build(deps): bump the cargo group across 1 directory with 17 updates by dependabot[bot] · Pull Request #323 · sunerpy/codegraph-rust

dependabot · 2026-10-14T22:14:21Z

Bumps the cargo group with 17 updates in the / directory:

Package	From	To
serde_json	`1.0.151`	`1.0.154`
thiserror	`2.0.18`	`2.0.21`
tree-sitter	`0.27.0`	`0.27.1`
interprocess	`2.4.4`	`2.4.5`
rustix	`1.1.4`	`1.1.5`
tree-sitter-cfml	`0.26.42`	`0.26.43`
tree-sitter-erlang	`0.20.0`	`0.21.0`
tree-sitter-php	`0.24.2`	`0.25.1`
tree-sitter-swift	`0.7.3`	`0.7.4`
rmcp	`3.5.0`	`3.5.1`
tokio	`1.53.1`	`1.53.2`
tokio-util	`0.7.19`	`0.7.20`
reqwest	`0.13.4`	`0.13.5`
tokio-stream	`0.1.18`	`0.1.19`
futures-util	`0.3.32`	`0.3.34`
http-body-util	`0.1.3`	`0.1.5`
libc	`0.2.189`	`0.2.190`

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

Update to syn 3

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
Additional commits viewable in compare view

Updates tree-sitter from 0.27.0 to 0.27.1

Release notes

Sourced from tree-sitter's releases.

v0.27.1

What's Changed

fix: decode UTF-16 surrogate pairs with input endianness by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5913

fix(cli)!: fix query test capture range matching across lines by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5918

fix(rust): address new nightly lints by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5921

fix(generate): resolve token names in debug output by @WillLillis in tree-sitter/tree-sitter#5941

fix(generate): keep GCC jump tables enabled for large lexers by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5985

fix(generate): exclude external word tokens from keyword extraction by @WillLillis in tree-sitter/tree-sitter#5989

fix(lib): check shifted stack versions during error recovery by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5998

fix(generate): detect indirect recursion in flattened productions by @WillLillis in tree-sitter/tree-sitter#6003

fix: preserve column dependency when balancing repeat nodes by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6006

perf(lib): acquire capture lists from a free stack instead of scanning by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6012

fix(build): don't compile the Wasm stdlib into Emscripten builds by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6015

fix: various query issues by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6017

fix(rust): ban std::fs::canonicalize by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6018

fix(bindings): load Node bindings under Bun again by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6021

release v0.27.1 by @clason in tree-sitter/tree-sitter#6024

Full Changelog: tree-sitter/tree-sitter@v0.27.0...v0.27.1

Commits

10eb5ac release v0.27.1
1bf93c4 fix(bindings): embed queries in Bun standalone executables
2173ca8 fix(bindings): await the load check in the Node binding test
a89d5b8 fix(bindings): load Node bindings under Bun again
17d6c94 fix(bindings): load node-types.json on Windows
825b3e4 fix(rust): ban std::fs::canonicalize
4eb3973 fix(web): pass the progress callback to the cursor in Query.captures
60cdb55 fix(test): give the query timeout tests room to time out
bdf4e7e fix(lib): charge query cursor work for the states it visits
dc21d38 fix(lib): halt the query cursor when the progress callback asks to stop
Additional commits viewable in compare view

Updates interprocess from 2.4.4 to 2.4.5

Release notes

Sourced from interprocess's releases.

2.4.5

PeerCreds has been improved on xucred platforms (FreeBSD, Dragonfly BSD, Apple platforms):

With a correction of a misunderstanding of the meaning of cr_groups, egid now returns Some and groups no longer includes the EGID twice.

The level of detail of the safety comments has been increased in preparation for upstreaming a version of PeerCreds into the standard library.

PeerCreds now has a method groups_truncated for checking if the groups returned by groups are not the full set of supplementary groups due to platform limitations.

Commits

5822593 chore: bump version
5b99120 fix: deal with Clippy regression
b6f13f7 fix: xucred adjustments
f44bbb1 chore: more meticulous and flexible getsockopt
2a958a0 chore: some new miscellanea
See full diff in compare view

Updates rustix from 1.1.4 to 1.1.5

Commits

287214b chore: Release rustix version 1.1.5
0cea188 fix(bug): ns->us overflow handling (#1655)
a99fd26 build: Remove OUT_DIR probe artifact (#1628)
1e2954a fix build errors for horizon target (#1671)
4cecb72 Mangle the name of rustix::runtime to discourage users. (#1633)
ded795b Fix compile errors for next libc version (#1676)
9640071 Expose the O_SYMLINK & O_NOFOLLOW_ANY flags on Apple platforms (#1666)
cf67411 Fix debug printing of abstract socket addrs (#1615)
aab9464 Completely remove rustc_attrs. (#1663)
a9620e8 ci: fix syn pin (#1647)
Additional commits viewable in compare view

Updates tree-sitter-cfml from 0.26.42 to 0.26.43

Release notes

Sourced from tree-sitter-cfml's releases.

v0.26.43

cfml & cfquery

An HTML tag name can contain a dot (#169). <system.webServer>…</system.webServer>, the IIS web.config section often built in a <cfsavecontent>, read as the tag <system with an attribute .webServer. Its end tag then matched nothing, and the ERROR ran on to the end of the file, taking every <cffunction> after it with it. scan_tag_name now accepts . after the first character of a non-CF tag name, as XML does. CF tag names are unchanged.

Scanner-only, so STATE_COUNT is unchanged. The corpus scan goes from 414 error lines in 81 files to 412 in 80: Mura's core/templates/web.config.template.cfm parses. docs/FAILING-PATTERNS.md had put that file down to generator placeholders. treediff shows no tree-shape change in any file that already parsed, and npm run fuzz passes. The issue's second case, SET #process the pairs# outside <cfoutput>, already parses cleanly on 0.26.42. Both cases are now probes.

Changelog

Sourced from tree-sitter-cfml's changelog.

[0.26.43]

cfml & cfquery

An HTML tag name can contain a dot (#169). <system.webServer>…</system.webServer>, the IIS web.config section often built in a <cfsavecontent>, read as the tag <system with an attribute .webServer. Its end tag then matched nothing, and the ERROR ran on to the end of the file, taking every <cffunction> after it with it. scan_tag_name now accepts . after the first character of a non-CF tag name, as XML does. CF tag names are unchanged.

Scanner-only, so STATE_COUNT is unchanged. The corpus scan goes from 414 error lines in 81 files to 412 in 80: Mura's core/templates/web.config.template.cfm parses. docs/FAILING-PATTERNS.md had put that file down to generator placeholders. treediff shows no tree-shape change in any file that already parsed, and npm run fuzz passes. The issue's second case, SET #process the pairs# outside <cfoutput>, already parses cleanly on 0.26.42. Both cases are now probes.

Commits

ffdd4d7 v0.26.43
2cffcea Merge pull request #170 from cfmleditor/fix/169-dotted-html-tag-names
b04d450 Accept . in HTML tag names (#169) [ai]
See full diff in compare view

Updates tree-sitter-erlang from 0.20.0 to 0.21.0

Release notes

Sourced from tree-sitter-erlang's releases.

0.21.0

Generate the parser with tree-sitter-cli 0.26.11 and ABI 15

Accept F/A in -deprecated attributes

Changelog

Sourced from tree-sitter-erlang's changelog.

0.21.0 (2026-10-07)

Generate the parser with tree-sitter-cli 0.26.11 and ABI 15

Accept F/A in -deprecated attributes

Commits

0386a11 Prepare version 0.21.0
3966a88 Accept F/A in -deprecated attributes
6ba4c76 switch to tree-sitter-cli 0.26.11 / ABI 15
See full diff in compare view

Updates tree-sitter-php from 0.24.2 to 0.25.1

Release notes

Sourced from tree-sitter-php's releases.

v0.25.1

NOTE: Download tree-sitter-php.tar.gz for the complete source code.

What's Changed

feat: support clone with arguments by @janwaleed09 in tree-sitter/tree-sitter-php#306

New Contributors

@janwaleed09 made their first contribution in tree-sitter/tree-sitter-php#306

Full Changelog: tree-sitter/tree-sitter-php@v0.25.0...v0.25.1

v0.25.0

NOTE: Download tree-sitter-php.tar.gz for the complete source code.

What's Changed

build(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in tree-sitter/tree-sitter-php#286

build(deps): bump tree-sitter/parser-test-action from 2 to 3 by @dependabot[bot] in tree-sitter/tree-sitter-php#288

build(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in tree-sitter/tree-sitter-php#289

build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in tree-sitter/tree-sitter-php#290

fix(scanner): correct UB in scan's heredoc delete logic by @WillLillis in tree-sitter/tree-sitter-php#293

feat: support PHP 8.6 partial function application by @calebdw in tree-sitter/tree-sitter-php#291

feat: support asymmetric visibility in constructor promotion by @hbtweb in tree-sitter/tree-sitter-php#297

build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in tree-sitter/tree-sitter-php#299

build(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in tree-sitter/tree-sitter-php#300

fix(scanner): clear heredoc stack in deserialize by @NathanEvryg in tree-sitter/tree-sitter-php#304

New Contributors

@WillLillis made their first contribution in tree-sitter/tree-sitter-php#293

@hbtweb made their first contribution in tree-sitter/tree-sitter-php#297

@NathanEvryg made their first contribution in tree-sitter/tree-sitter-php#304

Full Changelog: tree-sitter/tree-sitter-php@v0.24.2...v0.25.0

Commits

58d5643 chore: bump version to 0.25.1
e2ee12f ci: drop removed attestations input from publish workflow
1f8bc04 chore: generate
46fc12d fix: allow cast-type keywords as argument constants
7caebd3 feat: support clone with arguments
92b5271 chore: bump version to 0.25.0
3c7e657 chore: generate
a8c3d99 ci: update invalid example files
3027631 fix(scanner): treat any non-name char as heredoc closer
7eb55b7 fix(grammar): allow leading backslash on group use
Additional commits viewable in compare view

Updates tree-sitter-swift from 0.7.3 to 0.7.4

Commits

171fa3b 0.7.4 release
b42acc4 Updating top repository version
5f435e2 Parse Swift 6 syntax: sending, isolated, copy, value generics, inline arrays,...
35245fb fix: multi_agent.cwe-476 security vulnerability
187fd4d Add strict memory safety syntax -- SE-0458
4a0e502 Updating top repository version
00bbb0a Fix npm publish never triggering after tag pushes
048688b Include prebuilt .wasm in the npm package
f02fc0a Updating top repository version
90b7a70 Fix attributes with an empty argument list
Additional commits viewable in compare view

Updates rmcp from 3.5.0 to 3.5.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.5.1

Fixed

(macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.1

Fixed

(server) keep discover lifecycle bootstrap-neutral (#1248)

keep handler-generated invalid params errors in-band (#1322)

(model) export object! macro without macros feature (#1318)

(server) default missing cache hints for 2026-07-28 peers (#1308)

Other

[rmcp] Notify credential stores when a refresh token is rejected (#1285)

Commits

79437f2 chore: release v3.5.1 (#1307)
4a226c7 fix(server): keep discover lifecycle bootstrap-neutral (#1248)
931d471 chore(deps): bump the github-actions group with 6 updates (#1313)
cf1e9aa fix: keep handler-generated invalid params errors in-band (#1322)
deef9bb fix(model): export object! macro without macros feature (#1318)
c0d667e fix(server): default missing cache hints for 2026-07-28 peers (#1308)
94c5c03 fix: use MSRV-aware dependency resolver (#1316)
8f9a28e fix(examples): fix complex auth server discovery (#1309)
ae2f9c9 [rmcp] Notify credential stores when a refresh token is rejected (#1285)
bdd93dc ci: reject multi-line codex auth secret (#1306)
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

fs: clamp io_uring read length to u32::MAX (#8572)

rt: ignore current_thread task dumps from other runtimes (#8544)

rt: preserve io_uring context if a completion waker panics (#8566)

sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)

taskdump: restore deferred leaf wakes during capture (#8445)

time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits

ff0c406 chore: prepare Tokio v1.53.2 (#8580)
a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
ec31a9f chore: prepare Tokio v1.51.5 (#8579)
625c851 sync: assign semaphore permits before emitting tracing event (#8542)
832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
9a47992 process: unregister Windows wait before closing child handle (#8564)
2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

5ec9e6b chore: prepare tokio-util v0.7.20 (#8608)
afd1b26 docs: fix stray braces and broken links in rustdoc (#8605)
3eb95a4 wasm: use sleep on emscripten without JSPI (#8528)
b22c802 wasm: link emscripten_promise_await for Emscripten 4.x compatibility (#8528)
16b1f9d ci: pin libc to 0.2.189 on FreeBSD (#8594)
b263675 time: clean up stale Err(Invalid) doc and typo (#8590)
5d5cd8b Merge 'tokio-1.53.2' into 'master' (#8578)
ff0c406 chore: prepare Tokio v1.53.2 (#8580)
a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
ec31a9f chore: prepare Tokio v1.51.5 (#8579)
Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates tokio-stream from 0.1.18 to 0.1.19

Commits

bc0933c chore: prepare tokio-stream v0.1.19 (#8310)
e3786d0 readme: remove obsolete TokioConf notices (#8311)
f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
Additional commits viewable in compare view

Updates futures-util from 0.3.32 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

0.3.33

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Commits

705e6b5 Release 0.3.34
616dac7 compat: Inline RawWaker clone function
4176369 Inline remaining RawWaker clone functions

Bumps the cargo group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.21` | | [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.27.0` | `0.27.1` | | [interprocess](https://github.com/kotauskas/interprocess) | `2.4.4` | `2.4.5` | | [rustix](https://github.com/bytecodealliance/rustix) | `1.1.4` | `1.1.5` | | [tree-sitter-cfml](https://github.com/cfmleditor/tree-sitter-cfml) | `0.26.42` | `0.26.43` | | [tree-sitter-erlang](https://github.com/WhatsApp/tree-sitter-erlang) | `0.20.0` | `0.21.0` | | [tree-sitter-php](https://github.com/tree-sitter/tree-sitter-php) | `0.24.2` | `0.25.1` | | [tree-sitter-swift](https://github.com/alex-pinkus/tree-sitter-swift) | `0.7.3` | `0.7.4` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.5.0` | `3.5.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.18` | `0.1.19` | | [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` | | [http-body-util](https://github.com/hyperium/http-body) | `0.1.3` | `0.1.5` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.190` | Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `thiserror` from 2.0.18 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.21) Updates `tree-sitter` from 0.27.0 to 0.27.1 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](tree-sitter/tree-sitter@v0.27.0...v0.27.1) Updates `interprocess` from 2.4.4 to 2.4.5 - [Release notes](https://github.com/kotauskas/interprocess/releases) - [Commits](kotauskas/interprocess@2.4.4...2.4.5) Updates `rustix` from 1.1.4 to 1.1.5 - [Release notes](https://github.com/bytecodealliance/rustix/releases) - [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md) - [Commits](bytecodealliance/rustix@v1.1.4...v1.1.5) Updates `tree-sitter-cfml` from 0.26.42 to 0.26.43 - [Release notes](https://github.com/cfmleditor/tree-sitter-cfml/releases) - [Changelog](https://github.com/cfmleditor/tree-sitter-cfml/blob/master/CHANGELOG.md) - [Commits](cfmleditor/tree-sitter-cfml@v0.26.42...v0.26.43) Updates `tree-sitter-erlang` from 0.20.0 to 0.21.0 - [Release notes](https://github.com/WhatsApp/tree-sitter-erlang/releases) - [Changelog](https://github.com/WhatsApp/tree-sitter-erlang/blob/main/CHANGELOG.md) - [Commits](WhatsApp/tree-sitter-erlang@0.20...0.21.0) Updates `tree-sitter-php` from 0.24.2 to 0.25.1 - [Release notes](https://github.com/tree-sitter/tree-sitter-php/releases) - [Commits](tree-sitter/tree-sitter-php@v0.24.2...v0.25.1) Updates `tree-sitter-swift` from 0.7.3 to 0.7.4 - [Release notes](https://github.com/alex-pinkus/tree-sitter-swift/releases) - [Commits](alex-pinkus/tree-sitter-swift@0.7.3...0.7.4) Updates `rmcp` from 3.5.0 to 3.5.1 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.5.0...rmcp-v3.5.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2) Updates `tokio-util` from 0.7.19 to 0.7.20 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `tokio-stream` from 0.1.18 to 0.1.19 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-stream-0.1.18...tokio-stream-0.1.19) Updates `futures-util` from 0.3.32 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.34) Updates `http-body-util` from 0.1.3 to 0.1.5 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@http-body-util-v0.1.3...http-body-util-v0.1.5) Updates `libc` from 0.2.189 to 0.2.190 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.190/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.190) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tree-sitter dependency-version: 0.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: interprocess dependency-version: 2.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: rustix dependency-version: 1.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tree-sitter-cfml dependency-version: 0.26.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tree-sitter-erlang dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tree-sitter-php dependency-version: 0.25.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tree-sitter-swift dependency-version: 0.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: rmcp dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio-util dependency-version: 0.7.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio-stream dependency-version: 0.1.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: futures-util dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: http-body-util dependency-version: 0.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: libc dependency-version: 0.2.190 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2026-10-14T22:22:22Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

@@           Coverage Diff           @@
##             main     #323   +/-   ##
=======================================
  Coverage   95.06%   95.06%           
=======================================
  Files         198      198           
  Lines      109293   109293           
=======================================
  Hits       103895   103895           
  Misses       5398     5398

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

dependabot Bot requested a review from sunerpy as a code owner October 14, 2026 22:14

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 14, 2026

Navigation Menu

Repository navigation

build(deps): bump the cargo group across 1 directory with 17 updates - #323

build(deps): bump the cargo group across 1 directory with 17 updates#323
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-2af5a6740d

dependabot Bot commented on behalf of github Oct 14, 2026

Uh oh!

codecov Bot commented Oct 14, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026

v1.0.154

v1.0.153

v1.0.152

2.0.21

2.0.20

2.0.19

v0.27.1

What's Changed

2.4.5

v0.26.43

cfml & cfquery

[0.26.43]

cfml & cfquery

0.21.0

v0.25.1

What's Changed

New Contributors

v0.25.0

What's Changed

New Contributors

rmcp-macros-v3.5.1

Fixed

rmcp-v3.5.1

Fixed

Other

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

Fixed (unstable)

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

0.3.34

0.3.33

0.3.34 - 2026-08-11

0.3.33 - 2026-07-18

Uh oh!

codecov Bot commented Oct 14, 2026

Codecov Report

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants