Bump the cargo group across 1 directory with 18 updates by dependabot[bot] · Pull Request #24 · kloudlite/rustic-git

dependabot · 2026-09-12T05:52:35Z

Bumps the cargo group with 18 updates in the / directory:

Package	From	To
slatedb	`0.15.0`	`0.16.0`
russh	`0.62.6`	`0.63.3`
flate2	`1.1.9`	`1.1.10`
rand	`0.8.7`	`0.10.2`
base64	`0.22.1`	`0.23.1`
sha2	`0.10.9`	`0.11.0`
rustls	`0.23.43`	`0.23.44`
reqwest	`0.13.4`	`0.13.5`
imara-diff	`0.1.8`	`0.2.0`
redis	`0.27.6`	`1.6.0`
mongodb	`3.8.0`	`3.9.1`
tower-http	`0.6.11`	`0.7.1`
slatedb-common	`0.15.0`	`0.16.0`
notify	`7.0.0`	`8.2.0`
tokio-tungstenite	`0.29.0`	`0.30.0`
socket2	`0.5.10`	`0.6.5`
dirs	`6.0.0`	`7.0.0`
open	`5.4.2`	`5.4.4`

Updates slatedb from 0.15.0 to 0.16.0

Release notes

Sourced from slatedb's releases.

v0.16.0

What's Changed

add distributed compaction blog post by @agavra in slatedb/slatedb#1929

[rfc-30 2/N]: add traits for WAL iteration and update replay paths by @rodesai in slatedb/slatedb#1976

disallow clone with projection when WAL must be copied by @rodesai in slatedb/slatedb#1984

Clarify TTL millisecond units by @criccomini in slatedb/slatedb#1989

remove notifiers from WalBuffer by @rodesai in slatedb/slatedb#1987

Remove await_durable from WriteOptions by @criccomini in slatedb/slatedb#1985

test(dst): vary scan options by @bowenli86 in slatedb/slatedb#1952

Add cooperative yield points to SST build and compaction merge loops by @sorenbs in slatedb/slatedb#1964

Increase default GC interval to 10 minutes by @criccomini in slatedb/slatedb#1993

Remove unnecessary SR clones in scan APIs by @nomiero in slatedb/slatedb#1994

Disable descending scan checks in DST by @criccomini in slatedb/slatedb#1996

Deflake object store cache metrics test by @criccomini in slatedb/slatedb#1997

Allow closing a DB without flushing the active memtable by @Aetherance in slatedb/slatedb#1948

site: add Prisma to adopter listings by @criccomini in slatedb/slatedb#1999

Add consume_budget in hot loops to help Tokio by @criccomini in slatedb/slatedb#1998

[rfc-30 3/N]: add trait and native implementation for wal gc by @rodesai in slatedb/slatedb#2000

fix(compactor): prevent terminal compaction resurrection by @criccomini in slatedb/slatedb#2002

Add cleanup_db admin fn and cli command for clone teardown by @bit2swaz in slatedb/slatedb#2001

Run nightly pprof on a Warp ARM runner by @criccomini in slatedb/slatedb#2008

[1972] Expose manifest version count as a metric by @1996fanrui in slatedb/slatedb#1974

[rfc-30 4/N]: move max wal file flush check to wal trait by @rodesai in slatedb/slatedb#2007

Actually skip the WAL at DbReader open when skip_wal_replay is set (helps #2003) by @Ten0 in slatedb/slatedb#2005

make close flush mode more explicit by using explicit flush type by @rodesai in slatedb/slatedb#2011

Replace nightly bencher work with benchmark.slatedb.io by @criccomini in slatedb/slatedb#2009

Run nightly microbenchmarks on Warp ARM by @criccomini in slatedb/slatedb#2016

Select previous release tag dynamically by @criccomini in slatedb/slatedb#2017

[rfc-30 5/N]: add WalAdmin trait for administrative wal operations by @rodesai in slatedb/slatedb#2014

[2004] Do not invoke user metrics callbacks under the db.state write lock by @1996fanrui in slatedb/slatedb#2006

Expose SstFile::index as an opaque view instead of copying data. by @FiV0 in slatedb/slatedb#2019

[rfc-30 6/N]: wire custom WAL into builders by @rodesai in slatedb/slatedb#2015

test(wal_replay): fix write_wal helper to respect max_entries by @codeAnqiang-ma in slatedb/slatedb#2023

Enable unused_qualifications and drop redundant path prefixes by @1996fanrui in slatedb/slatedb#2020

example: Add a rescaling example by @rockwotj in slatedb/slatedb#2028

Add benchmark.slatedb.io blog post by @criccomini in slatedb/slatedb#2026

[rfc-30 7/N]: move all wal implementation types under the wal module by @rodesai in slatedb/slatedb#2029

union: validate non-overlapping key ranges per segment by @rockwotj in slatedb/slatedb#2030

[rfc-30 8/N]: support live streaming from SlateDbWalIterator and use for CDC by @rodesai in slatedb/slatedb#2032

configure sst iterator read ahead using bytes by @rodesai in slatedb/slatedb#2037

perf(wal): read a whole WAL SST per request during replay (#2003) by @bit2swaz in slatedb/slatedb#2042

Remove SQLync from Adopters by @mdwaud in slatedb/slatedb#2045

Tolerate manifests GCed during admin.list_manifests by @Efrat19 in slatedb/slatedb#2047

add lixray as adopter by @samuelstroschein in slatedb/slatedb#2050

Propose tracing instrumentation for read path by @cadonna in slatedb/slatedb#2035

add tracing options to read path by @cadonna in slatedb/slatedb#2046

fix: preserve sequence tracker interval after deserialization by @criccomini in slatedb/slatedb#2053

manifest: write ManifestV2 universally (#2055) by @rkhachatryan in slatedb/slatedb#2056

move wal read/write paths to their own types under wal module by @rodesai in slatedb/slatedb#2052

docs: fix typo wihtout -> without by @vaibhav8a in slatedb/slatedb#2057

... (truncated)

Commits

3fb9e8a Bump version to 0.16.0
4919857 docs: fix typo wihtout -> without (#2057)
ea75d12 move wal read/write paths to their own types under wal module (#2052)
c325738 manifest: write ManifestV2 universally (#2055) (#2056)
ae07acd fix: preserve sequence tracker interval after deserialization (#2053)
31656fe add tracing options to read path (#2046)
5d0da8d Propose tracing instrumentation for read path (#2035)
a6f0522 add lixray as adopter (#2050)
dd5a227 Tolerate manifests GCed during admin.list_manifests (#2047)
84775a8 Remove SQLync from Adopters (#2045)
Additional commits viewable in compare view

Updates russh from 0.62.6 to 0.63.3

Release notes

Sourced from russh's releases.

v0.63.3

Fixes

c13b259: enforce inactivity timeout even during stalled writes (Eugene)

v0.63.2

Security fixes

GHSA-g4mp-vgx3-xrvm - out-of-bounds read in pageant

A malicious Pageant agent could cause an out-of-bounds read / oversized allocation in the pageant library user.

GHSA-35g8-35p8-c8fw - unbounded memory allocation in server

An authenticated client could trigger unbounded memory allocation during rekey phase

Fixes

client: encode the negotiated hash algorithm for RSA certificates (#764) #764 (Jeongkyu Shin)

4206815: Fix pty-req terminal modes: deliver them unpadded, encode the right l… (#755) (tluyben) #755

b1d3893: fixed #762 - redact sensitive data from debug logging (Eugene)

66789f4: fixed #761 - data write split across a kex breaks (Eugene)

a04e1b5: fixed #758 - fail RSA signing explicitly when RSA feature is not enabled (Eugene)

422123c: dedup zlib compress loop into compress_into (Eugene)

v0.63.1

Security fixes

GHSA-47hw-gvq5-r2gm - client-side Handler callbacks reachable with invalid channel IDs

A mirror of GHSA-m65r-rprj-r5rg for the client side - Handler per-channel callbacks are called even when the server supplies an invalid (never opened) channel ID. Depending on what the handler does this can lead to a vulnerability.

GHSA-p8qx-h547-fjw9 - MAC-requiring block cipher can be negotiated without MAC and panic

Two peers disagreeing on supported MACs can end up negotiating none MAC for a cipher that requires one, which leads to the session task panicking.

v0.63.0

Features

09f6582: Support host certificates on the client side (#752) (@biao29) #752

This changes the signature of Handler::check_server_key to take a new PublicKeyOrCertificate enum instead of &PublicKey

d7601ae: Support host certificates on the server side (#641) (Georg von Zengen) #641

Adds a Config::certificates that functions similarly to Config::keys

Fixes

f2354c7: improve strict kex checks (Eugene)

0363fde: fixed PKCS#8 parsing panicking on incorrect contents (Eugene)

46c927a: use constant-time comparison for agent unlock (Eugene)

8da8967: sanitize Curve25519 params (Eugene)

Full Changelog: Eugeny/russh@v0.62.7...v0.63.0

... (truncated)

Commits

f33baf4 v0.63.3
c13b259 enforce inactivity timeout if even during stalled writes
8a51a0d v0.63.2
422123c dedup zlib compress loop into compress_into
a04e1b5 fixed #758 - fail RSA signing explicitly when RSA feature is not enabled
af91598 fmt
b1d3893 fixed #762 - redact sensitive data from debug logging
a282af3 fix rekey message queueing
5d56698 fix read bounds in pageant
675b631 bump num-bigint
Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Updates rand from 0.8.7 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

Document required output order of fn partial_shuffle and apply #[must_use] (#1769)

Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

Document panic behavior of make_rng and add #[track_caller] (#1761)

Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).

Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)

Use Edition 2024 and MSRV 1.85 (#1653)

Let Fill be implemented for element types, not sliceable types (#1652)

Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)

Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)

Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)

Remove Clone support for StdRng, ReseedingRng (#1677)

Use postcard instead of bincode to test the serde feature (#1693)

Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)

Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)

Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)

Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)

Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)

Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

Removed ReseedingRng (#1722)

Removed unused feature "nightly" (#1732)

Removed feature small_rng (#1732)

... (truncated)

Commits

1540ea3 Prepare rand 0.10.2 (#1800)
a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
db14664 Check UniformChar validity on deser (#1790)
bea8620 Bump the all-deps group with 2 updates (#1796)
4f44932 Bump actions/cache from 5 to 6 (#1795)
b999a13 Bump actions/checkout from 6 to 7 (#1794)
aeab810 Avoid unsafe where safety depends on non-local values (#1791)
1896d7c Add typos CI job (#1789)
43eddee Bump the all-deps group with 2 updates (#1788)
Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

Make the tests build again on non-SIMD architectures

0.23.0

Added more consts for preconfigured configs and engines

Make DecodeError::InvalidLastSymbol more clear by including the decoded value

Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.

Update MSRV to 1.71.0

Add support for custom padding symbols

Commits

069bf70 v0.23.1
6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
7cffce6 Fix testing on architectures without unsafe SIMD support
e34f9a0 Merge pull request #308 from atouchet/com
e9240c9 Remove outdated comment
9e9220a v0.23.0
870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
fbec5f1 Document no trailing trailing bits
0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
f10b7e2 Update deps & edition
Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

ffe0939 Release sha2 0.11.0 (#806)
8991b65 Use the standard order of the [package] section fields (#807)
3d2bc57 sha2: refactor backends (#802)
faa55fb sha3: bump keccak to v0.2 (#803)
d3e6489 sha3 v0.11.0-rc.9 (#801)
bbf6f51 sha2: tweak backend docs (#800)
155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
ed514f2 Use published version of keccak v0.2 (#799)
702bcd8 Migrate to closure-based keccak (#796)
827c043 sha3 v0.11.0-rc.8 (#794)
Additional commits viewable in compare view

Updates rustls from 0.23.43 to 0.23.44

Commits

64ad386 Bump version to 0.23.44
1efbf66 bogo: remove PostQuantum setup
e78162f aws-lc-rs: add support for ML-DSA signatures
d880772 bogo: extract Options::provider() helper
87201d6 bogo: force all callers to get provider from Options
93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
eb57688 tls12: require known signature algorithm
e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
06a546d bogo: take latest
Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates imara-diff from 0.1.8 to 0.2.0

Release notes

Sourced from imara-diff's releases.

v0.2.0

This release changes the API to be more suitable for hunk post-processing and implements the Git slider adjustments.

What's Changed

CHANGELOG: remove duplicated top header by @ada4a in pascalkuthe/imara-diff#20

Fix spelling and typos by @Wilfred in pascalkuthe/imara-diff#23

New Contributors

@Wilfred made their first contribution in pascalkuthe/imara-diff#23

Full Changelog: pascalkuthe/imara-diff@v0.1.8...v0.2.0

Changelog

Sourced from imara-diff's changelog.

Changelog - imara-diff

All notable changes to imara-diff will be documented in this file. The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Commits

c0b655a fix test
4a02738 simplify API and add slider post-processing
1505ee1 Merge pull request #23 from Wilfred/fix_typos
198d5b4 Fix spelling and typos
984dede CHANGELOG: remove duplicated top header (#20)
See full diff in compare view

Updates redis from 0.27.6 to 1.6.0

Release notes

Sourced from redis's releases.

redis-1.6.0

Changes & Bug fixes

Add XNACK command for Redis streams (2119# by @StefanPalashev)

Allow limiting number of reconnect attempts (2298# by @nihohit)

Restrict sentinel creation to Sentinel nodes (2308# by @nihohit)

fix: cluster-async: propagate ASKING command failures (2305# by @freedom-winds)

Add CreateOptions for the Search module's FT.CREATE command [1/8] (2302# by @StefanPalashev)

fix: reset all nested redirect routes before retrying (2306# by @freedom-winds)

CI & operational improvements

Enable even more lints (2300# by @nihohit)

Enable more lints (2299# by @nihohit)

New Contributors

@freedom-winds made their first contribution in redis-rs/redis-rs#2305

Full Changelog: redis-rs/redis-rs@redis-1.5.0...redis-1.5.1

redis-1.5.0

Changes & Bug fixes

docs: Remove remarks about Redis docs to BF.MEXISTS being wrong (#2231 by @somechris)

Cluster connection: Add logs to indicate when recovery future starts and completes (#2240 by @virratanasangpunth)

feat(cluster): add node address map for TLS hostname remapping (#2155 by @DhineshKrishnan1206)

Async cluster connection: Reconnect after receiving push disconnection. (#2242 by @nihohit)

docs: Add the need for non_exhaustive for enums and structs (#2247 by @somechris)

Add support for the new FPHA storage hint (#2114 by @StefanPalashev)

CI & operational improvements

Fix nightly linter (#2258 by @StefanPalashev)

Versioning improvements to test infra (#2197 by @StefanPalashev)

redis-1.4.1

Changes & Bug fixes

Remove unnecessary sleep from cluster readonly error handling (#2223 by @nihohit)

CI & operational improvements

ci: Allow semicolon_in_expressions_from_macros to make nightly pass (#2218 by @somechris)

tests/acl: Add the missing requirements for token based authentication (#2214 by @somechris)

Makefile: Switch to --locked for module tests on RESP3 (#2222 by @somechris)

Full Changelog: redis-rs/redis-rs@redis-1.4.0...redis-1.4.1

redis-1.4.0

Changes & Bug fixes

... (truncated)

Commits

20f68ee Prepare new version (#2312)
ae053b3 fix: reset all nested redirect routes before retrying (#2306)
17e1be8 Add CreateOptions for the Search module's FT.CREATE command [1/8] (#2302)
f82e745 fix: cluster-async: propagate ASKING command failures (#2305)
bea951c Restrict sentinel creation to Sentinel nodes (#2308)
e2c3887 Enable even more lints (

coderabbitai · 2026-09-12T05:53:04Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 0c582875-0249-4bd0-a94d-8d536545767f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Bumps the cargo group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [slatedb](https://github.com/slatedb/slatedb) | `0.15.0` | `0.16.0` | | [russh](https://github.com/warp-tech/russh) | `0.62.6` | `0.63.3` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [rand](https://github.com/rust-random/rand) | `0.8.7` | `0.10.2` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` | | [rustls](https://github.com/rustls/rustls) | `0.23.43` | `0.23.44` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [imara-diff](https://github.com/pascalkuthe/imara-diff) | `0.1.8` | `0.2.0` | | [redis](https://github.com/redis-rs/redis-rs) | `0.27.6` | `1.6.0` | | [mongodb](https://github.com/mongodb/mongo-rust-driver) | `3.8.0` | `3.9.1` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.11` | `0.7.1` | | [slatedb-common](https://github.com/slatedb/slatedb) | `0.15.0` | `0.16.0` | | [notify](https://github.com/notify-rs/notify) | `7.0.0` | `8.2.0` | | [tokio-tungstenite](https://github.com/snapview/tokio-tungstenite) | `0.29.0` | `0.30.0` | | [socket2](https://github.com/rust-lang/socket2) | `0.5.10` | `0.6.5` | | dirs | `6.0.0` | `7.0.0` | | [open](https://github.com/Byron/open-rs) | `5.4.2` | `5.4.4` | Updates `slatedb` from 0.15.0 to 0.16.0 - [Release notes](https://github.com/slatedb/slatedb/releases) - [Changelog](https://github.com/slatedb/slatedb/blob/main/RELEASE.md) - [Commits](slatedb/slatedb@v0.15.0...v0.16.0) Updates `russh` from 0.62.6 to 0.63.3 - [Release notes](https://github.com/warp-tech/russh/releases) - [Commits](Eugeny/russh@v0.62.6...v0.63.3) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `rand` from 0.8.7 to 0.10.2 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.8.7...0.10.2) Updates `base64` from 0.22.1 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1) Updates `sha2` from 0.10.9 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) Updates `rustls` from 0.23.43 to 0.23.44 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.43...v/0.23.44) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `imara-diff` from 0.1.8 to 0.2.0 - [Release notes](https://github.com/pascalkuthe/imara-diff/releases) - [Changelog](https://github.com/pascalkuthe/imara-diff/blob/master/CHANGELOG.md) - [Commits](pascalkuthe/imara-diff@v0.1.8...v0.2.0) Updates `redis` from 0.27.6 to 1.6.0 - [Release notes](https://github.com/redis-rs/redis-rs/releases) - [Commits](redis-rs/redis-rs@redis-0.27.6...redis-1.6.0) Updates `mongodb` from 3.8.0 to 3.9.1 - [Release notes](https://github.com/mongodb/mongo-rust-driver/releases) - [Commits](mongodb/mongo-rust-driver@v3.8.0...v3.9.1) Updates `tower-http` from 0.6.11 to 0.7.1 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.11...tower-http-0.7.1) Updates `slatedb-common` from 0.15.0 to 0.16.0 - [Release notes](https://github.com/slatedb/slatedb/releases) - [Changelog](https://github.com/slatedb/slatedb/blob/main/RELEASE.md) - [Commits](slatedb/slatedb@v0.15.0...v0.16.0) Updates `notify` from 7.0.0 to 8.2.0 - [Release notes](https://github.com/notify-rs/notify/releases) - [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.0/CHANGELOG.md) - [Commits](notify-rs/notify@notify-7.0.0...notify-8.2.0) Updates `tokio-tungstenite` from 0.29.0 to 0.30.0 - [Changelog](https://github.com/snapview/tokio-tungstenite/blob/master/CHANGELOG.md) - [Commits](snapview/tokio-tungstenite@v0.29.0...v0.30.0) Updates `socket2` from 0.5.10 to 0.6.5 - [Release notes](https://github.com/rust-lang/socket2/releases) - [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-lang/socket2/commits/v0.6.5) Updates `dirs` from 6.0.0 to 7.0.0 Updates `open` from 5.4.2 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.4.2...v5.4.4) --- updated-dependencies: - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: dirs dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: imara-diff dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: mongodb dependency-version: 3.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: notify dependency-version: 8.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: open dependency-version: 5.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: rand dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: redis dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: russh dependency-version: 0.63.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: rustls dependency-version: 0.23.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: slatedb dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: slatedb-common dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: socket2 dependency-version: 0.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tokio-tungstenite dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tower-http dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 12, 2026

dependabot Bot force-pushed the dependabot/cargo/cargo-c109db7580 branch 7 times, most recently from aafa646 to a37a308 Compare September 15, 2026 20:45

dependabot Bot force-pushed the dependabot/cargo/cargo-c109db7580 branch from a37a308 to 7293ae8 Compare September 16, 2026 05:11

Navigation Menu

Bump the cargo group across 1 directory with 18 updates - #24

Bump the cargo group across 1 directory with 18 updates#24
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-c109db7580

dependabot Bot commented on behalf of github Sep 12, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 12, 2026 •

edited

Loading

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.16.0

What's Changed

v0.63.3

Fixes

v0.63.2

Security fixes

GHSA-g4mp-vgx3-xrvm - out-of-bounds read in pageant

GHSA-35g8-35p8-c8fw - unbounded memory allocation in server

Fixes

v0.63.1

Security fixes

GHSA-47hw-gvq5-r2gm - client-side Handler callbacks reachable with invalid channel IDs

GHSA-p8qx-h547-fjw9 - MAC-requiring block cipher can be negotiated without MAC and panic

v0.63.0

Features

Fixes

1.1.10

What's Changed

New Contributors

[0.10.2] — 2026-07-02

Fixes

Changes

[0.10.1] — 2026-02-11

Changes

[0.10.0] - 2026-02-08

Changes

Additions

Removals

0.23.1

0.23.0

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

v0.2.0

What's Changed

New Contributors

Changelog - imara-diff

redis-1.6.0

Changes & Bug fixes

CI & operational improvements

New Contributors

redis-1.5.0

Changes & Bug fixes

CI & operational improvements

redis-1.4.1

Changes & Bug fixes

CI & operational improvements

redis-1.4.0

Changes & Bug fixes

Uh oh!

coderabbitai Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 12, 2026 •

edited

Loading

GHSA-g4mp-vgx3-xrvm - out-of-bounds read in `pageant`

coderabbitai Bot commented Sep 12, 2026 •

edited

Loading