Skip to content

chore(deps): bump the cargo-minor-patch group across 1 directory with 13 updates - #386

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-dd002f4732
Closed

chore(deps): bump the cargo-minor-patch group across 1 directory with 13 updates#386
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-dd002f4732

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 13 updates in the / directory:

Package From To
serde_json 1.0.151 1.0.154
tokio 1.53.1 1.53.3
tokio-util 0.7.19 0.7.20
uuid 1.26.1 1.28.0
sha2 0.11.0 0.11.1
wasmtime 49.0.1 49.0.3
tract 0.23.8 0.23.9
rustls 0.23.45 0.23.46
aws-lc-rs 1.18.1 1.18.2
opentelemetry 0.33.0 0.33.1
opentelemetry_sdk 0.33.0 0.33.1
opentelemetry-otlp 0.33.0 0.33.1
proptest 1.11.0 1.12.0

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

  • io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

  • io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

  • io: wake and drop DuplexStream wakers outside the lock (#8618)
  • macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
  • runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
  • sync: wake waiters outside the lock when closing a semaphore (#8529)
  • test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

  • rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits
  • a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
  • df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
  • f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
  • 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
  • 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
  • c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
  • 0448618 sync: make tracing_sync tests synchronous (#8427)
  • 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
  • bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
  • 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
  • Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

Updates uuid from 1.26.1 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits
  • 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
  • 4b3b9f5 prepare for 1.28.0 release
  • cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
  • 784a022 Inline expected tokens in optional compact serde test
  • a5678c3 Simplify optional serde adapter tests to option tokens
  • 638a518 Refactor optional serde adapter tests and share byte wrapper
  • b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
  • ffd8ec5 prepare for 1.27.0 release
  • 654fa5b Add optional serde format adapters
  • 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
  • Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates wasmtime from 49.0.1 to 49.0.3

Release notes

Sourced from wasmtime's releases.

v49.0.3

49.0.3

Released 2026-10-14.

Fixed

... (truncated)

Changelog

Sourced from wasmtime's changelog.

49.0.3

Released 2026-10-14.

Fixed

... (truncated)

Commits

Updates tract from 0.23.8 to 0.23.9

Changelog

Sourced from tract's changelog.

0.23.9 - 2026-10-15

Core

  • Elementwise binary chains fuse into one pass. A sole-consumer chain of float binary ops (a scale then an offset, a clip after an add) becomes an OptBinChain that applies each step to a cache-resident chunk while it is still hot. Results are bit-identical. A chain right after a matmul leaves the epilogue ops for the matmul to absorb.
  • CumSum is a core op, with any numeric type, exclusive and reverse, and a tract_core_cumsum NNEF form. Before, ONNX lowered it to a Scan adding one element per iteration. It pulsifies along the streaming axis into a stateful PulsedCumSum, and a CumSum over a length-1 axis folds away.
  • Runtime symbols are ordered in the plan. A node that uses a symbol bound at runtime (a dynamic Range length, a NonZero count) but has no tensor edge to the node defining it now runs after that node, through a new required_bound_symbols op declaration that covers Scan bodies too. A node that still fails before its symbol is bound waits and is retried. Symbolic lengths also flow through Cast and Gather, so a Range that re-derives an earlier length gets the same symbol. (Contributed by willwade.)
  • A GRU of any hidden size fuses into GruSeq. Above 64 the input-side product moves out of the op into an EinSum that runs on the platform kernel with W packed once, and a constant R is packed at codegen rather than in every new state.
  • A fresh session's first turn costs less: the plan lists its constants once, and a matmul's scratch buffer is passed on to the next session on the same thread.
  • MoveAxis copies once through a tiled transpose. broadcast_to_shape writes contiguous runs when the innermost source axis is broadcast (6.2 ms to 0.12 ms for a per-channel bias spread over 320x320).
  • Fix: signed integer Div by a power of two was rewritten to a right shift, which rounds negative quotients down instead of toward zero. The shift is now kept for unsigned types only (#3003).
  • Fix: MultiBroadcastTo passed axis changes to a broadcast input and re-paired input axes. TypedSource::change_axes errored instead of blocking. Axis changes can now cross Gather ahead of the gathered axis.

Streaming / pulse

  • A pulse can cover several attention chunks. A model with a chunked attention mask used to pulsify only at exactly one chunk per pulse.
  • An attention mask built from a band ANDed with a runtime-length padding mask is bounded by its known factor, so rel-pos attention blockifies for pulsing.
  • Fix: PulsePad and AffineChunkTrim refused every axis change, and claimed their input's value. A delayed constant was reported as that same constant.

Transformers / LLM

  • A tract_moe_ffn operator for Mixture-of-Experts FFN blocks: router top-k, softmax/sigmoid/raw gating, grouped expert GEMMs with SwiGLU and weighted scatter-add, covering the Mixtral, OLMoE, GPT-OSS, Qwen3 and Granite variants. Experts run through per-expert subplans, so f16/bf16/Q40 and biased or clamped exports work, and block-quantized weights take a routed-matmul fast path. The op has a portable NNEF form, and ClampedSwiGlu is a core op on its own. (Contributed by Julien Balian.)
  • CPU decode updates its KV cache in place. The fusion was only reachable through a transform nobody applied, so every turn copied the whole past. Sdpa::codegen now decides it.
  • The GPU KV cache is no longer rebuilt every turn. It is a buffer with spare capacity written at the cursor, so appending is amortized O(1) instead of O(T) a turn, and truncation and rollback stay on the device.

[WIP] Deployment / autobatch

  • A deploy runtime prepares models from a TOML deployment config. runtime_for_name("deploy") reads TRACT_CONFIG and TRACT_<MODEL>__<KEY> variables, with one section per model keyed by its name, and for each model applies that section's transforms, prepares the model on the section's runtime, sizes device memory from its hints table and autobatches it. A model the config batchifies keeps the input and output contract it was handed over with. Available behind unstable-autobatch.
  • Knobs can be scoped to a model. Knobs read while a model is transformed or prepared can be overridden per model, under the environment; the LLC, mmm chunk and GPU RmsNorm settings become knobs.
  • Models and runnables have names. TypedModel::name and Runnable::name read the tract.name property, and NNEF stores it as the graph id instead of dropping it for the constant "network". A set_property transform names a model whose export did not.
  • Autobatch reports turns, seats, lanes, queue wait and turn time through the metrics facade, labelled by runnable name.
  • batchify keeps the model properties (pulse delay and axes, blockify chunking, provenance), accepts an export whose batch axis was collapsed into an AddAxis(0), and runs before or after pulsification.

CPU / linalg

  • Depthwise convolution is vectorised and threaded everywhere. A channel-last NEON kernel is suggested to depthwise convs of 16+ channels. Zones of more than four taps (up to 128, so 9x9) are vectorised on aarch64. x86_64 gets an AVX depthwise_w and wasm gets simd128 kernels. The (n, c) planes split across the executor (32.5 ms to 8.8 ms on a detection model).
  • Direct spatial convolution along W for group-1 NCHW f32 convolutions with a small kernel over a long row, skipping im2col through a new conv_w4 routine (AVX2/FMA, NEON). Threaded over (batch, channel-group). TRACT_DISABLE_DIRECT_SPATIAL turns it off.
  • More work spread across threads: activation packing, f32 reductions over leading axes, NCHW 2x2 maxpool, and GEMVs with a long k, which used to run on one thread below the panel gate (every projection of a 1B LLM decode step).
  • Deconvolution whose kernel extent equals its stride adds the bias per channel in one write, replacing the NCHW 2x2 special case. Generic NCHW deconvolution accumulates contiguous input rows. NCHW and channel-last max pools walk by plane and row span.
  • A softmax over every row runs in one call on arm64 and wasm, bit-identical to the per-row kernels.
  • Apple SME: the f32 kernel stores straight from ZA to C, and reads an A that is already K-major in place instead of packing it. AMX is skipped on a strided n axis when K is short.
  • The SDOT i8 kernel is enabled with binutils 2.32–2.37 and pre-4.15 kernels; Cortex-A55/A75 are trusted by part number.
  • SpacemiT X60 (RISC-V): a TLB flush before matmuls of 8M+ multiply-adds keeps the L1 prefetcher working; TRACT_RISCV64_TLB_REFRESH_FMAS sets the threshold, and 0 turns it off.
  • wasm: the 8x8 GEMM broadcasts A from vector loads and is picked at every N; simd128 max and min by scalar; a target that cannot build a thread pool falls back to rayon's global pool.
  • Fix: f16 hardswish overflowed to +inf for x >= 10920. armv7 mmm prefetch addresses were wrong.

GPU

  • A model with concrete shapes gets its memory arena without hints on CUDA and Metal. Before, every intermediate had its own buffer, held until the stream committed; an SDXL VAE decoder needed ~61 GB instead of a 2.9 GB arena.
  • A batched attention softmax at rank 6 stays on the device, copies merge axes before checking rank, and a CUDA binary merges adjacent axes instead of refusing rank 6.

... (truncated)

Commits
  • 4adabb1 release 0.23.9
  • ee878dc log changes
  • ed9cfe3 bench: re-check off-trend benches in the nightly before storing them
  • 0bacea9 An A matrix that is already laid out K-major in memory was copied into packed...
  • c3188f0 A CumSum over a length-1 axis was left in the graph although it is the identi...
  • 649288d ONNX CumSum was lowered to a Scan whose body adds one element per iteration, ...
  • eb68313 Quantized convolution inferred matching operand types and mishandled grouped ...
  • 68f9787 metal: clear clippy warnings
  • 56fea37 Bump rustls to 0.23.46
  • 18d44c4 Bump cargo-deny to 0.20.2
  • Additional commits viewable in compare view

Updates rustls from 0.23.45 to 0.23.46

Commits
  • f04804f Delay saving KX hint until handshake confirmation
  • 049d39b Bump version to 0.23.46
  • 6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
  • 2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
  • 74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
  • 795eea7 Advance the HPKE sequence only after seal succeeds
  • d67cb71 stream: provide backpressure while buffering received plaintext
  • 7a69ade util: fuse flushes from connections with errors
  • 493d089 conn: fuse writes for connections with errors
  • db00e01 util: keep flushing after short writes
  • Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.1 to 1.18.2

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.2

What's Changed

  • Implement Eq and PartialEq for RSA and EdDSA parameters by @​dsykes16 in aws/aws-lc-rs#1228
    • RsaParameters can now be compared directly against RSA verification constants. Algorithms with different digests, padding schemes, or modulus-size ranges compare unequal. EdDSAParameters also gains equality support.
  • Add wasm32-wasip2 and wasm32-wasip3 support by @​ricochet in aws/aws-lc-rs#1239
    • Adds non-FIPS builds using universal bindings, with CI coverage under Wasmtime and wasi-sdk 34. WASIp3 requires nightly Rust.
    • Direct aws-lc-sys consumers must disable the default all-bindings feature for these targets.
  • Publish the intended RandomizedNonceKey::open_in_place documentation by @​Serophots in aws/aws-lc-rs#1227
    • Makes the existing nonce, ciphertext/tag layout, and buffer-on-error contract visible in rustdoc. No runtime behavior changes.

Upstream AWS-LC

  • aws-lc-sys v0.46.0 aligns with AWS-LC v5.11.0 (previously v5.7.0). See also the release notes for v5.8.0, v5.9.0, and v5.10.0.
    • The Ed25519 C-implementation decoder now rejects non-canonical public keys, matching the assembly-optimized implementations: aws/aws-lc#3457
    • Includes ChaCha20-Poly1305 key-material zeroization and fixes ML-KEM CPU feature detection to avoid illegal-instruction failures on x86-64 CPUs with AVX2 but no BMI2: aws/aws-lc#3552 and aws/aws-lc#3596
  • aws-lc-fips-sys v0.14.3 updates its bundled AWS-LC FIPS 4.2.0 snapshot and regenerates bindings. It remains on the FIPS 4.x release line.

Build Improvements

  • Raise the minimum system AWS-LC version to 5.7.0 by @​justsmth in aws/aws-lc-rs#1243
    • Non-FIPS system-library installations must now provide AWS-LC 5.7.0 or newer, previously 1.68.0. Bundled-source builds and FIPS version requirements are unchanged.
  • Fix static FIPS system-library linking by @​justsmth in aws/aws-lc-rs#1236
    • Fixes unresolved FIPS_mode references with GNU ld.bfd when linking a prebuilt static FIPS library, including binaries that do not call crypto and builds where LTO removes those calls.
    • Uses whole-archive linking to retain libcrypto, including in downstream Rust staticlib outputs. This can increase binary size; dynamic FIPS and non-FIPS linking are unchanged.
  • Fix Cranelift linking by @​justsmth in aws/aws-lc-rs#1234
    • Normalizes binding link names to avoid undefined-symbol failures, including when Cranelift is selected through Cargo profiles rather than RUSTFLAGS. The AWS_LC_SYS_NO_U1_BINDINGS workaround is no longer needed.
  • Fix jitterentropy builds with optimizing CFLAGS and newer cc versions by @​justsmth in aws/aws-lc-rs#1254
    • Keeps filtered flags in effect throughout the jitterentropy builder's lifetime, preventing cached environment reads from allowing flags such as -O2 to override its required -O0.
  • Honor AWS_LC_SYS_CC in the main library build by @​justsmth in aws/aws-lc-rs#1255
    • Applies crate-specific compiler overrides before compiler lookup in both CC and CMake build paths, keeping compiler selection and capability probes consistent when cc caches environment reads.
  • Improve archive reproducibility through symlinked build paths by @​justsmth in aws/aws-lc-rs#1238
    • Prevents the non-Windows CC builder from incorporating symlink-resolved absolute build paths into archive member names, avoiding unnecessary downstream compile-cache misses. Windows short-path handling is unchanged.
  • Upgrade bindgen to 0.73 by @​xtqqczze in aws/aws-lc-rs#1244
  • Document the system-library trust model by @​justsmth in aws/aws-lc-rs#1218
    • Clarifies that supplied paths and pkg-config results are trusted build inputs, and that FIPS validation can execute candidate library code before accepting or rejecting it. Documents runner requirements and how to disable automatic system-library detection.

Issues Being Closed

  • Cranelift builds fail with codegen-backend = "cranelift" -- aws/aws-lc-rs#1231
  • Upgrade bindgen to v0.73 -- aws/aws-lc-rs#1245
  • Undefined FIPS_mode when linking a prebuilt FIPS module into a binary that does not use crypto -- aws/aws-lc-rs#1246
  • Jitterentropy fails with "must not be compiled with optimizations" in aws-lc-rs v1.18.1 / aws-lc-sys v0.45.0 -- aws/aws-lc-rs#1252

Other Merged PRs

... (truncated)

Commits
  • 9df4975 Prepare aws-lc-fips-sys v0.14.3 (#1258)
  • 83d5809 Prepare aws-lc-sys v0.46.0 and aws-lc-rs v1.18.2 (#1256)
  • a97b9df fix(builder): export AWS_LC_SYS_CC before the main build's compiler lookup (#...
  • 040d834 fix: normalize binding link names for Cranelift (#1234)
  • ecd9a26 fix(builder): hold jitterentropy CFLAGS guard for the builder's lifetime (#1254)
  • d17b165 fix: link static FIPS system libcrypto with whole-archive (#1236)
  • 841a718 fix: update Clippy allowances for bindgen 0.73 (#1250)
  • 4492dcd build(deps): upgrade bindgen to version 0.73 (#1244)
  • a0314cb fix(builder): use unresolved CARGO_MANIFEST_DIR for source paths (#1238)
  • e81bb0d build(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 (#1237)
  • Additional commits viewable in compare view

Updates opentelemetry from 0.33.0 to 0.33.1

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates opentelemetry_sdk from 0.33.0 to 0.33.1

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates opentelemetry-otlp from 0.33.0 to 0.33.1

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates proptest from 1.11.0 to 1.12.0

Commits
  • 70cf37d Merge pull request #675 from proptest-rs/prep-1.12
  • 729e0ff prepare next releases and fix panic handling
  • 28c1fad Merge pull request #664 from Expyron/main
  • 5ddd9a4 Merge pull request #668 from toddATavail/fix-fork-persisted-failure
  • a6a9ac7 Merge pull request #673 from glaziermag/fix-book-deploy
  • d57d88b Replace rand_chacha with chacha20
  • 9411213 Deploy the book on pushes to main
  • 1719745 fix: terminate the fork replay when a persisted failure fails
  • 0f55b7a test: a persisted failure in a forked test must be reported
  • 4b0594e Merge pull request

@dependabot
chore(deps): bump the cargo-minor-patch group across 1 directory with…
ec5ad28 
… 13 updates

Bumps the cargo-minor-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.3` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.28.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [wasmtime](https://github.com/bytecodealliance/wasmtime) | `49.0.1` | `49.0.3` |
| [tract](https://github.com/snipsco/tract) | `0.23.8` | `0.23.9` |
| [rustls](https://github.com/rustls/rustls) | `0.23.45` | `0.23.46` |
| [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.1` | `1.18.2` |
| [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` |
| [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` |
| [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` |



Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `tokio` from 1.53.1 to 1.53.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.3)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

Updates `uuid` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.28.0)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `wasmtime` from 49.0.1 to 49.0.3
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v49.0.3/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v49.0.1...v49.0.3)

Updates `tract` from 0.23.8 to 0.23.9
- [Release notes](https://github.com/snipsco/tract/releases)
- [Changelog](https://github.com/sonos/tract/blob/main/CHANGELOG.md)
- [Commits](sonos/tract@v0.23.8...v0.23.9)

Updates `rustls` from 0.23.45 to 0.23.46
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.45...v/0.23.46)

Updates `aws-lc-rs` from 1.18.1 to 1.18.2
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@v1.18.1...v1.18.2)

Updates `opentelemetry` from 0.33.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.33.0...opentelemetry-0.33.1)

Updates `opentelemetry_sdk` from 0.33.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry_sdk-0.33.0...opentelemetry_sdk-0.33.1)

Updates `opentelemetry-otlp` from 0.33.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.33.0...opentelemetry-otlp-0.33.1)

Updates `proptest` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.11.0...v1.12.0)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.53.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: wasmtime
  dependency-version: 49.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tract
  dependency-version: 0.23.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: rustls
  dependency-version: 0.23.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: aws-lc-rs
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: opentelemetry
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: opentelemetry_sdk
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: opentelemetry-otlp
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: proptest
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from shankar-gpio as a code owner October 19, 2026 04:59
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 19, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs		 orion-docs ec5ad28 Oct 19 2026, 05:00 AM

@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 26, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-minor-patch-dd002f4732 branch October 26, 2026 04:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@shankar-gpio shankar-gpio Awaiting requested review from shankar-gpio shankar-gpio is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants