Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 9, 2025

Bumps the cargo group with 5 updates in the / directory:

Package From To
clap 4.5.38 4.5.40
openssl 0.10.72 0.10.73
reqwest 0.12.15 0.12.19
tokio 1.45.0 1.45.1
napi-build 2.2.0 2.2.1

Updates clap from 4.5.38 to 4.5.40

Release notes

Sourced from clap's releases.

v4.5.39

[4.5.39] - 2025-05-27

Fixes

  • (help) Show short flag aliases before long
  • (help) Merge the short and long flag alias lists
Changelog

Sourced from clap's changelog.

[4.5.40] - 2025-06-09

Features

  • Support quoted ids in arg!() macro (e.g. arg!("check-config": ...))

[4.5.39] - 2025-05-27

Fixes

  • (help) Show short flag aliases before long
  • (help) Merge the short and long flag alias lists
Commits
  • cff27db chore: Release
  • 4ef4124 docs: Update changelog
  • ca89617 Merge pull request #5848 from jennings/jennings/push-xolwzyoornps
  • 99b6391 fix(complete): Fix PowerShell dynamic completion
  • ed2360f chore: Release
  • 196a14b docs: Update changelog
  • cd622ab Merge pull request #5846 from ribru17/alias_fn_dedup
  • 48ff72b fix(complete): Deduplicate bash subcmd cases
  • b1b6f17 Merge pull request #5843 from epage/link
  • 5900216 fix(derive): Update link for derive attributes
  • Additional commits viewable in compare view

Updates openssl from 0.10.72 to 0.10.73

Release notes

Sourced from openssl's releases.

openssl-v0.10.73

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.72...openssl-v0.10.73

Commits

Updates reqwest from 0.12.15 to 0.12.19

Release notes

Sourced from reqwest's releases.

v0.12.19

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.18...v0.12.19

v0.12.18

What's Changed

  • Fix compilation when socks enabled without TLS.

v0.12.17

What's Changed

v0.12.16

Highlights

  • Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
  • Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
  • Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
  • Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
  • Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
  • Add Proxy::headers() to add extra headers that should be sent to a proxy.
  • Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
  • Fix HTTP/3 to support streaming request bodies.
  • (wasm) Fix null bodies when calling Response::bytes_stream().

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.19

  • Fix redirect that changes the method to GET should remove payload headers.
  • Fix redirect to only check the next scheme if the policy action is to follow.
  • (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

  • Fix compilation when socks enabled without TLS.

v0.12.17

  • Fix compilation on macOS.

v0.12.16

  • Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
  • Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
  • Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
  • Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
  • Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
  • Add Proxy::headers() to add extra headers that should be sent to a proxy.
  • Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
  • Fix HTTP/3 to support streaming request bodies.
  • (wasm) Fix null bodies when calling Response::bytes_stream().
Commits
  • 8cf142b v0.12.19
  • 35b6c83 fix(redirect): Using tower-http patch to fix invalid content-length heade...
  • a54c4cf disable util::add_cookie_header on wasm targets
  • a7a2db1 ci: check cookies feature on wasm target
  • 522638d fix: only check scheme after redirect Policy return follow (#2710)
  • 2fde244 ci: apparently dependabot doesn't understand increase-if-necessary
  • 35a6601 refactor: report custom reason phrase in error message (#2697)
  • 5e03d04 chore(ci): make dependabot tell us of breaking changes we could upgrade to (#...
  • 595c80b v0.12.18
  • f279ad1 fix compilation if socks is enabled without tls
  • Additional commits viewable in compare view

Updates tokio from 1.45.0 to 1.45.1

Release notes

Sourced from tokio's releases.

Tokio v1.45.1

1.45.1 (May 24th, 2025)

This fixes a regression on the wasm32-unknown-unknown target, where code that previously did not panic due to calls to Instant::now() started failing. This is due to the stabilization of the first time-based metric.

Fixed

  • Disable time-based metrics on wasm32-unknown-unknown (#7322)

#7322: tokio-rs/tokio#7322

Commits

Updates napi-build from 2.2.0 to 2.2.1

Release notes

Sourced from napi-build's releases.

napi-build@2.2.1

What's Changed

No significant change, add environment change detection for napi-derive beta versions

Full Changelog: https://github.com/napi-rs/napi-rs/compare/napi@3.0.0-beta.5...napi-build@2.2.1

Commits
  • 1914650 Release independent packages
  • 3450c7a fix(napi-build): compatible with v2
  • 4c77161 chore(release): publish
  • fdbc070 fix(cli): uses_default_features should also treat as enabled typeDef (#2691)
  • 8256b95 Release independent packages
  • a8d39e9 Release independent packages
  • 0309ae9 chore(release): publish
  • c9ff0ec feat(cli): detect type-def feature in cli (#2690)
  • 5a17b88 fix: revalidate shared libs if type def not found (#2689)
  • a6f133c perf(napi): PersistedPerInstanceHashMap can be thread local (#2681)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.38` | `4.5.40` |
| [openssl](https://github.com/sfackler/rust-openssl) | `0.10.72` | `0.10.73` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.15` | `0.12.19` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.45.0` | `1.45.1` |
| [napi-build](https://github.com/napi-rs/napi-rs) | `2.2.0` | `2.2.1` |



Updates `clap` from 4.5.38 to 4.5.40
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.38...clap_complete-v4.5.40)

Updates `openssl` from 0.10.72 to 0.10.73
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.72...openssl-v0.10.73)

Updates `reqwest` from 0.12.15 to 0.12.19
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.15...v0.12.19)

Updates `tokio` from 1.45.0 to 1.45.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.45.0...tokio-1.45.1)

Updates `napi-build` from 2.2.0 to 2.2.1
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/napi-build@2.2.0...napi-build@2.2.1)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: openssl
  dependency-version: 0.10.73
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: reqwest
  dependency-version: 0.12.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: napi-build
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jun 9, 2025
@codecov
Copy link

codecov bot commented Jun 9, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.50%. Comparing base (851a435) to head (1757103).
⚠️ Report is 19 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #148      +/-   ##
==========================================
- Coverage   97.53%   97.50%   -0.03%     
==========================================
  Files          14       14              
  Lines        3406     3406              
==========================================
- Hits         3322     3321       -1     
- Misses         84       85       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@codspeed-hq
Copy link

codspeed-hq bot commented Jun 10, 2025

CodSpeed Performance Report

Merging #148 will not alter performance

Comparing dependabot/cargo/cargo-da377bb5b8 (1757103) with main (49a7c8d)

Summary

✅ 1 untouched benchmarks

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 13, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 13, 2025
@dependabot dependabot bot deleted the dependabot/cargo/cargo-da377bb5b8 branch June 13, 2025 17:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant