Skip to content

chore(deps): bump the rust-deps group with 9 updates#285

Merged
pratyush618 merged 1 commit into
masterfrom
dependabot/cargo/rust-deps-8e42fcf7a4
Jun 25, 2026
Merged

chore(deps): bump the rust-deps group with 9 updates#285
pratyush618 merged 1 commit into
masterfrom
dependabot/cargo/rust-deps-8e42fcf7a4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-deps group with 9 updates:

Package From To
diesel 2.3.8 2.3.10
uuid 1.21.0 1.23.3
tokio 1.49.0 1.50.0
serde_json 1.0.149 1.0.150
chrono 0.4.44 0.4.45
log 0.4.29 0.4.33
redis 1.2.0 1.2.4
openssl-sys 0.9.111 0.9.117
tempfile 3.25.0 3.27.0

Updates diesel from 2.3.8 to 2.3.10

Changelog

Sourced from diesel's changelog.

[2.3.10] 2026-06-05

  • Fixed a wrong value of a internal MYSQL flag
  • Fixed several possible panics in the PostgreSQL deserialization code for malformed packages in the
  • Fixed an issue that caused unexpected results while calling custom aggregated SQL functions twice in the SQLite backend
  • Fixed a potential use after free bug in the SQLite backend while deserializing a database from a byte buffer
  • Fixed potential invalid schema generation if column or table names "inject" rust code
  • Fixed potential SQL injections during schema introspection via diesel print-schema
  • Fixed a regression that resulted in rejecting valid combinations of ORDER BY and GROUP BY clauses

[2.3.9] 2026-04-30

  • Removed a dbg! statement from the Mysql backend that caused unwanted output
  • Fix a regression in #[derive(AsChangeset)] introduced in 2.3.8 where structs with a type or const generic parameter referenced in a field type failed to compile with error[E0425]: cannot find type 'T' in this scope. The diagnostic helper functions added to improve AsChangeset error messages now forward all generic parameters of the input struct, not only lifetimes.
Commits
  • 7b4f888 Merge pull request #5067 from weiznich/prepare_2.3.10
  • bdc40a1 Prepare a 2.3.10 release
  • ad149aa Merge pull request #5059 from ayarotsky/fix-order-and-group
  • 5a5b6a8 Merge pull request #5064 from weiznich/bump/rust_1.96
  • a535124 Merge pull request #5056 from weiznich/even_fix_more_issues
  • 207391c Merge pull request #5054 from weiznich/fix_more_issues
  • 60b9d3a Merge pull request #5051 from weiznich/new_sponsor
  • 2e7eb35 Also bump derives version
  • b3a16a3 Merge pull request #5046 from apastrana6/ap/fix-derive-as-changeset
  • 9f0a6c1 Prepare a 2.3.9 release
  • Additional commits viewable in compare view

Updates uuid from 1.21.0 to 1.23.3

Release notes

Sourced from uuid's releases.

v1.23.3

What's Changed

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

v1.23.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

v1.23.0

What's Changed

New Contributors

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

  • Context: Renamed to ContextV1
  • Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

... (truncated)

Commits
  • 20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
  • 62232ca prepare for 1.23.3 release
  • 2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
  • 2d034d4 fix some invalid indexers on error reporting
  • a8b9f14 update fuzz infra and run in CI
  • d119657 Merge pull request #883 from uuid-rs/cargo/v1.23.2
  • 0651cfc prepare for 1.23.2 release
  • e8dea0c Merge pull request #882 from uuid-rs/fix/error-msgs
  • bdc429a fix up serde messages
  • d4342e4 make indexes 0 based and fix up more error messages
  • Additional commits viewable in compare view

Updates tokio from 1.49.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

Fixed

  • io: always cleanup AsyncFd registration list on deregister (#7773)
  • macros: remove (most) local use declarations in tokio::select! (#7929)
  • net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
  • runtime: avoid redundant unpark in current_thread scheduler (#7834)
  • runtime: don't park in current_thread if before_park defers waker (#7835)
  • io: fix write readiness on ESP32 on short writes (#7872)
  • runtime: wake deferred tasks before entering block_in_place (#7879)
  • sync: drop rx waker when oneshot receiver is dropped (#7886)
  • runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

  • fs: check for io-uring opcode support (#7815)
  • runtime: avoid lock acquisition after uring init (#7850)

Documented

  • docs: update outdated unstable features section (#7839)
  • io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
  • io: explain how to flush stdout/stderr (#7904)
  • io: fix incorrect and confusing AsyncWrite documentation (#7875)
  • rt: clarify the documentation of Runtime::spawn (#7803)
  • rt: fix missing quotation in docs (#7925)
  • runtime: correct the default thread name in docs (#7896)
  • runtime: fix event_interval doc (#7932)
  • sync: clarify RwLock fairness documentation (#7919)
  • sync: clarify that recv returns None once closed and no more messages (#7920)
  • task: clarify when to use spawn_blocking vs dedicated threads (#7923)
  • task: doc that task drops before JoinHandle completion (#7825)
  • signal: guarantee that listeners never return None (#7869)
  • task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Commits
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • dc8003a Raise required compiler for preserve_order feature to 1.85
  • a42fa98 Unpin CI miri toolchain
  • 684a60e Pin CI miri to nightly-2026-02-11
  • 7c7da33 Raise required compiler to Rust 1.71
  • acf4850 Simplify Number::is_f64
  • 6b8ceab Resolve unnecessary_map_or clippy lint
  • Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

Commits
  • 1703382 Prepare 0.4.45 release
  • 881f9ab tz_data: fix tzdata locations on Android
  • f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
  • c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
  • 120686c Bump codecov/codecov-action from 5 to 6
  • See full diff in compare view

Updates log from 0.4.29 to 0.4.33

Release notes

Sourced from log's releases.

0.4.32

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

0.4.30

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

Changelog

Sourced from log's changelog.

[0.4.33] - 2026-06-20

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.32...0.4.33

[0.4.32] - 2026-06-04

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

Commits
  • f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
  • 6a24abf prepare for 0.4.33 release
  • 87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
  • a9b5711 Review: fallback to the &str hash
  • cc89cc6 Review: fixed other comparisons
  • 920e7dc Review: fixed comparison on MaybeStaticStr
  • 0d71d3c Fixed key comparison
  • a5b5b21 Merge pull request #730 from rust-lang/cargo/0.4.32
  • c8d3b12 prepare for 0.4.32 release
  • ce6cd9f Merge pull request #729 from tisonkun/kv-std-support
  • Additional commits viewable in compare view

Updates redis from 1.2.0 to 1.2.4

Release notes

Sourced from redis's releases.

redis-1.2.4

Changes & Bug fixes

  • cluster: refresh topology and retry on READONLY errors (#2115 by @​alexcole)
  • fix(aio): bound permit allocation by concurrency limit, not pipeline length (#2151 by @​Ali2Arslan)

CI & operational improvements

  • tests/cluster_async: Switch to positive version checking (Version refactor 1/8) (#2138 by @​somechris)
  • tests/basic: Switch version checks to constant (Version refactor 2/8) (#2139 by @​somechris)
  • tests: Split off version code into dedicated module (Version refactor 3/10) (#2140 by @​somechris)
  • tests/version: Add TestClusterVersioning trait for version handling (Version refactor 4/10) (#2141 by @​somechris)
  • tests: Delegate version comparison to TestClusterVersioning (Version refactor 5/10) (#2142 by @​somechris)
  • tests/version: Require ownership to check version support (Version refactor 5b/10) (#2152 by @​somechris)
  • tests: Use server binary from env to detect major version (#2149 by @​somechris)

New Contributors

Full Changelog: redis-rs/redis-rs@redis-1.2.3...redis-1.2.4

redis-1.2.3

Changes & Bug fixes

CI & operational improvements

New Contributors

Full Changelog: redis-rs/redis-rs@redis-1.2.2...redis-1.2.3

redis-1.2.2

What's Changed

... (truncated)

Commits
  • dc54e0f Prepare version 1.2.4 (#2156)
  • 452151b fix(aio): bound permit allocation by concurrency limit, not pipeline length (...
  • b7f7cfe tests: Use server binary from env to detect major version (#2149)
  • b0d64c5 tests/version: Require ownership to check version support (#2152)
  • 33454be tests: Delegate version comparison to TestClusterVersioning (#2142)
  • de53d08 tests/version: Add TestClusterVersioning trait for version handling (#2141)
  • 8bb49b4 tests: Split off version code into dedicated module (#2140)
  • 7e38aff cluster: refresh topology and retry on READONLY errors (#2115)
  • a337eb8 tests/basic: Switch version checks to constant (Version refactor 2/8) (#2139)
  • e8fa101 tests/cluster_async: Switch to positive version checking (#2138)
  • Additional commits viewable in compare view

Updates openssl-sys from 0.9.111 to 0.9.117

Release notes

Sourced from openssl-sys's releases.

openssl-sys-v0.9.117

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.116...openssl-sys-v0.9.117

openssl-sys-v0.9.116

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.115...openssl-sys-v0.9.116

openssl-sys-v0.9.115

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.114...openssl-sys-v0.9.115

... (truncated)

Commits
  • db9c9e2 Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)
  • 3a7fb56 Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)
  • d059c43 Fix verify_mode() panic on unmodeled verify mode bits (#2651)
  • 8b1519e Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)
  • d5713d6 add mldsa.h to the boringssl bindgen (#2650)
  • 9fac317 Merge pull request #2538 from ocdlroux/feat/crl-full
  • 4dae20b x509: adding minimal support for X509CrlBuilder
  • 47f7777 Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)
  • 659da17 Bump aws-ls-sys to 0.41 (#2640)
  • 35be7ae Release openssl 0.10.80 and openssl-sys 0.9.116 (#2639)
  • Additional commits viewable in compare view

Updates tempfile from 3.25.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

3.26.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust labels Jun 22, 2026
@pratyush618

pratyush618 commented Jun 24, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@pratyush618

pratyush618 commented Jun 25, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@dependabot @pratyush618
chore(deps): bump the rust-deps group with 9 updates
45e02d6 
Bumps the rust-deps group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [diesel](https://github.com/diesel-rs/diesel) | `2.3.8` | `2.3.10` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.23.3` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |
| [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.33` |
| [redis](https://github.com/redis-rs/redis-rs) | `1.2.0` | `1.2.4` |
| [openssl-sys](https://github.com/rust-openssl/rust-openssl) | `0.9.111` | `0.9.117` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.25.0` | `3.27.0` |


Updates `diesel` from 2.3.8 to 2.3.10
- [Release notes](https://github.com/diesel-rs/diesel/releases)
- [Changelog](https://github.com/diesel-rs/diesel/blob/main/CHANGELOG.md)
- [Commits](diesel-rs/diesel@v2.3.8...v2.3.10)

Updates `uuid` from 1.21.0 to 1.23.3
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.21.0...v1.23.3)

Updates `tokio` from 1.49.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0)

Updates `serde_json` from 1.0.149 to 1.0.150
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.150)

Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.44...v0.4.45)

Updates `log` from 0.4.29 to 0.4.33
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.29...0.4.33)

Updates `redis` from 1.2.0 to 1.2.4
- [Release notes](https://github.com/redis-rs/redis-rs/releases)
- [Commits](redis-rs/redis-rs@redis-1.2.0...redis-1.2.4)

Updates `openssl-sys` from 0.9.111 to 0.9.117
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-sys-v0.9.111...openssl-sys-v0.9.117)

Updates `tempfile` from 3.25.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits/v3.27.0)

---
updated-dependencies:
- dependency-name: diesel
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: uuid
  dependency-version: 1.23.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: log
  dependency-version: 0.4.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: redis
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: openssl-sys
  dependency-version: 0.9.117
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@pratyush618
pratyush618 force-pushed the dependabot/cargo/rust-deps-8e42fcf7a4 branch from 9bbf1e8 to 45e02d6 Compare June 25, 2026 14:05
@pratyush618
pratyush618 merged commit 1dbe314 into master Jun 25, 2026
21 checks passed
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-deps-8e42fcf7a4 branch June 25, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@pratyush618