[dependabot]

Bumps the cargo-minor-patch group with 7 updates in the / directory:

Package	From	To
tokio	1.53.2	1.53.3
claude-codes	2.1.297	2.1.304
deepseek-harness-sdk	0.2.2	0.2.3
agent-client-protocol	3.3.0	3.4.0
rmcp	3.5.1	3.6.0
wat	1.261.0	1.262.0
wasmtime	49.0.2	49.0.4

Updates tokio from 1.53.2 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

• io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

• io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

• io: wake and drop DuplexStream wakers outside the lock (#8618)
• macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
• runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
• sync: wake waiters outside the lock when closing a semaphore (#8529)
• test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

• rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Commits

• a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
• df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
• f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
• 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
• 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
• c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
• 0448618 sync: make tracing_sync tests synchronous (#8427)
• 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
• bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
• 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
• Additional commits viewable in compare view

Updates claude-codes from 2.1.297 to 2.1.304

Commits

• See full diff in compare view

Updates deepseek-harness-sdk from 0.2.2 to 0.2.3

Release notes

Sourced from deepseek-harness-sdk's releases.

v0.2.3

[0.2.3] - 2026-10-17

Added

• DeepSeekHarness::resume_session restores a persisted session and returns a handle bound to its id: the stored identity and directory are kept, an interrupted final turn is repaired without sending input, and no replacement session is created. A missing, unreadable, or already-open/opening session is an error.
• Session::get_working_directory returns the session's effective working directory as a validated absolute path. An unknown session id creates the session, and a missing directory is recovered to its origin.
• Session::set_working_directory changes the session's working directory and returns the validated absolute path; a relative path resolves against the session's current directory, and the session origin and permissions are unchanged.
• HarnessClient carries the matching resume_session, get_working_directory, and set_working_directory methods for direct wire-level use.

Changed

• The CI keyless-runtime-handshake job now verifies the npm route against @deepseek-ai/dsh@0.2.1-rc.1. The exact version under test still lives in .github/workflows/ci.yml.
• No public-API break.

Changelog

Sourced from deepseek-harness-sdk's changelog.

[0.2.3] - 2026-10-17

Added

• DeepSeekHarness::resume_session restores a persisted session and returns a handle bound to its id: the stored identity and directory are kept, an interrupted final turn is repaired without sending input, and no replacement session is created. A missing, unreadable, or already-open/opening session is an error.
• Session::get_working_directory returns the session's effective working directory as a validated absolute path. An unknown session id creates the session, and a missing directory is recovered to its origin.
• Session::set_working_directory changes the session's working directory and returns the validated absolute path; a relative path resolves against the session's current directory, and the session origin and permissions are unchanged.
• HarnessClient carries the matching resume_session, get_working_directory, and set_working_directory methods for direct wire-level use.

Changed

• The CI keyless-runtime-handshake job now verifies the npm route against @deepseek-ai/dsh@0.2.1-rc.1. The exact version under test still lives in .github/workflows/ci.yml.
• No public-API break.

Commits

• 5ead7b9 chore(release): prepare v0.2.3 (#27)
• bcfa106 docs(knowledge): capture plan-criteria scope boundaries and extend the drift ...
• 401374e feat: adapt the SDK to dsh 0.2.1-rc.1 (new wire wrappers + verified baseline)...
• d4c5aee chore: ignore the local .video_agent/ plugin scratch
• 22969a3 docs(mstar): retire the knowledge index table now that the catalog is the reg...
• a838c39 docs(mstar): refresh harness AGENTS.md to the store-authority contracts
• See full diff in compare view

Updates agent-client-protocol from 3.3.0 to 3.4.0

Release notes

Sourced from agent-client-protocol's releases.

agent-client-protocol-conductor-v3.4.0

Fixed

• (acp) align protocol version negotiation (#424)

agent-client-protocol-cookbook-v3.4.0

Added

• (acp) update schema to 1.12.0 and align v2 lifecycle (#423)

agent-client-protocol-derive-v3.4.0

Other

• prepare v3 package metadata and release guidance (#404)

agent-client-protocol-http-v3.4.0

Added

• (config) [breaking] make public configuration APIs extensible (#403)

Fixed

• (http) [breaking] honor custom configuration with safe WebSocket handshakes (#333)
• avoid sensitive transport logs and redact trace URL credentials (#401)
• (http) gracefully finish client transports after builder completion (#396)
• (acp) [breaking] preserve connection lifetimes and graceful drain (#385)
• (acp) [breaking] preserve protocol-neutral raw JSON-RPC errors (#384)

Other

• prepare v3 package metadata and release guidance (#404)
• slim dependency features and CI validation (#399)

Breaking changes

• WebSocket URLs passed to HttpClient::with_client or with_endpoint_and_client now return WebSocketRequiresBuilder before network I/O. Migrate to builder(...).configure_http(...).build() or builder_with_endpoint(...) so the transport can enforce connection policies. See the migration guide.
• Unconfigured WebSockets now share reqwest's proxy discovery and TLS verification defaults, replacing direct connections and bundled WebPKI roots. Environment proxies, enabled system-proxy discovery, and platform certificate verification can change routing and trust. Use no_proxy() and explicit tls_certs_only roots when those defaults are not appropriate.

Deprecated

• Retain HttpClient::with_client and with_endpoint_and_client as deprecated

... (truncated)

Commits

• 4f82aef chore: release (#412)
• 0c2798b chore(deps): patch rustls advisories and document duplicate versions (#425)
• 53dd268 fix(acp): align protocol version negotiation (#424)
• b2456d1 feat(acp): update schema to 1.12.0 and align v2 lifecycle (#423)
• f5c0eef fix(deps): upgrade hmac and sha2 together (#422)
• edb8ee3 feat(deps): bump release-plz/action from 0.5.139 to 0.5.141 (#415)
• d8708df feat(deps): bump taiki-e/install-action from 2.87.22 to 2.87.27 (#416)
• 18d5dc6 feat(deps): bump dtolnay/rust-toolchain (#417)
• 5f7d097 feat(deps): bump crate-ci/typos from 1.50.3 to 1.51.1 (#418)
• 84f26ed feat(deps): bump the minor group with 3 updates (#419)
• Additional commits viewable in compare view

Updates rmcp from 3.5.1 to 3.6.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.6.0

Fixed

• (transport) accept nested x-mcp-header annotations (#1359)
• ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

• combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

rmcp-v3.6.0

Added

• (client) cancel an abandoned tools/call, prompts/get or resources/read (#1344)
• (auth) add initial authorization scope selection (#1352)
• (transport) add non-blocking stdio_pipes transport (#1304)

Fixed

• (server) reject requests to 2026-07-28 clients (#1326)
• (streamable-http-server) look up tool schemas per request (#1349)
• (transport) follow same-origin 307/308 redirects in the default Streamable HTTP client (#1367)
• (streamable-http-server) answer a session-less non-initialize POST with 400 (#1377)
• (model) read a request id written in float form as that integer (#1346)
• (client) answer a server ping during the initialize handshake (#1366)
• (transport) accept nested x-mcp-header annotations (#1359)
• (streamable-http-client) handle error responses to initialize (#1361)
• (transport) bound the incoming line buffer in AsyncRwTransport (#1049)
• (model) reject malformed JSON-RPC messages with conflicting result and error fields (#1283) (#1287)
• ship LICENSE in rmcp and rmcp-macros crates (#1342)
• (streamable-http-server) release the session map lock before waiting on a session (#1323)
• (rmcp) gate client- and server-only helpers behind their features (#1329)
• cancel pending request tokens after transport EOF (#1333)
• (rmcp) import base64-only prompt content types under the feature (#1314)

Other

• combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

Commits

• 74d7895 chore: release v3.6.0 (#1327)
• ad2a66a fix(server): reject requests to 2026-07-28 clients (#1326)
• c519c79 fix(streamable-http-server): look up tool schemas per request (#1349)
• be386d5 fix(transport): follow same-origin 307/308 redirects in the default Streamabl...
• 50fba5c fix(streamable-http-server): answer a session-less non-initialize POST with 4...
• 017e1c3 fix(model): read a request id written in float form as that integer (#1346)
• ad5a284 ci(labeler): drop path-based T-dependencies rule (#1368)
• a156be8 fix(client): answer a server ping during the initialize handshake (#1366)
• b7568b8 fix(transport): accept nested x-mcp-header annotations (#1359)
• ce3a57a feat(client): cancel an abandoned tools/call, prompts/get or resources/read (...
• Additional commits viewable in compare view

Updates wat from 1.261.0 to 1.262.0

Release notes

Sourced from wat's releases.

v1.262.0

What's Changed

• Fix an overflow during fuzzing by @​alexcrichton in bytecodealliance/wasm-tools#2749
• Add a FIXME for #2731 by @​alexcrichton in bytecodealliance/wasm-tools#2732
• Remove component names subsumed by external-id by @​alexcrichton in bytecodealliance/wasm-tools#2735
• Implement cm64 handling for thread.new-indirect by @​alexcrichton in bytecodealliance/wasm-tools#2733
• Limit types in rec groups in components by @​alexcrichton in bytecodealliance/wasm-tools#2726
• Improve handling of exact functions in components by @​alexcrichton in bytecodealliance/wasm-tools#2729
• Fix some edge case behavior of btree collections by @​alexcrichton in bytecodealliance/wasm-tools#2751
• Fix subtyping of globals in components by @​alexcrichton in bytecodealliance/wasm-tools#2750
• Fix type checks in components w.r.t. kebab-names by @​alexcrichton in bytecodealliance/wasm-tools#2752
• Increase the maximum number of tables by @​alexcrichton in bytecodealliance/wasm-tools#2756
• Fix some minor issues with components and named imports by @​alexcrichton in bytecodealliance/wasm-tools#2753
• Fix a panic validating components & resources by @​alexcrichton in bytecodealliance/wasm-tools#2754
• Fix a panic when processing an invalid component by @​alexcrichton in bytecodealliance/wasm-tools#2757
• Fix an exponential algorithm validating components by @​alexcrichton in bytecodealliance/wasm-tools#2755
• Fix some minor issues with incremental-parse fuzzer by @​alexcrichton in bytecodealliance/wasm-tools#2759
• Disallow borrow types in task.return immediates by @​alexcrichton in bytecodealliance/wasm-tools#2761
• Scope the debug-only arity-tracking a bit more by @​alexcrichton in bytecodealliance/wasm-tools#2758
• OperatorValidator: reduce debug state used to check arity by @​keithw in bytecodealliance/wasm-tools#2762
• Revert "feat(wit-parser): Add support for a custom WIT package deps path (#2677)" by @​celarye in bytecodealliance/wasm-tools#2764
• wasmparser: share the function subtyping check by @​Lstarsky0 in bytecodealliance/wasm-tools#2765
• Make component target semver compatible by @​chenyan2002 in bytecodealliance/wasm-tools#2763
• Keep track of more type depth in wit-smith by @​alexcrichton in bytecodealliance/wasm-tools#2769
• Remove explicit_resources maps by @​alexcrichton in bytecodealliance/wasm-tools#2760
• Rename versionsuffix to version-suffix in the text format by @​alexcrichton in bytecodealliance/wasm-tools#2770
• Release wasm-tools 1.262.0 by @​github-actions[bot] in bytecodealliance/wasm-tools#2771

Full Changelog: bytecodealliance/wasm-tools@v1.261.0...v1.262.0

Commits

• e22db44 Release wasm-tools 1.262.0 (#2771)
• 943c264 Rename versionsuffix to version-suffix in the text format (#2770)
• e578749 Remove explicit_resources maps (#2760)
• 085e7fe Keep track of more type depth in wit-smith (#2769)
• e3623d9 Make component target semver compatible (#2763)
• 3505209 Revert "feat(wit-parser): Add support for a custom WIT package deps path (#...
• 1c27a83 wasmparser: share the function subtyping check (#2765)
• 96376d3 OperatorValidator: reduce state used to check arity in debug builds (#2762)
• 80c84bc Scope the debug-only arity-tracking a bit more (#2758)
• b37603a Disallow borrow types in task.return immediates (#2761)
• Additional commits viewable in compare view

Updates wasmtime from 49.0.2 to 49.0.4

Release notes

Sourced from wasmtime's releases.

v49.0.4

49.0.4

Released 2026-10-19.

Fixed

• wasi-http: Guests can add conflicting content lengths to messages GHSA-r8xh-cgf7-392j
• wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook GHSA-jxcf-8qw5-5c33
• wasi-http p3: Guests can set incorrect content-length for spliced response bodies GHSA-9prg-84vf-g5fc
• Cranelift backend on aarch64 can jump to incorrect target on large Wasm br_table instruction GHSA-mghf-wjfp-p5xm
• Update rustls to 0.23.46 #14767
• Panic lowering a host-created component model stream into a guest that expects a different payload type. GHSA-9pvw-hwfg-92h5

v49.0.3

49.0.3

Released 2026-10-14.

Fixed

• Out-of-bounds zero-length stream writes can panic. GHSA-93g3-36p8-x2gc

• Host panic when component call_async is cancelled under some conditions. GHSA-3r89-v5mq-j5xf

• Panic on erroneous call-to-host from guest realloc call. GHSA-7v24-42x9-pxf7

• Yielding in a component start function can lead to a host panic. GHSA-5hhx-4wrr-3j9g

• Panic when invoking an async-lifted function via call. GHSA-m6w2-jwq2-cv2c

• Panic when pending calls are run after a trap. GHSA-hmwq-g22x-qjw5

• Stack overflow dropping a long chain of recursive types. GHSA-wjc8-633q-pwxr

• Wasmtime may not properly enforce async-entrypoint requirement. GHSA-vcg5-q8m5-8379

... (truncated)

Changelog

Sourced from wasmtime's changelog.

49.0.4

Released 2026-10-19.

Fixed

• wasi-http: Guests can add conflicting content lengths to messages GHSA-r8xh-cgf7-392j
• wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook GHSA-jxcf-8qw5-5c33
• wasi-http p3: Guests can set incorrect content-length for spliced response bodies GHSA-9prg-84vf-g5fc
• Cranelift backend on aarch64 can jump to incorrect target on large Wasm br_table instruction GHSA-mghf-wjfp-p5xm
• Update rustls to 0.23.46 #14767
• Panic lowering a host-created component model stream into a guest that expects a different payload type. GHSA-9pvw-hwfg-92h5

---

49.0.3

Released 2026-10-14.

Fixed

• Out-of-bounds zero-length stream writes can panic. GHSA-93g3-36p8-x2gc

• Host panic when component call_async is cancelled under some conditions. GHSA-3r89-v5mq-j5xf

• Panic on erroneous call-to-host from guest realloc call. GHSA-7v24-42x9-pxf7

• Yielding in a component start function can lead to a host panic. GHSA-5hhx-4wrr-3j9g

• Panic when invoking an async-lifted function via call. GHSA-m6w2-jwq2-cv2c

• Panic when pending calls are run after a trap. GHSA-hmwq-g22x-qjw5

• Stack overflow dropping a long chain of recursive types. GHSA-wjc8-633q-pwxr

• Wasmtime may not properly enforce async-entrypoint requirement. GHSA-vcg5-q8m5-8379

... (truncated)

Commits

• 2c29702 Release Wasmtime 49.0.4 (#14816)
• 9945498 Security Fixes for release 49.0.4 (#14820)
• 9fcbded [release-49] update rustls to 0.23.46 (#14767)
• f96eaba Release Wasmtime 49.0.3 (#14725)
• 61959b2 [49.0.x] Combined backports for today's security release (#14721)
• 8ffaab7 Update logic for finding the run for a release (#14494) (#14499)
• 4efb695 Fix a flaky test failure (#14489) (#14492)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions