Skip to content

Bump the cargo-bump group across 1 directory with 16 updates#124

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/backend/cargo-bump-096fe0f6e7
Closed

Bump the cargo-bump group across 1 directory with 16 updates#124
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/backend/cargo-bump-096fe0f6e7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026 •
edited
Loading

Bumps the cargo-bump group with 16 updates in the /backend directory:

Package From To
tracing-opentelemetry 0.32.0 0.32.1
tracing 0.1.43 0.1.44
tokio 1.48.0 1.49.0
tower-http 0.6.7 0.6.8
axum 0.8.7 0.8.8
serde_json 1.0.145 1.0.149
serde_with 3.16.1 3.17.0
chrono 0.4.42 0.4.44
uuid 1.18.1 1.21.0
jsonwebtoken 10.2.0 10.3.0
anyhow 1.0.100 1.0.102
regex 1.12.2 1.12.3
url 2.5.7 2.5.8
thiserror 2.0.17 2.0.18
openai_dive 1.3.3 1.4.1
fantoccini 0.22.0 0.22.1

Updates tracing-opentelemetry from 0.32.0 to 0.32.1

Release notes

Sourced from tracing-opentelemetry's releases.

0.32.1

Added

  • allow OpenTelemetry context access with SpanRef (#234)
  • add event-counting filtering layer for spans (#228)
  • publicly export SetParentError

Fixed

  • fix panic in multithreaded follows-from

Other

  • Remove unwanted dependency on opentelemetry sdk crate (#241)
  • update README.md links to use the latest version (#239)
  • remove thiserror and unused dependencies (#238)
Changelog

Sourced from tracing-opentelemetry's changelog.

0.32.1 - 2025-12-17

Added

  • allow OpenTelemetry context access with SpanRef (#234)
  • add event-counting filtering layer for spans (#228)
  • publicly export SetParentError

Fixed

  • fix panic in multithreaded follows-from

Other

  • Remove unwanted dependency on opentelemetry sdk crate (#241)
  • update README.md links to use the latest version (#239)
  • remove thiserror and unused dependencies (#238)
Commits
  • feedb22 chore: prepare release of 0.32.1 (#246)
  • 99b934b feat: allow OpenTelemetry context access with SpanRef (#234)
  • 35be2a5 docs: add functionality rustdocs to layer
  • a31f8db fix: fix panic in multithreaded follows-from
  • 94fddb0 test: add test for mutlithreaded follows from panic
  • 6b81167 Remove unwanted dependency on opentelemetry sdk crate (#241)
  • 938a9a8 fix: fix broken compilation (#245)
  • 13f7ca2 feat: add event-counting filtering layer for spans (#228)
  • 884b00c chore: update README.md links to use the latest version (#239)
  • 79be94c chore: remove thiserror and unused dependencies (#238)
  • Additional commits viewable in compare view

Updates tracing from 0.1.43 to 0.1.44

Release notes

Sourced from tracing's releases.

tracing 0.1.44

Fixed

  • Fix record_all panic (#3432)

Changed

  • tracing-core: updated to 0.1.36 (#3440)

#3432: tokio-rs/tracing#3432 #3440: tokio-rs/tracing#3440

Commits

Updates tokio from 1.48.0 to 1.49.0

Release notes

Sourced from tokio's releases.

Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

  • net: add support for TCLASS option on IPv6 (#7781)
  • runtime: stabilize runtime::id::Id (#7125)
  • task: implement Extend for JoinSet (#7195)
  • task: stabilize the LocalSet::id() (#7776)

Changed

  • net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

  • macros: fix the hygiene issue of join! and try_join! (#7766)
  • runtime: revert "replace manual vtable definitions with Wake" (#7699)
  • sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)
  • task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

  • fs: handle EINTR in fs::write for io-uring (#7786)
  • fs: support io-uring with tokio::fs::read (#7696)
  • runtime: disable io-uring on EPERM (#7724)
  • time: add alternative timer for better multicore scalability (#7467)

Documented

  • docs: fix a typos in bounded.rs and park.rs (#7817)
  • io: add SyncIoBridge cross-references to copy and copy_buf (#7798)
  • io: doc that AsyncWrite does not inherit from std::io::Write (#7705)
  • metrics: clarify that num_alive_tasks is not strongly consistent (#7614)
  • net: clarify the cancellation safety of the TcpStream::peek (#7305)
  • net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)
  • net: clarify the platform-dependent backlog in TcpSocket docs (#7738)
  • runtime: mention LocalRuntime in new_current_thread docs (#7820)
  • sync: add missing period to mpsc::Sender::try_send docs (#7721)
  • sync: clarify the cancellation safety of oneshot::Receiver (#7780)
  • sync: improve the docs for the errors of mpsc (#7722)
  • task: add example for spawn_local usage on local runtime (#7689)

#7125: tokio-rs/tokio#7125 #7195: tokio-rs/tokio#7195 #7305: tokio-rs/tokio#7305 #7467: tokio-rs/tokio#7467 #7614: tokio-rs/tokio#7614 #7686: tokio-rs/tokio#7686 #7689: tokio-rs/tokio#7689

... (truncated)

Commits

Updates tower-http from 0.6.7 to 0.6.8

Release notes

Sourced from tower-http's releases.

tower-http-0.6.8

Fixed

  • Disable multiple_members in Gzip decoder, since HTTP context only uses one member. (#621)

#621: tower-rs/tower-http#621

What's Changed

New Contributors

Full Changelog: tower-rs/tower-http@tower-http-0.6.7...tower-http-0.6.8

Commits

Updates axum from 0.8.7 to 0.8.8

Release notes

Sourced from axum's releases.

axum v0.8.8

  • Clarify documentation for Router::route_layer (#3567)

#3567: tokio-rs/axum#3567

Commits
  • d07863f Release axum v0.8.8 and axum-extra v0.12.3
  • 287c674 axum-extra: Make typed-routing feature enable routing feature (#3514)
  • f5804aa SecondElementIs: Correct a small inconsistency (#3559)
  • f51f3ba axum-extra: Add trailing newline to pretty JSON response (#3526)
  • 816407a Fix integer underflow in try_range_response for empty files (#3566)
  • 78656eb docs: Clarify route_layer does not apply middleware to the fallback handler...
  • See full diff in compare view

Updates serde_json from 1.0.145 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Updates serde_with from 3.16.1 to 3.17.0

Release notes

Sourced from serde_with's releases.

serde_with v3.17.0

Added

  • Support OneOrMany with smallvec v1 (#920, #922)

Changed

  • Switch to yaml_serde for a maintained yaml dependency by @​kazan417 (#921)
  • Bump MSRV to 1.82, since that is required for yaml_serde dev-dependency.
Commits
  • 4031878 Bump version to v3.17.0 (#924)
  • 204ae56 Bump version to v3.17.0
  • 7812b5a serde_yaml 0.9 to yaml_serde 0.10 (#921)
  • 614bd89 Bump MSRV to 1.82 as required by yaml_serde
  • 518d0ed Suppress RUSTSEC-2026-0009 since we don't have untrusted time input in tests ...
  • a6579a8 Suppress RUSTSEC-2026-0009 since we don't have untrusted time input in tests
  • 9d4d069 Implement OneOrMany for smallvec_1::SmallVec (#922)
  • fc78243 Add changelog
  • 2b8c30b Implement OneOrMany for smallvec_1::SmallVec
  • 2d9b9a1 Carg.lock update
  • Additional commits viewable in compare view

Updates chrono from 0.4.42 to 0.4.44

Release notes

Sourced from chrono's releases.

0.4.44

What's Changed

0.4.43

What's Changed

Commits
  • c14b459 Bump version to 0.4.44
  • ea832c5 Add track_caller to non-deprecated functions
  • cfae889 Fix panic message in to_rfc2822
  • f8900b5 docs: match MSRV with Cargo.toml contents
  • 45caaa9 Update copyright year to 2026 in LICENSE.txt
  • 1c0b8f0 Bump version to 0.4.43
  • a03e43b Upgrade windows-bindgen to 0.66
  • 4fedaba Ignore bincode advisory
  • f4b7bbd Bump actions/checkout from 5 to 6
  • db12973 Added doctest for the NaiveDate years_since function (#1755)
  • Additional commits viewable in compare view

Updates uuid from 1.18.1 to 1.21.0

Release notes

Sourced from uuid's releases.

v1.21.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.20.0...v1.21.0

v1.20.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.19.0...v1.20.0

v1.19.0

What's Changed

Full Changelog: uuid-rs/uuid@v1.18.1...v1.19.0

Commits

Updates jsonwebtoken from 10.2.0 to 10.3.0

Changelog

Sourced from jsonwebtoken's changelog.

10.3.0 (2026-01-27)

  • Export everything needed to define your own CryptoProvider
  • Fix type confusion with exp/nbf when not required
Commits

Updates anyhow from 1.0.100 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

1.0.101

Commits
  • 5c657b3 Release 1.0.102
  • e737fb6 Merge pull request #442 from dtolnay/backtrace
  • 7fe62b5 Further simply backtrace conditional compilation
  • c8cb5ca Merge pull request #441 from dtolnay/backtrace
  • de27df7 Delete CI use of --features=backtrace
  • 9b67e5d Merge pull request #440 from dtolnay/backtrace
  • efdb11a Simplify std_backtrace conditional code
  • b8a9a70 Merge pull request #439 from dtolnay/backtrace
  • a42fc2c Remove feature = "backtrace" conditional code
  • 2a2a3ce Re-word backtrace feature comment
  • Additional commits viewable in compare view

Updates regex from 1.12.2 to 1.12.3

Changelog

Sourced from regex's changelog.

1.12.3 (2025-02-03)

This release excludes some unnecessary things from the archive published to crates.io. Specifically, fuzzing data and various shell scripts are now excluded. If you run into problems, please file an issue.

Improvements:

  • #1319: Switch from a Cargo exclude list to an include list, and exclude some unnecessary stuff.
Commits
  • b028e4f 1.12.3
  • 5e195de regex-automata-0.4.14
  • a3433f6 regex-syntax-0.8.9
  • 0c07fae regex-lite-0.1.9
  • 6a81006 cargo: exclude development scripts and fuzzing data
  • 4733e28 automata: fix onepass::DFA::try_search_slots panic when too many slots are ...
  • See full diff in compare view

Updates url from 2.5.7 to 2.5.8

Commits

Updates thiserror from 2.0.17 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

Commits
  • dc0f6a2 Release 2.0.18
  • 0275292 Touch up PR 443
  • 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
  • 995939c Reproduce issue 442
  • 21653d1 Made clippy lifetime allows conditional
  • 45e5388 Update actions/upload-artifact@v5 -> v6
  • 386aac1 Update actions/upload-artifact@v4 -> v5
  • ec50561 Update actions/checkout@v5 -> v6
  • 247eab5 Update name of empty_enum clippy lint
  • 91b181f Raise required compiler to Rust 1.68
  • Additional commits viewable in compare view

Updates openai_dive from 1.3.3 to 1.4.1

Release notes

Sourced from openai_dive's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: tjardoo/openai-client@1.4.0...1.4.1

v1.4.0

What's Changed

Full Changelog: tjardoo/openai-client@1.3.3...1.4.0

Commits

Updates fantoccini from 0.22.0 to 0.22.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the cargo-bump group across 1 directory with 16 updates
a6b605c 
Bumps the cargo-bump group with 16 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry) | `0.32.0` | `0.32.1` |
| [tracing](https://github.com/tokio-rs/tracing) | `0.1.43` | `0.1.44` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.49.0` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.7` | `0.6.8` |
| [axum](https://github.com/tokio-rs/axum) | `0.8.7` | `0.8.8` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.149` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.16.1` | `3.17.0` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.44` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.18.1` | `1.21.0` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.2.0` | `10.3.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.102` |
| [regex](https://github.com/rust-lang/regex) | `1.12.2` | `1.12.3` |
| [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.17` | `2.0.18` |
| [openai_dive](https://github.com/tjardoo/openai-client) | `1.3.3` | `1.4.1` |
| [fantoccini](https://github.com/jonhoo/fantoccini) | `0.22.0` | `0.22.1` |



Updates `tracing-opentelemetry` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases)
- [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md)
- [Commits](tokio-rs/tracing-opentelemetry@v0.32.0...v0.32.1)

Updates `tracing` from 0.1.43 to 0.1.44
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-0.1.43...tracing-0.1.44)

Updates `tokio` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.49.0)

Updates `tower-http` from 0.6.7 to 0.6.8
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.7...tower-http-0.6.8)

Updates `axum` from 0.8.7 to 0.8.8
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.8.7...axum-v0.8.8)

Updates `serde_json` from 1.0.145 to 1.0.149
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.149)

Updates `serde_with` from 3.16.1 to 3.17.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.16.1...v3.17.0)

Updates `chrono` from 0.4.42 to 0.4.44
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.42...v0.4.44)

Updates `uuid` from 1.18.1 to 1.21.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.18.1...v1.21.0)

Updates `jsonwebtoken` from 10.2.0 to 10.3.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.2.0...v10.3.0)

Updates `anyhow` from 1.0.100 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.102)

Updates `regex` from 1.12.2 to 1.12.3
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.2...1.12.3)

Updates `url` from 2.5.7 to 2.5.8
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](servo/rust-url@v2.5.7...v2.5.8)

Updates `thiserror` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.17...2.0.18)

Updates `openai_dive` from 1.3.3 to 1.4.1
- [Release notes](https://github.com/tjardoo/openai-client/releases)
- [Commits](tjardoo/openai-client@1.3.3...1.4.1)

Updates `fantoccini` from 0.22.0 to 0.22.1
- [Commits](jonhoo/fantoccini@v0.22.0...v0.22.1)

---
updated-dependencies:
- dependency-name: tracing-opentelemetry
  dependency-version: 0.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: tracing
  dependency-version: 0.1.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: tokio
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-bump
- dependency-name: tower-http
  dependency-version: 0.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: axum
  dependency-version: 0.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: serde_json
  dependency-version: 1.0.149
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: serde_with
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-bump
- dependency-name: chrono
  dependency-version: 0.4.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: uuid
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-bump
- dependency-name: jsonwebtoken
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-bump
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: regex
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: url
  dependency-version: 2.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
- dependency-name: openai_dive
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-bump
- dependency-name: fantoccini
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-bump
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 1, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 1, 2026
@dependabot dependabot bot deleted the dependabot/cargo/backend/cargo-bump-096fe0f6e7 branch April 1, 2026 01:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants