Skip to content

build(deps): bump the all group across 1 directory with 11 updates - #31

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-a57757e663
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-a57757e663

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all group with 11 updates in the / directory:

Package From To
tokio 1.53.1 1.53.3
serde_json 1.0.151 1.0.154
thiserror 2.0.20 2.0.21
schemars 1.2.2 1.2.3
kreuzberg 4.10.3 4.10.4
zip 8.6.0 9.0.4
zstd 0.14.0 0.14.3
rmcp 3.4.0 3.5.1
libc 0.2.189 0.2.190
proptest 1.11.0 1.12.0
tokio-util 0.7.19 0.7.20

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

  • io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

  • io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

  • io: wake and drop DuplexStream wakers outside the lock (#8618)
  • macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
  • runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
  • sync: wake waiters outside the lock when closing a semaphore (#8529)
  • test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

  • rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits
  • a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
  • df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
  • f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
  • 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
  • 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
  • c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
  • 0448618 sync: make tracing_sync tests synchronous (#8427)
  • 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
  • bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
  • 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates schemars from 1.2.2 to 1.2.3

Release notes

Sourced from schemars's releases.

v1.2.3

Fixed

Changed

Changelog

Sourced from schemars's changelog.

[1.2.3] - 2026-10-12

Fixed

Changed

Commits
  • 4791bb7 v1.2.3
  • c6a89b7 Put the tag of an internally tagged enum first in properties
  • c5cd8b5 fix: schema creation panics with arbitrary precision JSON numbers
  • 766d70b Resolve unused_qualifications lint in crate and generated code - #541 (#541)
  • d07655e Resolve clippy error
  • See full diff in compare view

Updates kreuzberg from 4.10.3 to 4.10.4

Release notes

Sourced from kreuzberg's releases.

v4.10.4

[4.10.4] - 2026-09-21

Patch release: CLI acceleration and output-formatting fixes, a dependency refresh, and a TLS advisory bump.

Fixed

  • CLI release binaries honour ORT_DYLIB_PATH. The CLI statically linked its bundled CPU ONNX Runtime, so --acceleration cuda failed with "CUDA execution provider requested but not available" even when ORT_DYLIB_PATH pointed at a GPU-enabled runtime. Release artifacts now load ONNX Runtime dynamically and ship a CPU fallback next to the binary. (#8)
  • Markdown formatting is no longer stripped from DOCX, EPUB and CSV output. (#5)
  • kreuzberg-tesseract releases the native text array when UTF-8 conversion fails, closing an error-path leak. (#7)

Security

  • rustls bumped past RUSTSEC-2026-0285. TLS 1.3 handshake messages were accepted across encryption-level boundaries; fixed in 0.23.45.

Changed

  • Dependency refresh: liter-llm 1.19 → 2.0.3, tree-sitter-language-pack 1.16.1 → 1.20.0, html-to-markdown-rs 3.12.0 → 3.14.3, and in-range bumps to reqwest, toml, encoding_rs, mail-parser, rmcp and cc.
  • Breaking dependency bumps: cfb 0.15, comrak 0.55, lzma-rust2 0.21, dirs 7, lopdf 0.45, jsonschema 0.56, bindgen 0.73.
  • The Node package builds with pnpm 12 (two-document lockfile).
  • Internal: shell sources are formatted by poly, and the script test suite gains Bats and Pester coverage.
Changelog

Sourced from kreuzberg's changelog.

[4.10.4] - 2026-09-21

Patch release: CLI acceleration and output-formatting fixes, a dependency refresh, and a TLS advisory bump.

Fixed

  • CLI release binaries honour ORT_DYLIB_PATH. The CLI statically linked its bundled CPU ONNX Runtime, so --acceleration cuda failed with "CUDA execution provider requested but not available" even when ORT_DYLIB_PATH pointed at a GPU-enabled runtime. Release artifacts now load ONNX Runtime dynamically and ship a CPU fallback next to the binary. (#8)
  • Markdown formatting is no longer stripped from DOCX, EPUB and CSV output. (#5)
  • kreuzberg-tesseract releases the native text array when UTF-8 conversion fails, closing an error-path leak. (#7)

Security

  • rustls bumped past RUSTSEC-2026-0285. TLS 1.3 handshake messages were accepted across encryption-level boundaries; fixed in 0.23.45.

Changed

  • Dependency refresh: liter-llm 1.19 → 2.0.3, tree-sitter-language-pack 1.16.1 → 1.20.0, html-to-markdown-rs 3.12.0 → 3.14.3, and in-range bumps to reqwest, toml, encoding_rs, mail-parser, rmcp and cc.
  • Breaking dependency bumps: cfb 0.15, comrak 0.55, lzma-rust2 0.21, dirs 7, lopdf 0.45, jsonschema 0.56, bindgen 0.73.
  • The Node package builds with pnpm 12 (two-document lockfile).
  • Internal: shell sources are formatted by poly, and the script test suite gains Bats and Pester coverage.
Commits
  • b8c96b3 chore(release): prepare 4.10.4
  • 1094f00 fix(cli): load ONNX Runtime dynamically in release artifacts
  • 331c19d fix(extraction): restore markdown formatting output (#5)
  • ef63bc0 chore(deps): breaking dependency bumps
  • 507ea51 chore(deps): compatible dependency bumps
  • 197fa60 chore(deps): bump liter-llm, tree-sitter-language-pack, html-to-markdown-rs
  • a66c5ec docs(ai-rulez): point the skills at modules that became directories
  • 15182af fix(deps): bump rustls past RUSTSEC-2026-0285
  • fda4a14 style(shell): let poly format shell sources
  • f6b3f98 test(scripts): cover scripts/lib/tessdata.sh
  • Additional commits viewable in compare view

Updates zip from 8.6.0 to 9.0.4

Release notes

Sourced from zip's releases.

v9.0.4

🐛 Bug Fixes

  • enclosed_name rejects a separator inside one verbatim path component (#1066)
  • return Ok(None) when read_zipfile_from_stream is called on an empty archive (#1063)

⚙️ Miscellaneous Tasks

  • Revert impl Copy for Zip64CentralDirectoryEndLocator due to failing semver check, fix CI where most Miri tests weren't running, and other fixes so other PRs can pass CI (#1065)
  • update lzma-rust2 and ppmd-rust dependencies (#1060)

v9.0.3

🐛 Bug Fixes

  • Preserve directories' read-only status when extracting on non-Unix systems (#1054)

v9.0.1

🐛 Bug Fixes

  • set_permissions was still following symlinks in non-streaming extraction (#1038)
  • two arithmetic overflows in the implode decoder (#1028)
  • reject an empty archive whose central directory offset is past the EOCD (#1025)
  • don't panic when two entries extract to the same path (#1023)
  • fail reads that exceed the declared uncompressed size (#1022)
  • shrink decoder skipped LZW code 8191 (#1029)
  • write only the sentinel-marked values in a central ZIP64 field (#1027)

v9.0.0

🚀 Features

  • add ZipFileBuilder for parallelizing compression (#911)
  • add method by_index_with_data_descriptor (#994)
  • add len, is_empty and entry to ZipArchiveMetadata (#1015)
  • read data descriptor from binary (#990)
  • add comment and test for ZipStreamReader and symlinks (#985)
  • (write) add ZipWriter::hide_file for in-place entry deletion (#924)
  • add compression (#948)
  • add test to in place modification (#945)
  • move CustomExtraField to own file (#941)
  • add a test on enum size (#939)
  • use ZipFileEntry instead of ZipStreamFileMetadata (#935)
  • add ZipFileEntry with no Reader (#933)
  • change aes_mode to aes_settings() in ZipFileData (#925)
  • cleanup and harmonize extra fields (#923)
  • Rewrite zip64 extra (#913)

🐛 Bug Fixes

  • reading an empty AES entry again at EOF returns Ok(0) (#1024)
  • reject ZIP64 sizes that overflow u64 when computing data end offsets (#1036)

... (truncated)

Changelog

Sourced from zip's changelog.

9.0.4 - 2026-10-16

🐛 Bug Fixes

  • enclosed_name rejects a separator inside one verbatim path component (#1066)
  • return Ok(None) when read_zipfile_from_stream is called on an empty archive (#1063)

⚙️ Miscellaneous Tasks

  • Revert impl Copy for Zip64CentralDirectoryEndLocator due to failing semver check, fix CI where most Miri tests weren't running, and other fixes so other PRs can pass CI (#1065)
  • update lzma-rust2 and ppmd-rust dependencies (#1060)

9.0.3 - 2026-10-13

🐛 Bug Fixes

  • Preserve directories' read-only status when extracting on non-Unix systems (#1054)

9.0.2 - 2026-10-11

🐛 Bug Fixes

  • additional bug fixes for symlink extraction

9.0.1 - 2026-10-10

🐛 Bug Fixes

  • set_permissions was still following symlinks in non-streaming extraction (#1038)
  • two arithmetic overflows in the implode decoder (#1028)
  • reject an empty archive whose central directory offset is past the EOCD (#1025)
  • don't panic when two entries extract to the same path (#1023)
  • fail reads that exceed the declared uncompressed size (#1022)
  • shrink decoder skipped LZW code 8191 (#1029)
  • write only the sentinel-marked values in a central ZIP64 field (#1027)

9.0.0 - 2026-10-08

🚀 Features

  • add ZipFileBuilder for parallelizing compression (#911)
  • add method by_index_with_data_descriptor (#994)
  • add len, is_empty and entry to ZipArchiveMetadata (#1015)
  • read data descriptor from binary (#990)
  • add comment and test for ZipStreamReader and symlinks (#985)
  • (write) add ZipWriter::hide_file for in-place entry deletion (#924)
  • add compression (#948)
  • add test to in place modification (#945)
  • move CustomExtraField to own file (#941)
  • add a test on enum size (#939)

... (truncated)

Commits
  • 7d99886 chore: release v9.0.4 (#1071)
  • f61665e ci(deps): bump the codeql group with 2 updates (#1072)
  • 3f4f58c ci(deps): bump release-plz/action from 0.5.139 to 0.5.140 (#1069)
  • 8853a03 ci(deps): bump step-security/harden-runner from 2.22.0 to 2.22.1 (#1070)
  • 3ea38eb ci(fuzz): Write errors to stderr rather than stdout (#1064)
  • a5a1a66 ci(deps): bump github/codeql-action/upload-sarif from 4.38.2 to 4.38.3 (#1073)
  • ca70ca9 ci(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1068)
  • 9d76832 fix: enclosed_name rejects a separator inside one verbatim path component (#1...
  • 0ebefb8 fix: return Ok(None) when read_zipfile_from_stream is called on an empty ar...
  • b7c1a5b ci: Exit read fuzzing early if a crash occurs (#1062)
  • Additional commits viewable in compare view

Updates zstd from 0.14.0 to 0.14.3

Commits
  • 75bc740 Release zstd 0.14.3, zstd-safe 8.2.0, and zstd-sys 2.1.2
  • 1c580b6 zstd-safe: keep the one-shot reset check inline
  • 502ee2f zstd-safe: only reset after one-shot decompression if a stream may be open
  • 5ded6e0 zstd-safe: apply rustfmt
  • e224018 zstd-safe: refuse to unload a dictionary under unfinished zstdmt jobs
  • 6a1065b Stop a single_frame() decoder when finish_frame() ends the frame
  • c7156df Don't let finish_frame() start a frame nothing was read from
  • b0fb8a7 Add write::Decoder::finish() to report incomplete frames
  • ab34d01 Don't retry a panicked writer when dropping AutoFlushDecoder/AutoFinishEncoder
  • 74ace2d Reset the borrowed context's session in raw::{Encoder,Decoder}::with_context
  • Additional commits viewable in compare view

Updates rmcp from 3.4.0 to 3.5.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.5.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.1

Fixed

  • (server) keep discover lifecycle bootstrap-neutral (#1248)
  • keep handler-generated invalid params errors in-band (#1322)
  • (model) export object! macro without macros feature (#1318)
  • (server) default missing cache hints for 2026-07-28 peers (#1308)

Other

  • [rmcp] Notify credential stores when a refresh token is rejected (#1285)

rmcp-macros-v3.5.0

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.0

Added

  • update LATEST and add LATEST_WITH_INITIALIZE (#1105)

Fixed

  • (model) decode float fields through serde_json::Number (#1300)
  • (rmcp) reject duplicate sep-2243 headers (#1274)
  • (transport) match explicit default ports in Origin allowlist (#1270)
  • (rmcp) tolerate empty cacheScope instead of silently dropping the whole result (#1281)
  • (model) preserve explicit null structuredContent in CallToolResult (#1295)

Other

  • cargo fmt fixes on validate_standard_headers changes (#1275)

rmcp-macros-v3.4.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.4.1

Fixed

  • (transport) fall back after JSON discover rejections (#1288)
  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

... (truncated)

Commits
  • 79437f2 chore: release v3.5.1 (#1307)
  • 4a226c7 fix(server): keep discover lifecycle bootstrap-neutral (#1248)
  • 931d471 chore(deps): bump the github-actions group with 6 updates (#1313)
  • cf1e9aa fix: keep handler-generated invalid params errors in-band (#1322)
  • deef9bb fix(model): export object! macro without macros feature (#1318)
  • c0d667e fix(server): default missing cache hints for 2026-07-28 peers (#1308)
  • 94c5c03 fix: use MSRV-aware dependency resolver (#1316)
  • 8f9a28e fix(examples): fix complex auth server discovery (#1309)
  • ae2f9c9 [rmcp] Notify credential stores when a refresh token is rejected (#1285)
  • bdd93dc ci: reject multi-line codex auth secret (#1306)
  • Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.190

Release notes

Sourced from libc's releases.

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

  • 32-bit Linux-GNU
  • 32-bit Linux-uClibc
  • 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
  • 32-bit Windows-GNU
  • ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...

Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

  • Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

  • Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)
  • Linux, NetBSD: Give statvfs a Default impl (#5583)
  • Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

  • Expose the libc_unstable_time64 cfg (#5411)
  • Android, Glibc: Add pthread_gettid_np (#5359)
  • Android: Add RTLD_NEXT (#5323)
  • Android: Add reuseport BPF socket options (#5366)
  • Apple: Add TCP header flags, options and SACK limits (#5358)
  • Apple: Add NET_RT_DUMP2 (#5442)
  • Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)
  • BSD: Add BPF_WORDALIGN (#5320)
  • BSD: Add lchmod and lchflags where supported (#5400)
  • BSD: Add minherit and related constants (#4849)
  • Docs: Add more links to public headers and manual pages (#5407), (#5485)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

  • 32-bit Linux-GNU
  • 32-bit Linux-uClibc
  • 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
  • 32-bit Windows-GNU
  • ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...

Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

  • Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

  • Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)
  • Linux, NetBSD: Give statvfs a Default impl (#5583)
  • Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

  • Expose the libc_unstable_time64 cfg (#5411)
  • Android, Glibc: Add pthread_gettid_np (#5359)
  • Android: Add RTLD_NEXT (#5323)
  • Android: Add reuseport BPF socket options (#5366)
  • Apple: Add TCP header flags, options and SACK limits (#5358)
  • Apple: Add NET_RT_DUMP2 (#5442)
  • Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)
  • BSD: Add BPF_WORDALIGN (#5320)
  • BSD: Add lchmod and lchflags where supported (#5400)
  • BSD: Add minherit and related constants (#4849)

... (truncated)

Commits
  • 7b0ab55 ci: Rename publish_0.2.yml to release.yaml
  • ac85dde ci: Sync release permissions with main
  • 8f8cd20 libc: Release 0.2.190
  • 052c6e6 changelog: Fix an incorrect commit link
  • ea19fd7 test: Remove explicit libc version
  • 6dbf3a2 dragonfly: Move INHERIT_ZERO to the freebsd module
  • 8a64766 apple: add posix_spawn_file_actions_add(f)chdir(_np)
  • 28de514 linux, netbsd: Give statvfs a Default impl
  • a58a95f cygwin: Change POSIX_SPAWN_* flags to c_short
  • d175264 apple: timeval32 is exhaustive
  • Additional commits viewable in compare view

Updates proptest from 1.11.0 to 1.12.0

Commits
  • 70cf37d Merge pull request #675 from proptest-rs/prep-1.12
  • 729e0ff prepare next releases and fix panic handling
  • 28c1fad Merge pull request #664 from Expyron/main
  • 5ddd9a4 Merge pull request #668 from toddATavail/fix-fork-persisted-failure
  • a6a9ac7 Merge pull request #673 from glaziermag/fix-book-deploy
  • d57d88b Replace rand_chacha with chacha20
  • 9411213 Deploy the book on pushes to main
  • 1719745 fix: terminate the fork replay when a persisted failure fails
  • 0f55b7a test: a persisted failure in a forked test must be reported
  • 4b0594e Merge pull request #669 from proptest-rs/no-fail-fast
  • Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.3` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [schemars](https://github.com/GREsau/schemars) | `1.2.2` | `1.2.3` |
| [kreuzberg](https://github.com/kreuzberg-dev/kreuzberg-lts) | `4.10.3` | `4.10.4` |
| [zip](https://github.com/zip-rs/zip2) | `8.6.0` | `9.0.4` |
| [zstd](https://github.com/gyscos/zstd-rs) | `0.14.0` | `0.14.3` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.4.0` | `3.5.1` |
| [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.190` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |



Updates `tokio` from 1.53.1 to 1.53.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.3)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `thiserror` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `schemars` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v1.2.2...v1.2.3)

Updates `kreuzberg` from 4.10.3 to 4.10.4
- [Release notes](https://github.com/kreuzberg-dev/kreuzberg-lts/releases)
- [Changelog](https://github.com/kreuzberg-dev/kreuzberg-lts/blob/main/CHANGELOG.md)
- [Commits](kreuzberg-dev/kreuzberg-lts@v4.10.3...v4.10.4)

Updates `zip` from 8.6.0 to 9.0.4
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v8.6.0...v9.0.4)

Updates `zstd` from 0.14.0 to 0.14.3
- [Release notes](https://github.com/gyscos/zstd-rs/releases)
- [Commits](gyscos/zstd-rs@v0.14.0...v0.14.3)

Updates `rmcp` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.4.0...rmcp-v3.5.1)

Updates `libc` from 0.2.189 to 0.2.190
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.190/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.189...0.2.190)

Updates `proptest` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.11.0...v1.12.0)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.53.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: schemars
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: kreuzberg
  dependency-version: 4.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: zip
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: zstd
  dependency-version: 0.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rmcp
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: libc
  dependency-version: 0.2.190
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: proptest
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@timorunge

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 21, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/all-a57757e663 branch October 21, 2026 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant