chore(deps): bump the minor-and-patch group across 1 directory with 10 updates by dependabot[bot] · Pull Request #157 · pragmalabs-tech/mcpr

dependabot · 2026-06-30T14:16:04Z

Bumps the minor-and-patch group with 10 updates in the / directory:

Package	From	To
serde_json	`1.0.149`	`1.0.150`
chrono	`0.4.44`	`0.4.45`
uuid	`1.23.1`	`1.23.4`
dashmap	`6.1.0`	`6.2.1`
anyhow	`1.0.102`	`1.0.103`
hyper	`1.9.0`	`1.10.1`
http	`1.4.0`	`1.4.2`
bytes	`1.11.1`	`1.12.0`
mimalloc	`0.1.50`	`0.1.52`
arc-swap	`1.9.1`	`1.9.2`

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in chronotope/chrono#1787

tz_data: fix tzdata locations on Android by @caruschalalamove in chronotope/chrono#1789

Commits

1703382 Prepare 0.4.45 release
881f9ab tz_data: fix tzdata locations on Android
f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
120686c Bump codecov/codecov-action from 5 to 6
See full diff in compare view

Updates uuid from 1.23.1 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

Improve error messages for ambiguous formats by @KodrAus in uuid-rs/uuid#882

Prepare for 1.23.2 release by @KodrAus in uuid-rs/uuid#883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

Commits

3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
cba53d0 prepare for 1.23.4 release
e347af4 Merge pull request #889 from frostyplanet/main
e9bf55c doc: Fix broken link warnings
5351af4 doc: Enable feature flag label for docs.rs
1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
c9619f6 fix up name of fuzz script in readme
20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
62232ca prepare for 1.23.3 release
2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
Additional commits viewable in compare view

Updates dashmap from 6.1.0 to 6.2.1

Release notes

Sourced from dashmap's releases.

v6.2.1

This is an interim maintenance release for the existing v6 branch before v7 can be released. This bumps the MSRV to 1.85 and updates dependencies to their latest versions.

Commits

749ed1f v6.2.1
d02b945 v6.2.0
b983625 update dependencies
94a294a bump msrv to 1.85
See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates hyper from 1.9.0 to 1.10.1

Release notes

Sourced from hyper's releases.

v1.10.1

What's Changed

fix(http1): fix busy loop when peer half-closes and open body by @seanmonstar in hyperium/hyper#4086

Full Changelog: hyperium/hyper@v1.10.0...v1.10.1

v1.10.0

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Refactors, chores, et al

fix(http1): fix rare missed write wakeup on connections v2 by @lthiery in hyperium/hyper#3988

fix(client): reading trailers shouldn't propagate NO_ERROR from early response by @ulyssa in hyperium/hyper#3998

fix(http1): fix reading large bodies on 32-bit systems by @seanmonstar in hyperium/hyper#4056

fix(http2): do not reserve capacity before body data is available by @seanmonstar in hyperium/hyper#4061

Fix two clippy lints by @jplatte in hyperium/hyper#4063

docs(client): document Drop behavior for Connection types by @lihan3238 in hyperium/hyper#4064

Add header_table_size method to server builder by @ArniDagur in hyperium/hyper#4062

feat(http2/client): expose reset_stream_duration option by @kimjune01 in hyperium/hyper#4068

fix(http1): send error when dispatcher is dropped mid-body by @seanmonstar in hyperium/hyper#4069

docs: document cancel safety for client send_request futures by @lihan3238 in hyperium/hyper#4070

docs(error): add detailed doc comments to Error query methods by @kimjune01 in hyperium/hyper#4065

refactor(lib): use a panic_if_poisoned() helper for mutexes by @seanmonstar in hyperium/hyper#4072

refactor(lib): replace unwraps with expects by @seanmonstar in hyperium/hyper#4073

docs(lib): fixup markdown and grammar in doc comments by @seanmonstar in hyperium/hyper#4074

chore(ci): fix security-audit job by @seanmonstar in hyperium/hyper#4076

chore(lib): start a strict clippy config by @seanmonstar in hyperium/hyper#4075

tests(client): fix misuse of path_and_query in CONNECT test by @seanmonstar in hyperium/hyper#4078

Removing wildcard_imports lint allowance by @Lori-Shu in hyperium/hyper#4080

Fix manual_assert lint by @xd009642 in hyperium/hyper#4079

New Contributors

@ulyssa made their first contribution in hyperium/hyper#3998

@lihan3238 made their first contribution in hyperium/hyper#4064

@ArniDagur made their first contribution in hyperium/hyper#4062

@kimjune01 made their first contribution in hyperium/hyper#4068

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.10.1 (2026-05-29)

Bug Fixes

http1: fix busy loop when peer half-closes and open body (#4086) (c6cb906f, closes #4085)

v1.10.0 (2026-05-27)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Commits

e3bcd37 v1.10.1
c6cb906 fix(http1): fix busy loop when peer half-closes and open body (#4086)
54e8511 v1.10.0
79dbab6 style(ext): fix manual_assert lint (#4079)
cca6bf1 style(client): removing wildcard_imports lint allowance (#4080)
3cc1158 test(client): fix misuse of path_and_query in CONNECT test (#4078)
cad38b7 chore(lib): start a strict clippy config (#4075)
7bb1d03 chore(ci): fix security-audit job (#4076)
5dbcae7 docs(lib): fixup markdown and grammar in doc comments (#4074)
08ef365 refactor(lib): replace unwraps with expects (#4073)
Additional commits viewable in compare view

Updates http from 1.4.0 to 1.4.2

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

chore(header): fix clippy::assign_op_pattern by @rxc-amzn in hyperium/http#806

ci: pin itoa in msrv job by @seanmonstar in hyperium/http#813

Remove unnecessary explicit lifetimes by @jplatte in hyperium/http#815

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/http#819

tests: update to rand 0.10 by @tottoto in hyperium/http#818

refactor: Remove usage of float instruction by @AurelienFT in hyperium/http#823

refactor(uri): consolidate PathAndQuery::from_shared and from_static by @seanmonstar in hyperium/http#825

fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @seanmonstar in hyperium/http#826

Rephrase comment by @daalfox in hyperium/http#827

Fix typo in request builder docs by @vleksis in hyperium/http#831

fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @SAY-5 in hyperium/http#833

fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @seanmonstar in hyperium/http#837

fix(header): use a set_len guard in IntoIter drop by @seanmonstar in hyperium/http#838

New Contributors

@rxc-amzn made their first contribution in hyperium/http#806

@AurelienFT made their first contribution in hyperium/http#823

@daalfox made their first contribution in hyperium/http#827

@vleksis made their first contribution in hyperium/http#831

@SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.

Fix Uri to properly reject DEL characters.

1.4.1 (May 25, 2026)

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

82db5b8 v1.4.2
a9cdbf8 fix(uri): reject DEL character (#842)
df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
ec3f8ce feat(method): impl PartialOrd + Ord (#840)
a24c968 v1.4.1
bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
68e0abb docs: fix typo in request builder docs (#831)
29dd307 docs(extensions): rephrase internal comment (#827)
Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

Add BytesMut::extend_from_within() (#818)

Add BytesMut::try_unsplit() (#746)

Fixed

Fix panic in get_int if nbytes is zero (#806)

Changed

Pass vtable data by value (#826)

Exclude development scripts from published package (#810)

Documented

Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

91402ce Release bytes v1.12.0 (#831)
2256e6d chore: add safety comments on unsafe blocks (#827)
245adff Pass vtable data by value (#826)
00cc5ff Implement BytesMut::extend_from_within (#818)
5b79d31 Merge tag 'v1.11.1'
804ee6d Make try_unsplit method public (#746)
fd426ca Exclude development scripts from published package (#810)
b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
94e4291 Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capac...
acd1e0f Fix get_int if nbytes is zero (#806)
See full diff in compare view

Updates mimalloc from 0.1.50 to 0.1.52

Release notes

Sourced from mimalloc's releases.

Version 0.1.52

Changes

Expose mi_stats_get_json().

Fix ARM compilation.

Version 0.1.51

Changes

Mimalloc bumped to v3.3.2 and v2.3.2.

Compile with msvc on windows.

Commits

abcd2be v0.1.52
9db5330 Remove explicit arm instruction set
d06bd31 Merge pull request #161 from svix-jbrown/feat/stats-json
eb4a16d simplify API
e1fd9eb fix up some tests
6805298 v0.1.51
ba2c9b1 Fix extended v3
84969eb Merge pull request #160 from Havunen/feat/adjust_build_to_match_mimalloc
843b9b2 Updated mimalloc to 3.3.2 and 2.3.2
da7a09c feat: expose mi_stats_get_json and a safe wrapper around it
Additional commits viewable in compare view

Updates arc-swap from 1.9.1 to 1.9.2

Changelog

Sourced from arc-swap's changelog.

1.9.2

Document RefCnt must not panic (#208).

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…0 updates Bumps the minor-and-patch group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.1` | `1.23.4` | | [dashmap](https://github.com/xacrimon/dashmap) | `6.1.0` | `6.2.1` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [hyper](https://github.com/hyperium/hyper) | `1.9.0` | `1.10.1` | | [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.2` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.0` | | [mimalloc](https://github.com/purpleprotocol/mimalloc_rust) | `0.1.50` | `0.1.52` | | [arc-swap](https://github.com/vorner/arc-swap) | `1.9.1` | `1.9.2` | Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `uuid` from 1.23.1 to 1.23.4 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.1...v1.23.4) Updates `dashmap` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/xacrimon/dashmap/releases) - [Commits](xacrimon/dashmap@v6.1.0...v6.2.1) Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `hyper` from 1.9.0 to 1.10.1 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.9.0...v1.10.1) Updates `http` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.0...v1.4.2) Updates `bytes` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.0) Updates `mimalloc` from 0.1.50 to 0.1.52 - [Release notes](https://github.com/purpleprotocol/mimalloc_rust/releases) - [Commits](purpleprotocol/mimalloc_rust@v0.1.50...v0.1.52) Updates `arc-swap` from 1.9.1 to 1.9.2 - [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md) - [Commits](https://github.com/vorner/arc-swap/commits) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: uuid dependency-version: 1.23.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dashmap dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: hyper dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: http dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: bytes dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: mimalloc dependency-version: 0.1.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: arc-swap dependency-version: 1.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 30, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the minor-and-patch group across 1 directory with 10 updates#157

chore(deps): bump the minor-and-patch group across 1 directory with 10 updates#157
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-and-patch-f19f25656b

dependabot Bot commented on behalf of github Jun 30, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.0.150

0.4.45

What's Changed

v1.23.4

What's Changed

New Contributors

v1.23.3

What's Changed

v1.23.2

What's Changed

v6.2.1

1.0.103

v1.10.1

What's Changed

v1.10.0

Features

Bug Fixes

Refactors, chores, et al

New Contributors

v1.10.1 (2026-05-29)

Bug Fixes

v1.10.0 (2026-05-27)

Bug Fixes

Features

v1.4.1

tl;dr

What's Changed

New Contributors

1.4.2 (June 8, 2026)

1.4.1 (May 25, 2026)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

1.12.0 (June 18th, 2026)

Added

Fixed

Changed

Documented

Version 0.1.52

Changes

Version 0.1.51

Changes

1.9.2

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 30, 2026 •

edited

Loading