Skip to content

build(deps): bump the external group across 1 directory with 40 updates#43

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/external-756a37e2d5
Closed

build(deps): bump the external group across 1 directory with 40 updates#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/external-756a37e2d5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2025 •
edited
Loading

Copy link
Copy Markdown

Bumps the external group with 38 updates in the / directory:

Package From To
alloy-primitives 1.1.2 1.4.1
anyhow 1.0.98 1.0.100
arbitrary 1.4.1 1.4.2
async-trait 0.1.88 0.1.89
axum 0.8.4 0.8.6
bolero 0.13.3 0.13.4
buildstructor 0.5.4 0.6.0
clap 4.5.39 4.5.50
hyper 1.6.0 1.7.0
jsonrpsee 0.24.9 0.26.0
parking_lot 0.12.4 0.12.5
prost 0.13.5 0.14.1
rand 0.9.1 0.9.2
rstest 0.22.0 0.26.1
serde_with 3.12.0 3.15.0
test-log 0.2.17 0.2.18
thiserror 2.0.12 2.0.17
tokio 1.45.1 1.48.0
tokio-util 0.7.15 0.7.16
toml 0.8.22 0.9.6
tonic 0.12.3 0.13.1
tonic-types 0.12.3 0.13.1
tower 0.4.13 0.5.2
tracing-subscriber 0.3.19 0.3.20
chrono 0.4.41 0.4.42
tonic-reflection 0.12.3 0.14.2
uuid 1.17.0 1.18.1
pbjson 0.7.0 0.8.0
reqwest 0.12.19 0.12.24
hyper-util 0.1.13 0.1.17
rocksdb 0.23.0 0.24.0
criterion 0.5.1 0.7.0
opentelemetry 0.27.1 0.31.0
opentelemetry-prometheus 0.27.0 0.29.1
opentelemetry_sdk 0.27.1 0.29.0
prometheus 0.13.4 0.14.0
semver 1.0.26 1.0.27
regex 1.11.1 1.12.2

Updates alloy-primitives from 1.1.2 to 1.4.1

Release notes

Sourced from alloy-primitives's releases.

alloy-core v1.4.1

Security

Patched: DoS vulnerability on alloy_dyn_abi::TypedData hashing

An uncaught panic triggered by malformed input to alloy_dyn_abi::TypedData could lead to a denial-of-service (DoS) via eip712_signing_hash().

Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can partially mitigate the availability issues unless repeated attacks are possible.

The vulnerability was patched by adding a check to ensure the element is not empty before accessing its first element; an error is returned if it is empty. The fix is included in version v1.4.1 and backported to v0.8.26.

See: GHSA-pgp9-98jm-wwq2

What's Changed

New Contributors

Full Changelog: alloy-rs/core@v1.4.0...v1.4.1

alloy-core v1.4.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from alloy-primitives's changelog.

1.4.1 - 2025-10-14

Features

  • Gate 60 tuple impls behind 'more-tuple-impls' feature flag (#1027)
  • [sol-macro] Add transient storage keyword support (#1026)
  • Add Sqlx Traits for Bytes Type (#1020)
  • [primitives] Add Borsh support for TxKind (#1022)

Miscellaneous Tasks

  • Remove some inlines (#1028)
  • Fix docs, typos (#1023)
  • Remove feature(doc_auto_cfg) (#1019)

Other

  • Merge commit from fork

Refactor

  • [dyn-abi] Clean up Resolver (#1030)

1.4.0 - 2025-09-26

Bug Fixes

  • [sol-macro] Internal SC derives (#1017)
  • [sol-macro-expander] Propagate all_derives and extra_derives to periphery SC structs (#1011)
  • [sol-macro] Remove #[automatically_derived] from non-trait impls (#1012)
  • [sol-types] Fix encode_topic_bytes for byte slices whose length is a non-zero multiple of 32 (#1000)

Dependencies

Documentation

  • [primitives] Inline doc for uint! macro (#1007)

Features

  • Rkyv support (#990)
  • Add Sqlx Traits for Signed Type (#1008)
  • [sol-macro] Inherit attributes from contract (#1004)
  • [primitives] Bump map deps, wrap DefaultHashBuilder (#1001)
  • [sol-macro-expander] Add Clone trait to enum contracts containers (#1003)
  • [primitives] Extend implementation of diesel's ToSql to Sqlite for FixedBytes and Address (#977)
  • [sol-macro-expander] Add name_by_selector method for enum variant retrieval (#995)
  • [primitives] Add borsh support (#993)

... (truncated)

Commits

Updates anyhow from 1.0.98 to 1.0.100

Release notes

Sourced from anyhow's releases.

1.0.100

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)

1.0.99

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)
Commits
  • 18c2598 Release 1.0.100
  • f271988 Merge pull request #426 from dtolnay/clippyfmt
  • 52f2115 Mark macros with clippy::format_args
  • da5fd9d Raise minimum tested compiler to rust 1.76
  • 211e409 Opt in to generate-macro-expansion when building on docs.rs
  • b48fc02 Enforce trybuild >= 1.0.108
  • d5f59fb Update ui test suite to nightly-2025-09-07
  • 238415d Update ui test suite to nightly-2025-08-24
  • 3bab070 Update actions/checkout@v4 -> v5
  • 4249254 Order cap-lints flag in the same order as thiserror build script
  • Additional commits viewable in compare view

Updates arbitrary from 1.4.1 to 1.4.2

Changelog

Sourced from arbitrary's changelog.

1.4.2

Released 2025-08-13.

Added

  • Added formal MSRV policy: "We reserve the right to increment the MSRV on minor releases, however we will strive to only do it deliberately and for good reasons." The current MSRV is 1.63.0.
  • Added an Arbitrary implementation for core::cmp::Reverse.

Changed

  • Landed a handful of changes to the code generated by #[derive(Arbitrary)] that speed up compilation.

Fixed

  • Better documented bias and behavior when running out of entropy, fixed some outdated and incorrect docs related to this.
Commits
  • dc22fde Merge pull request #230 from fitzgen/bump-to-1.4.2
  • 2032403 Bump to version 1.4.2
  • 688b494 Merge pull request #229 from nnethercote/with_recursive_count
  • 40fe82d Shrink derived code size with with_recursive_count.
  • 3fbc2d7 Merge pull request #228 from nnethercote/fieldless-enums-no-recursion
  • 88bb8e2 Avoid recursive count guard for fieldless enums.
  • 95cc16a Use size_hint for enum discriminants.
  • 698d491 Use TokenStream instead of impl quote::ToTokens.
  • 9029685 Merge pull request #227 from nnethercote/const-recursive_count
  • 27241c6 Mark RECURSIVE_COUNT_* as const.
  • Additional commits viewable in compare view

Updates async-trait from 0.1.88 to 0.1.89

Release notes

Sourced from async-trait's releases.

0.1.89

Commits
  • a7e91e9 Release 0.1.89
  • fbcfcac Merge pull request 293 from Veykril/lw/quote_spanned
  • fd93990 Improve use of spans in quote_spanned
  • a5093fe Add type-mismatch ui test
  • 6d12b44 Revert "Pin nightly toolchain used for miri job"
  • dd9e4ba Hide unused_variables warning in consider-restricting.rs ui test
  • b454fc8 Update ui test suite to nightly-2025-08-03
  • 9c880e8 Update ui test suite to nightly-2025-07-30
  • 7ca751d Ignore unused_parens warning in test
  • 2bccfeb Update ui test suite to nightly-2025-05-28
  • Additional commits viewable in compare view

Updates axum from 0.8.4 to 0.8.6

Release notes

Sourced from axum's releases.

axum v0.8.5

  • fixed: Reject JSON request bodies with trailing characters after the JSON document (#3453)
  • added: Implement OptionalFromRequest for Multipart (#3220)
  • added: Getter methods Location::{status_code, location}
  • added: Support for writing arbitrary binary data into server-sent events (#3425)]
  • added: middleware::ResponseAxumBodyLayer for mapping response body to axum::body::Body (#3469)
  • added: impl FusedStream for WebSocket (#3443)
  • changed: The sse module and Sse type no longer depend on the tokio feature (#3154)
  • changed: If the location given to one of Redirects constructors is not a valid header value, instead of panicking on construction, the IntoResponse impl now returns an HTTP 500, just like Json does when serialization fails (#3377)
  • changed: Update minimum rust version to 1.78 (#3412)

#3154: tokio-rs/axum#3154 #3220: tokio-rs/axum#3220 #3377: tokio-rs/axum#3377 #3412: tokio-rs/axum#3412 #3425: tokio-rs/axum#3425 #3443: tokio-rs/axum#3443 #3453: tokio-rs/axum#3453 #3469: tokio-rs/axum#3469

Commits

Updates bolero from 0.13.3 to 0.13.4

Commits

Updates buildstructor from 0.5.4 to 0.6.0

Changelog

Sourced from buildstructor's changelog.

0.6.0 - 2025-02-13

#195 Update clippy lint allow too many args:

#[allow(clippy::too_many_arguments)]

#197 Builders methods have #[must_use]. This will prevent accidentally unfinished builders.

Commits

Updates clap from 4.5.39 to 4.5.50

Release notes

Sourced from clap's releases.

v4.5.50

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted

v4.5.48

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

v4.5.47

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

  • (derive) Update runtime error text to match clap

v4.5.46

[4.5.46] - 2025-08-26

Features

  • Expose StyledStr::push_str

v4.5.45

[4.5.45] - 2025-08-12

Fixes

  • (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

v4.5.44

[4.5.44] - 2025-08-11

Features

  • Add Command::mut_subcommands

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted

[4.5.49] - 2025-10-13

Fixes

  • (help) Correctly wrap when ANSI escape codes are present

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

  • (derive) Update runtime error text to match clap

[4.5.46] - 2025-08-26

Features

  • Expose StyledStr::push_str

[4.5.45] - 2025-08-12

Fixes

  • (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

[4.5.44] - 2025-08-11

Features

  • Add Command::mut_subcommands

... (truncated)

Commits
  • d8acd47 chore: Release
  • 7c2b8d9 docs: Update changelog
  • e69a2ea Merge pull request #5987 from mernen/fix-bash-comp-words-loop
  • e03cc2e Merge pull request #5988 from cordx56/fix-builder-custom-version-docs
  • 5ab2579 fix: Minor fix for builder docs about version
  • 2f66432 fix(complete): Only parse arguments before current
  • 4d9d210 test(complete): Illustrate current behavior in Bash
  • 6abe2f8 chore: Release
  • d5c7454 docs: Update changelog
  • 5b2e960 Merge pull request #5985 from mernen/bash-cur
  • Additional commits viewable in compare view

Updates hyper from 1.6.0 to 1.7.0

Release notes

Sourced from hyper's releases.

v1.7.0

Highlights

Features

  • client:
  • error: add Error::is_shutdown() (#3863) (b8affd8a, closes #2745)
  • server: add allow_multiple_spaces_in_request_line_delimiters http1 builder method (#3929) (9749184f)

Bug Fixes

  • server: improve caching accuracy of Date header (#3887) (436cadd1)

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.7.0 (2025-08-18)

Bug Fixes

  • server: improve caching accuracy of Date header (#3887) (436cadd1)

Features

  • client:
  • error: add Error::is_shutdown() (#3863) (b8affd8a, closes #2745)
  • server: add allow_multiple_spaces_in_request_line_delimiters http1 builder method (#3929) (9749184f)
Commits
  • 400bdfd v1.7.0
  • 9749184 feat(server): add allow_multiple_spaces_in_request_line_delimiters http1 bu...
  • caa166c chore(dependencies): avoid implicit cargo feature of futures-util (#3931)
  • 8ad2595 test(common): add missing assertion in full_rewind test (#3926)
  • 24f0da8 chore(ci): update to cargo-check-external-types-0.3.0 (#3928)
  • 974289f docs(rt): improve rt module overview (#3920)
  • 283fd23 docs: improve ext module overview and Protocol docs (#3921)
  • b8affd8 feat(error): add Error::is_shutdown() (#3863)
  • c88df78 docs(SECURITY): update policy to use GSA drafts when reporting vulnerabilitie...
  • 436cadd fix(server): improve caching accuracy of Date header (#3887)
  • Additional commits viewable in compare view

Updates jsonrpsee from 0.24.9 to 0.26.0

Release notes

Sourced from jsonrpsee's releases.

v0.26.0

[v0.26.0] - 2025-08-11

This is just a small release; the only breaking change is the addition of max_frame_size to WsTransportClientBuilder, which necessitates a minor version bump.

The other changes are as follows:

[Changed]

  • Fix new Rust 1.89 lifetime warnings and impl ToRpcParams on serde_json::Map (#1594)
  • feat(keepalive): expose tcp keep-alive options (#1583)
  • chore: expose TowerServiceNoHttp type (#1588)
  • chore(deps): update socket2 requirement from 0.5.1 to 0.6.0 (#1587)
  • Allow max websocket frame size to be set (#1585)
  • chore(deps): update pprof requirement from 0.14 to 0.15 (#1577)
  • Expose jsonrpsee_http_client::RpcService (#1574)

[Fixed]

  • fix: Remove username and password from URL after building Authorization header (#1581)

v0.25.1

[v0.25.1] - 2025-04-24

A small follow-up patch release that adds a Clone impl for the middleware RpcLogger which was missing and broke the Clone impl for the HttpClient.

If you are updating from v0.24, have a look at https://github.com/paritytech/jsonrpsee/releases/tag/v0.25.0 because it contains some breaking changes.

Full Changelog: paritytech/jsonrpsee@v0.25.0...v0.25.1

v0.25.0

[v0.25.0] - 2025-04-24

A new breaking release which has been in the making for a while and the biggest change is that the RpcServiceT trait has been changed to support both the client and server side:

pub trait RpcServiceT {
	/// Response type for `RpcServiceT::call`.
	type MethodResponse;
	/// Response type for `RpcServiceT::notification`.
	type NotificationResponse;
	/// Response type for `RpcServiceT::batch`.
	type BatchResponse;
/// Processes a single JSON-RPC call, which may be a subscription or regular call.
fn call<'a>(&self, request: Request<'a>) -> impl Future<Output = Self::MethodResponse> + Send + 'a;
/// Processes multiple JSON-RPC calls at once, similar to RpcServiceT::call.

</tr></table>

... (truncated)

Changelog

Sourced from jsonrpsee's changelog.

[v0.26.0] - 2025-08-11

This is just a small release; the only breaking change is the addition of max_frame_size to WsTransportClientBuilder, which necessitates a minor version bump.

The other changes are as follows:

[Changed]

  • Fix new Rust 1.89 lifetime warnings and impl ToRpcParams on serde_json::Map (#1594)
  • feat(keepalive): expose tcp keep-alive options (#1583)
  • chore: expose TowerServiceNoHttp type (#1588)
  • chore(deps): update socket2 requirement from 0.5.1 to 0.6.0 (#1587)
  • Allow max websocket frame size to be set (#1585)
  • chore(deps): update pprof requirement from 0.14 to 0.15 (#1577)
  • Expose jsonrpsee_http_client::RpcService (#1574)

[Fixed]

  • fix: Remove username and password from URL after building Authorization header (#1581)

[v0.25.1] - 2025-04-24

A small follow-up patch release that adds a Clone impl for the middleware RpcLogger which was missing and broke the Clone impl for the HttpClient.

[v0.25.0] - 2025-04-24

A new breaking release which has been in the making for a while and the biggest change is that the RpcServiceT trait has been changed to support both the client and server side:

pub trait RpcServiceT {
	/// Response type for `RpcServiceT::call`.
	type MethodResponse;
	/// Response type for `RpcServiceT::notification`.
	type NotificationResponse;
	/// Response type for `RpcServiceT::batch`.
	type BatchResponse;
/// Processes a single JSON-RPC call, which may be a subscription or regular call.
fn call&lt;'a&gt;(&amp;self, request: Request&lt;'a&gt;) -&gt; impl Future&lt;Output = Self::MethodResponse&gt; + Send + 'a;
/// Processes multiple JSON-RPC calls at once, similar to RpcServiceT::call.
///
/// This method wraps RpcServiceT::call and RpcServiceT::notification,
/// but the root RPC service does not inherently recognize custom implementations
/// of these methods.
///
/// As a result, if you have custom logic for individual calls or notifications,
/// you must duplicate that implementation in this method or no middleware will be applied

</tr></table>

... (truncated)

Commits
  • b0a45c6 Prepare to release v0.26.0 (#1595)
  • 9e551cb chore(deps): bump Swatinem/rust-cache from 2.7.8 to 2.8.0 (#1584)
  • b92aaaf Fix new Rust 1.89 lifetime warnings and impl ToRpcParams on serde_json::Map (...
  • c0b947f feat(keepalive): expose tcp keep-alive options (#1583)
  • fa7d1c8 chore: expose TowerServiceNoHttp type (#1588)
  • ffd5020 chore(deps): update socket2 requirement from 0.5.1 to 0.6.0 (#1587)
  • 85dcced increase max websocket frame size (#1585)
  • d3d9fa8 fix: Remove username and password from URL after building Authorization heade...
  • 1869536 chore(deps): update pprof requirement from 0.14 to 0.15 (#1577)
  • f04afa7 Expose jsonrpsee_http_client::RpcService (#1574)
  • Additional commits viewable in compare view

Updates parking_lot from 0.12.4 to 0.12.5

Changelog

Sourced from parking_lot's changelog.

parking_lot - 0.12.5 - 2025-09-30

  • Bumped MSRV to 1.71
  • Fixed Miri when the hardware-lock-elision feature is enabled (#491)
  • Added missing into_arc(_fair) methods (#472)
  • Fixed RawRwLock::bump_*() not releasing lock when there are multiple readers (#471)

parking_lot_core - 0.9.12 - 2025-09-30

  • Bumped MSRV to 1.71
  • Switched from windows-targets to windows-link. (#493)
  • Replaced thread-id dependency with std::thread::ThreadId (#483)
  • Added SGX implementation for ThreadParker.park_until (#481)

lock_api - 0.4.14 - 2025-09-30

  • Fixed use of doc_cfg when building on docs.rs.
  • Bumped MSRV to 1.71
  • Added #[track_caller] where locking implementations could feasibly need to panic
  • Added try_map_or_err to various mutex guards (#480)
  • Removed unnecessary build script and autocfg dependency (#474)
  • Added missing into_arc(_fair) methods (#472)
Commits
  • d7828ff chore: release
  • 73365ad Merge pull request #495 from mbrobbel/doc_auto_cfg
  • 0b5585a Replace doc_auto_cfg with doc_cfg
  • c7b7dc7 Merge pull request #493 from a1phyr/windows_link
  • 07c2d40 Update MSRV to 1.71
  • 345cf7a Switch from windows-targets to windows-link
  • eeb186c Merge pull request #491 from AaronKutch/fix_assembly_on_miri
  • a7d328e do not use elision on Miri even if feature is enabled
  • 739d370 Merge pull request #487 from sola-contrib/replace-winapi
  • ed4ae93 Replace winapi with windows-sys in benchmark crate
  • Additional commits viewable in compare view

Updates prost from 0.13.5 to 0.14.1

Changelog

Sourced from prost's changelog.

Prost version 0.14.1

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

⚠️ Revert emission of rerun commands

Version 0.14.1 reverts the emission of rerun commands. Other than this change, it is identical to 0.14.0.

In version 0.14.0, prost-build began emitting rerun commands. While intended to improve build correctness, this change caused regressions for some users—for example, those generating protos from an includes directory. These edge cases are difficult to address reliably, so the change has been rolled back in 0.14.1.

For more details, see [issue #1296](tokio-rs/prost#1296).

Breaking changes

  • prost: Relax Message Debug trait bound (#1147)

    BREAKING CHANGE: trait Debug was a supertrait of trait Message. This is no longer required by prost. If your code relies on trait Debug being implemented for every impl Message, you must now explicitly state that you require both Debug and Message. For example: where M: Debug + Message

  • prost: Remove prost-derive feature (#1247)

    BREAKING CHANGE: Feature flag prost-derive is renamed to derive. Please rename any usage of prost-derive feature in your Cargo.toml.

  • prost-build: Prevent repeated fields to be boxed (#1237)

    BREAKING CHANGE: A repeated field that is manually marked as boxed was typed as Vec<Box<T>>. Those fields are now simply typed as Vec<T> to prevent double indirection. The boxed configuration is effectively ignored for repeated fields.

  • prost-build: Make type_name_domain cumulative (#1228)

    BREAKING CHANGE: The config...

    Description has been truncated

@dependabot
build(deps): bump the external group across 1 directory with 40 updates
b291f65 
Bumps the external group with 38 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [alloy-primitives](https://github.com/alloy-rs/core) | `1.1.2` | `1.4.1` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.98` | `1.0.100` |
| [arbitrary](https://github.com/rust-fuzz/arbitrary) | `1.4.1` | `1.4.2` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.88` | `0.1.89` |
| [axum](https://github.com/tokio-rs/axum) | `0.8.4` | `0.8.6` |
| [bolero](https://github.com/camshaft/bolero) | `0.13.3` | `0.13.4` |
| [buildstructor](https://github.com/BrynCooke/buildstructor) | `0.5.4` | `0.6.0` |
| [clap](https://github.com/clap-rs/clap) | `4.5.39` | `4.5.50` |
| [hyper](https://github.com/hyperium/hyper) | `1.6.0` | `1.7.0` |
| [jsonrpsee](https://github.com/paritytech/jsonrpsee) | `0.24.9` | `0.26.0` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.4` | `0.12.5` |
| [prost](https://github.com/tokio-rs/prost) | `0.13.5` | `0.14.1` |
| [rand](https://github.com/rust-random/rand) | `0.9.1` | `0.9.2` |
| [rstest](https://github.com/la10736/rstest) | `0.22.0` | `0.26.1` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.12.0` | `3.15.0` |
| [test-log](https://github.com/d-e-s-o/test-log) | `0.2.17` | `0.2.18` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.12` | `2.0.17` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.45.1` | `1.48.0` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.15` | `0.7.16` |
| [toml](https://github.com/toml-rs/toml) | `0.8.22` | `0.9.6` |
| [tonic](https://github.com/hyperium/tonic) | `0.12.3` | `0.13.1` |
| [tonic-types](https://github.com/hyperium/tonic) | `0.12.3` | `0.13.1` |
| [tower](https://github.com/tower-rs/tower) | `0.4.13` | `0.5.2` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.19` | `0.3.20` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.41` | `0.4.42` |
| [tonic-reflection](https://github.com/hyperium/tonic) | `0.12.3` | `0.14.2` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.17.0` | `1.18.1` |
| [pbjson](https://github.com/influxdata/pbjson) | `0.7.0` | `0.8.0` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.19` | `0.12.24` |
| [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.13` | `0.1.17` |
| [rocksdb](https://github.com/rust-rocksdb/rust-rocksdb) | `0.23.0` | `0.24.0` |
| [criterion](https://github.com/bheisler/criterion.rs) | `0.5.1` | `0.7.0` |
| [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.1` | `0.31.0` |
| [opentelemetry-prometheus](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.0` | `0.29.1` |
| [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.1` | `0.29.0` |
| [prometheus](https://github.com/tikv/rust-prometheus) | `0.13.4` | `0.14.0` |
| [semver](https://github.com/dtolnay/semver) | `1.0.26` | `1.0.27` |
| [regex](https://github.com/rust-lang/regex) | `1.11.1` | `1.12.2` |



Updates `alloy-primitives` from 1.1.2 to 1.4.1
- [Release notes](https://github.com/alloy-rs/core/releases)
- [Changelog](https://github.com/alloy-rs/core/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/core@v1.1.2...v1.4.1)

Updates `anyhow` from 1.0.98 to 1.0.100
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.98...1.0.100)

Updates `arbitrary` from 1.4.1 to 1.4.2
- [Changelog](https://github.com/rust-fuzz/arbitrary/blob/main/CHANGELOG.md)
- [Commits](rust-fuzz/arbitrary@v1.4.1...v1.4.2)

Updates `async-trait` from 0.1.88 to 0.1.89
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.88...0.1.89)

Updates `axum` from 0.8.4 to 0.8.6
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.8.4...axum-v0.8.6)

Updates `bolero` from 0.13.3 to 0.13.4
- [Changelog](https://github.com/camshaft/bolero/blob/master/CHANGELOG.md)
- [Commits](https://github.com/camshaft/bolero/commits)

Updates `buildstructor` from 0.5.4 to 0.6.0
- [Release notes](https://github.com/BrynCooke/buildstructor/releases)
- [Changelog](https://github.com/BrynCooke/buildstructor/blob/main/CHANGELOG.md)
- [Commits](https://github.com/BrynCooke/buildstructor/commits)

Updates `clap` from 4.5.39 to 4.5.50
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.39...clap_complete-v4.5.50)

Updates `hyper` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.6.0...v1.7.0)

Updates `jsonrpsee` from 0.24.9 to 0.26.0
- [Release notes](https://github.com/paritytech/jsonrpsee/releases)
- [Changelog](https://github.com/paritytech/jsonrpsee/blob/master/CHANGELOG.md)
- [Commits](paritytech/jsonrpsee@v0.24.9...v0.26.0)

Updates `parking_lot` from 0.12.4 to 0.12.5
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@parking_lot-v0.12.4...parking_lot-v0.12.5)

Updates `prost` from 0.13.5 to 0.14.1
- [Release notes](https://github.com/tokio-rs/prost/releases)
- [Changelog](https://github.com/tokio-rs/prost/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/prost@v0.13.5...v0.14.1)

Updates `rand` from 0.9.1 to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@rand_core-0.9.1...rand_core-0.9.2)

Updates `rstest` from 0.22.0 to 0.26.1
- [Release notes](https://github.com/la10736/rstest/releases)
- [Changelog](https://github.com/la10736/rstest/blob/master/CHANGELOG.md)
- [Commits](la10736/rstest@v0.22.0...v0.26.1)

Updates `serde` from 1.0.219 to 1.0.228
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.219...v1.0.228)

Updates `serde_json` from 1.0.140 to 1.0.145
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.140...v1.0.145)

Updates `serde_with` from 3.12.0 to 3.15.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.12.0...v3.15.0)

Updates `test-log` from 0.2.17 to 0.2.18
- [Release notes](https://github.com/d-e-s-o/test-log/releases)
- [Changelog](https://github.com/d-e-s-o/test-log/blob/main/CHANGELOG.md)
- [Commits](d-e-s-o/test-log@v0.2.17...v0.2.18)

Updates `thiserror` from 2.0.12 to 2.0.17
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.12...2.0.17)

Updates `tokio` from 1.45.1 to 1.48.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.45.1...tokio-1.48.0)

Updates `tokio-util` from 0.7.15 to 0.7.16
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.15...tokio-util-0.7.16)

Updates `toml` from 0.8.22 to 0.9.6
- [Commits](toml-rs/toml@toml-v0.8.22...toml-v0.9.6)

Updates `tonic` from 0.12.3 to 0.13.1
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@v0.12.3...v0.13.1)

Updates `tonic-types` from 0.12.3 to 0.13.1
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@v0.12.3...v0.13.1)

Updates `tower` from 0.4.13 to 0.5.2
- [Release notes](https://github.com/tower-rs/tower/releases)
- [Commits](tower-rs/tower@tower-0.4.13...tower-0.5.2)

Updates `tracing-subscriber` from 0.3.19 to 0.3.20
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.19...tracing-subscriber-0.3.20)

Updates `chrono` from 0.4.41 to 0.4.42
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.41...v0.4.42)

Updates `tonic-reflection` from 0.12.3 to 0.14.2
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@v0.12.3...v0.14.2)

Updates `uuid` from 1.17.0 to 1.18.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.17.0...v1.18.1)

Updates `pbjson` from 0.7.0 to 0.8.0
- [Commits](https://github.com/influxdata/pbjson/commits)

Updates `reqwest` from 0.12.19 to 0.12.24
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.19...v0.12.24)

Updates `hyper-util` from 0.1.13 to 0.1.17
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.13...v0.1.17)

Updates `rocksdb` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/rust-rocksdb/rust-rocksdb/releases)
- [Changelog](https://github.com/rust-rocksdb/rust-rocksdb/blob/master/CHANGELOG.md)
- [Commits](rust-rocksdb/rust-rocksdb@v0.23.0...v0.24.0)

Updates `criterion` from 0.5.1 to 0.7.0
- [Changelog](https://github.com/bheisler/criterion.rs/blob/master/CHANGELOG.md)
- [Commits](bheisler/criterion.rs@0.5.1...0.7.0)

Updates `opentelemetry` from 0.27.1 to 0.31.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.27.1...v0.31.0)

Updates `opentelemetry-prometheus` from 0.27.0 to 0.29.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-prometheus-0.27.0...opentelemetry-prometheus-0.29.1)

Updates `opentelemetry_sdk` from 0.27.1 to 0.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry_sdk-0.27.1...opentelemetry_sdk-0.29.0)

Updates `prometheus` from 0.13.4 to 0.14.0
- [Changelog](https://github.com/tikv/rust-prometheus/blob/master/CHANGELOG.md)
- [Commits](tikv/rust-prometheus@v0.13.4...v0.14.0)

Updates `semver` from 1.0.26 to 1.0.27
- [Release notes](https://github.com/dtolnay/semver/releases)
- [Commits](dtolnay/semver@1.0.26...1.0.27)

Updates `regex` from 1.11.1 to 1.12.2
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.1...1.12.2)

---
updated-dependencies:
- dependency-name: alloy-primitives
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: anyhow
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: arbitrary
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: async-trait
  dependency-version: 0.1.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: axum
  dependency-version: 0.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: bolero
  dependency-version: 0.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: buildstructor
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: clap
  dependency-version: 4.5.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: hyper
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: jsonrpsee
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: parking_lot
  dependency-version: 0.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: prost
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: rstest
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: serde
  dependency-version: 1.0.228
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: serde_json
  dependency-version: 1.0.145
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: serde_with
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: test-log
  dependency-version: 0.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: thiserror
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: tokio
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: tokio-util
  dependency-version: 0.7.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: toml
  dependency-version: 0.9.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: tonic
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: tonic-types
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: tower
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: tracing-subscriber
  dependency-version: 0.3.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: chrono
  dependency-version: 0.4.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: tonic-reflection
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: uuid
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: pbjson
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: reqwest
  dependency-version: 0.12.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: hyper-util
  dependency-version: 0.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: rocksdb
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: criterion
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: opentelemetry
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: opentelemetry-prometheus
  dependency-version: 0.29.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: opentelemetry_sdk
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: prometheus
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: semver
  dependency-version: 1.0.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: regex
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 20, 2025
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2025

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 27, 2025
@dependabot dependabot Bot deleted the dependabot/cargo/external-756a37e2d5 branch October 27, 2025 19:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file pessimistic-proof rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants