactors, chores, et al

fix(http1): fix rare missed write wakeup on connections v2 by @lthiery in hyperium/hyper#3988

fix(client): reading trailers shouldn't propagate NO_ERROR from early response by @ulyssa in hyperium/hyper#3998

fix(http1): fix reading large bodies on 32-bit systems by @seanmonstar in hyperium/hyper#4056

fix(http2): do not reserve capacity before body data is available by @seanmonstar in hyperium/hyper#4061

Fix two clippy lints by @jplatte in hyperium/hyper#4063

docs(client): document Drop behavior for Connection types by @lihan3238 in hyperium/hyper#4064

Add header_table_size method to server builder by @ArniDagur in hyperium/hyper#4062

feat(http2/client): expose reset_stream_duration option by @kimjune01 in hyperium/hyper#4068

fix(http1): send error when dispatcher is dropped mid-body by @seanmonstar in hyperium/hyper#4069

docs: document cancel safety for client send_request futures by @lihan3238 in hyperium/hyper#4070

docs(error): add detailed doc comments to Error query methods by @kimjune01 in hyperium/hyper#4065

refactor(lib): use a panic_if_poisoned() helper for mutexes by @seanmonstar in hyperium/hyper#4072

refactor(lib): replace unwraps with expects by @seanmonstar in hyperium/hyper#4073

docs(lib): fixup markdown and grammar in doc comments by @seanmonstar in hyperium/hyper#4074

chore(ci): fix security-audit job by @seanmonstar in hyperium/hyper#4076

chore(lib): start a strict clippy config by @seanmonstar in hyperium/hyper#4075

tests(client): fix misuse of path_and_query in CONNECT test by @seanmonstar in hyperium/hyper#4078

Removing wildcard_imports lint allowance by @Lori-Shu in hyperium/hyper#4080

Fix manual_assert lint by @xd009642 in hyperium/hyper#4079

New Contributors

@ulyssa made their first contribution in hyperium/hyper#3998

@lihan3238 made their first contribution in hyperium/hyper#4064

@ArniDagur made their first contribution in hyperium/hyper#4062

@kimjune01 made their first contribution in hyperium/hyper#4068

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.10.1 (2026-05-29)

Bug Fixes

http1: fix busy loop when peer half-closes and open body (#4086) (c6cb906f, closes #4085)

v1.10.0 (2026-05-27)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Commits

e3bcd37 v1.10.1
c6cb906 fix(http1): fix busy loop when peer half-closes and open body (#4086)
54e8511 v1.10.0
79dbab6 style(ext): fix manual_assert lint (#4079)
cca6bf1 style(client): removing wildcard_imports lint allowance (#4080)
3cc1158 test(client): fix misuse of path_and_query in CONNECT test (#4078)
cad38b7 chore(lib): start a strict clippy config (#4075)
7bb1d03 chore(ci): fix security-audit job (#4076)
5dbcae7 docs(lib): fixup markdown and grammar in doc comments (#4074)
08ef365 refactor(lib): replace unwraps with expects (#4073)
Additional commits viewable in compare view

Updates uuid from 1.23.0 to 1.23.3

Release notes

Sourced from uuid's releases.

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

Improve error messages for ambiguous formats by @KodrAus in uuid-rs/uuid#882

Prepare for 1.23.2 release by @KodrAus in uuid-rs/uuid#883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

v1.23.1

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in uuid-rs/uuid#877

fix: Timestamp::from_gregorian deprecation note by @aznashwan in uuid-rs/uuid#878

Prepare for 1.23.1 release by @KodrAus in uuid-rs/uuid#879

New Contributors

@guybedford made their first contribution in uuid-rs/uuid#877

@aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

Commits

20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
62232ca prepare for 1.23.3 release
2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
2d034d4 fix some invalid indexers on error reporting
a8b9f14 update fuzz infra and run in CI
d119657 Merge pull request #883 from uuid-rs/cargo/v1.23.2
0651cfc prepare for 1.23.2 release
e8dea0c Merge pull request #882 from uuid-rs/fix/error-msgs
bdc429a fix up serde messages
d4342e4 make indexes 0 based and fix up more error messages
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-minor group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.0` | | [indexmap](https://github.com/indexmap-rs/indexmap) | `2.13.1` | `2.14.0` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [rustls](https://github.com/rustls/rustls) | `0.23.37` | `0.23.40` | | [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.6` | `1.0.8` | | [hyper](https://github.com/hyperium/hyper) | `1.9.0` | `1.10.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.23.3` | Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `bytes` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.0) Updates `indexmap` from 2.13.1 to 2.14.0 - [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.13.1...2.14.0) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `rustls` from 0.23.37 to 0.23.40 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.37...v/0.23.40) Updates `webpki-roots` from 1.0.6 to 1.0.8 - [Release notes](https://github.com/rustls/webpki-roots/releases) - [Commits](rustls/webpki-roots@v/1.0.6...v/1.0.8) Updates `hyper` from 1.9.0 to 1.10.1 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.9.0...v1.10.1) Updates `uuid` from 1.23.0 to 1.23.3 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.0...v1.23.3) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: bytes dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor - dependency-name: indexmap dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: rustls dependency-version: 0.23.40 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: webpki-roots dependency-version: 1.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: hyper dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor - dependency-name: uuid dependency-version: 1.23.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-22T12:37:38Z

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-06-29T12:37:07Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot closed this Jun 29, 2026

dependabot Bot deleted the dependabot/cargo/rust-minor-2f49ac7ade branch June 29, 2026 12:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the rust-minor group across 1 directory with 8 updates#118

deps: bump the rust-minor group across 1 directory with 8 updates#118
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-2f49ac7ade

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.0.150

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

2.14.0 (2026-04-09)

0.4.45

What's Changed

1.0.8

What's Changed

1.0.7

What's Changed

v1.10.1

What's Changed

v1.10.0

Features

Bug Fixes

Refactors, chores, et al

New Contributors

v1.10.1 (2026-05-29)

Bug Fixes

v1.10.0 (2026-05-27)

Bug Fixes

Features

v1.23.3

What's Changed

v1.23.2

What's Changed

v1.23.1

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading