Skip to content

chore(deps)(deps): Bump the prod group across 1 directory with 5 updates#51

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-3992259039
Closed

chore(deps)(deps): Bump the prod group across 1 directory with 5 updates#51
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-3992259039

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod group with 5 updates in the / directory:

Package From To
http 1.4.1 1.4.2
regex 1.12.3 1.12.4
rmcp 1.7.0 1.8.0
chrono 0.4.44 0.4.45
jsonschema 0.46.5 0.46.6

Updates http from 1.4.1 to 1.4.2

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

  • Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
  • Fix Uri to properly reject DEL characters.
Commits

Updates regex from 1.12.3 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

  • #1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.
Commits
  • 7b96fdc 1.12.4
  • 7b89cf0 deps: update to regex-syntax 0.8.11
  • 1401679 regex-syntax-0.8.11
  • d709000 changelog: 1.12.4
  • 9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
  • a7f2ff6 docs: clarify regex-lite word boundaries
  • 2c7b172 docs: clarify unsupported Anchored::Pattern searches
  • 839d16b regex-syntax-0.8.10
  • c4865a0 syntax: fix negation handling in HIR translation
  • d8761c0 cargo: also include benches
  • Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 1.8.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.8.0

Added

  • deprecate roots, sampling, and logging (SEP-2577) (#884)

Fixed

  • strip and validate tool outputSchema and inputSchema (#860)
  • remove unnecessary fields from tools' inputSchema (#856)

Other

  • refine mcpmate listing copy (#885)
  • added jilebi-mcp to the list of built with rmcp (#861)

rmcp-v1.8.0

[!WARNING]

⚠️ Breaking Changes

Despite being a minor version bump, this release contains a source-breaking API change (it should have been 2.0.0). If you depend on rmcp = "1.7", Cargo will resolve to 1.8.0 automatically and your build may fail. Pin to =1.7.x if you are not ready to migrate.

Peer::peer_info() return type changed (#862):

- pub fn peer_info(&self) -> Option<&R::PeerInfo>
+ pub fn peer_info(&self) -> Option<Arc<R::PeerInfo>>

This was needed so peer info can be re-set on a duplicate initialize (it now lives behind an RwLock), which is why a borrow can no longer be returned.

Migration: field access still works through Arc's Deref. If you need the old &InitializeResult (e.g. you bound the type explicitly), use .as_deref():

// Before (1.7.x): info is &InitializeResult
let info: Option<&InitializeResult> = client.peer_info();
// After (1.8.0): info is Arc<InitializeResult>
let info: Option<Arc<InitializeResult>> = client.peer_info();
// To recover the old reference type:
let info: Option<&InitializeResult> = client.peer_info().as_deref();

Added

  • standardize resource-not-found error code (SEP-2164) (#899)
  • validate OAuth authorization response issuer (#896)
  • specify OIDC application_type during dynamic client registration (SEP-837) (#883)
  • deprecate roots, sampling, and logging (SEP-2577) (#884)

... (truncated)

Commits
  • 2522036 chore: release v1.8.0 (#850)
  • 6d020c9 fix(auth): preserve configured reqwest client (#917)
  • de898dd Allow custom HTTP clients for OAuth (#908)
  • 3c5ce2b fix(auth): align OAuth metadata discovery ordering (#887)
  • 443677c fix: align progress timeout token (#909)
  • 4fd4986 fix(elicitation): preserve enumNames through ElicitationSchema serde round-tr...
  • bf71eb8 chore(deps): bump actions/checkout from 6 to 7 (#911)
  • 5d00e20 Add progress-aware request timeout reset (#858)
  • 4b82e41 docs(server): document Err vs Ok(CallToolResult::error) visibility contract o...
  • 95a8e96 feat: standardize resource-not-found error code (SEP-2164) (#899)
  • Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

Commits
  • 1703382 Prepare 0.4.45 release
  • 881f9ab tz_data: fix tzdata locations on Android
  • f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
  • c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
  • 120686c Bump codecov/codecov-action from 5 to 6
  • See full diff in compare view

Updates jsonschema from 0.46.5 to 0.46.6

Release notes

Sourced from jsonschema's releases.

[CLI] Release 0.46.6

No release notes provided.

[Python] Release 0.46.6

Fixed

  • prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
  • pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149
  • Reuse registry retrievers when only registry is passed.
  • Reference leak when serializing large integers on Python 3.12+.

[Ruby] Release 0.46.6

Fixed

  • prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
  • pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149
  • Reuse registry retrievers when only registry is passed.

[Rust] Release 0.46.6

Added

  • IntoRegistryResource for Arc<Value>. #1129

Fixed

  • prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
  • pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149
Changelog

Sourced from jsonschema's changelog.

[0.46.6] - 2026-06-24

Added

  • IntoRegistryResource for Arc<Value>. #1129

Fixed

  • prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
  • pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149
Commits
  • 332f539 chore(rust): Release 0.46.6
  • 7ceccf9 chore(ci): Add codecov config and CI/fuzz infra tweaks
  • 210cc32 refactor(python): Extract pattern_options parsing into regex module
  • bb50b10 refactor: Extract BuiltinFormat enum for format dispatch
  • 0028582 test: Select test-suite draft explicitly for all drafts
  • b15474c refactor(python): Add recursive JsonValue alias for returned JSON
  • 488794c refactor(cli): Extract shared format-assertion args and registry builder
  • a34caf6 test: Gate file-retrieval test helpers behind resolve-file feature
  • ca9610e build(deps): bump crates/jsonschema-referencing/tests/suite
  • f1b34da refactor: Reorder JsonType variants
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [http](https://github.com/hyperium/http) | `1.4.1` | `1.4.2` |
| [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.12.4` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.7.0` | `1.8.0` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.46.5` | `0.46.6` |



Updates `http` from 1.4.1 to 1.4.2
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v1.4.1...v1.4.2)

Updates `regex` from 1.12.3 to 1.12.4
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.3...1.12.4)

Updates `rmcp` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v1.8.0)

Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.44...v0.4.45)

Updates `jsonschema` from 0.46.5 to 0.46.6
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.46.5...cli-v0.46.6)

---
updated-dependencies:
- dependency-name: http
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: regex
  dependency-version: 1.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: rmcp
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: jsonschema
  dependency-version: 0.46.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 29, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/prod-3992259039 branch June 29, 2026 19:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants