deps(rust): bump the rust-dependencies group across 1 directory with 19 updates by dependabot[bot] · Pull Request #38 · reasonkit/reasonkit-web

dependabot · 2026-05-25T05:56:18Z

Bumps the rust-dependencies group with 19 updates in the / directory:

Package	From	To
tokio	`1.49.0`	`1.50.0`
rmcp	`0.17.0`	`1.7.0`
serde_json	`1.0.149`	`1.0.150`
reqwest	`0.13.2`	`0.13.3`
tracing-subscriber	`0.3.22`	`0.3.23`
clap	`4.5.60`	`4.6.1`
scraper	`0.25.0`	`0.27.0`
html5ever	`0.36.1`	`0.39.0`
rand	`0.10.0`	`0.10.1`
axum	`0.8.8`	`0.8.9`
tower-http	`0.6.8`	`0.6.11`
hyper	`1.8.1`	`1.9.0`
metrics	`0.24.3`	`0.24.6`
uuid	`1.21.0`	`1.23.1`
sysinfo	`0.38.2`	`0.39.2`
hmac	`0.12.1`	`0.13.0`
sha2	`0.10.9`	`0.11.0`
proptest	`1.10.0`	`1.11.0`
wasm-bindgen-test	`0.3.64`	`0.3.72`

Updates tokio from 1.49.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

net: add TcpStream::set_zero_linger (#7837)

rt: add is_rt_shutdown_err (#7771)

Changed

io: add optimizer hint that memchr returns in-bounds pointer (#7792)

io: implement vectored writes for write_buf (#7871)

runtime: panic when event_interval is set to 0 (#7838)

runtime: shorten default thread name to fit in Linux limit (#7880)

signal: remember the result of SetConsoleCtrlHandler (#7833)

signal: specialize windows Registry (#7885)

Fixed

io: always cleanup AsyncFd registration list on deregister (#7773)

macros: remove (most) local use declarations in tokio::select! (#7929)

net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)

runtime: avoid redundant unpark in current_thread scheduler (#7834)

runtime: don't park in current_thread if before_park defers waker (#7835)

io: fix write readiness on ESP32 on short writes (#7872)

runtime: wake deferred tasks before entering block_in_place (#7879)

sync: drop rx waker when oneshot receiver is dropped (#7886)

runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

fs: check for io-uring opcode support (#7815)

runtime: avoid lock acquisition after uring init (#7850)

Documented

docs: update outdated unstable features section (#7839)

io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)

io: explain how to flush stdout/stderr (#7904)

io: fix incorrect and confusing AsyncWrite documentation (#7875)

rt: clarify the documentation of Runtime::spawn (#7803)

rt: fix missing quotation in docs (#7925)

runtime: correct the default thread name in docs (#7896)

runtime: fix event_interval doc (#7932)

sync: clarify RwLock fairness documentation (#7919)

sync: clarify that recv returns None once closed and no more messages (#7920)

task: clarify when to use spawn_blocking vs dedicated threads (#7923)

task: doc that task drops before JoinHandle completion (#7825)

signal: guarantee that listeners never return None (#7869)

task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

0273e45 chore: prepare Tokio v1.50.0 (#7934)
e3ee4e5 chore: prepare tokio-macros v2.6.1 (#7943)
8c980ea io: add write_all_vectored to tokio-util (#7768)
e35fd6d ci: fix patch during clippy step (#7935)
03fe44c runtime: fix event_interval doc (#7932)
d18e5df io: fix race in Mock::poll_write (#7882)
f21f269 runtime: fix race condition during the blocking pool shutdown (#7922)
d81e8f0 macros: remove (most) local use declarations in tokio::select! (#7929)
25e7f26 rt: fix missing quotation in docs (#7925)
e1a91ef util: fix typo in docs (#7926)
Additional commits viewable in compare view

Updates rmcp from 0.17.0 to 1.7.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.7.0

Added

add task-based stdio examples (#839)

rmcp-v1.7.0

Added

add task-based stdio examples (#839)

Fixed

(rmcp) flatten Resource variant of PromptMessageContent (#843)

reply -32700 on stdio parse errors instead of closing (#833)

Other

(rmcp) remove dependency on chrono default features (#829)

Fix/issue 817 idle timeout log level (#824)

rmcp-macros-v1.6.0

Fixed

(docs) use correct Parameters syntax in tool examples (#814)

Other

add systemprompt-template to Built with rmcp (#820)

rmcp-v1.6.0

Added

(http) log Host/Origin rejections (#826)

(http) add Origin header validation (#823)

(router) support runtime disabling of tools (#809)

optional session store (resumabillity support) (#775)

Fixed

add init_timeout for streamable-http sessions (#811)

(http) fall back to :authority for HTTP/2 (#827)

(docs) use correct Parameters syntax in tool examples (#814)

Other

add systemprompt-template to Built with rmcp (#820)

rmcp-macros-v1.5.0

Fixed

... (truncated)

Commits

3529c36 chore: release v1.6.1 (#831)
d695046 fix: enable task support on counter long_task example (#838)
5ccdfc0 feat: add task-based stdio examples (#839)
d83b156 fix(rmcp): flatten Resource variant of PromptMessageContent (#843)
321ab14 fix: reply -32700 on stdio parse errors instead of closing (#833)
0f776ab chore(rmcp): remove dependency on chrono default features (#829)
3bf5298 ci: extend semver check to all features except local (#832)
88df9af chore(deps): update askama requirement from 0.15 to 0.16 (#830)
2f8d3b7 Fix/issue 817 idle timeout log level (#824)
014fb2e chore: release v1.6.0 (#818)
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates reqwest from 0.13.2 to 0.13.3

Release notes

Sourced from reqwest's releases.

v0.13.3

tl;dr

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

Update docs.rs Features by @JamesWiresmith in seanmonstar/reqwest#2961

fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @monosans in seanmonstar/reqwest#2797

fix: remove timeout con by @cuiweixie in seanmonstar/reqwest#2967

http3: handle stop_sending without error by @anuraaga in seanmonstar/reqwest#2978

resolve: debug log to change only host by @lms0806 in seanmonstar/reqwest#2992

Edit reference link by @lms0806 in seanmonstar/reqwest#2996

docs: more accurate about default HTTP2 window sizes by @seanmonstar in seanmonstar/reqwest#3007

[HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 by @lyuzichong in seanmonstar/reqwest#3006

Upgrade rustls-platform-verifier by @jplatte in seanmonstar/reqwest#3010

use wasm-bindgen ecosystem only for wasm32-unknown-* target by @Ludea in seanmonstar/reqwest#3000

fix rustls crl pem parsing by @Threated in seanmonstar/reqwest#3013

docs(retry): include ReqRep in docsrs by @seanmonstar in seanmonstar/reqwest#3020

New Contributors

@JamesWiresmith made their first contribution in seanmonstar/reqwest#2961

@monosans made their first contribution in seanmonstar/reqwest#2797

@cuiweixie made their first contribution in seanmonstar/reqwest#2967

@anuraaga made their first contribution in seanmonstar/reqwest#2978

@lms0806 made their first contribution in seanmonstar/reqwest#2992

@lyuzichong made their first contribution in seanmonstar/reqwest#3006

@Ludea made their first contribution in seanmonstar/reqwest#3000

Full Changelog: seanmonstar/reqwest@v0.13.2...v0.13.3

Changelog

Sourced from reqwest's changelog.

v0.13.3

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

Commits

a9a88c4 v0.13.3
f3f6d9d docs(retry): include ReqRep in docsrs (#3020)
5f9c231 fix rustls CRL PEM parsing (#3013)
11d835d use wasm-bindgen ecosystem only for wasm32-unknown-* target (#3000)
1f72916 Upgrade rustls-platform-verifier (#3010)
5d5bf35 [HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 (#3006)
93dc1b2 docs: more accurate about default HTTP2 window sizes (#3007)
c5e50f0 docs: update outdated link in comments
b25611f resolve: debug log to change only host (#2992)
ca1f479 http3: handle stop_sending without error (#2978)
Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

54ede4d chore: prepare tracing-subscriber 0.3.23 (#3490)
37558d5 subscriber: allow ansi sanitization to be disabled (#3484)
efc690f core: add missing const (#3449)
0c32367 core: Use const initializers instead of once_cell
9feb241 docs: add arcswap reload crate to related (#3442)
2d55f6f chore: prepare tracing 0.1.44 (#3439)
10a9e83 chore: prepare tracing-core 0.1.36 (#3440)
ee82cf9 tracing: fix record_all panic (#3432)
9978c36 chore: prepare tracing-mock 0.1.0-beta.3 (#3429)
See full diff in compare view

Updates clap from 4.5.60 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

Update dependencies

Commits

1420275 chore: Release
d2c817d docs: Update changelog
f88c94e Merge pull request #6341 from epage/sep
acbb822 fix(complete): Reduce risk of conflict with actual subcommands
a49fadb refactor(complete): Pull out subcommand separator
ddc008b Merge pull request #6332 from epage/update
497dc50 chore: Update compatible dependencies
dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
54bdaa3 chore(deps): Update j178/prek-action action to v2
f0d30d9 chore: Release
Additional commits viewable in compare view

Updates scraper from 0.25.0 to 0.27.0

Release notes

Sourced from scraper's releases.

v0.27.0

What's Changed

Bump dependencies including selectors and cssparser.

Avoid exposing optional dependencies as implicit features.

Full Changelog: rust-scraper/scraper@v0.26.0...v0.27.0

v0.26.0

What's Changed

fix dom manipulation example by @JayceFayne in rust-scraper/scraper#292

Bump selectors from 0.33.0 to 0.35.0 by @dependabot[bot] in rust-scraper/scraper#298

Bump indexmap from 2.12.1 to 2.13.0 by @dependabot[bot] in rust-scraper/scraper#294

Upgrade ego-tree to 0.11.0 and html5ever to 0.37.1 by @cfvescovo in rust-scraper/scraper#300

Bump html5ever from 0.37.1 to 0.38.0 by @mohe2015 in rust-scraper/scraper#303

Bump selectors from 0.35.0 to 0.36.0 by @dependabot[bot] in rust-scraper/scraper#307

Bump html5ever from 0.38.0 to 0.39.0 by @dependabot[bot] in rust-scraper/scraper#308

Version 0.26.0 by @adamreichold in rust-scraper/scraper#306

New Contributors

@JayceFayne made their first contribution in rust-scraper/scraper#292

Full Changelog: rust-scraper/scraper@v0.25.0...v0.26.0

Commits

9c1eff3 Bump selectors and cssparser together.
429d8a1 Avoid exposing optional dependencies as implicit features.
8038521 Add categories as suggested by lib.rs maintainer dashboard.
f2d0e50 Bump selectors from 0.36.1 to 0.37.0
2103564 Bump indexmap from 2.13.1 to 2.14.0
57ebae6 Bump selectors from 0.36.0 to 0.36.1
d935dee Bump indexmap from 2.13.0 to 2.13.1
170cdd3 Merge pull request #306 from rust-scraper/bump
bca1839 Bump html5ever from 0.38.0 to 0.39.0
d07444e Bump selectors from 0.35.0 to 0.36.0 (#307)
Additional commits viewable in compare view

Updates html5ever from 0.36.1 to 0.39.0

Commits

See full diff in compare view

Updates rand from 0.10.0 to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

Document panic behavior of make_rng and add #[track_caller] (#1761)

Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

Commits

27ff4cb Prepare v0.10.1: deprecate feature log (#1763)
98d0638 make_rng: document panic and add #[track_caller] (#1761)
54e5eaa Fix doc error (#1758)
1ce4c08 Bump itoa from 1.0.17 to 1.0.18 in the all-deps group (#1756)
ccb734b docs: fix typo in doc comment (#1754)
357eb7d Bump libc from 0.2.182 to 0.2.183 in the all-deps group (#1753)
5e77fe5 Fix trait references in documentation (#1752)
da89185 Bump the all-deps group with 3 updates (#1751)
50516ff Bump the all-deps group with 2 updates (#1749)
fd71de9 Bump the all-deps group with 2 updates (#1747)
Additional commits viewable in compare view

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)

changed: Update minimum rust version to 1.80 (#3620)

fixed: Set connect endpoint on correct field in MethodRouter (#3656)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates tower-http from 0.6.8 to 0.6.11

Release notes

Sourced from tower-http's releases.

tower-http-0.6.11

Added
set-header: add SetMultipleResponseHeadersLayer and SetMultipleResponseHeader for setting multiple response headers at once. Supports overriding, appending, and if_not_present modes. Header values can be fixed or computed dynamically via closures (#672)
use http::{Response, header::{self, HeaderValue}};
use http_body::Body as _;
use tower_http::set_header::response::SetMultipleResponseHeadersLayer;
let layer = SetMultipleResponseHeadersLayer::overriding(vec![
(header::X_FRAME_OPTIONS, HeaderValue::from_static("DENY")).into(),
(header::CONTENT_LENGTH, |res: &Response<MyBody>| {
res.body().size_hint().exact()
.map(|size| HeaderValue::from_str(&size.to_string()).unwrap())
}).into(),
]);
set-header: add SetMultipleRequestHeadersLayer and SetMultipleRequestHeaders for setting multiple request headers at once, mirroring the response-side API (#677)

classify: add From<i32> and From<NonZeroI32> impls for GrpcCode. Unrecognized status codes map to GrpcCode::Unknown (#506)
Changed

compression: compress application/grpc-web responses. Previously all application/grpc* content types were excluded from compression; now only application/grpc (non-web) is excluded (#408)

Fixed

fs: fix ServeDir returning 500 instead of 405 for non-GET/HEAD requests when call_fallback_on_method_not_allowed is enabled but no fallback service is configured (#587)

fs: remove duplicate cfg attribute on is_reserved_dos_name (#675)

#408: tower-rs/tower-http#408 #506: tower-rs/tower-http#506 #587: tower-rs/tower-http#587 #672: tower-rs/tower-http#672 #675: tower-rs/tower-http#675 #677: tower-rs/tower-http#677

All PRs

ci: fix flaky encoding test, add nightly stress test job by @jlizen in tower-rs/tower-http#670

... (truncated)

Commits

1d082ef v0.6.11
9c3117d feat: set multiple request header (#677)
667e7c7 Remove duplicate cfg attribute for is_reserved_dos_name (#675)
7551a9b feat(set_header): refactor and improve multiple header middleware (#672)
991e9ee add From<i32> impl for GrpcCode (#506)
3962dba Do compress grpc-web responses (#408)
f0b3bb6 Fix serve_dir method not allowed handling when no fallback is configured (#587)
d1a571b ci: use static timeout in stress-test workflow (#671)
309555a ci: fix flaky encoding test, add nightly stress test job (#670)
4532fc2 v0.6.10
Additional commits viewable in compare view

Updates hyper from 1.8.1 to 1.9.0

Release notes

Sourced from hyper's releases.

v1.9.0

Features

client:

expose HTTP/2 current max stream count (#4026) (d51cb715)

add HTTP/2 max_local_error_reset_streams option (#4021) (57787459)

error: add 'Error::is_parse_version_h2' method (393c77c7)

http1: add UpgradeableConnection::into_parts (e21205cf)

Bug Fixes

ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)

http1:

allow keep-alive for chunked requests with trailers (#4043) (7211ec25, closes #4044)

use case-insensitive matching for trailer fields (#4011) (3b344cac, closes #4010)

use httparse config for Servers (#4002) (bcb8ec57, closes #3923)

http2:

cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)

non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Refactors and chores

docs(error): add more information about is_incomplete_message by @seanmonstar in hyperium/hyper#3978

Run cargo-audit in CI to check for known vulnerabilities in dependencies. by @f0rki in hyperium/hyper#3246

refactor(http1): simplify match of Token parse error by @seanmonstar in hyperium/hyper#3981

refactor(http1): use saturating_sub instead of manual impl by @seanmonstar in hyperium/hyper#3983

refactor(http1): replace many args of Chunked::step with struct by @seanmonstar in hyperium/hyper#3982

docs: fix comment in put_slice() by @coryan in hyperium/hyper#3986

test(lib): fix unused warnings due to feature gating test imports by @seanmonstar in hyperium/hyper#3997

docs: improve Read trait and ReadBufCursor documentation by @majiayu000 in hyperium/hyper#4000

fix: use h1 parser config when parsing server req by @0xPoe in hyperium/hyper#4002

test(server): fix flaky disable_keep_alive_mid_request by @seanmonstar in hyperium/hyper#4009

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/hyper#4005

chore(ci): update to cargo-check-external-types 0.4.0 by @tottoto in hyperium/hyper#4006

update copyright year to 2026 by @jasmyhigh in hyperium/hyper#4007

refactor: avoid unwrap examples by @0xPoe in hyperium/hyper#4001

fix(http1): use case-insensitive matching for trailer fields by @HueCodes in hyperium/hyper#4011

chore: convert bug report template to GitHub form by @njg7194 in hyperium/hyper#4015

chore(ci): force toml mode in yq selecting msrv by @seanmonstar in hyperium/hyper#4020

fix: non-utf8 char may cause panic when calling to_str by @cuiweixie in hyperium/hyper#4019

feat(http2/client): add max_local_error_reset_streams option by @ffuugoo in hyperium/hyper#4021

chore: drop pin-utils dependency by @tottoto in hyperium/hyper#4023

[minor] doc: Fix HTTP/2 max concurrent stream link by @dentiny in hyperium/hyper#4037

fix(ffi): validate null pointers before dereferencing in request/resp… by @DhruvaD1 in hyperium/hyper#4038

h2: expose current max stream count by @howardjohn in hyperium/hyper#4026

fix(http1): allow keep-alive for chunked requests with trailers by @wi-adam in hyperium/hyper#4043

fix(http2): cancel pipe_task and send RST_STREAM on response future drop by @mmishra100 in hyperium/hyper#4042

Add APIs to allow switching an HTTP1 connection to HTTP2 if H2 preface is seen by @pborzenkov in hyperium/hyper#3996

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.9.0 (2026-03-31)

Bug Fixes

ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)

http1:

allow keep-alive for chunked requests with trailers (#4043) (7211ec25, closes #4044)

use case-insensitive matching for trailer fields (#4011) (3b344cac, closes #4010)

use httparse config for Servers (#4002) (bcb8ec57, closes #3923)

http2:

cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)

non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Features

client:

expose HTTP/2 current max stream count (#4026) (d51cb715)

add HTTP/2 max_local_error_reset_streams option (#4021) (57787459)

error: add 'Error::is_parse_version_h2' method (393c77c7)

http1: add UpgradeableConnection::into_parts (e21205cf)

Commits

0d6c7d5 v1.9.0
e21205c feat(http1): add UpgradeableConnection::into_parts
393c77c feat(error): add 'Error::is_parse_version_h2' method
5b17a69 fix(http2): cancel sending client request body on response future drop (#4042)
7211ec2 fix(http1): allow keep-alive for chunked requests with trailers (#4043)
d51cb71 feat(client): expose HTTP/2 current max stream count (#4026)
28e73cc fix(ffi): validate null pointers before dereferencing in request/response fun...Description has been truncated

…19 updates Bumps the rust-dependencies group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `0.17.0` | `1.7.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.2` | `0.13.3` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` | | [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.1` | | [scraper](https://github.com/rust-scraper/scraper) | `0.25.0` | `0.27.0` | | [html5ever](https://github.com/servo/html5ever) | `0.36.1` | `0.39.0` | | [rand](https://github.com/rust-random/rand) | `0.10.0` | `0.10.1` | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.11` | | [hyper](https://github.com/hyperium/hyper) | `1.8.1` | `1.9.0` | | [metrics](https://github.com/metrics-rs/metrics) | `0.24.3` | `0.24.6` | | [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.23.1` | | [sysinfo](https://github.com/GuillaumeGomez/sysinfo) | `0.38.2` | `0.39.2` | | [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` | | [proptest](https://github.com/proptest-rs/proptest) | `1.10.0` | `1.11.0` | | [wasm-bindgen-test](https://github.com/wasm-bindgen/wasm-bindgen) | `0.3.64` | `0.3.72` | Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `rmcp` from 0.17.0 to 1.7.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v0.17.0...rmcp-v1.7.0) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `reqwest` from 0.13.2 to 0.13.3 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.2...v0.13.3) Updates `tracing-subscriber` from 0.3.22 to 0.3.23 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23) Updates `clap` from 4.5.60 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.1) Updates `scraper` from 0.25.0 to 0.27.0 - [Release notes](https://github.com/rust-scraper/scraper/releases) - [Commits](rust-scraper/scraper@v0.25.0...v0.27.0) Updates `html5ever` from 0.36.1 to 0.39.0 - [Release notes](https://github.com/servo/html5ever/releases) - [Commits](https://github.com/servo/html5ever/commits) Updates `rand` from 0.10.0 to 0.10.1 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.0...0.10.1) Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `tower-http` from 0.6.8 to 0.6.11 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.11) Updates `hyper` from 1.8.1 to 1.9.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.8.1...v1.9.0) Updates `metrics` from 0.24.3 to 0.24.6 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](metrics-rs/metrics@metrics-v0.24.3...metrics-v0.24.6) Updates `uuid` from 1.21.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.21.0...v1.23.1) Updates `sysinfo` from 0.38.2 to 0.39.2 - [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md) - [Commits](GuillaumeGomez/sysinfo@v0.38.2...v0.39.2) Updates `hmac` from 0.12.1 to 0.13.0 - [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0) Updates `sha2` from 0.10.9 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) Updates `proptest` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.10.0...v1.11.0) Updates `wasm-bindgen-test` from 0.3.64 to 0.3.72 - [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases) - [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md) - [Commits](https://github.com/wasm-bindgen/wasm-bindgen/commits) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: rmcp dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: reqwest dependency-version: 0.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tracing-subscriber dependency-version: 0.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: scraper dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: html5ever dependency-version: 0.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: rand dependency-version: 0.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tower-http dependency-version: 0.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: hyper dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: metrics dependency-version: 0.24.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: uuid dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: sysinfo dependency-version: 0.39.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: hmac dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: proptest dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: wasm-bindgen-test dependency-version: 0.3.72 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-25T05:56:19Z

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from Lenvanderhof as a code owner May 25, 2026 05:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps(rust): bump the rust-dependencies group across 1 directory with 19 updates#38

deps(rust): bump the rust-dependencies group across 1 directory with 19 updates#38
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-11b60f2cd2

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 25, 2026

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

Changed

Fixed

Unstable

Documented

rmcp-macros-v1.7.0

Added

rmcp-v1.7.0

Added

Fixed

Other

rmcp-macros-v1.6.0

Fixed

Other

rmcp-v1.6.0

Added

Fixed

Other

rmcp-macros-v1.5.0

Fixed

v1.0.150

v0.13.3

tl;dr

What's Changed

New Contributors

v0.13.3

tracing-subscriber 0.3.23

Fixed

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.1] - 2026-04-15

Fixes

[4.6.0] - 2026-03-12

Compatibility

[4.5.61] - 2026-03-12

Internal

v0.27.0

What's Changed

v0.26.0

What's Changed

New Contributors

[0.10.1] — 2026-02-11

Changes

axum-v0.8.9

tower-http-0.6.11

Added

Changed

Fixed

All PRs

v1.9.0

Features

Bug Fixes

Refactors and chores

v1.9.0 (2026-03-31)

Bug Fixes

Features

Uh oh!

dependabot Bot commented on behalf of github May 25, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants