Skip to content

deps(deps): bump the minor-and-patch group with 10 updates - #57

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-and-patch-e8795b53c1
Open

deps(deps): bump the minor-and-patch group with 10 updates#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-and-patch-e8795b53c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown

Bumps the minor-and-patch group with 10 updates:

Package From To
tokio 1.52.3 1.53.1
futures-util 0.3.32 0.3.33
async-trait 0.1.89 0.1.91
serde 1.0.228 1.0.229
serde_json 1.0.149 1.0.151
borsh 1.6.1 1.8.0
zeroize 1.8.2 1.9.0
ruint 1.18.0 1.19.0
thiserror 2.0.18 2.0.19
anyhow 1.0.102 1.0.104

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

Updates futures-util from 0.3.32 to 0.3.33

Release notes

Sourced from futures-util's releases.

0.3.33

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Changelog

Sourced from futures-util's changelog.

0.3.33 - 2026-07-18

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Commits
  • 89cc254 Release 0.3.33
  • cd9f5be ci: Update release workflow
  • d79a499 Resolve rustdoc::broken_intra_doc_links warning
  • 95bbcf8 Resolve rustdoc ambiguous link error
  • 303c165 Resolve rustdoc::redundant_explicit_links warning
  • f34e3f5 ci: Cleanup
  • 66591a2 Enable Miri for more tests
  • ab1072f Simplify target_has_atomic cfg in utility crates
  • cf5d23b Fix unsound compat01as03 implementation (fixes #2514) (#3012)
  • 8ae794f Add portable-atomic-alloc feature and use it in FuturesUnordered (#3007)
  • Additional commits viewable in compare view

Updates async-trait from 0.1.89 to 0.1.91

Release notes

Sourced from async-trait's releases.

0.1.91

  • Update to syn 3 (#299)
  • Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits
  • d049ee0 Release 0.1.91
  • 7a0961f Merge pull request #301 from dtolnay/mutability
  • 740f86f Ignore mut_mut pedantic clippy lint in test
  • 4699cd3 Fix mutability for by-reference receivers
  • 6dd3573 Add regression test for issue 300
  • 2371797 Release 0.1.90
  • d03f075 Merge pull request #299 from dtolnay/syn3
  • 6cf42c1 Update to syn 3
  • b9daaba Ignore match_same_arms pedantic clippy lint
  • aa706d1 Update actions/upload-artifact@v6 -> v7
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

v1.0.150

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • Additional commits viewable in compare view

Updates borsh from 1.6.1 to 1.8.0

Release notes

Sourced from borsh's releases.

borsh-derive-v1.8.0

No release notes provided.

borsh-v1.8.0

Added

  • merge multiple #[borsh(...)] attributes instead of rejecting them (#373)

Changed

  • merge multiple #[borsh(...)] attributes instead of rejecting them (#373)

borsh-derive-v1.7.0

No release notes provided.

borsh-v1.7.0

Added

  • impl BorshSerialize and BorshDeserialize for Uuid (#366)

Fixed

  • handle PhantomData in enum schema derive (#369)

Other

  • cover schema predicate bounds referencing filtered enum params (#372)
  • fix the build on current toolchains (#368)
Changelog

Sourced from borsh's changelog.

1.8.0 - 2026-07-16

Added

  • merge multiple #[borsh(...)] attributes instead of rejecting them (#373)

Changed

  • merge multiple #[borsh(...)] attributes instead of rejecting them (#373)

1.7.0 - 2026-06-17

Added

  • impl BorshSerialize and BorshDeserialize for Uuid (#366)

Fixed

  • handle PhantomData in enum schema derive (#369)

Other

  • cover schema predicate bounds referencing filtered enum params (#372)
  • fix the build on current toolchains (#368)
Commits
  • 7fc21fe chore: release v1.8.0 (#375)
  • 09bae9b feat: merge multiple #[borsh(...)] attributes instead of rejecting them (#373)
  • 3348776 chore: release v1.7.0 (#370)
  • 9e48f60 test: cover schema predicate bounds referencing filtered enum params (#372)
  • 1133023 fix: handle PhantomData in enum schema derive (#369)
  • b53e108 ci: use org-level NEARPROTOCOL_CI_PR_ACCESS token for release-plz (#371)
  • 47e132f feat: impl BorshSerialize and BorshDeserialize for Uuid (#366)
  • aa2e794 ci: fix the build on current toolchains (#368)
  • See full diff in compare view

Updates zeroize from 1.8.2 to 1.9.0

Commits

Updates ruint from 1.18.0 to 1.19.0

Release notes

Sourced from ruint's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: alloy-rs/ruint@v1.18.0...v1.19.0

Changelog

Sourced from ruint's changelog.

[1.19.0] - 2026-07-03

Added

  • strict_* arithmetic operations (#595)
  • ark-ff-06 feature flag for conversion to ark-ff@0.6 types (#584)

Changed

  • Made from_str_radix const (#591)
  • Made multiplication functions const (#590)
  • Optimize Ord::cmp by comparing via subtraction (#579)
  • Optimize bit count helpers (leading/trailing zeros, count ones) (#578)
  • Optimize shift implementations (#574)

Fixed

  • Fix to_be_bytes on big-endian platforms (#576)

#595: alloy-rs/ruint#595 #591: alloy-rs/ruint#591 #590: alloy-rs/ruint#590 #584: alloy-rs/ruint#584 #579: alloy-rs/ruint#579 #578: alloy-rs/ruint#578 #576: alloy-rs/ruint#576 #574: alloy-rs/ruint#574

Commits

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

  • Update to syn 3
Commits
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
  • c50e387 chore: improve thiserror maintenance path
  • d4a2507 Raise minimum tested compiler to rust 1.85
  • 99e8a6c Unpin CI miri toolchain
  • 9ac165c Pin CI miri to nightly-2026-02-11
  • Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 1dbe186 Release 1.0.104
  • f6479f8 Update to syn 3
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(deps): bump the minor-and-patch group with 10 updates
3db98b9 
Bumps the minor-and-patch group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.91` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` |
| [borsh](https://github.com/near/borsh-rs) | `1.6.1` | `1.8.0` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` |
| [ruint](https://github.com/alloy-rs/ruint) | `1.18.0` | `1.19.0` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` |


Updates `tokio` from 1.52.3 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

Updates `futures-util` from 0.3.32 to 0.3.33
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.33)

Updates `async-trait` from 0.1.89 to 0.1.91
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.91)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.149 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.151)

Updates `borsh` from 1.6.1 to 1.8.0
- [Release notes](https://github.com/near/borsh-rs/releases)
- [Changelog](https://github.com/near/borsh-rs/blob/master/CHANGELOG.md)
- [Commits](near/borsh-rs@borsh-v1.6.1...borsh-v1.8.0)

Updates `zeroize` from 1.8.2 to 1.9.0
- [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0)

Updates `ruint` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/alloy-rs/ruint/releases)
- [Changelog](https://github.com/alloy-rs/ruint/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/ruint@v1.18.0...v1.19.0)

Updates `thiserror` from 2.0.18 to 2.0.19
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.19)

Updates `anyhow` from 1.0.102 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.104)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: futures-util
  dependency-version: 0.3.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: async-trait
  dependency-version: 0.1.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: borsh
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: zeroize
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ruint
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants